$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer File: C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer (raw, json) Hash identifier: 3NixOri/xD5COYgaw2TKVjoAbvFDdQacbwkmqvkTsIc= Subject key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2B657A4FC41BED073A19371AF178E4CB5470AA49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft caRepository: rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Oct 2025 02:43:44 +0000 Certificate not after: Thu 29 Oct 2026 02:48:44 +0000 Subordinate resources: AS: 28615 IP: 177.131.192.0/18 IP: 177.155.0.0/18 IP: 201.46.128.0 -- 201.46.239.255 IP: 2804:ba4::/31 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:65:7a:4f:c4:1b:ed:07:3a:19:37:1a:f1:78:e4:cb:54:70:aa:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 30 02:43:44 2025 GMT Not After : Oct 29 02:48:44 2026 GMT Subject: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:14:10:8c:89:52:bf:09:79:88:b6:15:36: 99:26:d6:af:ca:bd:28:cc:ba:89:7a:2f:81:59:e9: 9f:e6:db:12:aa:1e:48:81:d6:11:18:c8:86:ce:4e: 76:0c:32:15:2d:41:9b:d8:c1:96:0a:fa:d8:ab:17: a3:af:0f:78:62:04:4b:6c:19:09:1f:a6:ca:e6:ba: e1:b4:e4:54:1f:e3:64:66:93:b5:86:03:9a:ff:28: e1:39:06:78:a1:ab:1c:7b:fc:65:c4:7f:b7:f9:60: 1c:ec:de:b9:09:d6:83:62:ff:d1:91:d3:b4:30:41: 37:3c:3f:8c:19:28:39:cd:9d:21:70:28:e5:8a:67: bb:6c:60:71:ef:7b:a9:aa:da:aa:0b:6b:74:4b:bb: 03:fb:0b:d6:de:19:86:64:a5:08:a7:43:b8:02:a7: d7:69:27:c2:59:b9:ec:2f:b3:05:28:a2:00:ca:ea: 96:44:ae:f7:85:cc:23:c7:e6:47:c3:dc:af:e8:01: 65:52:15:23:b6:ab:2d:16:bf:32:5f:e6:8b:5f:fa: 42:ca:b4:36:b6:be:df:17:75:2d:0a:87:5f:eb:cb: 44:d3:ed:6c:61:3e:70:7e:8a:10:39:c4:31:52:36: 82:3f:8e:16:10:fe:4b:c9:ff:96:08:53:c1:d5:71: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.131.192.0/18 177.155.0.0/18 201.46.128.0-201.46.239.255 IPv6: 2804:ba4::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28615 Signature Algorithm: sha256WithRSAEncryption 2d:e7:a1:45:0c:d8:bd:f7:52:18:65:40:a9:d0:26:81:7b:3d: b7:21:b6:58:6b:05:7b:06:c5:cc:93:42:01:4b:12:3d:3c:ea: 69:9a:c8:39:10:62:50:70:1b:8a:fe:cd:99:43:b6:5c:ac:c4: e4:6e:3c:12:0e:dd:e8:9c:8b:be:70:34:3e:61:b6:22:aa:7a: e0:b8:78:b9:46:5a:e8:7d:6c:c8:d0:05:67:f0:00:b6:34:77: ff:db:2f:4c:00:4f:0b:5b:5e:eb:f9:ea:f8:43:78:a6:d0:eb: d9:35:1c:89:1f:a6:bd:82:a7:d5:b4:e0:1c:07:09:1e:68:f7: 7e:3d:42:21:fd:c8:0a:39:93:ad:62:75:eb:2c:12:e2:7f:79: f2:db:6f:25:1f:b6:bd:00:de:a0:e0:59:2f:e4:97:e6:9a:40: 57:69:59:cb:51:af:f4:86:4c:b4:f1:ef:dd:78:e0:74:82:d6: 4f:eb:88:f5:4d:d7:d1:63:c2:da:91:0a:57:db:a6:c1:c3:21: 6f:f2:80:ed:7e:f6:42:e8:8b:48:25:77:33:4c:56:8a:3a:8c: 0f:b0:e7:a2:3b:0e:60:dc:7c:f0:8b:04:54:ef:88:d5:4f:d2: 7b:bf:e9:4f:6e:28:1b:50:e4:45:2d:1e:ce:f9:d1:aa:82:b0: a4:ba:c1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUK2V6T8Qb7Qc6GTca8Xjky1RwqkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzAwMjQzNDRaFw0yNjEwMjkwMjQ4NDRaMDMxMTAvBgNV BAMTKEM5REZFRDAwOTczQTZGM0IyQTRDRjg2NzQ3MThERTYyN0E3MDdBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawxQQjIlSvwl5iLYVNpkm1q/K vSjMuol6L4FZ6Z/m2xKqHkiB1hEYyIbOTnYMMhUtQZvYwZYK+tirF6OvD3hiBEts GQkfpsrmuuG05FQf42Rmk7WGA5r/KOE5Bnihqxx7/GXEf7f5YBzs3rkJ1oNi/9GR 07QwQTc8P4wZKDnNnSFwKOWKZ7tsYHHve6mq2qoLa3RLuwP7C9beGYZkpQinQ7gC p9dpJ8JZuewvswUoogDK6pZErveFzCPH5kfD3K/oAWVSFSO2qy0WvzJf5otf+kLK tDa2vt8XdS0Kh1/ry0TT7WxhPnB+ihA5xDFSNoI/jhYQ/kvJ/5YIU8HVca5ZAgMB AAGjggNNMIIDSTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJ3+0AlzpvOypM +GdHGN5ienB6BDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1FY a3VTZ054QjdKQUxFank0S1ZDc0xSRjl2Sk5UNG5xQk1xdGNZTjJqSjIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdR WGt1U2dOeEI3SkFMRWp5NEtWQ3NMUkY5dkpOVDRucUJNcXRjWU4yakoyLzAvQzlE RkVEMDA5NzNBNkYzQjJBNENGODY3NDcxOERFNjI3QTcwN0EwNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEH AQH/BDMwMTAgBAIAATAaAwQGsYPAAwQGsZsAMAwDBAfJLoADBATJLuAwDQQCAAIw BwMFASgEC6QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb8cwDQYJKoZIhvcNAQEL BQADggEBAC3noUUM2L33UhhlQKnQJoF7PbchtlhrBXsGxcyTQgFLEj086mmayDkQ YlBwG4r+zZlDtlysxORuPBIO3eici75wND5htiKqeuC4eLlGWuh9bMjQBWfwALY0 d//bL0wATwtbXuv56vhDeKbQ69k1HIkfpr2Cp9W04BwHCR5o9349QiH9yAo5k61i dessEuJ/efLbbyUftr0A3qDgWS/kl+aaQFdpWctRr/SGTLTx79144HSC1k/riPVN 19FjwtqRClfbpsHDIW/ygO1+9kLoi0gldzNMVoo6jA+w56I7DmDcfPCLBFTviNVP 0nu/6U9uKBtQ5EUtHs750aqCsKS6wf4= -----END CERTIFICATE-----Generated at Mon Nov 3 05:24:18 2025 by rpki-client