$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer File: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer (raw, json) Hash identifier: m+Ktdhu7H0F3X4DSDJXHMHJrh9vCPGKutZXrvaoT22Y= Subject key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4263E5A0F24A2CFE141D8C0A6C323A43B37DEF2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft caRepository: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 14:40:53 +0000 Certificate not after: Wed 23 Sep 2026 14:45:53 +0000 Subordinate resources: AS: 267382 IP: 45.234.140.0/22 IP: 2804:4ca4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:63:e5:a0:f2:4a:2c:fe:14:1d:8c:0a:6c:32:3a:43:b3:7d:ef:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 24 14:40:53 2025 GMT Not After : Sep 23 14:45:53 2026 GMT Subject: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:e1:d2:84:88:1d:f1:27:71:16:0e:f5:01: 5c:dd:0a:32:04:ff:68:85:38:c7:93:39:47:7c:c3: c4:34:03:59:83:a5:e3:c1:d7:93:36:06:f8:a2:ba: 5e:af:78:21:31:0e:99:ef:58:8f:29:0f:06:52:6d: 1c:3f:e7:02:f4:3c:1f:5a:23:a1:b0:21:0e:b6:2d: 55:59:45:fa:17:07:83:d2:c0:fd:21:08:e7:7a:69: 8c:7a:94:3d:34:a1:90:50:79:7c:a2:1d:d2:7b:b1: 6c:86:88:87:1f:6d:02:2b:d6:e4:fa:ad:19:1c:0f: b4:12:d9:97:37:a0:fb:0a:03:37:b2:7b:83:04:62: 53:e7:e8:cd:1c:e4:ce:7d:1b:4b:db:76:4f:26:0d: 46:ea:5c:74:2c:c8:46:43:cc:cd:db:d7:e3:59:5e: 84:b5:62:fa:7e:b4:b6:4c:46:a6:e3:54:a8:17:2d: 58:96:29:6c:35:d9:c3:b4:9b:44:53:d1:4e:b0:a4: 5b:48:7b:73:0e:12:90:06:6e:97:89:5e:33:29:57: cf:3a:ee:04:0c:9e:ce:d8:aa:de:53:90:7c:d8:50: b5:d5:18:72:32:06:07:c9:2b:fc:ae:7f:c6:3d:b5: 44:10:5e:e3:43:9a:a3:f9:8d:16:67:53:32:c5:ce: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.140.0/22 IPv6: 2804:4ca4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267382 Signature Algorithm: sha256WithRSAEncryption 94:17:1f:e2:81:ee:1d:c4:f2:e4:56:bf:25:8a:77:ec:e3:f1: 85:7b:91:90:14:08:57:0b:72:5a:07:7f:3f:07:d2:50:2c:3a: ac:2a:6b:ba:07:49:63:f9:cb:f5:a1:d0:28:20:1a:5a:69:f5: 9e:48:bf:c2:58:24:aa:37:90:0b:f9:d6:2a:8b:45:00:a8:e0: c9:29:ec:c3:18:12:59:bf:88:b4:5e:3f:fc:67:93:a2:eb:88: c2:14:e2:38:8a:af:40:0f:33:91:03:0a:b9:fb:c9:e9:96:64: 41:17:c8:5b:ea:a2:25:49:ac:56:e5:95:fd:91:97:0f:73:89: 1d:2d:3a:f5:b4:af:0f:64:08:d5:f2:c9:5f:39:9f:f7:60:56: a3:c6:9b:87:f3:14:fe:0e:5f:d2:b1:48:7c:ee:3e:4a:ba:9f: 1e:c9:86:5d:67:18:03:84:60:3e:27:71:d8:c3:b4:8d:13:ac: 4d:0a:b0:70:d7:09:01:f0:c5:78:9f:10:24:b5:39:b3:40:a5: 0e:a5:34:99:0e:cb:43:31:76:40:22:f5:29:d0:4e:cc:3e:7c: f0:3f:ea:48:70:e0:b9:00:2b:54:a3:6c:15:ff:d1:b1:5c:99: 5c:d8:5a:8d:e0:78:69:98:4c:b5:09:b8:bd:38:93:8c:fb:1d: ae:31:47:89 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQmPloPJKLP4UHYwKbDI6Q7N97ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjQxNDQwNTNaFw0yNjA5MjMxNDQ1NTNaMDMxMTAvBgNV BAMTKDM0OUJEQzlBNUQyRDE2OUMxM0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxeHShIgd8SdxFg71AVzdCjIE /2iFOMeTOUd8w8Q0A1mDpePB15M2Bviiul6veCExDpnvWI8pDwZSbRw/5wL0PB9a I6GwIQ62LVVZRfoXB4PSwP0hCOd6aYx6lD00oZBQeXyiHdJ7sWyGiIcfbQIr1uT6 rRkcD7QS2Zc3oPsKAzeye4MEYlPn6M0c5M59G0vbdk8mDUbqXHQsyEZDzM3b1+NZ XoS1Yvp+tLZMRqbjVKgXLViWKWw12cO0m0RT0U6wpFtIe3MOEpAGbpeJXjMpV886 7gQMns7Yqt5TkHzYULXVGHIyBgfJK/yuf8Y9tUQQXuNDmqP5jRZnUzLFzigTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0m9yaXS0WnBP1 kpNB+OmGys+I2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlhr V0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRYcHovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJY a1dGSkd5WkZWYjM0RmhhZ1NYZ2NDTFFDcFgyeU1aa1JzNWlXelpUWHB6LzAvMzQ5 QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZDQUNGODhEOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeqMMA0EAgACMAcDBQAoBEykMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUdjANBgkqhkiG9w0BAQsFAAOCAQEAlBcf4oHuHcTy5Fa/ JYp37OPxhXuRkBQIVwtyWgd/PwfSUCw6rCprugdJY/nL9aHQKCAaWmn1nki/wlgk qjeQC/nWKotFAKjgySnswxgSWb+ItF4//GeTouuIwhTiOIqvQA8zkQMKufvJ6ZZk QRfIW+qiJUmsVuWV/ZGXD3OJHS069bSvD2QI1fLJXzmf92BWo8abh/MU/g5f0rFI fO4+SrqfHsmGXWcYA4RgPidx2MO0jROsTQqwcNcJAfDFeJ8QJLU5s0ClDqU0mQ7L QzF2QCL1KdBOzD588D/qSHDguQArVKNsFf/RsVyZXNhajeB4aZhMtQm4vTiTjPsd rjFHiQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:24:22 2025 by rpki-client