$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer File: C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer (raw, json) Hash identifier: Tz+GGIcgeDMLLqGZoGq1LL09hEY56wHp8f5sGFlEf2M= Subject key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E4B79B6EFA1A07878070BB81C106E4E63A212E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft caRepository: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 00:02:48 +0000 Certificate not after: Fri 06 Mar 2026 00:07:48 +0000 Subordinate resources: AS: 28346 IP: 189.126.136.0/23 IP: 2001:12a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4b:79:b6:ef:a1:a0:78:78:07:0b:b8:1c:10:6e:4e:63:a2:12:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 00:02:48 2025 GMT Not After : Mar 6 00:07:48 2026 GMT Subject: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:fc:e0:59:6c:63:cc:18:2b:41:8c:8c:21: eb:84:c2:cd:6e:f3:23:3e:41:25:6e:bb:ec:75:49: 72:4c:da:ce:6c:99:e0:cf:11:17:f2:97:36:59:50: 38:40:9f:70:16:0f:fe:f6:ce:03:71:e2:b0:e1:73: 99:45:fa:3e:38:86:a7:f9:e2:9e:2c:be:30:de:6d: 33:4a:41:58:2c:85:dc:a1:81:50:a2:98:de:58:1c: 3e:22:b1:5a:56:73:c6:04:25:05:fe:46:69:97:eb: 0d:3b:89:f9:14:91:f2:f4:78:90:e7:86:91:5a:c7: 79:b4:17:16:db:f1:ec:58:a5:e5:cb:8d:5e:69:07: b5:90:dc:b6:a7:df:66:8a:13:c7:b3:f4:28:5a:cf: 37:02:ec:1a:d1:4a:89:fd:3d:41:2c:b2:a4:e7:b2: a5:e9:00:00:65:8e:23:b1:50:5d:6b:af:08:40:ac: 45:7b:9b:8f:c6:34:a2:f8:77:ac:27:fc:bf:58:5f: 45:e7:69:63:c5:66:f9:76:55:90:88:b9:9e:4a:dd: 25:bb:98:97:41:16:22:aa:81:6c:f4:31:53:a3:fb: 29:0f:5a:c5:16:28:9c:14:8a:f7:15:47:1a:49:5e: d2:00:7d:43:c9:e5:e1:c2:16:b3:e2:a5:f6:87:31: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.136.0/23 IPv6: 2001:12a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28346 Signature Algorithm: sha256WithRSAEncryption 33:10:51:81:c4:54:47:92:a7:f2:13:5a:00:a7:76:28:c7:c6: b5:c5:2b:f6:cb:2a:0c:5f:4c:bb:65:76:02:68:95:d7:1e:2a: d4:a7:f9:4e:30:de:86:ef:15:37:f8:77:70:2f:86:b7:e0:94: 13:ec:d7:4b:dd:04:61:f8:df:45:f1:ee:31:04:35:99:8c:1c: ad:13:83:8d:9b:4d:3a:3c:75:79:ed:a0:e5:41:8a:46:14:e6: 11:a5:fd:22:eb:9a:01:a4:b8:99:19:67:e3:05:63:6b:ed:7f: 26:8b:c2:09:74:9a:2a:ba:d1:88:f6:c8:8d:3f:55:c3:0d:2b: 76:ac:c2:53:57:09:ef:f5:96:03:95:86:e5:ce:f7:5a:97:0e: 9f:b5:b8:9b:72:19:13:45:fe:a7:2d:53:49:cb:62:f6:dc:46: 58:f6:3e:02:da:4f:27:73:d1:3e:93:b7:ea:5d:d8:5c:ce:46: b0:c7:70:a4:cc:0e:01:fa:00:b2:05:82:af:e0:3c:78:f1:db: f6:14:f2:94:8f:28:a2:e8:62:99:0e:d9:59:f9:48:22:26:96: 55:2b:b6:4b:c4:a9:eb:3e:e7:d2:7e:ea:30:b9:3f:dd:08:fe: bb:c5:0c:68:9f:49:f1:54:a9:99:53:82:49:90:3e:54:96:f3: c1:8a:4b:e4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUHkt5tu+hoHh4Bwu4HBBuTmOiEuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMDAyNDhaFw0yNjAzMDYwMDA3NDhaMDMxMTAvBgNV BAMTKEM5QzhGRTRDNEI5NUFBODBEM0I3M0RDRDEzNkRBMUUxQjgzNjU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YvzgWWxjzBgrQYyMIeuEws1u 8yM+QSVuu+x1SXJM2s5smeDPERfylzZZUDhAn3AWD/72zgNx4rDhc5lF+j44hqf5 4p4svjDebTNKQVgshdyhgVCimN5YHD4isVpWc8YEJQX+RmmX6w07ifkUkfL0eJDn hpFax3m0Fxbb8exYpeXLjV5pB7WQ3Lan32aKE8ez9ChazzcC7BrRSon9PUEssqTn sqXpAABljiOxUF1rrwhArEV7m4/GNKL4d6wn/L9YX0XnaWPFZvl2VZCIuZ5K3SW7 mJdBFiKqgWz0MVOj+ykPWsUWKJwUivcVRxpJXtIAfUPJ5eHCFrPipfaHMU7rAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJyP5MS5WqgNO3 Pc0TbaHhuDZW2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHBi SzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRiWFAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rw YksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzEvQzlD OEZFNEM0Qjk1QUE4MEQzQjczRENEMTM2REExRTFCODM2NTZEOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBvX6IMA0EAgACMAcDBQAgARKkMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm66MA0GCSqGSIb3DQEBCwUAA4IBAQAzEFGBxFRHkqfyE1oA p3Yox8a1xSv2yyoMX0y7ZXYCaJXXHirUp/lOMN6G7xU3+HdwL4a34JQT7NdL3QRh +N9F8e4xBDWZjBytE4ONm006PHV57aDlQYpGFOYRpf0i65oBpLiZGWfjBWNr7X8m i8IJdJoqutGI9siNP1XDDSt2rMJTVwnv9ZYDlYblzvdalw6ftbibchkTRf6nLVNJ y2L23EZY9j4C2k8nc9E+k7fqXdhczkawx3CkzA4B+gCyBYKv4Dx48dv2FPKUjyii 6GKZDtlZ+UgiJpZVK7ZLxKnrPufSfuowuT/dCP67xQxon0nxVKmZU4JJkD5UlvPB ikvk -----END CERTIFICATE-----Generated at Fri Apr 4 01:33:44 2025 by rpki-client