$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer File: 3438EF474B88120C954212EE504ACF2C02AF3889.cer (raw, json) Hash identifier: JmC911Mp9wDEmAP5R2bn6i1/rjCvK1m1xGidItggXdo= Subject key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 051D8A31DF173CAE4A161FFD35E04446B4E7336F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft caRepository: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Sep 2025 14:29:24 +0000 Certificate not after: Thu 03 Sep 2026 14:34:24 +0000 Subordinate resources: AS: 28202 IP: 177.44.0.0/17 IP: 177.130.128.0/18 IP: 179.189.160.0/19 IP: 186.216.64.0/18 IP: 187.44.0.0/18 IP: 187.120.64.0/18 IP: 189.91.0.0/19 IP: 191.53.0.0/16 IP: 191.240.0.0/17 IP: 2804:87c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1d:8a:31:df:17:3c:ae:4a:16:1f:fd:35:e0:44:46:b4:e7:33:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 14:29:24 2025 GMT Not After : Sep 3 14:34:24 2026 GMT Subject: CN=3438EF474B88120C954212EE504ACF2C02AF3889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:2a:b2:55:45:b9:28:a3:82:c5:88:dd:8d: 04:cb:ba:4d:2c:53:16:07:f4:c9:e6:c9:f7:fe:bc: 65:d0:ee:a6:1d:ce:8b:cf:07:1b:20:16:fa:19:8f: b4:8d:31:0d:c4:d8:8f:75:10:02:d3:b7:54:1d:0c: 59:29:f4:58:77:6f:df:99:0c:20:f9:3a:3b:74:4e: bb:9c:ed:8c:a1:88:b3:1e:11:f1:1c:0e:cb:3d:db: 77:f6:eb:0b:ff:bf:91:72:f3:9c:e0:56:5a:be:f8: 7f:8d:a6:f9:9a:81:aa:a5:98:ea:f3:e1:d9:af:b6: 23:d2:8f:da:ab:e3:76:d8:0d:08:1e:52:0b:d1:fd: 58:41:7b:ca:c1:c0:b8:73:ca:c3:96:be:89:a2:44: cd:b2:c8:29:f3:fd:0e:62:66:91:7f:ce:52:9b:d0: b3:3e:9d:68:42:04:b7:f3:ea:d3:84:d2:9f:d2:a0: 9f:04:5c:e2:9e:c0:fb:c1:6b:bc:4e:37:8e:86:93: 9d:ec:5c:f6:08:49:0d:a7:4a:57:78:b9:f1:23:0a: 9d:bf:ec:a4:8f:43:07:19:5b:0d:ac:8e:fd:6c:a4: 20:e6:7d:27:ad:0d:de:c9:ce:56:86:61:e7:b9:e8: ab:ba:cc:95:31:0c:57:0e:27:7f:27:89:e4:20:7d: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.44.0.0/17 177.130.128.0/18 179.189.160.0/19 186.216.64.0/18 187.44.0.0/18 187.120.64.0/18 189.91.0.0/19 191.53.0.0/16 191.240.0.0/17 IPv6: 2804:87c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28202 Signature Algorithm: sha256WithRSAEncryption 88:e5:2a:e7:30:94:22:ac:ab:54:63:9a:ce:21:37:27:a2:17: e9:7d:5b:67:1e:fb:1d:2e:75:5d:dc:46:b0:72:e4:f3:a0:78: df:36:68:f0:f6:1a:c7:33:73:5b:f2:96:d6:e9:ee:91:03:d9: 64:e2:ae:a1:4b:ef:ab:c3:a5:d5:82:c6:d6:05:03:b2:c1:be: f4:0e:6f:bc:4a:98:e5:78:2e:ba:46:58:62:19:eb:81:d4:ea: a1:48:e7:2a:27:e3:a8:0d:aa:cf:17:d1:d3:e3:68:be:b7:52: e5:07:51:c7:f1:5c:21:18:10:07:b3:e4:ad:0c:79:96:2b:3b: cd:7a:3e:72:1c:48:ae:56:14:ec:8c:a2:6a:9a:59:6a:1b:62: 54:02:a7:ea:9e:1e:da:43:bc:e2:ee:3d:4e:5e:ca:50:c6:40: 3b:b7:b6:b6:9a:5c:0b:f1:d1:66:03:e9:bb:05:db:f3:db:22: a5:3b:97:42:6c:82:56:d4:fc:a4:0d:5d:b2:96:3c:7e:13:9a: c4:66:33:47:39:d7:a9:28:26:ea:d9:3e:ca:db:4f:7d:06:22: 75:db:a4:9a:f4:02:9b:4f:ee:ad:26:5b:2b:74:32:c7:e9:d6: f6:e0:15:7d:e2:6a:aa:03:95:7a:1f:d9:b2:26:c5:8f:be:1b: 35:8d:ce:0d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUBR2KMd8XPK5KFh/9NeBERrTnM28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDQxNDI5MjRaFw0yNjA5MDMxNDM0MjRaMDMxMTAvBgNV BAMTKDM0MzhFRjQ3NEI4ODEyMEM5NTQyMTJFRTUwNEFDRjJDMDJBRjM4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhSqyVUW5KKOCxYjdjQTLuk0s UxYH9Mnmyff+vGXQ7qYdzovPBxsgFvoZj7SNMQ3E2I91EALTt1QdDFkp9Fh3b9+Z DCD5Ojt0Truc7YyhiLMeEfEcDss923f26wv/v5Fy85zgVlq++H+NpvmagaqlmOrz 4dmvtiPSj9qr43bYDQgeUgvR/VhBe8rBwLhzysOWvomiRM2yyCnz/Q5iZpF/zlKb 0LM+nWhCBLfz6tOE0p/SoJ8EXOKewPvBa7xON46Gk53sXPYISQ2nSld4ufEjCp2/ 7KSPQwcZWw2sjv1spCDmfSetDd7JzlaGYee56Ku6zJUxDFcOJ38nieQgfSiZAgMB AAGjggNoMIIDZDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0OO9HS4gSDJVC Eu5QSs8sAq84iTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGRQ N05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1VV00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRk UDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAvMzQz OEVGNDc0Qjg4MTIwQzk1NDIxMkVFNTA0QUNGMkMwMkFGMzg4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEH AQH/BE4wTDA7BAIAATA1AwQHsSwAAwQGsYKAAwQFs72gAwQGuthAAwQGuywAAwQG u3hAAwQFvVsAAwMAvzUDBAe/8AAwDQQCAAIwBwMFACgECHwwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICbiowDQYJKoZIhvcNAQELBQADggEBAIjlKucwlCKsq1Rjms4h NyeiF+l9W2ce+x0udV3cRrBy5POgeN82aPD2Gsczc1vyltbp7pED2WTirqFL76vD pdWCxtYFA7LBvvQOb7xKmOV4LrpGWGIZ64HU6qFI5yon46gNqs8X0dPjaL63UuUH UcfxXCEYEAez5K0MeZYrO816PnIcSK5WFOyMomqaWWobYlQCp+qeHtpDvOLuPU5e ylDGQDu3traaXAvx0WYD6bsF2/PbIqU7l0JsglbU/KQNXbKWPH4TmsRmM0c516ko JurZPsrbT30GInXbpJr0AptP7q0mWyt0Msfp1vbgFX3iaqoDlXof2bImxY++GzWN zg0= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:54 2025 by rpki-client