$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer (raw, json) Hash identifier: G9fA7Rz2oIo2UrySQIehyHA/RgVz5DQ6YsOXqR/AN2M= Subject key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A81729012E94441DC32FB8A1C788FF771B6E67E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft caRepository: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 27 Aug 2025 15:29:12 +0000 Certificate not after: Wed 26 Aug 2026 15:34:12 +0000 Subordinate resources: AS: 264051 IP: 143.137.160.0/22 IP: 170.246.224.0/22 IP: 2804:2a04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:81:72:90:12:e9:44:41:dc:32:fb:8a:1c:78:8f:f7:71:b6:e6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 27 15:29:12 2025 GMT Not After : Aug 26 15:34:12 2026 GMT Subject: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:44:53:aa:7c:83:cd:40:60:c6:d8:23:2f: ab:62:17:79:94:68:9e:e4:c0:ed:a5:c1:0d:74:5b: 6a:9a:e4:f9:d5:d1:ce:12:ea:7b:33:17:83:30:a5: 4b:b3:f8:7d:0f:d9:05:b7:5c:9a:00:f0:bc:7e:d0: 21:df:1f:32:d3:f0:16:5a:90:a2:41:d7:a5:79:2b: 4a:59:2d:85:8f:37:6f:d2:89:16:e1:6a:82:8d:c9: 9a:b5:52:6a:bf:db:51:8d:ee:7c:34:67:cc:c1:87: 50:cf:96:47:08:e7:2e:27:37:bf:08:bf:1f:ef:2a: b0:8f:0b:d8:8a:ae:45:0c:9b:b4:04:f9:01:e0:aa: 80:59:53:a8:be:16:e1:b7:c6:c8:eb:f9:f6:87:9c: 01:e3:9f:f0:36:dc:8d:03:9a:e2:0e:19:64:18:f9: 43:e8:02:0c:2c:d9:72:c7:dc:6d:44:0c:20:6d:51: d0:26:bb:62:2a:85:72:9f:f4:e3:f2:a4:1d:d4:34: b1:af:6d:ba:41:61:68:e2:80:ac:11:5f:6d:47:29: 97:5e:c4:06:eb:a0:1c:a6:b1:92:11:39:cb:75:2c: 82:3a:56:7b:8a:96:56:84:e6:b2:b0:4e:7b:f8:9d: 51:42:38:11:43:af:e9:73:e1:9e:b4:86:0a:9d:af: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.160.0/22 170.246.224.0/22 IPv6: 2804:2a04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264051 Signature Algorithm: sha256WithRSAEncryption ba:18:bd:23:00:1a:ab:f0:cc:e1:77:5d:1c:bf:d7:61:a8:8e: ae:9b:ba:ee:4e:44:9a:41:30:dd:98:67:f5:67:00:90:ac:3f: 9b:bb:d1:8e:c5:09:07:08:21:f0:0c:6d:1f:cf:4d:37:5b:cf: f1:45:6d:ff:95:65:59:f3:03:fe:f9:b0:1d:98:e4:38:68:ae: ff:67:a7:4b:4f:c3:30:4e:9e:0a:b2:4c:e0:72:db:f0:da:83: e3:f7:ed:fc:45:1f:5a:75:f7:e7:de:45:9e:e3:80:03:19:09: f3:e4:29:0a:7f:de:76:c9:e3:43:ff:b0:09:cf:66:29:33:ab: 28:31:df:0c:6c:90:39:de:5e:c8:ea:29:7c:70:31:27:99:f8: 77:53:af:f0:88:4e:13:cc:a9:04:a8:ba:94:fe:7c:f1:aa:56: 1a:9f:ae:43:f3:77:e1:44:b5:ea:a1:1a:73:a0:d4:61:af:6e: ad:69:0d:7f:ba:7f:45:3c:49:3e:e5:4f:ca:38:2f:0a:66:8d: 49:c1:af:9f:38:a7:d3:c5:a0:9e:c3:49:b3:95:1c:60:21:39: 3c:8e:50:47:82:a7:e1:0d:32:f2:0b:b3:0a:4d:9c:31:12:64: a0:06:d2:a3:b6:d7:87:dc:fb:eb:28:b4:26:d1:b3:fc:c7:23: 2e:c2:3b:45 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCoFykBLpREHcMvuKHHiP93G25n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjcxNTI5MTJaFw0yNjA4MjYxNTM0MTJaMDMxMTAvBgNV BAMTKEM5QjQ0QzQyQ0UyMTk0Q0YyQUVENUYzRjFDNUY5RTdEMjhEMjJFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AERTqnyDzUBgxtgjL6tiF3mU aJ7kwO2lwQ10W2qa5PnV0c4S6nszF4MwpUuz+H0P2QW3XJoA8Lx+0CHfHzLT8BZa kKJB16V5K0pZLYWPN2/SiRbhaoKNyZq1Umq/21GN7nw0Z8zBh1DPlkcI5y4nN78I vx/vKrCPC9iKrkUMm7QE+QHgqoBZU6i+FuG3xsjr+faHnAHjn/A23I0DmuIOGWQY +UPoAgws2XLH3G1EDCBtUdAmu2IqhXKf9OPypB3UNLGvbbpBYWjigKwRX21HKZde xAbroBymsZIROct1LII6VnuKllaE5rKwTnv4nVFCOBFDr+lz4Z60hgqdr8TxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJtExCziGUzyrt Xz8cX559KNIurDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHh5 VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h4 eVVLSkhYQVkzSkN4MlRGd1dFYUdObmRXQm0zZGVGYnVmbkJpUHJhOFRxLzAvQzlC NDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0QyOEQyMkVBQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj4mgAwQCqvbgMA0EAgACMAcDBQAoBCoEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHczANBgkqhkiG9w0BAQsFAAOCAQEAuhi9IwAa q/DM4XddHL/XYaiOrpu67k5EmkEw3Zhn9WcAkKw/m7vRjsUJBwgh8AxtH89NN1vP 8UVt/5VlWfMD/vmwHZjkOGiu/2enS0/DME6eCrJM4HLb8NqD4/ft/EUfWnX3595F nuOAAxkJ8+QpCn/edsnjQ/+wCc9mKTOrKDHfDGyQOd5eyOopfHAxJ5n4d1Ov8IhO E8ypBKi6lP588apWGp+uQ/N34US16qEac6DUYa9urWkNf7p/RTxJPuVPyjgvCmaN ScGvnzin08WgnsNJs5UcYCE5PI5QR4Kn4Q0y8guzCk2cMRJkoAbSo7bXh9z76yi0 JtGz/McjLsI7RQ== -----END CERTIFICATE-----Generated at Thu Sep 18 09:19:57 2025 by rpki-client