$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer File: 9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer (raw, json) Hash identifier: +dZBX+20AwyLLfWUQvldTSD4Cvfd2Y0pE0hS7DtbM4A= Subject key identifier: 9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0190C6B83B28000A58BCFBC0DE52AAE7A41DC1D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft caRepository: rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 20:45:12 +0000 Certificate not after: Tue 30 Jun 2026 20:50:12 +0000 Subordinate resources: AS: 268512 IP: 45.161.184.0/22 IP: 2804:5258::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:c6:b8:3b:28:00:0a:58:bc:fb:c0:de:52:aa:e7:a4:1d:c1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 20:45:12 2025 GMT Not After : Jun 30 20:50:12 2026 GMT Subject: CN=9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:44:69:e4:88:12:7c:14:cc:71:fb:a7:e6: b8:6a:e4:d4:29:87:ac:ce:9c:0e:16:2b:0b:c6:17: c4:4e:9d:88:32:3f:58:d4:b7:50:30:2c:f7:dc:13: df:56:69:61:9f:df:de:d3:97:51:f6:6f:d0:45:3f: d6:a0:7e:d1:6f:cf:e7:42:37:5b:aa:dd:34:85:c4: cd:2a:df:1f:25:d8:f1:58:fa:57:99:87:ff:48:0e: 67:30:4d:f9:c0:42:4c:bc:b9:9a:b9:09:54:cb:56: 57:57:d2:34:93:59:c2:d2:9b:22:a2:c0:92:e7:82: 8d:d3:9f:26:71:6f:fc:6c:ed:55:c2:c5:34:85:ba: 5e:58:3d:c3:84:8a:94:10:96:64:37:3f:9b:b4:6f: a9:67:71:8f:3f:8d:bd:31:d7:1a:38:73:0b:7b:ff: 42:ba:10:71:d5:fa:9e:3f:20:47:f4:6a:88:28:0d: b9:43:16:fb:bc:0c:7b:fe:64:99:af:85:ad:21:aa: 3d:13:37:d9:bc:7e:98:00:b3:98:36:23:3e:14:4e: a6:5f:19:6b:2a:e3:c2:aa:14:b4:5e:10:1a:67:1c: b9:d9:db:ad:86:a8:90:23:85:a0:d2:88:38:62:ea: d4:60:ad:43:8a:e3:8d:67:4b:57:0b:0c:b6:20:d3: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.184.0/22 IPv6: 2804:5258::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268512 Signature Algorithm: sha256WithRSAEncryption 6d:aa:d4:46:f3:31:e7:23:55:13:7a:93:6e:60:31:5e:a6:18: 66:47:f3:b2:e4:41:c9:5c:4b:1d:6c:6b:cf:ff:6a:71:9b:7a: 54:a5:67:40:61:db:76:2b:74:1b:1c:a2:92:a9:8e:de:00:87: 37:c4:7a:d9:26:f0:aa:d8:74:44:77:ba:bd:9d:a7:62:76:dc: 1d:55:76:2c:a4:3f:ff:e8:6a:6b:b3:f7:5f:74:d8:b2:da:88: 39:31:94:ad:72:e1:d3:65:35:4b:82:dd:d6:b8:f7:a1:47:d0: cb:10:3d:b6:3d:73:81:06:c6:47:b9:c5:68:72:8e:80:2c:03: 2a:37:1e:a6:7b:61:40:de:4b:2b:1c:e2:16:c1:a3:5c:ab:6d: 48:5a:1e:34:fb:f3:91:47:41:a9:51:56:0f:d7:e5:38:b1:2f: f3:9d:74:81:e4:47:64:cb:3d:3b:3b:53:8a:dc:56:55:d4:34: e5:9a:40:df:88:14:f7:48:20:07:05:ce:ab:5d:61:c4:75:cb: 6a:76:9c:e7:4c:2e:48:c7:2a:6c:dd:4d:f0:d2:f5:01:8b:1a: f7:ac:23:fb:9b:a0:7d:07:f9:c5:f8:ae:4f:85:e2:cb:8c:b7: d4:1a:c0:74:00:6e:38:1f:fd:93:7d:ac:20:ae:77:88:eb:9a: 74:d0:f1:a1 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUAZDGuDsoAApYvPvA3lKq56QdwdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDEyMDQ1MTJaFw0yNjA2MzAyMDUwMTJaMDMxMTAvBgNV BAMTKDlGOUQxRjAxMkQ2NTU1Q0NGOUUxQjdCRkQyMkNBMjgxMjM3RkFEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4ERp5IgSfBTMcfun5rhq5NQp h6zOnA4WKwvGF8ROnYgyP1jUt1AwLPfcE99WaWGf397Tl1H2b9BFP9agftFvz+dC N1uq3TSFxM0q3x8l2PFY+leZh/9IDmcwTfnAQky8uZq5CVTLVldX0jSTWcLSmyKi wJLngo3TnyZxb/xs7VXCxTSFul5YPcOEipQQlmQ3P5u0b6lncY8/jb0x1xo4cwt7 /0K6EHHV+p4/IEf0aogoDblDFvu8DHv+ZJmvha0hqj0TN9m8fpgAs5g2Iz4UTqZf GWsq48KqFLReEBpnHLnZ262GqJAjhaDSiDhi6tRgrUOK441nS1cLDLYg0w5TAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfnR8BLWVVzPnh t7/SLKKBI3+tPjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3py V3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFkyWTUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3py V3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFkyWTUvMS85RjlE MUYwMTJENjU1NUNDRjlFMUI3QkZEMjJDQTI4MTIzN0ZBRDNFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItobgwDQQCAAIwBwMFACgEUlgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBjgMA0GCSqGSIb3DQEBCwUAA4IBAQBtqtRG8zHnI1UTepNu YDFephhmR/Oy5EHJXEsdbGvP/2pxm3pUpWdAYdt2K3QbHKKSqY7eAIc3xHrZJvCq 2HREd7q9nadidtwdVXYspD//6Gprs/dfdNiy2og5MZStcuHTZTVLgt3WuPehR9DL ED22PXOBBsZHucVoco6ALAMqNx6me2FA3ksrHOIWwaNcq21IWh40+/ORR0GpUVYP 1+U4sS/znXSB5Edkyz07O1OK3FZV1DTlmkDfiBT3SCAHBc6rXWHEdctqdpznTC5I xyps3U3w0vUBixr3rCP7m6B9B/nF+K5PheLLjLfUGsB0AG44H/2TfawgrneI65p0 0PGh -----END CERTIFICATE-----Generated at Mon Nov 3 05:30:47 2025 by rpki-client