$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer File: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer (raw, json) Hash identifier: pVL2d7qEfL5omnkbrigfnjcvu8FfFVcsqV2K9KRwQg0= Subject key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58AD8F8082AE44091FE02B87FE6596CA151864C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft caRepository: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 06:51:26 +0000 Certificate not after: Thu 17 Sep 2026 06:56:26 +0000 Subordinate resources: AS: 268355 IP: 45.239.72.0/22 IP: 2804:4fe0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ad:8f:80:82:ae:44:09:1f:e0:2b:87:fe:65:96:ca:15:18:64:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 06:51:26 2025 GMT Not After : Sep 17 06:56:26 2026 GMT Subject: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:cd:9f:85:18:0b:6c:23:62:e8:4d:e9:13: 3d:c9:bc:51:73:98:c7:22:a0:2a:72:f6:27:a5:c8: bb:7d:3f:0b:9d:05:89:39:65:cf:8b:00:34:5c:04: 5d:a6:75:9f:73:57:b6:a2:4d:10:a1:9a:d8:3c:d8: 08:9d:19:b5:7c:22:4a:4d:0d:f8:88:3b:1f:1c:b5: a2:2a:06:31:84:40:11:b3:fd:c8:94:1b:f1:ce:dc: 82:a4:8c:c7:33:a7:eb:17:cb:0e:5d:e1:06:6b:5e: 48:ba:ce:74:05:82:a9:ce:23:ca:b8:38:c0:5a:dd: 15:17:f8:9f:7a:be:e5:c9:ed:53:e2:7e:16:65:43: 0f:f9:f7:25:75:c1:1a:3b:17:40:50:26:6d:1e:1e: f3:2b:3c:0d:32:c6:27:12:6f:1f:4e:f2:d0:40:97: 01:07:34:36:d4:03:e7:1d:5c:30:8d:f8:c0:d2:d1: 70:07:c4:6c:a5:39:5c:f9:95:7d:b0:01:47:3d:64: 02:4a:22:55:0f:8a:db:d5:4d:b6:87:51:43:77:dd: 1d:49:3e:f2:c9:e7:0b:42:00:10:70:93:97:fb:ef: ca:4a:41:36:7a:9b:05:03:c3:80:9b:44:47:d2:df: db:5b:fe:e5:a8:0c:25:aa:c8:81:ae:70:10:c8:51: b7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.72.0/22 IPv6: 2804:4fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268355 Signature Algorithm: sha256WithRSAEncryption d3:5c:41:90:7e:f0:b6:ab:84:be:06:cf:16:81:d0:bc:4f:fb: fd:36:ee:b2:49:60:89:9f:62:51:b3:0b:b8:31:1f:7f:0b:f2: b2:69:61:c3:cc:43:0d:5f:f7:1d:3d:59:d2:94:66:d2:20:4c: c0:72:3e:6b:b6:11:97:7b:d5:27:e8:ae:2b:24:41:29:f9:99: 98:98:dd:4e:bf:38:7b:d8:a5:c7:71:ef:10:88:28:1a:3b:ed: 7f:ca:92:23:3a:bc:07:58:69:01:63:b8:ae:f0:df:c2:b7:d7: 2b:57:c3:cc:4d:da:46:4b:28:21:73:98:2a:be:bd:c3:1f:92: e7:f5:2d:e5:c4:58:a1:b7:4b:b0:d3:88:d0:2f:91:51:c6:81: c6:dd:0d:b1:b9:9d:5c:69:b0:e0:49:67:a7:42:1a:c9:6b:45: c6:3a:bd:8d:e3:ab:12:a6:c9:e5:9e:71:81:c3:1d:63:e7:31: 54:c5:59:35:90:f8:1f:00:ec:d3:32:28:63:70:db:be:f9:6f: de:e3:fd:08:7b:b6:57:14:4c:f8:fc:16:c0:c3:1b:81:9d:f5: 97:ee:6d:02:c3:e8:aa:19:90:93:04:0d:04:38:d1:f2:57:c0: 30:22:37:ef:53:01:98:9e:d6:63:0c:3a:20:6f:11:4a:22:3a: 57:e8:23:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWK2PgIKuRAkf4CuH/mWWyhUYZMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgwNjUxMjZaFw0yNjA5MTcwNjU2MjZaMDMxMTAvBgNV BAMTKDI4RjlGOUZCREY0ODlFODZBMkNCOTI5QTQ3RThCQzBBQkMyQTFCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mc2fhRgLbCNi6E3pEz3JvFFz mMcioCpy9ielyLt9PwudBYk5Zc+LADRcBF2mdZ9zV7aiTRChmtg82AidGbV8IkpN DfiIOx8ctaIqBjGEQBGz/ciUG/HO3IKkjMczp+sXyw5d4QZrXki6znQFgqnOI8q4 OMBa3RUX+J96vuXJ7VPifhZlQw/59yV1wRo7F0BQJm0eHvMrPA0yxicSbx9O8tBA lwEHNDbUA+cdXDCN+MDS0XAHxGylOVz5lX2wAUc9ZAJKIlUPitvVTbaHUUN33R1J PvLJ5wtCABBwk5f778pKQTZ6mwUDw4CbREfS39tb/uWoDCWqyIGucBDIUbdhAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo+fn730iehqLL kppH6LwKvCobHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJO VHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0aTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hy TlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzAvMjhG OUY5RkJERjQ4OUU4NkEyQ0I5MjlBNDdFOEJDMEFCQzJBMUIxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe9IMA0EAgACMAcDBQAoBE/gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYQzANBgkqhkiG9w0BAQsFAAOCAQEA01xBkH7wtquEvgbP FoHQvE/7/TbusklgiZ9iUbMLuDEffwvysmlhw8xDDV/3HT1Z0pRm0iBMwHI+a7YR l3vVJ+iuKyRBKfmZmJjdTr84e9ilx3HvEIgoGjvtf8qSIzq8B1hpAWO4rvDfwrfX K1fDzE3aRksoIXOYKr69wx+S5/Ut5cRYobdLsNOI0C+RUcaBxt0NsbmdXGmw4Eln p0IayWtFxjq9jeOrEqbJ5Z5xgcMdY+cxVMVZNZD4HwDs0zIoY3Dbvvlv3uP9CHu2 VxRM+PwWwMMbgZ31l+5tAsPoqhmQkwQNBDjR8lfAMCI371MBmJ7WYww6IG8RSiI6 V+gjAA== -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:32 2025 by rpki-client