$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer File: C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer (raw, json) Hash identifier: AjWE2wh2TmZM/yB6iwsIr6d7lJn0Pru3pgca6cpJvOw= Subject key identifier: C9:FC:FF:F2:0F:D7:DA:AF:BA:C5:83:DB:09:91:20:3A:48:E5:4F:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E0AF29707CE849D78E3AE2A9E16AC4067C8612B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft caRepository: rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 00:38:36 +0000 Certificate not after: Wed 24 Mar 2027 00:43:36 +0000 Subordinate resources: AS: 269115 IP: 45.178.240.0/23 IP: 2804:5fa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0a:f2:97:07:ce:84:9d:78:e3:ae:2a:9e:16:ac:40:67:c8:61:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 00:38:36 2026 GMT Not After : Mar 24 00:43:36 2027 GMT Subject: CN=C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:b9:3b:bb:be:93:e2:ec:24:f7:a7:51:d1: a6:94:ea:e8:16:56:4a:22:c8:85:c6:5d:25:18:97: a5:26:ef:f9:78:ea:ef:99:e3:36:92:3c:eb:1b:c6: 63:85:3e:d1:eb:7c:82:ed:57:f5:1d:a5:a6:e3:16: 09:9e:03:7a:51:9f:e3:32:be:8e:c7:65:05:c2:34: 63:2e:a8:c3:0b:fb:76:72:ee:99:e0:47:0f:0a:fc: e4:77:57:c9:25:00:3e:7a:3e:43:c7:14:79:7c:b1: 3e:96:c4:8a:7a:11:b7:34:23:25:0a:0b:34:cb:75: fa:fe:d5:14:56:7d:d9:c3:80:fc:77:88:4e:1b:57: 1d:20:7d:d1:53:5c:a8:2e:fe:9a:47:84:4c:d9:e6: b1:f5:b0:1a:b5:5e:04:8c:bf:2f:c6:0b:ae:04:68: 19:88:2d:e2:7a:a9:07:99:43:31:45:8c:37:82:d4: 73:79:d8:69:9e:c4:b4:3a:fe:c2:a4:16:87:65:6e: e0:0b:8c:b1:a1:d2:84:a8:6f:5a:ed:fd:f8:45:eb: f6:81:f1:a9:ae:21:37:be:06:eb:a4:be:db:af:82: b5:94:3d:40:3b:8f:00:e1:f9:27:c6:34:ac:ba:5c: f8:1d:38:d3:9d:04:c9:fb:18:51:7d:aa:53:1c:ba: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:FC:FF:F2:0F:D7:DA:AF:BA:C5:83:DB:09:91:20:3A:48:E5:4F:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.240.0/23 IPv6: 2804:5fa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269115 Signature Algorithm: sha256WithRSAEncryption 4a:39:60:e5:04:72:11:81:db:58:f7:c6:5e:76:41:26:16:15: 2f:4e:80:7e:11:7f:1a:d2:a2:84:df:92:df:3f:9e:9c:3f:29: cc:9f:77:fc:a0:7a:18:2d:58:bb:40:ee:a4:d9:66:5b:58:97: 63:8a:b9:38:92:84:81:f4:9f:fc:08:b8:45:d1:0c:ef:d9:4c: 76:bd:64:b1:a2:11:b3:6e:7e:38:7c:af:f5:ae:23:b6:c8:3a: 02:55:54:e8:bf:d0:19:13:00:ad:4b:fe:fa:04:39:3a:f1:f2: d7:da:b0:fa:43:c2:92:46:fe:d4:39:1c:87:b6:5d:3b:1e:31: 06:3b:eb:ba:a7:5d:38:dd:72:f6:aa:f5:ed:2b:7e:66:00:67: d8:e1:ec:e1:05:a8:9d:b8:89:7e:ec:53:8f:bc:ce:c1:0a:5f: fb:cf:f6:a5:57:e0:9e:13:03:7a:f7:3a:49:df:86:cc:b7:95: d8:78:1c:d9:1f:1a:88:9b:90:18:5a:cb:3c:ec:68:49:f0:0a: b3:e4:69:26:af:00:b8:90:c2:58:97:57:86:f5:6c:d1:ea:34: be:91:9c:27:9f:7a:7b:bc:9f:e9:67:a8:f4:9a:c0:fe:a4:5d: 64:81:db:19:ed:26:af:14:c7:9f:3b:8b:21:63:2c:3d:10:8e: 04:40:33:88 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPgrylwfOhJ14464qnhasQGfIYSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUwMDM4MzZaFw0yNzAzMjQwMDQzMzZaMDMxMTAvBgNV BAMTKEM5RkNGRkYyMEZEN0RBQUZCQUM1ODNEQjA5OTEyMDNBNDhFNTRGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWrk7u76T4uwk96dR0aaU6ugW VkoiyIXGXSUYl6Um7/l46u+Z4zaSPOsbxmOFPtHrfILtV/UdpabjFgmeA3pRn+My vo7HZQXCNGMuqMML+3Zy7pngRw8K/OR3V8klAD56PkPHFHl8sT6WxIp6Ebc0IyUK CzTLdfr+1RRWfdnDgPx3iE4bVx0gfdFTXKgu/ppHhEzZ5rH1sBq1XgSMvy/GC64E aBmILeJ6qQeZQzFFjDeC1HN52GmexLQ6/sKkFodlbuALjLGh0oSob1rt/fhF6/aB 8amuITe+BuukvtuvgrWUPUA7jwDh+SfGNKy6XPgdONOdBMn7GFF9qlMcutjVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJ/P/yD9far7rF g9sJkSA6SOVPbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2ho akdBWmlhRmphMTJxTFpzZ1I5TkdMcUxaWWhQck1IcW9XUzlHNVRBUG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0do aGpHQVppYUZqYTEycUxac2dSOU5HTHFMWlloUHJNSHFvV1M5RzVUQVBuLzAvQzlG Q0ZGRjIwRkQ3REFBRkJBQzU4M0RCMDk5MTIwM0E0OEU1NEY2Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBLbLwMA0EAgACMAcDBQAoBF+oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbOzANBgkqhkiG9w0BAQsFAAOCAQEASjlg5QRyEYHbWPfG XnZBJhYVL06AfhF/GtKihN+S3z+enD8pzJ93/KB6GC1Yu0DupNlmW1iXY4q5OJKE gfSf/Ai4RdEM79lMdr1ksaIRs25+OHyv9a4jtsg6AlVU6L/QGRMArUv++gQ5OvHy 19qw+kPCkkb+1Dkch7ZdOx4xBjvruqddON1y9qr17St+ZgBn2OHs4QWonbiJfuxT j7zOwQpf+8/2pVfgnhMDevc6Sd+GzLeV2Hgc2R8aiJuQGFrLPOxoSfAKs+RpJq8A uJDCWJdXhvVs0eo0vpGcJ596e7yf6Weo9JrA/qRdZIHbGe0mrxTHnzuLIWMsPRCO BEAziA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:19 2026 by rpki-client