$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer File: 9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer (raw, json) Hash identifier: iry0lJqzUUSvUtuzChQTgwfIM3O8juUDA/VauKs+Ans= Subject key identifier: 9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 307D3F369031BBADCECD3843709D34A05A6AC97E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft caRepository: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 12:52:56 +0000 Certificate not after: Thu 13 Aug 2026 12:57:56 +0000 Subordinate resources: AS: 272252 IP: 2804:844c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7d:3f:36:90:31:bb:ad:ce:cd:38:43:70:9d:34:a0:5a:6a:c9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 14 12:52:56 2025 GMT Not After : Aug 13 12:57:56 2026 GMT Subject: CN=9CA6EDC8321AC30275A76ED36FF0E5A08A25502F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:9c:56:e5:be:dc:73:03:2f:79:70:b9:f3: b3:c6:52:48:13:56:6d:56:84:c4:85:71:05:76:0e: ef:23:bb:56:c8:1e:5e:b3:e4:e7:ff:24:70:0e:51: 38:3b:c0:23:db:f0:d2:79:32:cf:6c:37:86:60:e5: 83:6c:e7:15:b9:42:a1:65:6f:c1:bb:56:12:54:c2: 01:1c:8f:20:03:c6:a0:d8:b4:db:d1:1d:58:63:e8: b2:37:98:ab:ff:2d:36:45:23:ae:cb:93:31:03:a8: 89:25:29:da:10:b8:b5:02:09:1e:51:2a:96:c7:92: 77:fc:52:d7:c3:59:02:7c:c1:22:ee:cc:0b:a2:b7: a5:5e:4c:11:13:97:9c:77:50:8f:30:25:5b:2c:10: ba:8a:f4:c5:e0:b6:c8:7b:67:8f:02:92:3e:29:7a: 9a:0d:55:5b:fc:4c:37:6f:9a:d1:3d:62:e5:b8:32: da:ff:76:66:a9:a5:5c:43:03:94:bf:e6:e0:d9:a5: 25:e0:0e:de:6e:f8:da:92:69:c6:3c:1a:33:3e:6d: 16:75:3d:c7:06:cc:05:83:64:5b:19:e1:87:4a:9d: f0:1c:ff:e4:d8:63:34:ad:d3:7c:39:aa:f2:38:a1: 2b:22:23:9d:61:5e:e7:2b:5a:22:5a:b3:43:bf:77: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:844c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272252 Signature Algorithm: sha256WithRSAEncryption 8e:fa:74:47:3c:41:e0:6c:c3:9a:a7:4e:2e:cd:d8:1d:b3:c2: 5b:fb:55:b4:92:31:34:bb:52:24:4f:bb:8a:0a:20:7c:05:e0: 27:c4:38:d7:06:f0:4a:70:a3:44:05:08:6e:1b:a5:12:f2:ac: d1:cc:18:43:70:48:40:91:29:64:8c:96:8f:0d:a5:1e:92:24: 39:e6:3b:7c:a7:c9:b7:e8:69:57:fd:68:24:78:d4:9e:5d:ad: 16:d1:e5:46:c8:3d:4a:14:80:ac:fd:e3:34:a1:fa:6f:fa:f1: 34:93:10:8b:c3:a4:8b:77:d2:42:a6:46:02:25:c8:70:29:e6: cd:21:f4:45:d3:80:39:c7:a7:89:43:f0:c7:d4:b9:9f:98:74: 75:1c:f7:7a:2a:23:9f:73:3b:01:18:ab:35:b5:62:c5:9e:09: 3e:88:71:98:ed:c2:1e:cf:a8:c7:9c:25:ac:7d:07:1e:94:c1: 6b:21:3f:6d:5b:86:20:3e:e2:a2:a6:cc:15:e9:cd:c2:1d:b5: fe:2a:8e:63:c7:03:2c:07:24:19:91:0e:7b:01:b4:a1:01:56: c0:5c:ad:e9:64:a7:d3:42:e9:73:0e:5b:58:0b:b5:de:91:41: 69:9a:83:a4:e9:74:6f:d1:65:e4:9a:d5:26:91:e2:57:06:ac: d1:38:68:e8 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUMH0/NpAxu63OzThDcJ00oFpqyX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTQxMjUyNTZaFw0yNjA4MTMxMjU3NTZaMDMxMTAvBgNV BAMTKDlDQTZFREM4MzIxQUMzMDI3NUE3NkVEMzZGRjBFNUEwOEEyNTUwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/pxW5b7ccwMveXC587PGUkgT Vm1WhMSFcQV2Du8ju1bIHl6z5Of/JHAOUTg7wCPb8NJ5Ms9sN4Zg5YNs5xW5QqFl b8G7VhJUwgEcjyADxqDYtNvRHVhj6LI3mKv/LTZFI67LkzEDqIklKdoQuLUCCR5R KpbHknf8UtfDWQJ8wSLuzAuit6VeTBETl5x3UI8wJVssELqK9MXgtsh7Z48Ckj4p epoNVVv8TDdvmtE9YuW4Mtr/dmappVxDA5S/5uDZpSXgDt5u+NqSacY8GjM+bRZ1 PccGzAWDZFsZ4YdKnfAc/+TYYzSt03w5qvI4oSsiI51hXucrWiJas0O/d9gVAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScpu3IMhrDAnWn btNv8OWgiiVQLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFN WkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3NkMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx TVpGSk1zN1N0OENaajNiSmtXNjZnWXFmdHhSSjNWa0ZHczFjN2VTNzZDLzAvOUNB NkVEQzgzMjFBQzMwMjc1QTc2RUQzNkZGMEU1QTA4QTI1NTAyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASETDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME J3wwDQYJKoZIhvcNAQELBQADggEBAI76dEc8QeBsw5qnTi7N2B2zwlv7VbSSMTS7 UiRPu4oKIHwF4CfEONcG8Epwo0QFCG4bpRLyrNHMGENwSECRKWSMlo8NpR6SJDnm O3ynybfoaVf9aCR41J5drRbR5UbIPUoUgKz94zSh+m/68TSTEIvDpIt30kKmRgIl yHAp5s0h9EXTgDnHp4lD8MfUuZ+YdHUc93oqI59zOwEYqzW1YsWeCT6IcZjtwh7P qMecJax9Bx6UwWshP21bhiA+4qKmzBXpzcIdtf4qjmPHAywHJBmRDnsBtKEBVsBc relkp9NC6XMOW1gLtd6RQWmag6TpdG/RZeSa1SaR4lcGrNE4aOg= -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:06 2025 by rpki-client