$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer File: 909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer (raw, json) Hash identifier: jV65V+OPrNSv9tLJ49YuYyFFrw4f6A+acHgEjBfLkmA= Subject key identifier: 90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DA1795A32864171890B4AB430753B3C3E4163D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft caRepository: rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Jul 2026 17:33:21 +0000 Certificate not after: Wed 30 Jun 2027 17:38:21 +0000 Subordinate resources: AS: 274496 IP: 2804:9510::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 21:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a1:79:5a:32:86:41:71:89:0b:4a:b4:30:75:3b:3c:3e:41:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 17:33:21 2026 GMT Not After : Jun 30 17:38:21 2027 GMT Subject: CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:d1:67:f1:79:98:4b:01:b5:c2:8d:36:54: 63:97:e6:7c:6a:93:53:cc:0e:3f:c7:b3:09:60:ac: d7:64:13:c0:15:94:2a:51:91:8e:75:71:cb:3f:70: 6d:e2:f6:47:ab:f6:11:b9:c2:a5:3b:8b:07:f1:a6: 18:ea:40:4a:17:a7:ba:6e:9e:bc:5b:ab:72:7b:a3: be:db:01:a4:e7:5c:cb:b7:f5:a1:53:53:27:c5:9c: 76:34:bd:99:5c:ca:d4:7c:0e:55:9a:b2:47:16:bb: 94:b1:6d:ac:e8:35:8f:ff:8d:a9:64:d3:84:54:08: ba:69:46:a0:0f:35:28:31:df:75:29:e7:37:bb:8b: 29:47:0f:fb:71:51:8b:b6:74:28:d8:1a:5a:b3:52: b3:af:4b:44:62:26:ad:4c:b8:9d:eb:fd:44:98:4b: c9:db:40:c6:5a:9b:0b:37:96:12:17:77:f4:17:a5: 6d:63:60:79:04:e4:7f:8d:56:0b:8e:c1:bf:b0:fd: 30:eb:df:ce:1e:55:4a:74:ff:01:f6:89:23:df:bb: 4e:fd:a4:9f:e1:83:c6:83:7e:9e:c6:24:1c:be:fc: b5:bc:42:a0:40:6a:87:2f:9c:7a:55:5c:5c:46:c0: c5:bf:5e:cf:7a:c6:5c:c9:2e:e3:90:8c:47:00:07: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274496 Signature Algorithm: sha256WithRSAEncryption 0f:59:37:a9:64:10:39:01:35:42:b0:e2:83:90:c5:a0:ba:87: 69:6d:c2:eb:f6:14:91:cf:e0:1c:d7:fe:d4:b1:e5:e8:1f:ff: 2a:d9:75:2a:ef:3a:5e:84:37:4e:30:95:a4:3a:71:82:05:f9: 8c:b6:d1:f1:a6:97:9e:3b:fb:3d:f9:d2:25:a5:8e:e6:b8:a8: 65:aa:1e:79:17:8c:1f:db:60:d9:8a:c6:98:4c:9f:47:fe:bf: f5:0f:dd:68:99:98:9b:c5:a4:07:5c:a3:28:7e:22:f7:f8:28: f0:fa:03:12:1e:4a:67:87:e3:86:17:d0:f0:17:20:4c:9e:83: 0b:53:92:ba:f3:fe:6a:0d:af:94:4a:fc:1f:a2:22:af:58:0c: 27:30:a6:2d:15:74:c6:6e:56:12:a8:a3:bd:80:19:36:55:54: 9f:6a:b0:98:95:e8:92:96:5a:a1:4f:a4:3e:0b:15:e2:38:e4: bb:63:81:4f:f9:30:62:61:3d:46:a1:2f:08:fe:1a:3c:7a:a4: f1:1d:d8:1f:f9:70:37:a2:b2:d3:cd:b1:e1:08:51:f4:d2:3b: 72:ce:f3:62:db:59:7c:bf:14:dc:3f:c6:b1:57:42:1e:f2:91: 40:69:61:88:41:b9:2e:85:a7:e9:2a:9d:87:a9:4e:7b:14:1d: 9a:bb:f2:bd -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUXaF5WjKGQXGJC0q0MHU7PD5BY9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDExNzMzMjFaFw0yNzA2MzAxNzM4MjFaMDMxMTAvBgNV BAMTKDkwOUMzQkM3NzMwRTc0NDJBRDFDRUNBOTYxRDg2MTNBNDI1RUJBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByNFn8XmYSwG1wo02VGOX5nxq k1PMDj/HswlgrNdkE8AVlCpRkY51ccs/cG3i9ker9hG5wqU7iwfxphjqQEoXp7pu nrxbq3J7o77bAaTnXMu39aFTUyfFnHY0vZlcytR8DlWaskcWu5SxbazoNY//jalk 04RUCLppRqAPNSgx33Up5ze7iylHD/txUYu2dCjYGlqzUrOvS0RiJq1MuJ3r/USY S8nbQMZamws3lhIXd/QXpW1jYHkE5H+NVguOwb+w/TDr384eVUp0/wH2iSPfu079 pJ/hg8aDfp7GJBy+/LW8QqBAaocvnHpVXFxGwMW/Xs96xlzJLuOQjEcAB/FBAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQnDvHcw50Qq0c 7Klh2GE6Ql66HzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVVL bW8yS0E1RTdGTVoxakdmWEhvQVJIUzhLMUZuUkJpUVE0ajlQSnR1enkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VV S21vMktBNUU3Rk1aMWpHZlhIb0FSSFM4SzFGblJCaVFRNGo5UEp0dXp5LzAvOTA5 QzNCQzc3MzBFNzQ0MkFEMUNFQ0E5NjFEODYxM0E0MjVFQkExRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASVEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MEAwDQYJKoZIhvcNAQELBQADggEBAA9ZN6lkEDkBNUKw4oOQxaC6h2ltwuv2FJHP 4BzX/tSx5egf/yrZdSrvOl6EN04wlaQ6cYIF+Yy20fGml547+z350iWljua4qGWq HnkXjB/bYNmKxphMn0f+v/UP3WiZmJvFpAdcoyh+Ivf4KPD6AxIeSmeH44YX0PAX IEyegwtTkrrz/moNr5RK/B+iIq9YDCcwpi0VdMZuVhKoo72AGTZVVJ9qsJiV6JKW WqFPpD4LFeI45LtjgU/5MGJhPUahLwj+Gjx6pPEd2B/5cDeistPNseEIUfTSO3LO 82LbWXy/FNw/xrFXQh7ykUBpYYhBuS6Fp+kqnYepTnsUHZq78r0= -----END CERTIFICATE-----Generated at Thu Jul 23 20:32:33 2026 by rpki-client