$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer File: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer (raw, json) Hash identifier: gaXuyPasXGtSk5zvSzxN0GIAoy5M+iBUPGt+hTZ/GnE= Subject key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6D0C7A33596E1CC5B6D9A1882D98AED04659C5E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft caRepository: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:56:11 +0000 Certificate not after: Fri 06 Mar 2026 03:01:11 +0000 Subordinate resources: AS: 61659 IP: 131.108.28.0/22 IP: 2804:1c84::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0c:7a:33:59:6e:1c:c5:b6:d9:a1:88:2d:98:ae:d0:46:59:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:56:11 2025 GMT Not After : Mar 6 03:01:11 2026 GMT Subject: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:21:44:e5:f0:c6:01:1a:8f:3b:13:9d:50: cf:c9:96:92:04:a9:c5:ae:a2:a7:88:b2:7e:28:80: ca:52:a5:48:19:94:be:f1:eb:b9:4d:8b:fa:bb:f3: 78:5f:37:3a:99:f5:42:4b:70:d2:dc:2c:9b:a4:f9: e4:1b:cc:da:b1:9e:72:a2:a0:2b:1d:05:7d:39:a6: 40:98:91:28:f9:68:28:f6:9d:e0:a8:3a:64:63:72: fd:29:78:eb:20:c6:5c:ca:7a:1e:a2:0c:1d:88:08: 78:aa:48:65:75:e3:90:82:8e:90:9d:48:d3:3d:fc: e9:9f:cf:71:6b:68:9d:ff:7e:6e:66:5b:f3:bc:2f: 6a:99:84:a4:9f:75:f2:cb:aa:62:ef:c9:0e:ad:f2: 6e:02:c2:e3:00:3b:6b:96:89:ef:0c:18:88:fa:b8: 73:33:f3:88:e2:52:65:2f:aa:7f:91:95:20:f6:86: 07:27:ae:7a:2a:b6:a1:3e:3b:b0:db:a1:b5:88:6c: 8d:f5:9b:b6:d0:5c:c2:c0:f3:ee:98:02:a1:c8:47: 08:ad:4c:06:f7:b4:65:8a:e8:da:92:95:43:67:5b: e7:2d:4b:c3:81:ad:98:69:c9:ad:be:12:29:21:d2: 89:05:06:b8:dc:30:15:1c:7d:24:96:88:d1:87:3a: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.28.0/22 IPv6: 2804:1c84::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61659 Signature Algorithm: sha256WithRSAEncryption 42:82:05:6d:4b:21:92:a2:49:43:1d:16:63:4c:1b:d5:bb:ec: e4:52:f6:c5:2c:73:84:9c:a7:9a:50:e0:ad:93:eb:0d:fb:60: 0a:ec:cd:c7:5d:18:45:3c:e4:22:bc:ce:62:6c:00:cc:da:97: a3:4a:e4:de:cf:d2:77:6c:3e:d7:c3:6d:71:6b:ec:e5:a0:64: 6c:64:62:ef:8d:dd:50:0d:84:0a:6b:c7:b5:6c:74:d4:97:d4: 5c:76:42:67:5b:0d:ce:37:de:df:3b:87:b5:82:60:78:c4:9f: 02:c2:ee:08:f0:0d:72:a0:85:ef:2e:e3:e9:01:9c:da:d1:d4: 17:bb:5e:c2:c0:18:aa:e5:a4:cf:f7:6f:f3:63:47:c3:fa:64: 6c:dd:fc:53:87:36:67:eb:d3:19:81:75:c1:f9:b4:0d:08:7c: f9:ef:90:83:ba:fa:bf:da:8b:13:d8:3a:7c:cc:3a:45:1d:ca: fd:08:11:75:39:9d:b5:29:ee:43:c1:eb:57:25:ac:d8:6e:db: bb:9f:f3:5b:db:2e:6b:79:80:59:aa:37:09:9c:38:f6:53:b2: e6:33:b2:f6:b2:02:05:8d:5e:3d:64:67:62:a2:58:ed:28:d2: 39:1c:45:93:31:53:96:7c:57:0f:90:1a:89:f8:ad:8a:40:33: aa:44:36:d8 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUbQx6M1luHMW22aGILZiu0EZZxeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTFaFw0yNjAzMDYwMzAxMTFaMDMxMTAvBgNV BAMTKEQ5Qzk0RTBCN0M5MDUwMzBGNERCMDFDMzNCRjhDMTY4MkIyRTA0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWiFE5fDGARqPOxOdUM/JlpIE qcWuoqeIsn4ogMpSpUgZlL7x67lNi/q783hfNzqZ9UJLcNLcLJuk+eQbzNqxnnKi oCsdBX05pkCYkSj5aCj2neCoOmRjcv0peOsgxlzKeh6iDB2ICHiqSGV145CCjpCd SNM9/Omfz3FraJ3/fm5mW/O8L2qZhKSfdfLLqmLvyQ6t8m4CwuMAO2uWie8MGIj6 uHMz84jiUmUvqn+RlSD2hgcnrnoqtqE+O7DbobWIbI31m7bQXMLA8+6YAqHIRwit TAb3tGWK6NqSlUNnW+ctS8OBrZhpya2+Eikh0okFBrjcMBUcfSSWiNGHOmfXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZyU4LfJBQMPTb AcM7+MFoKy4ELzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVA4 WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhkZVkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVA4 WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhkZVkvMS9EOUM5 NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKDbBwwDQQCAAIwBwMFACgEHIQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPDbMA0GCSqGSIb3DQEBCwUAA4IBAQBCggVtSyGSoklDHRZj TBvVu+zkUvbFLHOEnKeaUOCtk+sN+2AK7M3HXRhFPOQivM5ibADM2pejSuTez9J3 bD7Xw21xa+zloGRsZGLvjd1QDYQKa8e1bHTUl9RcdkJnWw3ON97fO4e1gmB4xJ8C wu4I8A1yoIXvLuPpAZza0dQXu17CwBiq5aTP92/zY0fD+mRs3fxThzZn69MZgXXB +bQNCHz575CDuvq/2osT2Dp8zDpFHcr9CBF1OZ21Ke5DwetXJazYbtu7n/Nb2y5r eYBZqjcJnDj2U7LmM7L2sgIFjV49ZGdioljtKNI5HEWTMVOWfFcPkBqJ+K2KQDOq RDbY -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:59 2025 by rpki-client