$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer File: 0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer (raw, json) Hash identifier: TqZQsjMZXr8BpF7cs5qOd9VFBW1diCN8isMudSclU9E= Subject key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D85794BD5272CA48F0A220C202CF1D78A2742D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft caRepository: rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 23:54:21 +0000 Certificate not after: Wed 29 Jul 2026 23:59:21 +0000 Subordinate resources: AS: 271166 IP: 179.42.132.0/22 IP: 2804:7744::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:85:79:4b:d5:27:2c:a4:8f:0a:22:0c:20:2c:f1:d7:8a:27:42:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 23:54:21 2025 GMT Not After : Jul 29 23:59:21 2026 GMT Subject: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:d1:92:5b:51:ad:6b:21:9f:d8:1c:16:33: 14:0f:e2:2c:d7:3b:fe:ec:a2:23:22:11:ab:28:cd: 08:ed:7b:e1:63:6b:37:20:1e:71:a4:a5:a5:14:c6: d1:e4:53:82:3f:5a:21:fd:e7:4a:0c:35:c7:1e:65: a2:4f:db:df:ba:36:95:a1:bd:d3:cb:1d:6c:ca:22: c8:e2:80:4d:0f:91:1c:d6:d9:b5:78:fe:ec:e5:6f: 5e:bd:b2:c9:a5:20:8c:f8:43:d3:3a:e5:2f:99:6b: e3:7d:53:33:ae:de:bf:4f:9b:85:e1:65:15:dd:de: b2:2a:53:a6:50:43:3e:bc:cc:e6:e7:a5:ae:6a:cc: cc:47:50:61:c4:85:63:68:12:c5:c6:b3:66:cf:66: 15:ed:c9:19:23:34:19:10:77:0e:da:24:76:b2:2b: c0:ce:31:1e:87:b0:f2:67:ef:8a:d2:43:43:07:02: 68:5f:f9:e8:d4:cf:50:76:50:92:26:45:d2:08:7b: 9c:b3:d4:71:ec:01:6e:3f:40:15:1f:1c:52:be:79: ab:ea:b5:79:0e:3b:f1:d1:ac:d4:4e:04:96:76:38: ca:d3:53:47:06:a2:b3:0a:75:e3:ad:d4:2b:8b:df: 14:34:ce:0c:96:49:4b:89:32:e6:db:6b:33:f8:9a: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.132.0/22 IPv6: 2804:7744::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271166 Signature Algorithm: sha256WithRSAEncryption 67:d4:ce:99:c8:d3:fa:b5:fe:7c:9d:ab:c9:4f:09:81:a4:eb: 1c:cf:f4:c2:93:1a:54:b7:81:01:4b:42:bc:d6:25:1d:b2:a8: b1:69:14:8f:30:16:bf:f6:ef:c6:ae:5e:55:53:a1:3b:6d:70: 44:55:1a:46:97:c2:ec:27:28:f9:53:37:09:be:2d:16:f8:6a: 70:8f:b4:8c:2c:e3:f9:0d:f1:f6:87:08:08:f7:33:90:47:8c: 0f:fd:64:a8:bf:f8:dc:dd:61:d5:30:37:ce:54:40:91:7b:75: 0b:b1:05:ad:de:39:0a:d8:17:b1:d5:59:8b:68:72:d5:93:fa: 6f:51:45:a3:88:a2:1e:d0:36:88:23:f5:eb:05:c1:c9:c1:aa: eb:95:ad:8a:2c:e4:89:41:ae:49:ee:23:e6:93:fd:71:c0:30: 85:8e:36:23:1f:71:bf:b0:c5:dd:41:b8:48:3c:3a:b7:4f:b0: cd:b4:b6:1f:1d:30:3d:3b:a5:95:20:42:6e:45:e9:02:1e:9f: 2f:32:a9:05:88:13:ba:c1:ee:eb:7c:16:15:07:b2:75:f6:51: 87:eb:76:46:58:64:fa:51:ab:1c:6b:4b:17:e6:68:34:84:d0: 15:30:eb:c0:c1:38:0b:df:63:07:7d:f8:6e:dc:25:7d:78:33: 05:3e:7f:50 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfYV5S9UnLKSPCiIMICzx14onQtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzAyMzU0MjFaFw0yNjA3MjkyMzU5MjFaMDMxMTAvBgNV BAMTKDAzNDNCODkyOENBNzhBMUQzNTQ4QUY5RUI1QTM5MENGNzY2NEZFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqONGSW1GtayGf2BwWMxQP4izX O/7soiMiEasozQjte+FjazcgHnGkpaUUxtHkU4I/WiH950oMNcceZaJP29+6NpWh vdPLHWzKIsjigE0PkRzW2bV4/uzlb169ssmlIIz4Q9M65S+Za+N9UzOu3r9Pm4Xh ZRXd3rIqU6ZQQz68zObnpa5qzMxHUGHEhWNoEsXGs2bPZhXtyRkjNBkQdw7aJHay K8DOMR6HsPJn74rSQ0MHAmhf+ejUz1B2UJImRdIIe5yz1HHsAW4/QBUfHFK+eavq tXkOO/HRrNROBJZ2OMrTU0cGorMKdeOt1CuL3xQ0zgyWSUuJMubbazP4moGnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDQ7iSjKeKHTVI r561o5DPdmT+ujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG5x UFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4VlYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hu cVBaTHFDNWMxUVFSTTdkY21XQVZEekpueWlmc0NBMnBlcDhHQ2ZwOFZWLzAvMDM0 M0I4OTI4Q0E3OEExRDM1NDhBRjlFQjVBMzkwQ0Y3NjY0RkVCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsyqEMA0EAgACMAcDBQAoBHdEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjPjANBgkqhkiG9w0BAQsFAAOCAQEAZ9TOmcjT+rX+fJ2r yU8JgaTrHM/0wpMaVLeBAUtCvNYlHbKosWkUjzAWv/bvxq5eVVOhO21wRFUaRpfC 7Cco+VM3Cb4tFvhqcI+0jCzj+Q3x9ocICPczkEeMD/1kqL/43N1h1TA3zlRAkXt1 C7EFrd45CtgXsdVZi2hy1ZP6b1FFo4iiHtA2iCP16wXBycGq65WtiizkiUGuSe4j 5pP9ccAwhY42Ix9xv7DF3UG4SDw6t0+wzbS2Hx0wPTullSBCbkXpAh6fLzKpBYgT usHu63wWFQeydfZRh+t2Rlhk+lGrHGtLF+ZoNITQFTDrwME4C99jB334btwlfXgz BT5/UA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:31:40 2025 by rpki-client