$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer File: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer (raw, json) Hash identifier: gBAEJU8KOW8rcMAX+40+aNGDn5gUjLf9Ff/gWLTCyYg= Subject key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24E12E92211E97F31CC08883DCAA1FD425B06E0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft caRepository: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 03:01:18 +0000 Certificate not after: Tue 15 Sep 2026 03:06:18 +0000 Subordinate resources: AS: 267263 IP: 160.238.24.0/22 IP: 2804:4ac8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e1:2e:92:21:1e:97:f3:1c:c0:88:83:dc:aa:1f:d4:25:b0:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 16 03:01:18 2025 GMT Not After : Sep 15 03:06:18 2026 GMT Subject: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:aa:ec:79:46:04:a7:44:1d:31:e5:7e:5e: cc:8d:62:3d:ae:f3:d7:20:75:7b:69:18:c5:54:58: 87:bd:72:30:1e:ee:d3:9d:a0:14:04:61:61:bb:c7: 8d:a4:bc:cf:b6:c2:27:09:2f:c6:89:d3:e4:b6:bb: 1d:fa:e1:2a:d2:1a:54:a0:81:8b:fb:b4:27:99:f7: f9:56:98:9b:af:ea:16:9f:5d:8a:25:d0:28:6c:48: df:7f:7c:18:4d:4d:cf:dd:a8:fc:80:50:40:6d:79: 60:50:22:3a:ed:4f:d2:d7:db:f3:22:e7:ec:4c:31: 6f:c3:38:4f:3d:37:b1:b5:7b:60:84:3b:b7:e1:34: c0:ec:78:e3:27:9e:86:49:b6:e8:43:cd:59:c1:d2: 85:35:ae:de:c6:1b:52:5e:dd:0f:8c:43:5b:51:62: c1:c2:f8:bb:5a:56:a3:e1:51:02:98:b5:1e:b5:9d: 66:ce:a0:29:22:a2:92:9a:e3:3d:b2:26:7a:1c:e3: e4:02:7c:2c:58:06:75:3c:84:55:85:5d:63:09:4d: 4e:bb:06:9d:29:bf:2a:38:ff:71:33:a0:62:9d:c1: eb:1f:a9:64:d3:26:63:35:73:ae:c3:30:c6:ba:9f: 74:f2:d5:d2:dd:e7:b6:1c:70:8c:dd:3f:d9:91:fb: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.24.0/22 IPv6: 2804:4ac8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267263 Signature Algorithm: sha256WithRSAEncryption 4b:e5:cc:4e:62:50:6e:73:9c:dd:88:9b:1c:6b:a0:68:fa:4e: be:42:eb:25:58:0b:ac:02:97:27:fc:21:08:fe:6c:f7:dc:03: 46:06:a0:f3:28:6c:ab:b3:b9:4a:bb:1b:07:7a:7d:78:59:db: a7:40:0f:76:da:9f:ff:8f:cf:bb:74:d5:26:5f:43:5f:fd:76: 04:e7:71:a7:33:3c:71:76:55:ad:86:09:06:ec:4a:51:fb:55: ca:4b:e2:a5:6d:62:e3:dd:1f:51:98:08:ac:2d:a0:40:56:db: eb:09:26:60:fc:38:6a:98:47:a2:52:94:fd:bc:a5:6f:39:e9: bb:83:3d:d3:65:24:75:d7:c7:89:49:49:f2:96:78:ff:ea:c8: bc:70:db:61:d8:cf:82:8c:31:2c:ae:06:ca:19:45:74:a9:fa: e9:b0:11:88:59:20:23:15:ef:e6:38:2f:08:e4:21:2b:5b:23: e8:e3:0b:b7:97:58:b9:71:d0:5f:24:3b:ae:e4:22:e8:73:de: e5:02:02:59:11:71:e7:19:b2:ce:95:7a:6f:05:60:fc:86:53: 3b:02:d2:a7:8e:c4:41:3e:1c:51:1f:ed:02:29:ba:d1:08:74: 76:01:65:a5:ac:4a:f5:52:67:12:9b:0b:71:5c:11:7c:60:e4: be:68:d4:15 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJOEukiEel/McwIiD3Kof1CWwbg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTYwMzAxMThaFw0yNjA5MTUwMzA2MThaMDMxMTAvBgNV BAMTKDlFOEUxREI1QzMzRDNGQzhGOEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLqrseUYEp0QdMeV+XsyNYj2u 89cgdXtpGMVUWIe9cjAe7tOdoBQEYWG7x42kvM+2wicJL8aJ0+S2ux364SrSGlSg gYv7tCeZ9/lWmJuv6hafXYol0ChsSN9/fBhNTc/dqPyAUEBteWBQIjrtT9LX2/Mi 5+xMMW/DOE89N7G1e2CEO7fhNMDseOMnnoZJtuhDzVnB0oU1rt7GG1Je3Q+MQ1tR YsHC+LtaVqPhUQKYtR61nWbOoCkiopKa4z2yJnoc4+QCfCxYBnU8hFWFXWMJTU67 Bp0pvyo4/3EzoGKdwesfqWTTJmM1c67DMMa6n3Ty1dLd57YccIzdP9mR++aPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSejh21wz0/yPjn yZMBFYCqKPMLyTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEpq Z0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5FeWsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hK amdIRDdrSGhQMVVhZ2ZWMUNuTFliSmpVUkFpVWNpcHI5NVF6aG5uRXlrLzAvOUU4 RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEyOEYzMEJDOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoO4YMA0EAgACMAcDBQAoBErIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQT/zANBgkqhkiG9w0BAQsFAAOCAQEAS+XMTmJQbnOc3Yib HGugaPpOvkLrJVgLrAKXJ/whCP5s99wDRgag8yhsq7O5SrsbB3p9eFnbp0APdtqf /4/Pu3TVJl9DX/12BOdxpzM8cXZVrYYJBuxKUftVykvipW1i490fUZgIrC2gQFbb 6wkmYPw4aphHolKU/bylbznpu4M902UkddfHiUlJ8pZ4/+rIvHDbYdjPgowxLK4G yhlFdKn66bARiFkgIxXv5jgvCOQhK1sj6OMLt5dYuXHQXyQ7ruQi6HPe5QICWRFx 5xmyzpV6bwVg/IZTOwLSp47EQT4cUR/tAim60Qh0dgFlpaxK9VJnEpsLcVwRfGDk vmjUFQ== -----END CERTIFICATE-----Generated at Thu Sep 18 05:14:38 2025 by rpki-client