$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer File: 9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer (raw, json) Hash identifier: k5lF3c/vkhSHM5sB+1F964EiWuzK4/eQpu+KqHvjknU= Subject key identifier: 9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A65459E5BCA35D1120B9E858F7D6B715DA88607 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft caRepository: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 17:25:46 +0000 Certificate not after: Mon 02 Nov 2026 17:30:46 +0000 Subordinate resources: AS: 274334 IP: 2804:9664::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:65:45:9e:5b:ca:35:d1:12:0b:9e:85:8f:7d:6b:71:5d:a8:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 17:25:46 2025 GMT Not After : Nov 2 17:30:46 2026 GMT Subject: CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:5b:6b:06:92:8a:b5:7c:e7:24:e6:ac:fa: a6:3e:04:67:60:65:37:f6:f5:6f:80:a1:ff:d2:2c: d8:d4:a8:e9:fd:bc:b7:73:6f:4b:d5:27:3e:98:51: c8:3d:1f:77:23:8d:80:6b:16:cd:c6:6e:22:2b:b2: 33:39:75:ee:26:08:ce:d5:5c:54:98:27:0f:ed:df: fc:73:79:8d:cf:a9:ab:ba:2a:c2:eb:01:7b:5b:ab: 78:81:c0:a1:2c:03:37:d7:4a:80:59:f7:a6:84:d5: 2f:1f:e7:cb:64:4d:5f:95:80:36:50:ba:51:b3:ce: 8c:cc:fb:3d:82:3e:4b:0f:28:0f:46:6d:8a:e6:2a: 37:75:1f:b7:c0:ac:e9:a4:68:21:53:9c:1e:6f:1c: 0b:3a:14:38:d5:c5:b6:be:e1:55:1d:26:67:9e:50: b9:1a:84:1d:a9:62:6c:b8:17:54:82:53:66:dc:d4: 9a:74:a5:cf:df:19:09:71:a8:e0:2d:88:75:66:5d: 89:45:74:ff:bc:f4:4e:5f:1a:ad:65:6f:67:29:f8: b6:31:53:e3:49:5c:27:d3:d4:0b:92:ee:53:c8:98: 58:ab:06:62:f0:32:44:ed:59:4e:73:c4:cd:58:bc: 46:e5:76:ec:20:2d:8c:fa:06:52:7c:52:75:3c:23: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9664::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274334 Signature Algorithm: sha256WithRSAEncryption 5e:77:55:8b:d9:aa:7a:eb:9e:1c:f1:26:47:5d:d3:06:8d:1d: 2e:4b:27:62:86:cd:73:46:ba:9d:c2:16:22:b8:64:eb:e8:48: 0f:ed:8c:72:2d:be:d2:06:41:1a:47:2c:0c:c3:63:da:6e:13: 88:a2:c3:0e:fd:a9:dd:17:f1:c6:ab:cd:6e:28:a6:7f:b8:3a: d4:53:2a:e2:f7:05:9d:ca:40:9d:48:a1:51:60:6d:88:c8:98: 52:19:3d:de:e0:28:2b:42:34:59:51:de:bb:ac:dd:5e:81:78: a1:2c:34:89:60:ef:c3:1a:27:da:29:76:8c:dc:3a:af:9b:30: 07:82:5b:7d:7a:30:6c:be:53:41:9e:27:b8:df:63:b9:86:80: 6f:22:bb:b3:c8:bf:73:c9:b5:5b:d4:0c:bf:2e:c2:d6:5e:3b: 80:95:e2:0e:1f:4a:5e:15:04:d9:c1:ed:6f:98:92:a4:db:1a: f3:90:c2:0d:80:9d:9b:78:64:6f:19:ce:56:f2:fe:76:01:0f: 1c:8b:8f:f9:19:31:ea:3e:e7:7f:1f:d9:fc:26:72:a4:77:9c: 71:db:4c:14:65:83:dc:0e:a4:48:a0:58:96:ae:fe:58:8c:a4: db:1a:1b:fb:ed:25:2c:8e:58:2a:ad:b4:db:0e:33:13:0f:4d: d5:6f:51:6e -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUamVFnlvKNdESC56Fj31rcV2ohgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxNzI1NDZaFw0yNjExMDIxNzMwNDZaMDMxMTAvBgNV BAMTKDlERTMyQzlDOTZENjMyMzM1OEJFMDU0RTU3MEZGOUE5NkJENUUwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ71trBpKKtXznJOas+qY+BGdg ZTf29W+Aof/SLNjUqOn9vLdzb0vVJz6YUcg9H3cjjYBrFs3GbiIrsjM5de4mCM7V XFSYJw/t3/xzeY3Pqau6KsLrAXtbq3iBwKEsAzfXSoBZ96aE1S8f58tkTV+VgDZQ ulGzzozM+z2CPksPKA9GbYrmKjd1H7fArOmkaCFTnB5vHAs6FDjVxba+4VUdJmee ULkahB2pYmy4F1SCU2bc1Jp0pc/fGQlxqOAtiHVmXYlFdP+89E5fGq1lb2cp+LYx U+NJXCfT1AuS7lPImFirBmLwMkTtWU5zxM1YvEblduwgLYz6BlJ8UnU8I7UHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSd4yycltYyM1i+ BU5XD/mpa9XgcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkRN U3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFqSzcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JE TVNzOUhkSmczZjlqdEhTVERrdmVlQzhpZHJoOFBqOGllaTZYUjRxaks3LzAvOURF MzJDOUM5NkQ2MzIzMzU4QkUwNTRFNTcwRkY5QTk2QkQ1RTA3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASWZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME L54wDQYJKoZIhvcNAQELBQADggEBAF53VYvZqnrrnhzxJkdd0waNHS5LJ2KGzXNG up3CFiK4ZOvoSA/tjHItvtIGQRpHLAzDY9puE4iiww79qd0X8carzW4opn+4OtRT KuL3BZ3KQJ1IoVFgbYjImFIZPd7gKCtCNFlR3rus3V6BeKEsNIlg78MaJ9opdozc Oq+bMAeCW316MGy+U0GeJ7jfY7mGgG8iu7PIv3PJtVvUDL8uwtZeO4CV4g4fSl4V BNnB7W+YkqTbGvOQwg2AnZt4ZG8Zzlby/nYBDxyLj/kZMeo+538f2fwmcqR3nHHb TBRlg9wOpEigWJau/liMpNsaG/vtJSyOWCqttNsOMxMPTdVvUW4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:28 2025 by rpki-client