$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer File: 395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer (raw, json) Hash identifier: OToytUDxpn4F8AA7HmAP8zR3yfbypgSz5O5nnA0I6uw= Subject key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E3E35D6AD9BF5C560B9AA3B60CD564E501B98A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft caRepository: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Sep 2025 22:20:09 +0000 Certificate not after: Mon 28 Sep 2026 22:25:09 +0000 Subordinate resources: AS: 274486 IP: 186.195.170.0/23 IP: 2804:94e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3e:35:d6:ad:9b:f5:c5:60:b9:aa:3b:60:cd:56:4e:50:1b:98:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 29 22:20:09 2025 GMT Not After : Sep 28 22:25:09 2026 GMT Subject: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:05:45:f8:c0:b1:8c:65:d9:6a:3b:39:c8: 77:96:37:8a:c9:64:8b:1a:0d:98:5f:e2:f2:59:db: dd:dd:f8:04:64:82:b9:dd:e2:e8:2b:97:89:e1:53: 22:2c:2e:b1:91:1d:bf:73:7f:4e:80:eb:43:7b:b9: 0a:a7:c9:82:d4:43:b1:14:14:4d:6a:91:18:d6:ab: ee:f2:41:a0:70:ba:c2:64:04:62:25:09:4f:70:98: 8b:67:2e:b0:e2:5c:de:1d:4a:db:64:26:b4:fb:01: b2:39:71:6a:62:24:e3:1a:e6:de:41:90:17:57:33: 71:09:05:f2:57:d8:cd:ff:ae:53:24:56:54:a0:5a: dd:1a:e3:a7:22:28:a0:5d:5d:e9:6c:96:05:be:58: 78:3a:90:0d:e6:c3:73:19:ca:a3:ff:cb:cf:2f:36: 17:bb:81:66:c6:bc:5e:b0:c0:be:e4:6a:f9:d1:12: f9:d7:fe:de:49:90:8b:e4:5b:42:c2:e2:13:cd:dc: 46:b1:65:64:6f:c2:ae:0c:79:ac:82:8a:ff:83:00: 71:72:c4:30:66:36:7a:2f:9d:19:00:2f:03:c5:7c: 9d:2b:47:f2:c8:9d:24:9f:64:35:e1:1f:35:48:6e: 89:14:42:2b:bd:25:3d:9d:c8:2f:5f:1b:78:58:c8: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.170.0/23 IPv6: 2804:94e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274486 Signature Algorithm: sha256WithRSAEncryption 7a:38:cb:0d:89:82:c8:97:ed:15:68:00:f6:9a:3b:ff:7b:dc: e7:19:7c:85:18:47:81:43:0c:cd:13:7f:f5:6b:8a:42:0f:53: ce:ef:4e:46:78:7d:bc:2b:4e:b0:35:43:7f:3b:79:17:a8:e4: 13:f8:7e:71:8d:13:9c:d8:a1:89:c6:79:95:91:d0:34:04:0c: 74:c1:2e:01:b7:e8:23:f7:e9:d1:0c:5a:ae:fe:ee:67:34:58: 85:bd:43:cc:2e:9f:3b:2c:7d:1b:d9:46:1a:c8:16:59:5e:4d: d5:e2:15:8f:cb:2f:a0:ff:f1:59:e7:0c:19:fe:d0:9d:f7:c7: b2:19:a4:01:cb:77:f7:96:6a:3a:29:eb:88:c6:fc:85:2c:cd: b3:72:0d:54:f4:d8:56:f9:dc:68:0b:cb:a2:95:d8:c6:e1:e1: 07:33:b4:2c:26:15:71:7a:9b:49:87:9b:5f:fb:52:33:69:63: 70:19:dc:d2:cb:e7:e2:52:0e:87:af:72:e2:74:86:10:73:99: 49:a5:56:ad:a9:d3:12:0f:0f:33:00:48:77:04:47:28:4d:6c: c7:25:86:e8:45:f4:e4:9f:3e:68:a6:45:bb:45:58:a0:25:a7: 87:90:fc:14:2d:3a:51:9b:7c:b2:fe:f3:2f:34:90:68:e7:39: 31:6b:7c:f5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDj411q2b9cVguao7YM1WTlAbmKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjkyMjIwMDlaFw0yNjA5MjgyMjI1MDlaMDMxMTAvBgNV BAMTKDM5NUEzQzBCOEY4QTJDRUZEQzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEAVF+MCxjGXZajs5yHeWN4rJ ZIsaDZhf4vJZ293d+ARkgrnd4ugrl4nhUyIsLrGRHb9zf06A60N7uQqnyYLUQ7EU FE1qkRjWq+7yQaBwusJkBGIlCU9wmItnLrDiXN4dSttkJrT7AbI5cWpiJOMa5t5B kBdXM3EJBfJX2M3/rlMkVlSgWt0a46ciKKBdXelslgW+WHg6kA3mw3MZyqP/y88v Nhe7gWbGvF6wwL7kavnREvnX/t5JkIvkW0LC4hPN3EaxZWRvwq4MeayCiv+DAHFy xDBmNnovnRkALwPFfJ0rR/LInSSfZDXhHzVIbokUQiu9JT2dyC9fG3hYyLA9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5WjwLj4os79w4 PVdvkHK8zHDLnzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0t6 anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdwOXUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NL empxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAvMzk1 QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkNDQzcwQ0I5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBusOqMA0EAgACMAcDBQAoBJToMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQwNjANBgkqhkiG9w0BAQsFAAOCAQEAejjLDYmCyJftFWgA 9po7/3vc5xl8hRhHgUMMzRN/9WuKQg9Tzu9ORnh9vCtOsDVDfzt5F6jkE/h+cY0T nNihicZ5lZHQNAQMdMEuAbfoI/fp0Qxarv7uZzRYhb1DzC6fOyx9G9lGGsgWWV5N 1eIVj8svoP/xWecMGf7QnffHshmkAct395ZqOinriMb8hSzNs3INVPTYVvncaAvL opXYxuHhBzO0LCYVcXqbSYebX/tSM2ljcBnc0svn4lIOh69y4nSGEHOZSaVWranT Eg8PMwBIdwRHKE1sxyWG6EX05J8+aKZFu0VYoCWnh5D8FC06UZt8sv7zLzSQaOc5 MWt89Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:06 2025 by rpki-client