$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer File: C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer (raw, json) Hash identifier: rk9QVUhebsyA1hyQQa76aVEayr6Wr/BOv5o/YKWb8z8= Subject key identifier: C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6603F04DF4EB3B8D215868628F5E48B1C149A654 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft caRepository: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Oct 2025 12:44:58 +0000 Certificate not after: Mon 12 Oct 2026 12:49:58 +0000 Subordinate resources: AS: 267956 IP: 45.166.116.0/22 IP: 2804:55c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:03:f0:4d:f4:eb:3b:8d:21:58:68:62:8f:5e:48:b1:c1:49:a6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 13 12:44:58 2025 GMT Not After : Oct 12 12:49:58 2026 GMT Subject: CN=C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:b2:c6:10:2d:0b:a7:ff:77:0c:46:f0:ba: 77:9b:2c:3e:46:3b:8c:5e:a7:e5:95:8b:9c:04:ea: 43:16:d0:94:36:34:98:44:e6:85:46:a8:71:e6:ad: af:02:f7:8f:a9:e2:31:cc:1c:44:78:1a:aa:8f:1a: c5:8c:46:cf:c1:d1:13:aa:2f:23:c6:a8:71:21:9c: cb:5f:cc:35:98:6c:14:56:88:68:ba:88:28:ec:07: 90:93:ca:1f:77:89:1e:96:fd:6d:d7:cf:86:c2:ee: 4a:f5:4e:75:45:59:44:0e:70:ab:80:6f:80:7f:cf: 1f:18:a5:b0:47:75:16:f3:15:c2:6f:d5:06:37:d8: e4:41:37:59:1b:8a:47:b7:32:04:aa:d6:6d:0d:0d: 9a:97:a3:a8:d2:3e:dd:cb:8b:98:c3:8b:c5:ca:fc: 46:1f:81:4d:9a:ac:0e:0e:11:c2:5e:06:97:28:03: 0b:3a:52:91:04:b2:05:d2:b7:92:63:54:37:8b:f5: af:c8:da:05:07:9e:fb:c0:a1:b9:bf:e1:c8:8e:a4: 0c:37:fb:c1:0a:88:27:95:e7:bd:8a:a8:0a:52:2a: b8:a6:3a:9a:bc:54:9c:69:14:b3:e8:85:6b:28:a8: ab:62:06:00:61:f6:c3:c8:bf:a0:f5:6b:ba:15:10: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.116.0/22 IPv6: 2804:55c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267956 Signature Algorithm: sha256WithRSAEncryption 33:7e:de:fa:39:52:53:fe:a0:d7:66:30:b6:18:aa:e5:fd:58: 85:63:53:c9:10:ba:b2:8f:aa:f8:da:2b:32:f4:8f:bb:12:24: f2:ef:ae:68:44:6f:3e:36:d6:19:43:44:99:70:4b:06:29:77: f0:a3:d2:7c:d4:ce:ef:ff:e8:76:b2:d1:fe:9e:1e:66:00:eb: 31:3f:85:fa:c4:8b:95:8a:35:95:53:70:80:fc:ee:d0:8b:10: b1:63:05:b6:87:bf:b7:1c:76:60:b7:6a:e6:7f:4e:ad:5d:1d: 88:2b:79:0f:60:ab:9b:7c:00:96:34:4d:80:45:af:54:92:91: 3a:88:a7:bb:3e:b9:e1:92:99:f8:f3:2a:0a:f2:a8:cc:0c:8a: ea:a5:72:14:a6:31:e8:1f:dd:3d:dc:8c:53:da:b2:ef:42:00: 53:46:bf:44:f7:15:07:39:2a:d4:66:af:0f:cd:cd:e3:6f:43: aa:da:6a:84:23:46:57:88:cc:00:b5:96:1c:6e:85:3b:93:9f: 8b:43:b7:b7:22:13:05:38:49:70:9e:5f:c4:22:4f:88:78:23: 77:7b:41:23:4a:4d:a0:da:45:f2:12:52:7a:79:87:67:53:15: c5:ef:0a:2e:b1:26:74:5b:3f:1f:11:74:67:61:2c:6b:f0:b7: e0:a7:eb:ed -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZgPwTfTrO40hWGhij15IscFJplQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTMxMjQ0NThaFw0yNjEwMTIxMjQ5NThaMDMxMTAvBgNV BAMTKEMwOUYyREQxNDdERjFEMjhFQUY1QkY2QjNEMkM0OTBGMTlBQzZDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQ7LGEC0Lp/93DEbwunebLD5G O4xep+WVi5wE6kMW0JQ2NJhE5oVGqHHmra8C94+p4jHMHER4GqqPGsWMRs/B0ROq LyPGqHEhnMtfzDWYbBRWiGi6iCjsB5CTyh93iR6W/W3Xz4bC7kr1TnVFWUQOcKuA b4B/zx8YpbBHdRbzFcJv1QY32ORBN1kbike3MgSq1m0NDZqXo6jSPt3Li5jDi8XK /EYfgU2arA4OEcJeBpcoAws6UpEEsgXSt5JjVDeL9a/I2gUHnvvAobm/4ciOpAw3 +8EKiCeV572KqApSKrimOpq8VJxpFLPohWsoqKtiBgBh9sPIv6D1a7oVEIOdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAny3RR98dKOr1 v2s9LEkPGaxsQjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2o0 M0VyTGNXMnpScUc0Mnp3Q2ZNM2ZFWFZ2MWRjOGJvU3FjakptOG5zVXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdq NDNFckxjVzJ6UnFHNDJ6d0NmTTNmRVhWdjFkYzhib1NxY2pKbThuc1VyLzAvQzA5 RjJERDE0N0RGMUQyOEVBRjVCRjZCM0QyQzQ5MEYxOUFDNkM0Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaZ0MA0EAgACMAcDBQAoBFXIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQWtDANBgkqhkiG9w0BAQsFAAOCAQEAM37e+jlSU/6g12Yw thiq5f1YhWNTyRC6so+q+NorMvSPuxIk8u+uaERvPjbWGUNEmXBLBil38KPSfNTO 7//odrLR/p4eZgDrMT+F+sSLlYo1lVNwgPzu0IsQsWMFtoe/txx2YLdq5n9OrV0d iCt5D2Crm3wAljRNgEWvVJKROoinuz654ZKZ+PMqCvKozAyK6qVyFKYx6B/dPdyM U9qy70IAU0a/RPcVBzkq1GavD83N429DqtpqhCNGV4jMALWWHG6FO5Ofi0O3tyIT BThJcJ5fxCJPiHgjd3tBI0pNoNpF8hJSenmHZ1MVxe8KLrEmdFs/HxF0Z2Esa/C3 4Kfr7Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:46 2025 by rpki-client