$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer File: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer (raw, json) Hash identifier: 8NpJqqirdKw3Ij+WG4EDfIJbEGZBVY4c2hYbzO81WzM= Subject key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0D7FFC72D3E36BB98247724B16D8270C580E7D50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft caRepository: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Oct 2025 18:02:13 +0000 Certificate not after: Wed 30 Sep 2026 18:07:13 +0000 Subordinate resources: AS: 271607 IP: 190.9.104.0/22 IP: 2804:7e2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:fc:72:d3:e3:6b:b9:82:47:72:4b:16:d8:27:0c:58:0e:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 1 18:02:13 2025 GMT Not After : Sep 30 18:07:13 2026 GMT Subject: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:01:25:0f:cf:15:60:93:45:91:9a:4f:87: 61:f3:62:9d:b3:00:12:34:d7:55:da:07:2b:70:40: 02:af:6a:88:44:57:a8:a5:ba:0d:01:0f:ba:f2:e9: 47:31:d7:43:aa:18:e7:8d:80:d1:26:13:4a:24:e3: 72:cd:6b:77:80:27:46:29:80:a4:b8:fa:d3:0b:80: 12:a2:1e:c7:93:b8:6d:d5:e1:a0:99:99:f2:49:ad: 05:a5:04:57:39:94:a7:04:b8:fb:67:ca:8f:02:58: f4:a9:57:ae:e6:20:54:0f:35:7b:19:f1:21:8b:17: f6:d4:8e:68:f3:65:39:1f:92:6f:13:34:7a:01:d6: d9:7e:55:a6:19:cf:d6:2b:35:8a:1a:e9:b8:5d:18: 15:dd:d7:1d:b7:68:a3:db:5d:67:04:1c:3a:82:9d: 94:41:3e:3f:d4:c8:a5:02:41:51:23:ae:de:9a:cf: 62:d8:02:55:cc:67:93:3e:c7:56:53:29:c6:50:b4: b2:6c:22:d8:51:8c:3b:16:2c:e6:56:06:13:eb:ac: c1:6d:05:b7:5e:c7:85:93:e5:05:81:d6:45:11:c3: 4a:85:3b:52:c3:26:6f:31:83:86:9c:a9:ea:75:ee: 79:f1:ec:56:bc:ed:1a:94:f9:4a:fd:80:10:9f:b8: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.104.0/22 IPv6: 2804:7e2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271607 Signature Algorithm: sha256WithRSAEncryption 82:5a:e8:c4:b2:78:c5:63:b8:e5:c0:46:4b:4d:ab:18:a4:2d: 82:d7:51:0d:ba:f6:dd:8c:5e:3a:d4:6e:6b:17:54:e2:7a:fe: da:b4:2a:5f:a1:2d:43:db:7c:51:e4:dd:0f:4d:10:3c:5e:44: 18:4c:b4:ef:b0:84:5f:83:c6:ff:14:aa:e7:85:73:35:b6:3c: 67:68:4b:40:87:eb:07:3f:8a:df:cc:df:1d:55:b7:0f:20:24: 53:7d:ba:1a:c8:d9:e7:59:30:6f:3a:83:9d:d0:ce:33:a2:b7: 06:a3:53:2c:ec:c9:53:0c:59:ab:7f:9a:b1:b8:88:93:a9:52: c3:4a:b7:3f:9a:03:d3:28:df:2b:61:ec:56:6c:d5:7c:be:43: 71:1a:fb:56:f3:aa:81:3a:f2:50:7e:90:f5:8a:bb:ed:1e:03: 68:08:a4:4f:67:e6:90:0f:76:1b:70:81:4f:03:f0:7d:da:f7: 92:be:48:bb:69:b4:cb:43:57:d2:a5:f8:1b:6d:64:52:4f:8d: 64:94:75:1a:66:45:5f:dd:86:bb:1d:13:83:9f:9c:d0:cb:19: 13:fd:dc:e6:f2:5c:31:1b:c1:33:24:9c:a7:1d:5e:7f:e6:de: d2:8b:2e:f5:7e:09:76:86:bb:04:46:c1:50:72:08:01:90:99: b5:83:b8:8f -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUDX/8ctPja7mCR3JLFtgnDFgOfVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDExODAyMTNaFw0yNjA5MzAxODA3MTNaMDMxMTAvBgNV BAMTKDIzN0NCN0YxQ0Q0NUFFREQ2MUM5MzQ5RjQxMUI5QzlDQUYwQzFERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxQElD88VYJNFkZpPh2HzYp2z ABI011XaBytwQAKvaohEV6ilug0BD7ry6Ucx10OqGOeNgNEmE0ok43LNa3eAJ0Yp gKS4+tMLgBKiHseTuG3V4aCZmfJJrQWlBFc5lKcEuPtnyo8CWPSpV67mIFQPNXsZ 8SGLF/bUjmjzZTkfkm8TNHoB1tl+VaYZz9YrNYoa6bhdGBXd1x23aKPbXWcEHDqC nZRBPj/UyKUCQVEjrt6az2LYAlXMZ5M+x1ZTKcZQtLJsIthRjDsWLOZWBhPrrMFt Bbdex4WT5QWB1kURw0qFO1LDJm8xg4acqep17nnx7Fa87RqU+Ur9gBCfuNuRAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjfLfxzUWu3WHJ NJ9BG5ycrwwd6TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ky YXNQOTJlcUxjd3JkTEVCbnRiZUZlcGNtSlZUeDdqVXNaSmRjY1pTRy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ky YXNQOTJlcUxjd3JkTEVCbnRiZUZlcGNtSlZUeDdqVXNaSmRjY1pTRy8wLzIzN0NC N0YxQ0Q0NUFFREQ2MUM5MzQ5RjQxMUI5QzlDQUYwQzFERTkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAr4JaDANBAIAAjAHAwUAKAR+LDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEJPcwDQYJKoZIhvcNAQELBQADggEBAIJa6MSyeMVjuOXARktN qxikLYLXUQ269t2MXjrUbmsXVOJ6/tq0Kl+hLUPbfFHk3Q9NEDxeRBhMtO+whF+D xv8UqueFczW2PGdoS0CH6wc/it/M3x1Vtw8gJFN9uhrI2edZMG86g53QzjOitwaj UyzsyVMMWat/mrG4iJOpUsNKtz+aA9Mo3yth7FZs1Xy+Q3Ea+1bzqoE68lB+kPWK u+0eA2gIpE9n5pAPdhtwgU8D8H3a95K+SLtptMtDV9Kl+BttZFJPjWSUdRpmRV/d hrsdE4OfnNDLGRP93ObyXDEbwTMknKcdXn/m3tKLLvV+CXaGuwRGwVByCAGQmbWD uI8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:09:03 2025 by rpki-client