$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer File: 9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer (raw, json) Hash identifier: I9d9S3B1HiMd3ewME6cqD5KySyAjIeLGeNQ9WAattK8= Subject key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3134DD65222F9DB060C4BBFC756D113740E3CB4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft caRepository: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 02:27:11 +0000 Certificate not after: Wed 29 Jul 2026 02:32:11 +0000 Subordinate resources: AS: 265240 IP: 168.0.0.0 -- 168.0.2.255 IP: 2804:2cbc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:dd:65:22:2f:9d:b0:60:c4:bb:fc:75:6d:11:37:40:e3:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 02:27:11 2025 GMT Not After : Jul 29 02:32:11 2026 GMT Subject: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:d3:55:7b:c0:19:ee:45:8a:b5:91:29:82: f9:f0:08:93:9a:01:4c:09:d7:fa:ef:19:67:3f:53: 0a:05:50:13:d4:0e:a0:a5:9c:be:e9:23:1b:2a:f9: 4d:15:f6:72:c1:f9:ef:f9:7c:dc:50:f8:98:07:77: 43:6a:45:71:2d:b0:3b:32:96:6a:68:f9:e6:13:e5: 69:0a:f4:3c:a7:da:cb:23:fd:d3:91:87:00:8c:bf: 07:d6:57:62:1a:8b:9e:c7:c7:16:66:f0:d2:12:c6: ff:5a:45:b7:e0:9d:dc:41:0c:e6:61:8e:15:1d:e7: ee:3c:1b:ec:a8:37:a5:7c:23:ef:bc:8c:51:40:1a: 75:af:01:f3:7d:8b:53:a0:1e:07:83:fa:03:c5:44: e2:b9:da:de:46:df:0e:87:9e:b6:bf:a5:77:4a:74: 9b:b0:b2:0e:c6:3b:42:46:67:88:19:5b:8d:f3:55: 97:2e:ae:d1:60:f9:cf:d1:fc:ee:a3:59:05:b7:43: 7a:87:b1:0b:57:a0:ae:d5:c4:ea:94:a7:3a:3e:83: 06:da:0c:01:6d:06:73:b4:f3:ed:13:83:91:c9:29: d9:0b:2a:6e:03:2a:b3:dd:77:dc:fb:bd:c0:71:3d: 7f:42:42:2a:d9:b8:fc:65:b4:e0:dd:d6:db:34:99: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.0.0-168.0.2.255 IPv6: 2804:2cbc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265240 Signature Algorithm: sha256WithRSAEncryption 5a:fb:13:f5:3b:a5:cd:de:84:fd:c1:d6:1a:ec:3d:9f:bc:8c: 61:b3:c3:b1:b6:ad:10:11:8e:6f:3d:e5:85:7e:1f:05:87:a5: 8d:0e:b5:13:9e:9f:46:a8:fc:00:ea:a6:66:5b:58:8f:d9:e4: 84:83:b9:20:03:93:15:3b:82:9a:b6:1f:b5:8c:15:8c:78:48: 1b:45:08:e9:f2:70:b9:21:cd:44:b1:c0:c6:3b:c0:b9:7f:e1: 6d:2e:9f:65:49:68:0c:bf:c3:91:b4:3f:0d:11:d2:06:a7:3e: b9:bb:49:24:30:bd:fe:2b:d0:3a:fa:68:58:f0:02:5a:0f:0e: a6:14:5e:2e:7a:0f:b6:3d:97:d2:7b:f2:b8:6e:e6:7a:3d:60: 11:c2:2f:51:2f:9e:92:28:9a:72:9d:e7:56:d8:46:e8:c7:04: 93:c6:8b:ff:d8:83:df:45:3d:fd:d8:9e:fe:9d:e3:97:ae:86: 41:f2:f7:49:b9:0e:9b:31:11:24:18:d9:8e:ce:26:c1:65:ab: 87:70:bc:f4:34:ed:c0:f3:6f:e9:5d:39:de:b9:78:88:bb:13: 9a:29:57:09:f6:b7:41:d6:5a:f9:ba:ec:33:87:f7:0a:0b:85: 68:54:26:38:e7:aa:20:9d:31:02:fd:d5:da:51:bc:f1:b1:66: 8d:0b:07:a1 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUMTTdZSIvnbBgxLv8dW0RN0Djy04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzAwMjI3MTFaFw0yNjA3MjkwMjMyMTFaMDMxMTAvBgNV BAMTKDlDQ0VGNDAzQzdBMUEyNTE5MTdFQjZEOUIwQTcxMjM4Qjc4NEEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Q9NVe8AZ7kWKtZEpgvnwCJOa AUwJ1/rvGWc/UwoFUBPUDqClnL7pIxsq+U0V9nLB+e/5fNxQ+JgHd0NqRXEtsDsy lmpo+eYT5WkK9Dyn2ssj/dORhwCMvwfWV2Iai57HxxZm8NISxv9aRbfgndxBDOZh jhUd5+48G+yoN6V8I++8jFFAGnWvAfN9i1OgHgeD+gPFROK52t5G3w6Hnra/pXdK dJuwsg7GO0JGZ4gZW43zVZcurtFg+c/R/O6jWQW3Q3qHsQtXoK7VxOqUpzo+gwba DAFtBnO08+0Tg5HJKdkLKm4DKrPdd9z7vcBxPX9CQirZuPxltODd1ts0mVUvAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSczvQDx6GiUZF+ ttmwpxI4t4SifTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRG bUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJSYlUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRG bUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJSYlUvMS85Q0NF RjQwM0M3QTFBMjUxOTE3RUI2RDlCMEE3MTIzOEI3ODRBMjdELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwwCgMCA6gDBACoAAIwDQQCAAIwBwMFACgELLwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAwYMA0GCSqGSIb3DQEBCwUAA4IBAQBa+xP1O6XN 3oT9wdYa7D2fvIxhs8Oxtq0QEY5vPeWFfh8Fh6WNDrUTnp9GqPwA6qZmW1iP2eSE g7kgA5MVO4Kath+1jBWMeEgbRQjp8nC5Ic1EscDGO8C5f+FtLp9lSWgMv8ORtD8N EdIGpz65u0kkML3+K9A6+mhY8AJaDw6mFF4ueg+2PZfSe/K4buZ6PWARwi9RL56S KJpynedW2EboxwSTxov/2IPfRT392J7+neOXroZB8vdJuQ6bMREkGNmOzibBZauH cLz0NO3A82/pXTneuXiIuxOaKVcJ9rdB1lr5uuwzh/cKC4VoVCY456ognTEC/dXa UbzxsWaNCweh -----END CERTIFICATE-----Generated at Mon Aug 4 18:12:32 2025 by rpki-client