$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer File: C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer (raw, json) Hash identifier: SagCanlfphyCL4PiM03KGI63W7hchKHu7gomGz0q2IE= Subject key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F454EE38F94F7AB01306ACFE88BB54735F95CB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft caRepository: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Jun 2026 22:21:26 +0000 Certificate not after: Mon 21 Jun 2027 22:26:26 +0000 Subordinate resources: AS: 272581 IP: 191.160.40.0/23 IP: 2804:8578::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:45:4e:e3:8f:94:f7:ab:01:30:6a:cf:e8:8b:b5:47:35:f9:5c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 22 22:21:26 2026 GMT Not After : Jun 21 22:26:26 2027 GMT Subject: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:b1:09:82:42:11:d8:83:25:8a:fa:78:00: a5:55:3f:d7:7c:00:50:23:85:7a:bc:3f:43:49:de: 46:50:ee:28:04:ec:64:83:90:8a:62:c4:c0:03:e5: 80:f1:22:8e:63:74:ef:6a:c7:10:27:f7:77:39:26: d1:4f:4d:2d:60:fc:b4:72:0c:6f:34:41:a4:47:95: d0:40:d8:83:0b:79:05:75:8d:13:4f:01:ad:f7:cd: e9:af:4a:b7:16:aa:12:08:45:ac:1f:ba:19:c5:50: fa:3d:87:6b:f4:34:d1:91:f0:aa:f3:32:48:9e:b2: fc:31:f4:c0:54:81:51:24:c1:2f:12:11:86:f9:c2: 42:9c:50:ca:68:56:e9:d5:e4:36:4d:1e:f8:30:49: 29:7a:4f:a3:9d:54:b5:f9:4c:56:92:84:12:5b:3c: 6e:0f:6e:75:6e:e7:6c:e9:05:24:f2:fd:35:62:b7: f4:a4:be:60:3d:99:43:f0:1a:5f:f5:0f:86:ae:cc: 39:05:31:25:d6:46:0a:8c:dc:14:36:78:81:5a:f1: af:d6:e1:64:f9:a2:e1:83:ba:76:e2:9c:35:a0:bf: 52:ba:21:47:1f:18:30:89:d4:fa:6d:f1:34:40:d2: 1c:e4:b2:cb:f9:c6:70:b6:bd:06:36:c9:6e:1b:e0: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.160.40.0/23 IPv6: 2804:8578::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272581 Signature Algorithm: sha256WithRSAEncryption 6e:f5:8e:50:22:e4:a9:4a:06:45:6d:66:54:71:92:ef:87:17: 38:07:bc:90:20:54:00:df:7c:6b:ea:33:cc:4e:d2:da:ec:77: fb:21:e8:be:25:84:f0:2f:6b:8f:4f:9c:6a:f7:ba:f7:1f:57: b7:e4:f9:cd:2c:f2:33:93:c5:85:77:65:97:d7:32:6f:6c:c3: a7:d3:7b:5d:40:f0:ca:cd:f2:68:21:5e:65:1b:a7:80:6d:3a: f6:64:f4:bc:8b:b8:18:ea:91:4e:4d:31:ff:a9:ae:e8:00:82: d2:22:a5:15:52:d2:45:68:86:47:3f:85:83:a3:df:cf:f3:98: 9e:12:e4:8d:1c:aa:20:31:8e:85:67:e0:49:ee:49:23:5e:05: 29:d3:b8:1f:bc:e2:8e:d6:ff:d6:36:53:d4:e8:cb:03:90:5e: 5d:cf:f3:5b:a9:87:68:b8:a8:7c:72:32:44:d6:99:65:9f:6c: 92:a2:35:e3:e7:c1:9d:38:75:06:ed:2d:b6:54:fe:44:4c:73: d7:cd:d0:6b:88:12:07:45:fc:3a:08:86:88:e5:6d:37:49:a3: ab:44:77:62:08:a4:44:64:72:a5:ad:df:a7:44:4a:5e:32:3a: 39:06:c4:3d:36:13:56:0f:f4:d2:75:26:4c:8a:0f:87:36:c5: 20:37:7b:ef -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUD0VO44+U96sBMGrP6Iu1RzX5XLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjIyMjIxMjZaFw0yNzA2MjEyMjI2MjZaMDMxMTAvBgNV BAMTKEM5RkIzQkY3NDBBNzJFNEY4RkYzMEY3NUY3NUQ1ODlENUZGRTc0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0bEJgkIR2IMlivp4AKVVP9d8 AFAjhXq8P0NJ3kZQ7igE7GSDkIpixMAD5YDxIo5jdO9qxxAn93c5JtFPTS1g/LRy DG80QaRHldBA2IMLeQV1jRNPAa33zemvSrcWqhIIRawfuhnFUPo9h2v0NNGR8Krz Mkiesvwx9MBUgVEkwS8SEYb5wkKcUMpoVunV5DZNHvgwSSl6T6OdVLX5TFaShBJb PG4PbnVu52zpBSTy/TVit/SkvmA9mUPwGl/1D4auzDkFMSXWRgqM3BQ2eIFa8a/W 4WT5ouGDunbinDWgv1K6IUcfGDCJ1Ppt8TRA0hzkssv5xnC2vQY2yW4b4B+bAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJ+zv3QKcuT4/z D3X3XVidX/50oTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtj WHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZBOXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL Y1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAvQzlG QjNCRjc0MEE3MkU0RjhGRjMwRjc1Rjc1RDU4OUQ1RkZFNzRBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBv6AoMA0EAgACMAcDBQAoBIV4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQoxTANBgkqhkiG9w0BAQsFAAOCAQEAbvWOUCLkqUoGRW1m VHGS74cXOAe8kCBUAN98a+ozzE7S2ux3+yHoviWE8C9rj0+cave69x9Xt+T5zSzy M5PFhXdll9cyb2zDp9N7XUDwys3yaCFeZRungG069mT0vIu4GOqRTk0x/6mu6ACC 0iKlFVLSRWiGRz+Fg6Pfz/OYnhLkjRyqIDGOhWfgSe5JI14FKdO4H7zijtb/1jZT 1OjLA5BeXc/zW6mHaLiofHIyRNaZZZ9skqI14+fBnTh1Bu0ttlT+RExz183Qa4gS B0X8OgiGiOVtN0mjq0R3YgikRGRypa3fp0RKXjI6OQbEPTYTVg/00nUmTIoPhzbF IDd77w== -----END CERTIFICATE-----Generated at Sat Jun 27 11:07:38 2026 by rpki-client