$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer File: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer (raw, json) Hash identifier: VWOt1sHl8ofKrhClXPRVC3H0zr6o7wYCdD1WVyhpd1U= Subject key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18195DC8893C9B584901F3B0FC94CDBEAAE0A3C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft caRepository: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 08 Aug 2025 17:10:28 +0000 Certificate not after: Fri 07 Aug 2026 17:15:28 +0000 Subordinate resources: AS: 274843 IP: 2804:9474::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 Aug 2025 17:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:19:5d:c8:89:3c:9b:58:49:01:f3:b0:fc:94:cd:be:aa:e0:a3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 8 17:10:28 2025 GMT Not After : Aug 7 17:15:28 2026 GMT Subject: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:b8:72:30:b8:7a:42:78:b8:07:fb:1d:9e: 25:06:2c:28:8d:91:f1:77:65:83:ce:64:31:a6:2b: 18:aa:3f:d0:b2:c3:69:8f:e7:b4:e1:ac:2a:e5:ed: 3a:ec:98:98:5b:99:1c:d9:01:ef:4a:77:46:e5:49: 9a:c2:14:91:1f:c2:cc:34:5e:31:9f:93:82:85:99: c3:67:8c:72:39:b9:5a:f8:42:e0:3c:72:c7:9a:fc: 6b:04:16:75:96:01:12:81:47:fe:3d:5b:3d:bb:43: f6:25:e0:6f:d9:87:77:a0:d7:80:a4:22:12:1d:60: e4:39:cb:ee:65:a4:bf:ef:e4:54:d2:28:9f:1b:a3: 72:99:83:81:8f:4a:a8:45:5b:f7:71:ab:56:14:34: af:17:5f:13:7d:67:aa:de:fe:2e:60:fe:c5:f9:d2: 74:8a:ff:a3:e8:ed:7b:6e:fb:b7:f4:66:b4:53:d1: f6:02:ab:f8:fe:c0:eb:07:37:7b:d0:b7:45:a4:b4: d3:72:81:7c:b9:05:0a:75:b6:7e:45:8e:c0:ed:3e: 8d:d7:e2:4e:24:0c:72:f9:7f:d5:5c:7f:ff:cd:8b: 6f:c6:d1:0c:c0:9a:d9:31:71:9c:c1:b8:00:ff:6f: 54:29:7e:1d:b7:7d:8f:f9:dd:f5:5f:51:07:79:04: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9474::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274843 Signature Algorithm: sha256WithRSAEncryption dc:8c:1b:97:3c:85:27:e3:bd:da:a3:e3:a0:6a:09:07:37:3b: b5:27:66:7a:67:21:00:9a:28:60:bb:f3:e6:c1:a5:62:d3:b7: b5:6e:14:d1:5c:46:65:8c:c4:5c:f7:52:3d:2d:78:16:f4:e8: c9:cc:c0:7e:d8:80:66:0b:7e:8f:c5:66:a0:52:60:b0:a8:48: 77:c9:a0:15:45:aa:a6:ca:ee:dd:2a:d2:3b:4a:c5:93:fd:45: cf:ac:c5:70:de:d7:9c:81:a1:e0:ac:0e:e6:83:61:c1:7d:5c: 9c:56:b9:95:02:ec:7d:6e:7b:2c:7a:81:47:f5:cf:ea:fb:73: d7:9a:4c:53:2d:32:2a:72:ec:38:d9:8b:b4:80:43:29:a5:93: de:a3:72:91:7b:10:67:2b:6c:4a:76:e0:cb:bc:78:c0:32:53: d2:de:94:5a:c4:40:39:e4:51:f7:f2:da:08:56:0f:d0:58:fb: d4:b2:0a:41:0f:16:1f:d1:fc:c2:2b:90:a3:48:d4:e1:50:91: a7:05:22:4e:f7:d0:1f:98:a8:a2:df:1c:99:56:35:d6:5d:f3: f7:0d:3f:f4:c1:6e:0b:ba:a2:24:d7:b9:52:2a:3f:f2:7d:ca: df:0e:5f:f0:0c:03:0a:04:34:40:72:98:55:17:c0:69:ba:81: 50:ad:bc:02 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUGBldyIk8m1hJAfOw/JTNvqrgo8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDgxNzEwMjhaFw0yNjA4MDcxNzE1MjhaMDMxMTAvBgNV BAMTKEI5Q0JBQjZFMkI5OEQ3Q0YzRjNBRUU5RUI4QkVFREUwRUU5OTkzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiG7hyMLh6Qni4B/sdniUGLCiN kfF3ZYPOZDGmKxiqP9Cyw2mP57ThrCrl7TrsmJhbmRzZAe9Kd0blSZrCFJEfwsw0 XjGfk4KFmcNnjHI5uVr4QuA8csea/GsEFnWWARKBR/49Wz27Q/Yl4G/Zh3eg14Ck IhIdYOQ5y+5lpL/v5FTSKJ8bo3KZg4GPSqhFW/dxq1YUNK8XXxN9Z6re/i5g/sX5 0nSK/6Po7Xtu+7f0ZrRT0fYCq/j+wOsHN3vQt0WktNNygXy5BQp1tn5FjsDtPo3X 4k4kDHL5f9Vcf//Ni2/G0QzAmtkxcZzBuAD/b1Qpfh23fY/53fVfUQd5BPgPAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5y6tuK5jXzz86 7p64vu3g7pmTQTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHhX enM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZGN1UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 V3pzNmlzem1KcWhQVGZIcGpBQ3NqNHc1N3FEeGRNVVNWaXVKa0xmRjdVLzAvQjlD QkFCNkUyQjk4RDdDRjNGM0FFRTlFQjhCRUVERTBFRTk5OTM0MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASUdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MZswDQYJKoZIhvcNAQELBQADggEBANyMG5c8hSfjvdqj46BqCQc3O7UnZnpnIQCa KGC78+bBpWLTt7VuFNFcRmWMxFz3Uj0teBb06MnMwH7YgGYLfo/FZqBSYLCoSHfJ oBVFqqbK7t0q0jtKxZP9Rc+sxXDe15yBoeCsDuaDYcF9XJxWuZUC7H1ueyx6gUf1 z+r7c9eaTFMtMipy7DjZi7SAQymlk96jcpF7EGcrbEp24Mu8eMAyU9LelFrEQDnk Uffy2ghWD9BY+9SyCkEPFh/R/MIrkKNI1OFQkacFIk730B+YqKLfHJlWNdZd8/cN P/TBbgu6oiTXuVIqP/J9yt8OX/AMAwoENEBymFUXwGm6gVCtvAI= -----END CERTIFICATE-----Generated at Wed Aug 13 15:58:05 2025 by rpki-client