$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer File: 9D9F73448694649C4F988D98A0F12757A6913C2D.cer (raw, json) Hash identifier: DNdhVEfLBTtqn7Gz+HGXwFFOzgIE7M9AZbtHgGaTX5k= Subject key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E32F00031AB430802FA500D0A084D7B12B2CE99 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft caRepository: rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 04:12:50 +0000 Certificate not after: Fri 06 Mar 2026 04:17:50 +0000 Subordinate resources: AS: 28140 IP: 187.49.32.0/20 IP: 187.103.208.0/20 IP: 2804:1a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:f0:00:31:ab:43:08:02:fa:50:0d:0a:08:4d:7b:12:b2:ce:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 04:12:50 2025 GMT Not After : Mar 6 04:17:50 2026 GMT Subject: CN=9D9F73448694649C4F988D98A0F12757A6913C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:c5:cb:2d:8d:86:dd:1e:b6:81:30:c4:aa: 60:3a:bd:2b:58:5c:59:98:dd:71:89:2d:30:f4:85: 14:b3:f1:b7:59:ea:9a:05:40:98:bf:56:f2:e4:2b: fa:48:42:d3:ae:01:8c:51:ec:0c:2e:71:b7:c0:56: b6:88:fc:83:8e:13:e1:13:66:fa:05:a4:5c:da:66: 46:91:d4:70:c7:38:ec:db:39:fc:94:eb:a7:b1:8c: e2:d6:ae:4c:f3:97:92:1d:01:94:39:9e:a9:a6:16: 9f:78:1b:9a:23:12:91:f2:2b:71:7b:4c:d8:a0:93: 32:a7:31:61:94:94:04:22:6f:48:6c:33:8a:4e:33: 42:40:ce:67:b6:af:5a:8e:dd:62:89:5b:73:f0:46: 59:bb:9f:53:68:ff:e0:3a:6e:50:dc:c7:1b:78:d9: fc:f2:58:04:0f:91:57:ba:5b:9b:8a:b5:e4:8b:4b: 73:85:17:5d:f0:24:43:2e:0f:35:4d:3e:f5:f2:13: f4:cd:8b:56:22:0e:e8:39:fe:62:dd:96:1c:30:c6: 5a:d6:c6:76:88:79:e3:5e:4f:f0:15:5c:cc:a8:24: 1c:e8:75:98:8c:3a:7f:11:dc:4f:99:9b:88:f1:4c: 12:d8:99:41:67:3a:d8:f1:41:76:d1:c3:43:a7:32: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.32.0/20 187.103.208.0/20 IPv6: 2804:1a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28140 Signature Algorithm: sha256WithRSAEncryption 3e:98:6f:be:e4:a3:d0:6c:3c:be:81:ab:a9:87:0a:f2:39:f3: c2:f0:8c:2e:f4:b9:a5:08:25:c7:9f:48:fe:2f:ee:75:d2:88: de:23:43:f4:21:e8:dc:b2:4e:f8:ad:c4:d5:2d:60:e8:81:cc: b9:2b:9d:50:f8:aa:a7:b2:0d:a0:b8:87:40:3a:b6:5c:ef:2e: 70:12:fb:52:08:c8:71:a0:58:79:ec:01:73:cb:be:18:54:ef: 70:45:af:b3:af:a5:6d:44:21:bd:a3:e0:36:2c:cd:a2:71:f6: e0:db:dc:c9:2c:7a:61:0f:48:43:03:80:ef:00:c0:0e:bc:ae: 17:7d:3d:d1:8b:d5:01:d6:b7:ec:77:72:e5:49:d1:1a:91:4f: 54:47:75:3e:c2:dd:2d:a3:21:69:6f:8a:2f:12:d6:93:26:a7: 28:f1:74:57:f4:9d:37:8e:b9:0f:2c:95:04:55:2a:8d:d3:da: fc:51:56:04:f8:7c:c8:d7:1f:e7:93:5d:e7:5d:5a:87:f1:c8: 7c:71:78:8d:c4:08:e5:de:6e:10:59:33:9e:6f:9b:d8:2f:92: c6:86:61:94:2b:11:24:30:0d:8a:6d:2e:22:18:99:06:c1:04: 24:99:8d:c3:3b:a0:22:a2:d9:a7:f7:dd:b2:0b:d7:41:24:30: ac:17:e9:9d -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUHjLwADGrQwgC+lANCghNexKyzpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNDEyNTBaFw0yNjAzMDYwNDE3NTBaMDMxMTAvBgNV BAMTKDlEOUY3MzQ0ODY5NDY0OUM0Rjk4OEQ5OEEwRjEyNzU3QTY5MTNDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88cXLLY2G3R62gTDEqmA6vStY XFmY3XGJLTD0hRSz8bdZ6poFQJi/VvLkK/pIQtOuAYxR7AwucbfAVraI/IOOE+ET ZvoFpFzaZkaR1HDHOOzbOfyU66exjOLWrkzzl5IdAZQ5nqmmFp94G5ojEpHyK3F7 TNigkzKnMWGUlAQib0hsM4pOM0JAzme2r1qO3WKJW3PwRlm7n1No/+A6blDcxxt4 2fzyWAQPkVe6W5uKteSLS3OFF13wJEMuDzVNPvXyE/TNi1YiDug5/mLdlhwwxlrW xnaIeeNeT/AVXMyoJBzodZiMOn8R3E+Zm4jxTBLYmUFnOtjxQXbRw0OnMhM5AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdn3NEhpRknE+Y jZig8SdXppE8LTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjhV d3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3aUovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o4 VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzEvOUQ5 RjczNDQ4Njk0NjQ5QzRGOTg4RDk4QTBGMTI3NTdBNjkxM0MyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEuzEgAwQEu2fQMA0EAgACMAcDBQAoBAGkMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3sMA0GCSqGSIb3DQEBCwUAA4IBAQA+mG++5KPQ bDy+gauphwryOfPC8Iwu9LmlCCXHn0j+L+510ojeI0P0Iejcsk74rcTVLWDogcy5 K51Q+Kqnsg2guIdAOrZc7y5wEvtSCMhxoFh57AFzy74YVO9wRa+zr6VtRCG9o+A2 LM2icfbg29zJLHphD0hDA4DvAMAOvK4XfT3Ri9UB1rfsd3LlSdEakU9UR3U+wt0t oyFpb4ovEtaTJqco8XRX9J03jrkPLJUEVSqN09r8UVYE+HzI1x/nk13nXVqH8ch8 cXiNxAjl3m4QWTOeb5vYL5LGhmGUKxEkMA2KbS4iGJkGwQQkmY3DO6Aiotmn992y C9dBJDCsF+md -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:20 2025 by rpki-client