$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer File: C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer (raw, json) Hash identifier: SQVdomBSB3RdmVYd03z4JzWZYp5tw2a2kA1api5hi8s= Subject key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 20FE2C43BF419C1788CF46A62229285D8BCA2EB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft caRepository: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 16:10:36 +0000 Certificate not after: Tue 06 Oct 2026 16:15:36 +0000 Subordinate resources: AS: 272581 IP: 2804:8578::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fe:2c:43:bf:41:9c:17:88:cf:46:a6:22:29:28:5d:8b:ca:2e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 16:10:36 2025 GMT Not After : Oct 6 16:15:36 2026 GMT Subject: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:b1:09:82:42:11:d8:83:25:8a:fa:78:00: a5:55:3f:d7:7c:00:50:23:85:7a:bc:3f:43:49:de: 46:50:ee:28:04:ec:64:83:90:8a:62:c4:c0:03:e5: 80:f1:22:8e:63:74:ef:6a:c7:10:27:f7:77:39:26: d1:4f:4d:2d:60:fc:b4:72:0c:6f:34:41:a4:47:95: d0:40:d8:83:0b:79:05:75:8d:13:4f:01:ad:f7:cd: e9:af:4a:b7:16:aa:12:08:45:ac:1f:ba:19:c5:50: fa:3d:87:6b:f4:34:d1:91:f0:aa:f3:32:48:9e:b2: fc:31:f4:c0:54:81:51:24:c1:2f:12:11:86:f9:c2: 42:9c:50:ca:68:56:e9:d5:e4:36:4d:1e:f8:30:49: 29:7a:4f:a3:9d:54:b5:f9:4c:56:92:84:12:5b:3c: 6e:0f:6e:75:6e:e7:6c:e9:05:24:f2:fd:35:62:b7: f4:a4:be:60:3d:99:43:f0:1a:5f:f5:0f:86:ae:cc: 39:05:31:25:d6:46:0a:8c:dc:14:36:78:81:5a:f1: af:d6:e1:64:f9:a2:e1:83:ba:76:e2:9c:35:a0:bf: 52:ba:21:47:1f:18:30:89:d4:fa:6d:f1:34:40:d2: 1c:e4:b2:cb:f9:c6:70:b6:bd:06:36:c9:6e:1b:e0: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8578::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272581 Signature Algorithm: sha256WithRSAEncryption b2:53:85:0e:96:35:2c:5d:f1:42:17:8e:1d:0e:ef:0a:fd:10: e6:a4:f7:9c:7b:f0:4d:d3:e9:09:4a:6f:bd:d6:f9:2f:8c:0e: 0a:d4:c3:bb:43:2d:f9:09:c6:22:55:79:58:5d:e8:ed:6f:78: 43:20:bc:27:62:22:cb:b5:d2:28:6a:a4:7b:c6:14:5e:6e:8f: 76:7d:8c:2a:45:40:f5:4f:ea:f9:54:e4:eb:a2:11:6b:6e:73: 31:aa:c0:ff:53:8e:e6:96:fd:67:1f:33:67:55:3a:31:91:20: 3b:38:35:4a:f7:c7:a0:41:35:1c:0d:26:21:3d:7b:82:e1:9b: c9:4e:f3:03:5c:0c:f1:bf:d4:a7:a6:0f:66:bc:08:0f:44:c7: fe:38:42:e4:68:8e:05:34:38:78:11:76:45:7e:63:4b:2d:6a: 8d:84:ac:42:31:c4:df:b3:b0:33:8f:33:38:31:55:b1:51:d2: e6:cd:eb:9d:b5:41:10:1f:e5:7a:02:25:56:53:ec:b2:f9:28: 8c:cc:00:e9:42:7c:15:b5:7f:7d:ad:fe:88:5b:c4:06:aa:d8: 38:5e:8e:46:db:72:77:96:02:ba:61:8b:2e:a4:ac:5a:92:35: f3:d0:32:ef:82:c4:ba:ba:85:ce:da:18:51:25:3d:95:30:5d: 7b:54:8a:f8 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUIP4sQ79BnBeIz0amIikoXYvKLrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcxNjEwMzZaFw0yNjEwMDYxNjE1MzZaMDMxMTAvBgNV BAMTKEM5RkIzQkY3NDBBNzJFNEY4RkYzMEY3NUY3NUQ1ODlENUZGRTc0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0bEJgkIR2IMlivp4AKVVP9d8 AFAjhXq8P0NJ3kZQ7igE7GSDkIpixMAD5YDxIo5jdO9qxxAn93c5JtFPTS1g/LRy DG80QaRHldBA2IMLeQV1jRNPAa33zemvSrcWqhIIRawfuhnFUPo9h2v0NNGR8Krz Mkiesvwx9MBUgVEkwS8SEYb5wkKcUMpoVunV5DZNHvgwSSl6T6OdVLX5TFaShBJb PG4PbnVu52zpBSTy/TVit/SkvmA9mUPwGl/1D4auzDkFMSXWRgqM3BQ2eIFa8a/W 4WT5ouGDunbinDWgv1K6IUcfGDCJ1Ppt8TRA0hzkssv5xnC2vQY2yW4b4B+bAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJ+zv3QKcuT4/z D3X3XVidX/50oTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtj WHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZBOXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL Y1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAvQzlG QjNCRjc0MEE3MkU0RjhGRjMwRjc1Rjc1RDU4OUQ1RkZFNzRBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASFeDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KMUwDQYJKoZIhvcNAQELBQADggEBALJThQ6WNSxd8UIXjh0O7wr9EOak95x78E3T 6QlKb73W+S+MDgrUw7tDLfkJxiJVeVhd6O1veEMgvCdiIsu10ihqpHvGFF5uj3Z9 jCpFQPVP6vlU5OuiEWtuczGqwP9TjuaW/WcfM2dVOjGRIDs4NUr3x6BBNRwNJiE9 e4Lhm8lO8wNcDPG/1KemD2a8CA9Ex/44QuRojgU0OHgRdkV+Y0stao2ErEIxxN+z sDOPMzgxVbFR0ubN6521QRAf5XoCJVZT7LL5KIzMAOlCfBW1f32t/ohbxAaq2Dhe jkbbcneWArphiy6krFqSNfPQMu+CxLq6hc7aGFElPZUwXXtUivg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:56 2025 by rpki-client