$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39CFD8E08767B7EDB074E84F592154C51141B85D.cer File: 39CFD8E08767B7EDB074E84F592154C51141B85D.cer (raw, json) Hash identifier: 2qJBZ9QqXuMUcqtXCvjI9Es3kiNXdRjKKA3I/4r4gOk= Subject key identifier: 39:CF:D8:E0:87:67:B7:ED:B0:74:E8:4F:59:21:54:C5:11:41:B8:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2361213CA9ACF1E501499BE6DB18617D3EBE1504 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/39CFD8E08767B7EDB074E84F592154C51141B85D.mft caRepository: rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 10:34:10 +0000 Certificate not after: Fri 06 Mar 2026 10:39:10 +0000 Subordinate resources: AS: 273787 IP: 2804:8c34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:61:21:3c:a9:ac:f1:e5:01:49:9b:e6:db:18:61:7d:3e:be:15:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 10:34:10 2025 GMT Not After : Mar 6 10:39:10 2026 GMT Subject: CN=39CFD8E08767B7EDB074E84F592154C51141B85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:55:65:1a:42:2e:fd:3d:02:a0:3b:a3:45: dc:02:b9:80:e7:a0:5b:92:f7:0d:16:14:47:5e:e7: 29:29:fb:72:10:f6:d7:16:07:ee:85:d2:26:1a:b1: 11:df:6b:15:cb:03:73:e2:76:be:8f:87:7c:f3:51: 1a:74:09:1d:7a:98:ac:81:1b:f2:c8:4b:96:61:5e: 7f:eb:ce:54:25:1b:45:01:32:82:9a:ff:ba:1c:9f: 37:d0:56:e4:13:94:7c:7b:65:ed:10:1c:53:76:8d: 62:88:94:7f:17:00:d3:39:87:20:23:9a:33:77:0b: f4:fc:1e:4b:14:56:d9:3e:b1:e9:61:de:97:ba:f2: d3:2d:0f:dd:16:30:75:60:22:a7:56:14:16:2a:6f: d6:2b:47:ae:21:a3:cb:b5:62:a4:38:de:7f:0e:be: 5b:67:92:d7:c8:bb:52:d1:a3:69:c4:63:2f:86:b9: 2a:75:26:38:b1:62:d8:2c:85:91:b2:48:3b:ec:95: f9:a0:d1:ba:82:a5:08:0f:e7:64:2a:0b:4d:1d:a6: 93:64:67:03:55:59:17:70:5d:6a:75:fe:40:7a:a8: 71:8c:c1:c4:43:00:99:fb:42:ab:4c:8b:18:66:0b: a6:a4:31:c0:a5:df:2e:93:75:b0:53:c8:d1:67:ab: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:CF:D8:E0:87:67:B7:ED:B0:74:E8:4F:59:21:54:C5:11:41:B8:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/39CFD8E08767B7EDB074E84F592154C51141B85D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8c34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273787 Signature Algorithm: sha256WithRSAEncryption 00:f0:4b:e3:05:3e:18:e9:2d:8c:ad:14:94:f7:35:e2:81:88: b4:7b:85:8b:96:c0:e6:5d:c1:33:f1:6a:02:af:c6:5a:cc:ae: d2:b3:bb:69:2f:f6:3e:46:db:06:84:41:fd:a8:ab:16:60:55: 7a:75:cd:f7:0e:74:29:51:77:a3:6d:f4:1a:2d:9d:3c:de:b6: 30:35:5d:36:58:88:c8:bf:11:6e:e0:93:b4:e7:c5:2a:23:e7: e4:cc:b2:0c:de:9a:3f:b0:92:ce:e7:d2:87:f1:c8:35:44:c8: f3:7d:2b:8b:cd:1e:5b:a2:76:77:f4:5a:97:c3:c2:30:eb:d6: 81:1b:f3:0d:78:26:21:0b:7f:db:ed:ab:5d:cb:35:dd:07:74: b1:c4:9f:7c:0e:74:c6:fb:3c:8c:80:46:44:b2:70:77:44:01: c6:b4:33:da:31:fa:40:84:18:f5:8b:58:a9:70:81:db:00:44: 4e:22:f2:d0:c3:6a:f0:04:39:32:0e:11:45:54:02:4d:30:9a: c6:59:5d:5b:af:8a:3f:27:7e:3e:df:c7:37:4c:bf:1d:e5:65: 54:cf:de:a9:4d:d5:d5:54:e8:75:b8:64:10:9e:7e:fc:3d:d2: 60:aa:ad:23:fe:1e:95:dc:1b:df:9c:ea:10:55:00:22:12:eb: 30:b9:58:3d -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUI2EhPKms8eUBSZvm2xhhfT6+FQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMDM0MTBaFw0yNjAzMDYxMDM5MTBaMDMxMTAvBgNV BAMTKDM5Q0ZEOEUwODc2N0I3RURCMDc0RTg0RjU5MjE1NEM1MTE0MUI4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkX1VlGkIu/T0CoDujRdwCuYDn oFuS9w0WFEde5ykp+3IQ9tcWB+6F0iYasRHfaxXLA3Pidr6Ph3zzURp0CR16mKyB G/LIS5ZhXn/rzlQlG0UBMoKa/7ocnzfQVuQTlHx7Ze0QHFN2jWKIlH8XANM5hyAj mjN3C/T8HksUVtk+selh3pe68tMtD90WMHVgIqdWFBYqb9YrR64ho8u1YqQ43n8O vltnktfIu1LRo2nEYy+GuSp1JjixYtgshZGySDvslfmg0bqCpQgP52QqC00dppNk ZwNVWRdwXWp1/kB6qHGMwcRDAJn7QqtMixhmC6akMcCl3y6TdbBTyNFnqxHNAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5z9jgh2e37bB0 6E9ZIVTFEUG4XTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ3 dVFMU0ZoWGpDWlRKY3dHWmVHcU01ckNkMVBveHJMVDlydXpWZEpjWkMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 d3VRTFNGaFhqQ1pUSmN3R1plR3FNNXJDZDFQb3hyTFQ5cnV6VmRKY1pDLzEvMzlD RkQ4RTA4NzY3QjdFREIwNzRFODRGNTkyMTU0QzUxMTQxQjg1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASMNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LXswDQYJKoZIhvcNAQELBQADggEBAADwS+MFPhjpLYytFJT3NeKBiLR7hYuWwOZd wTPxagKvxlrMrtKzu2kv9j5G2waEQf2oqxZgVXp1zfcOdClRd6Nt9BotnTzetjA1 XTZYiMi/EW7gk7TnxSoj5+TMsgzemj+wks7n0ofxyDVEyPN9K4vNHluidnf0WpfD wjDr1oEb8w14JiELf9vtq13LNd0HdLHEn3wOdMb7PIyARkSycHdEAca0M9ox+kCE GPWLWKlwgdsARE4i8tDDavAEOTIOEUVUAk0wmsZZXVuvij8nfj7fxzdMvx3lZVTP 3qlN1dVU6HW4ZBCefvw90mCqrSP+HpXcG9+c6hBVACIS6zC5WD0= -----END CERTIFICATE-----Generated at Mon Nov 3 05:38:10 2025 by rpki-client