$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer File: 038EA35AF01B781289F24933082A9857B17EAE3A.cer (raw, json) Hash identifier: LWflQFM1CGBDYACkOxuimsgAZG9EAuFPE0AcDgUc5y8= Subject key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5714C32CD565824E46E4C691B63A426E5FD61CCD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft caRepository: rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 18:10:11 +0000 Certificate not after: Thu 17 Sep 2026 18:15:11 +0000 Subordinate resources: AS: 266556 IP: 160.238.228.0/22 IP: 2804:3dd4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:14:c3:2c:d5:65:82:4e:46:e4:c6:91:b6:3a:42:6e:5f:d6:1c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 18:10:11 2025 GMT Not After : Sep 17 18:15:11 2026 GMT Subject: CN=038EA35AF01B781289F24933082A9857B17EAE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:7c:c1:17:11:f9:7f:c2:2c:fa:ea:3c:47: a4:16:02:72:13:35:9c:91:44:27:59:36:d3:2c:e4: 55:3b:27:2c:b8:b3:20:b5:e0:01:c8:76:01:26:d7: e0:5b:ba:45:e4:56:61:07:1e:4d:d7:0c:ec:a6:b6: 0f:96:37:f8:9f:c6:80:8e:6a:eb:e5:7a:2f:4c:41: 85:c3:06:90:4f:cb:66:84:24:58:0d:16:f1:bd:4b: 7e:c1:15:5f:b9:db:bf:1c:6b:b4:74:0e:05:a0:c1: 40:ac:cd:f8:c1:4b:67:a5:9b:c7:53:76:04:92:1b: 90:a7:ea:f9:bf:74:4b:1c:90:ac:2d:e2:cd:80:f9: 1c:30:e0:e6:94:e9:bc:24:f3:cd:1e:96:31:b7:77: 8f:c9:39:9e:70:68:76:2d:b6:e7:92:d8:01:99:1a: 87:0f:f4:d1:a3:63:4b:78:69:da:73:dd:11:2b:11: 7e:17:bc:e7:b1:79:2a:aa:fb:25:85:ec:35:a0:d9: 83:00:03:bd:c8:ad:69:dd:db:83:ed:95:67:49:c8: 49:50:98:4e:61:a2:59:93:fd:e1:1d:71:98:b1:65: b7:cd:bc:ce:66:94:90:a5:4a:ba:d8:9a:c5:6b:b2: 0c:06:1b:28:2c:2f:dd:50:be:5a:a7:81:78:fc:f3: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.228.0/22 IPv6: 2804:3dd4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266556 Signature Algorithm: sha256WithRSAEncryption 79:78:7e:13:97:a8:d5:2e:22:9d:4e:46:47:2d:9c:59:03:be: 14:a2:10:52:f1:f6:2b:fd:82:e7:7a:14:9a:52:85:53:ae:1c: 46:8c:da:1a:03:2f:0c:3a:70:c7:ec:55:7d:57:a0:ee:84:27: a2:09:bc:7e:dc:e4:78:f1:9a:b0:18:ff:35:a9:6d:79:e1:10: b4:1f:23:4f:c9:88:31:be:d8:8b:7a:27:e3:4c:37:21:44:b3: 4a:9c:c8:e3:3b:9d:74:be:78:8e:cf:a7:2e:54:34:40:b3:f0: 2e:86:7a:b7:fd:e3:68:f3:ac:19:10:19:49:90:ea:8b:c7:e0: 84:8e:ad:94:ff:d6:85:46:af:73:b8:3e:c9:3c:f3:15:27:e4: 5e:74:34:cd:7b:ad:b8:ca:15:db:ff:9c:35:f8:d2:64:d8:14: 35:7e:9f:46:a5:e0:fd:db:a4:4d:d0:6e:f9:d6:2e:1f:4d:7d: b0:9d:1a:80:46:47:4e:44:bb:32:15:0b:da:de:d1:79:82:59: a5:b8:c9:d5:61:e8:ca:6d:ca:c0:0e:05:89:d4:a4:04:3f:c8: e4:6b:44:e7:a3:0d:62:7e:93:a1:77:5c:fc:3f:91:0a:c9:71: 18:b3:a3:a3:10:90:4e:ba:58:b5:17:7f:be:c0:b7:2c:d3:f2: 2e:ae:5f:21 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVxTDLNVlgk5G5MaRtjpCbl/WHM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgxODEwMTFaFw0yNjA5MTcxODE1MTFaMDMxMTAvBgNV BAMTKDAzOEVBMzVBRjAxQjc4MTI4OUYyNDkzMzA4MkE5ODU3QjE3RUFFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEynzBFxH5f8Is+uo8R6QWAnIT NZyRRCdZNtMs5FU7Jyy4syC14AHIdgEm1+BbukXkVmEHHk3XDOymtg+WN/ifxoCO auvlei9MQYXDBpBPy2aEJFgNFvG9S37BFV+5278ca7R0DgWgwUCszfjBS2elm8dT dgSSG5Cn6vm/dEsckKwt4s2A+Rww4OaU6bwk880eljG3d4/JOZ5waHYttueS2AGZ GocP9NGjY0t4adpz3RErEX4XvOexeSqq+yWF7DWg2YMAA73IrWnd24PtlWdJyElQ mE5holmT/eEdcZixZbfNvM5mlJClSrrYmsVrsgwGGygsL91QvlqngXj88xXzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDjqNa8Bt4Eony STMIKphXsX6uOjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0VT VFZwZGlBcDdUUzhHbkdWSHl4ekhzeGFkekpDOXRYUkFQd1N6Mng4R3IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNF U1RWcGRpQXA3VFM4R25HVkh5eHpIc3hhZHpKQzl0WFJBUHdTejJ4OEdyLzAvMDM4 RUEzNUFGMDFCNzgxMjg5RjI0OTMzMDgyQTk4NTdCMTdFQUUzQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoO7kMA0EAgACMAcDBQAoBD3UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRPDANBgkqhkiG9w0BAQsFAAOCAQEAeXh+E5eo1S4inU5G Ry2cWQO+FKIQUvH2K/2C53oUmlKFU64cRozaGgMvDDpwx+xVfVeg7oQnogm8ftzk ePGasBj/NalteeEQtB8jT8mIMb7Yi3on40w3IUSzSpzI4zuddL54js+nLlQ0QLPw LoZ6t/3jaPOsGRAZSZDqi8fghI6tlP/WhUavc7g+yTzzFSfkXnQ0zXutuMoV2/+c NfjSZNgUNX6fRqXg/dukTdBu+dYuH019sJ0agEZHTkS7MhUL2t7ReYJZpbjJ1WHo ym3KwA4FidSkBD/I5GtE56MNYn6ToXdc/D+RCslxGLOjoxCQTrpYtRd/vsC3LNPy Lq5fIQ== -----END CERTIFICATE-----Generated at Fri Sep 19 04:39:43 2025 by rpki-client