$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer File: 36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer (raw, json) Hash identifier: 8n/hxo1Cq5z4OW5k1qVcqaAwtfD2nZRqeuz2TwY9FJI= Subject key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6486DF007AEE9CEC1BC885871B19A97A02EC926D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft caRepository: rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Oct 2025 01:49:56 +0000 Certificate not after: Mon 05 Oct 2026 01:54:56 +0000 Subordinate resources: AS: 265334 IP: 168.181.104.0/22 IP: 2804:2e3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:86:df:00:7a:ee:9c:ec:1b:c8:85:87:1b:19:a9:7a:02:ec:92:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 6 01:49:56 2025 GMT Not After : Oct 5 01:54:56 2026 GMT Subject: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:fe:ca:a4:a9:f1:41:39:f7:66:83:c0:c3: 19:6e:f2:90:39:d4:60:f3:cd:b2:1f:0a:95:98:e8: c6:0e:73:43:99:09:a1:c7:ee:8a:3f:d6:c0:92:a6: 04:b4:ef:9f:1c:e4:01:28:d2:72:b1:dc:98:cc:50: 6c:7b:87:af:e3:0a:6b:be:f3:09:38:41:48:1c:9f: fb:8f:c5:71:a1:ac:1f:a0:a0:20:6a:99:76:28:22: c3:3a:d4:f8:0f:0f:6f:1f:3b:ef:ea:95:da:bc:ef: bd:a1:4e:68:46:3d:20:9a:61:a5:9e:fb:18:ad:9d: 30:4d:0f:36:01:8f:f0:5c:26:91:72:33:9e:de:18: c7:2c:4b:74:79:0e:69:49:66:d3:2c:16:b4:36:a0: 00:09:a1:37:ae:39:0b:76:bc:97:c3:22:c4:c4:e4: 24:09:b3:07:bf:3a:72:b2:a7:88:a8:0e:c8:bc:10: 48:a9:73:cd:c8:ad:0d:60:14:5c:1d:a4:07:60:33: 68:a3:1b:93:32:e7:0a:1d:6e:90:c2:65:f2:14:52: b1:13:96:d3:11:4d:eb:f0:a5:ca:a8:36:89:86:d2: 93:1b:f5:7b:63:ef:e1:d4:b9:3d:93:24:ed:cb:a1: de:ae:70:a6:f3:02:02:5e:65:3d:3c:80:9b:f3:18: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.104.0/22 IPv6: 2804:2e3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265334 Signature Algorithm: sha256WithRSAEncryption d8:c3:7c:a5:d7:fe:44:90:0d:02:23:69:a9:0d:ef:eb:25:20: 24:b0:6d:11:22:c6:01:6e:36:80:f7:cb:a2:ba:69:4b:c2:a0: db:06:c1:85:a5:d7:e2:ff:42:5e:34:dd:d3:3f:9d:94:5b:e5: f3:a0:72:d5:5c:c0:7d:cf:2c:48:9e:fe:41:fd:14:43:8c:2d: a7:01:da:de:c0:db:8b:de:f4:6d:bc:8d:b9:51:20:08:90:c0: 02:fe:f5:9e:55:08:16:91:5d:fd:a7:d4:0d:c4:65:d8:68:05: 77:40:46:e2:af:b0:b5:84:43:7d:b7:12:66:b9:56:6b:f6:18: e3:26:67:e0:62:16:9e:b7:db:6d:ba:53:14:8b:da:08:92:a1: 78:b4:7d:b0:1d:77:16:97:fa:48:31:20:56:85:b7:c1:84:ae: 22:ec:a5:1c:c7:bc:5f:68:4e:ba:3b:91:19:7d:5a:7d:8a:ab: 4b:62:78:fa:7b:cc:78:08:3c:e0:3a:c9:a4:4f:2e:1b:75:26: 26:84:44:05:3e:40:f1:af:25:67:8e:6b:3d:8b:a4:2b:12:23: 8e:eb:3e:09:71:09:6e:7b:ce:74:64:31:09:44:fe:42:5e:db: f8:df:ea:a3:9a:78:36:e2:12:2d:cd:17:79:10:3d:d5:cc:ea: 3f:a8:c9:8e -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUZIbfAHrunOwbyIWHGxmpegLskm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDYwMTQ5NTZaFw0yNjEwMDUwMTU0NTZaMDMxMTAvBgNV BAMTKDM2QUNENDRFMkUzRTE2Mzg4RkEyOTAxRTVCQzlCQjc5QTg4MUJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRmv7KpKnxQTn3ZoPAwxlu8pA5 1GDzzbIfCpWY6MYOc0OZCaHH7oo/1sCSpgS0758c5AEo0nKx3JjMUGx7h6/jCmu+ 8wk4QUgcn/uPxXGhrB+goCBqmXYoIsM61PgPD28fO+/qldq8772hTmhGPSCaYaWe +xitnTBNDzYBj/BcJpFyM57eGMcsS3R5DmlJZtMsFrQ2oAAJoTeuOQt2vJfDIsTE 5CQJswe/OnKyp4ioDsi8EEipc83IrQ1gFFwdpAdgM2ijG5My5wodbpDCZfIUUrET ltMRTevwpcqoNomG0pMb9Xtj7+HUuT2TJO3Lod6ucKbzAgJeZT08gJvzGKsnAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2rNROLj4WOI+i kB5bybt5qIG/gDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vekc4 Qmh1NnNpOFZaOURtQnNMTWJONnJqR1pReG9YdEdMenFwZFZFV2hkOC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vekc4 Qmh1NnNpOFZaOURtQnNMTWJONnJqR1pReG9YdEdMenFwZFZFV2hkOC8wLzM2QUNE NDRFMkUzRTE2Mzg4RkEyOTAxRTVCQzlCQjc5QTg4MUJGODAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqi1aDANBAIAAjAHAwUAKAQuPDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEDHYwDQYJKoZIhvcNAQELBQADggEBANjDfKXX/kSQDQIjaakN 7+slICSwbREixgFuNoD3y6K6aUvCoNsGwYWl1+L/Ql403dM/nZRb5fOgctVcwH3P LEie/kH9FEOMLacB2t7A24ve9G28jblRIAiQwAL+9Z5VCBaRXf2n1A3EZdhoBXdA RuKvsLWEQ323Ema5Vmv2GOMmZ+BiFp632226UxSL2giSoXi0fbAddxaX+kgxIFaF t8GEriLspRzHvF9oTro7kRl9Wn2Kq0tiePp7zHgIPOA6yaRPLht1JiaERAU+QPGv JWeOaz2LpCsSI47rPglxCW57znRkMQlE/kJe2/jf6qOaeDbiEi3NF3kQPdXM6j+o yY4= -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:02 2025 by rpki-client