$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer File: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer (raw, json) Hash identifier: wLKgeO0uD/W9wC+PrJCnLErP0ZZyWyBdQngbX7Kdr6E= Subject key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08D379763480FCBB407C18551AA706F74C420C0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft caRepository: rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 May 2025 16:44:10 +0000 Certificate not after: Thu 07 May 2026 16:49:10 +0000 Subordinate resources: AS: 265231 IP: 168.0.92.0/22 IP: 2804:2ca0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d3:79:76:34:80:fc:bb:40:7c:18:55:1a:a7:06:f7:4c:42:0c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 16:44:10 2025 GMT Not After : May 7 16:49:10 2026 GMT Subject: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:95:85:b5:09:46:aa:b2:c5:4f:1d:44:cf: 74:6a:ff:03:b6:95:c7:f4:20:56:75:d0:a1:95:64: ff:b8:05:a0:1d:f6:38:2a:87:85:b7:c2:7a:f7:2d: 5d:02:e1:6c:ca:98:b1:14:0e:e5:fa:81:05:9d:a5: 5e:39:81:96:6a:74:b1:bc:a2:01:5b:a4:8f:67:a9: 5e:99:2d:d8:93:eb:46:3c:99:6c:1b:86:3b:b3:f7: 5a:06:87:d8:93:de:fc:b3:47:af:46:34:74:66:a1: 75:79:d8:36:ef:37:dd:2a:88:f4:46:c6:49:b8:40: c1:d6:aa:95:43:cf:e4:6a:8f:35:b8:05:ec:3f:37: de:ba:60:22:ba:92:00:a0:79:1c:8c:a9:59:1b:f9: 1e:fe:66:41:a7:59:25:8a:0f:87:e9:4b:49:4f:0c: 1f:cc:02:13:32:0a:63:b4:0b:13:f3:49:90:79:01: f5:03:f9:37:fd:5c:35:1c:71:c3:ef:7d:a7:46:69: ef:b2:12:dc:80:a7:b9:4c:8b:15:b7:fc:fb:c8:af: d1:c9:de:0e:1b:11:8e:91:f1:c3:c0:bf:23:7f:94: d4:7f:4a:98:d8:91:63:5b:bc:da:29:8a:66:4d:24: 69:87:03:ea:76:35:56:7d:de:5a:66:99:3c:25:1c: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.92.0/22 IPv6: 2804:2ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265231 Signature Algorithm: sha256WithRSAEncryption a4:92:0c:87:13:2f:c5:51:2f:1c:ce:64:c9:b4:10:58:d2:73: 8e:86:2c:2e:f8:cd:22:2c:83:0d:ff:c3:60:4c:1e:61:cc:6d: 2c:b8:29:87:a1:b6:54:2c:91:f8:7d:f0:99:83:f0:ee:af:40: 68:65:1d:1f:ec:2d:d1:92:bf:d0:9e:72:fa:73:ad:62:ec:b2: 73:07:8f:25:3b:b0:b1:a0:c6:54:b2:c2:b9:c9:85:31:86:f5: 9a:a0:dc:d9:cd:b1:c7:86:b6:93:63:ce:d3:f0:07:15:06:18: 08:ac:27:96:f0:d6:86:77:74:d3:61:03:1f:db:32:0a:ea:eb: ab:64:3e:e5:20:17:4f:67:3a:d6:79:8e:cc:a3:6b:cf:c8:7f: b9:85:0a:ec:26:b0:99:a3:ce:ec:c6:17:c1:9f:a0:2e:20:3c: d7:b0:9b:ad:63:77:89:7b:d0:9b:45:71:35:d7:d8:58:cc:ae: c8:97:01:7b:76:29:cf:2d:85:88:b4:de:77:9a:c5:78:13:d3: 2c:14:04:c2:0e:5e:75:96:32:6b:eb:4c:84:9f:24:2d:48:6f: 44:59:b7:a0:a5:b0:8a:d2:b2:6b:ac:eb:2f:ad:cc:49:ec:19: 3d:2a:f4:c8:9e:bf:00:e8:ba:96:7a:d0:f7:05:94:da:b4:11: 0a:d2:ed:35 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCNN5djSA/LtAfBhVGqcG90xCDA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDgxNjQ0MTBaFw0yNjA1MDcxNjQ5MTBaMDMxMTAvBgNV BAMTKDlCNjhBRjZERTQ1RENFMEMyMTEyMDg0MzU2ODRDMEJDRkQ1NUNDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsC5WFtQlGqrLFTx1Ez3Rq/wO2 lcf0IFZ10KGVZP+4BaAd9jgqh4W3wnr3LV0C4WzKmLEUDuX6gQWdpV45gZZqdLG8 ogFbpI9nqV6ZLdiT60Y8mWwbhjuz91oGh9iT3vyzR69GNHRmoXV52DbvN90qiPRG xkm4QMHWqpVDz+RqjzW4Bew/N966YCK6kgCgeRyMqVkb+R7+ZkGnWSWKD4fpS0lP DB/MAhMyCmO0CxPzSZB5AfUD+Tf9XDUcccPvfadGae+yEtyAp7lMixW3/PvIr9HJ 3g4bEY6R8cPAvyN/lNR/SpjYkWNbvNopimZNJGmHA+p2NVZ93lpmmTwlHJOdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbaK9t5F3ODCES CENWhMC8/VXMmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUpE WXlEcjVjZTZKTHFqM2F1cWZDMTNRNmpNS25jR3gxVm53N3VzcTNqZlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VK RFl5RHI1Y2U2SkxxajNhdXFmQzEzUTZqTUtuY0d4MVZudzd1c3EzamZXLzAvOUI2 OEFGNkRFNDVEQ0UwQzIxMTIwODQzNTY4NEMwQkNGRDU1Q0M5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqABcMA0EAgACMAcDBQAoBCygMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMDzANBgkqhkiG9w0BAQsFAAOCAQEApJIMhxMvxVEvHM5k ybQQWNJzjoYsLvjNIiyDDf/DYEweYcxtLLgph6G2VCyR+H3wmYPw7q9AaGUdH+wt 0ZK/0J5y+nOtYuyycwePJTuwsaDGVLLCucmFMYb1mqDc2c2xx4a2k2PO0/AHFQYY CKwnlvDWhnd002EDH9syCurrq2Q+5SAXT2c61nmOzKNrz8h/uYUK7CawmaPO7MYX wZ+gLiA817CbrWN3iXvQm0VxNdfYWMyuyJcBe3Ypzy2FiLTed5rFeBPTLBQEwg5e dZYya+tMhJ8kLUhvRFm3oKWwitKya6zrL63MSewZPSr0yJ6/AOi6lnrQ9wWU2rQR CtLtNQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:24 2025 by rpki-client