$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer File: C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer (raw, json) Hash identifier: 42n7+k0KAZ8t1OWBjiRwwOAmuWfn7VBM5kpT40wRhqA= Subject key identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C4E2D19D07564FB92CEC7E2494634CBA13FC435 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft caRepository: rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 20:52:24 +0000 Certificate not after: Tue 27 Oct 2026 20:57:24 +0000 Subordinate resources: AS: 273685 IP: 2804:8aac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4e:2d:19:d0:75:64:fb:92:ce:c7:e2:49:46:34:cb:a1:3f:c4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 28 20:52:24 2025 GMT Not After : Oct 27 20:57:24 2026 GMT Subject: CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:96:bd:e5:e9:1f:bf:42:88:0f:f7:ad:a6: c7:09:09:8f:42:34:14:9a:4f:cf:9f:7c:6d:38:b8: 6e:74:cb:e1:44:aa:7e:c4:bc:f6:22:29:2c:59:8a: 7c:28:ac:2e:06:90:a4:fe:8a:d8:df:51:46:c6:20: db:76:13:41:38:5b:a0:f1:90:02:99:9b:87:4b:cb: 48:4f:1d:70:ba:eb:7a:96:f9:ab:6d:76:0c:00:1f: da:7e:43:78:12:45:da:ef:18:f4:0e:fe:86:0a:5f: 1c:39:7c:c2:3b:b5:27:b1:90:10:1e:ef:1e:02:17: d8:33:14:27:04:37:95:4e:d8:b8:2b:33:27:9f:16: 20:f9:d4:a5:ca:7a:9f:45:2d:05:bb:fe:7a:60:db: 6c:56:de:cd:71:ee:5e:5f:83:06:fb:45:71:57:20: 22:ac:83:a9:98:16:65:3a:9d:5c:a6:af:56:4f:56: c5:a4:6d:10:17:66:31:5e:9c:30:38:c9:9a:34:48: 19:38:00:27:b2:32:eb:b0:76:b4:c4:3a:64:52:f9: 5a:1c:9e:af:98:00:cd:ec:4b:03:6f:f0:6c:d5:05: b6:38:7f:74:c7:2c:7b:45:ac:3b:99:b2:a0:87:04: 51:d1:f3:de:52:49:5d:e7:d3:9f:f9:0d:4e:cc:12: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8aac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273685 Signature Algorithm: sha256WithRSAEncryption 46:1a:7d:cb:45:f3:a9:5f:10:4b:dc:66:66:24:31:db:5c:c9: 42:83:12:6f:1d:5b:c1:98:ec:5e:02:72:7b:42:12:82:3c:a2: 92:e1:33:4a:a0:97:c0:41:9a:69:c2:60:8e:27:84:66:45:8f: 8a:02:f7:85:e8:24:38:a5:1c:dc:90:06:94:1b:94:ee:48:0f: 64:e1:0a:59:2b:fa:2f:4b:8c:aa:fd:a2:c9:5e:27:91:57:70: bd:1f:b4:a3:a3:49:cf:60:83:67:2a:24:ed:b8:de:56:59:00: 5f:e8:21:a0:43:a2:b1:27:3d:01:87:7f:a3:8c:cf:7b:97:f3: 9d:20:6a:6e:45:0f:cc:5a:fc:2b:d9:2c:ef:9a:fc:bb:e5:08: 9f:c9:9e:8f:35:0e:fe:a2:4a:80:05:ec:52:a2:9f:18:6f:59: 46:52:eb:a0:50:e6:70:37:e4:57:1c:6b:96:47:8e:74:c6:b3: e0:21:88:21:e7:65:bf:8c:dd:f7:44:2c:75:33:99:a2:f3:f3: be:48:6c:3c:23:46:99:a4:96:5b:d8:91:23:b7:d3:e1:e2:ca: 7c:44:9f:bf:ec:40:50:7f:59:de:80:9f:b5:c7:8c:b0:28:ab: fe:11:5a:a1:c1:c0:c3:c3:72:a3:6f:69:a4:ad:89:66:3a:47: 05:9a:6a:3d -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUPE4tGdB1ZPuSzsfiSUY0y6E/xDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjgyMDUyMjRaFw0yNjEwMjcyMDU3MjRaMDMxMTAvBgNV BAMTKEM5QTNDQTAzNjFGQjVERUJCNUQxQkM3Njc4QkUzMEFCQUJFQUNFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlZa95ekfv0KID/etpscJCY9C NBSaT8+ffG04uG50y+FEqn7EvPYiKSxZinworC4GkKT+itjfUUbGINt2E0E4W6Dx kAKZm4dLy0hPHXC663qW+attdgwAH9p+Q3gSRdrvGPQO/oYKXxw5fMI7tSexkBAe 7x4CF9gzFCcEN5VO2LgrMyefFiD51KXKep9FLQW7/npg22xW3s1x7l5fgwb7RXFX ICKsg6mYFmU6nVymr1ZPVsWkbRAXZjFenDA4yZo0SBk4ACeyMuuwdrTEOmRS+Voc nq+YAM3sSwNv8GzVBbY4f3THLHtFrDuZsqCHBFHR895SSV3n05/5DU7MEsPhAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJo8oDYftd67XR vHZ4vjCrq+rOGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhz Rk1ackJtM2NLV1hERHIyZDFtQkcycTdmbVRCOGtENjZSeHN1WlM4cnMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FY c0ZNWnJCbTNjS1dYRERyMmQxbUJHMnE3Zm1UQjhrRDY2UnhzdVpTOHJzLzAvQzlB M0NBMDM2MUZCNURFQkI1RDFCQzc2NzhCRTMwQUJBQkVBQ0UxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASKrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LRUwDQYJKoZIhvcNAQELBQADggEBAEYafctF86lfEEvcZmYkMdtcyUKDEm8dW8GY 7F4CcntCEoI8opLhM0qgl8BBmmnCYI4nhGZFj4oC94XoJDilHNyQBpQblO5ID2Th Clkr+i9LjKr9osleJ5FXcL0ftKOjSc9gg2cqJO243lZZAF/oIaBDorEnPQGHf6OM z3uX850gam5FD8xa/CvZLO+a/LvlCJ/Jno81Dv6iSoAF7FKinxhvWUZS66BQ5nA3 5Fcca5ZHjnTGs+AhiCHnZb+M3fdELHUzmaLz875IbDwjRpmkllvYkSO30+HiynxE n7/sQFB/Wd6An7XHjLAoq/4RWqHBwMPDcqNvaaStiWY6RwWaaj0= -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:47 2025 by rpki-client