$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer File: 9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer (raw, json) Hash identifier: 3qPWYTBY2q5n3g+rs6YOl3hT1mM2YMdmeL/6XJiAPHc= Subject key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B2961435B0FC3136C2410BF3D1A741892A710E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft caRepository: rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 29 Oct 2025 19:06:58 +0000 Certificate not after: Wed 28 Oct 2026 19:11:58 +0000 Subordinate resources: AS: 271700 IP: 45.65.164.0/22 IP: 177.67.160.0/21 IP: 189.84.56.0/22 IP: 201.54.184.0/24 IP: 201.54.186.0/23 IP: 2804:7fa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:29:61:43:5b:0f:c3:13:6c:24:10:bf:3d:1a:74:18:92:a7:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 29 19:06:58 2025 GMT Not After : Oct 28 19:11:58 2026 GMT Subject: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:f1:bd:de:b4:61:ba:dc:99:1e:ee:bc:88: 85:8e:a1:7a:29:76:65:42:ec:4a:f2:a1:a3:25:d2: 7c:cf:f4:f4:46:bf:0d:60:c3:c0:a9:1c:2c:15:81: 2c:63:2d:e0:fc:c7:55:8a:59:15:e2:57:b4:90:bc: 6f:7d:49:1a:6d:53:0d:dc:74:ca:4f:86:db:c6:9e: c5:92:90:b2:1c:06:01:f5:4e:35:81:5b:6b:25:f7: dc:6b:29:6a:46:4d:e6:94:b7:08:3c:f8:b5:34:62: 14:40:55:3a:11:d9:80:f6:6e:d3:74:21:a8:c0:1c: 4b:0a:56:1e:0b:b9:ce:c6:ab:90:b8:97:77:29:b2: 60:90:c9:84:be:3d:ba:87:c9:2f:f7:1a:5a:9f:90: 62:4f:58:fc:89:aa:31:a6:8a:11:e7:e0:ad:fb:85: 41:7c:91:76:24:cb:a3:36:7f:fe:3e:78:ff:85:81: 21:43:57:03:d0:e4:e6:f3:e3:d5:6f:47:ce:b4:42: 16:87:fe:1c:66:5d:f6:e2:a7:ad:a4:71:11:1a:6f: 13:08:9a:56:26:38:26:9d:20:10:0c:65:c6:83:4a: db:9e:21:a6:74:bb:3e:c1:c4:0f:c5:09:62:46:4e: 81:60:a2:8f:60:04:a5:5b:c0:c6:41:7a:d7:18:af: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.164.0/22 177.67.160.0/21 189.84.56.0/22 201.54.184.0/24 201.54.186.0/23 IPv6: 2804:7fa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271700 Signature Algorithm: sha256WithRSAEncryption 40:f1:4c:3a:1b:8e:2c:33:85:07:4b:75:d3:92:25:93:51:5e: a4:74:a2:0c:ea:2f:d1:76:0b:3f:a4:2b:be:42:13:59:35:44: 17:ce:d8:a8:26:3e:67:6e:f1:0a:2f:e9:17:42:fc:99:3c:ac: 51:fe:80:66:78:51:7e:9d:ca:95:20:cb:de:e2:a6:05:35:fd: 19:fa:25:54:16:7a:eb:31:0d:6c:3a:f5:93:8f:fa:3f:17:04: 95:c2:e6:25:59:b5:ed:2d:0c:71:ae:ea:7c:ed:d1:ec:39:30: 95:5e:f4:a8:29:f4:70:6e:bb:7c:43:26:d7:e6:53:52:cb:2a: 29:04:30:38:36:34:9c:13:f7:39:b5:aa:2b:ac:44:a1:7c:57: ef:e9:fe:4a:8c:18:1c:a1:39:e3:46:0b:16:c2:92:ca:80:f8: b9:54:1d:47:65:3f:7d:71:b0:de:dd:4c:e6:de:55:21:92:1c: 90:1f:18:77:ce:52:91:83:8c:b6:24:1f:c5:ea:c4:c1:f1:61: dd:90:04:01:50:46:02:38:46:45:da:fb:19:d2:c6:20:b9:20: a5:d2:e4:80:f1:c0:d7:38:36:70:8b:bc:6e:2d:1d:49:87:63: b8:d6:b3:ad:33:21:80:85:7b:54:1c:b8:e7:20:f5:48:ee:5d: cf:fc:0a:cd -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUGylhQ1sPwxNsJBC/PRp0GJKnEOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjkxOTA2NThaFw0yNjEwMjgxOTExNThaMDMxMTAvBgNV BAMTKDlBRjYwMjlFRjc2RjFBRDk0NTIwRTU1OENDRTNCNzBCREVFNDBFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5fG93rRhutyZHu68iIWOoXop dmVC7EryoaMl0nzP9PRGvw1gw8CpHCwVgSxjLeD8x1WKWRXiV7SQvG99SRptUw3c dMpPhtvGnsWSkLIcBgH1TjWBW2sl99xrKWpGTeaUtwg8+LU0YhRAVToR2YD2btN0 IajAHEsKVh4Luc7Gq5C4l3cpsmCQyYS+PbqHyS/3GlqfkGJPWPyJqjGmihHn4K37 hUF8kXYky6M2f/4+eP+FgSFDVwPQ5Obz49VvR860QhaH/hxmXfbip62kcREabxMI mlYmOCadIBAMZcaDStueIaZ0uz7BxA/FCWJGToFgoo9gBKVbwMZBetcYr4iTAgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSa9gKe928a2UUg 5VjM47cL3uQOczAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjh6 U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVmN2MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y4 elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAvOUFG NjAyOUVGNzZGMUFEOTQ1MjBFNTU4Q0NFM0I3MEJERUU0MEU3My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCLUGkAwQDsUOgAwQCvVQ4AwQAyTa4AwQByTa6MA0E AgACMAcDBQAoBH+kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlVDANBgkqhkiG 9w0BAQsFAAOCAQEAQPFMOhuOLDOFB0t105Ilk1FepHSiDOov0XYLP6QrvkITWTVE F87YqCY+Z27xCi/pF0L8mTysUf6AZnhRfp3KlSDL3uKmBTX9GfolVBZ66zENbDr1 k4/6PxcElcLmJVm17S0Mca7qfO3R7DkwlV70qCn0cG67fEMm1+ZTUssqKQQwODY0 nBP3ObWqK6xEoXxX7+n+SowYHKE540YLFsKSyoD4uVQdR2U/fXGw3t1M5t5VIZIc kB8Yd85SkYOMtiQfxerEwfFh3ZAEAVBGAjhGRdr7GdLGILkgpdLkgPHA1zg2cIu8 bi0dSYdjuNazrTMhgIV7VBy45yD1SO5dz/wKzQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:24:13 2025 by rpki-client