$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.cer File: 39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.cer (raw, json) Hash identifier: rf3GveQRiMohvP0s3YoCLtSQ95/uKXGd1QTKp1IkkDA= Subject key identifier: 39:E8:8E:BB:C8:FA:C1:97:7E:42:AF:4B:B8:64:1A:94:DD:CD:5A:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71A4E54D90F937AC37D44DCE96C1B558FDE6B081 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.mft caRepository: rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 04 Oct 2025 12:53:55 +0000 Certificate not after: Sat 03 Oct 2026 12:58:55 +0000 Subordinate resources: AS: 273464 IP: 2804:8f0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:e5:4d:90:f9:37:ac:37:d4:4d:ce:96:c1:b5:58:fd:e6:b0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 4 12:53:55 2025 GMT Not After : Oct 3 12:58:55 2026 GMT Subject: CN=39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:14:14:98:14:49:59:4f:69:65:12:21:28: 70:3d:57:ff:df:54:74:3e:83:6c:58:19:43:f5:77: 92:58:50:e4:3a:e8:55:48:cc:50:03:7f:78:9a:90: 9b:26:f9:52:e1:28:3d:47:f9:49:eb:55:13:63:ff: bd:e5:f7:75:fe:40:92:e7:cd:f4:94:a6:5b:cb:ab: ff:5e:3a:e5:d9:4c:e4:af:a4:54:af:d3:92:1e:4b: a2:5f:02:65:b1:79:89:90:cb:44:3c:af:4b:52:91: e5:ce:99:0b:0b:f7:00:e9:9f:7c:20:f1:dc:04:60: ad:7d:85:3d:75:98:12:7f:c4:5a:ea:51:f1:08:ab: f8:95:a1:ae:32:11:d4:ed:64:b9:65:cc:c8:72:13: df:0a:7a:c3:a1:63:b3:90:54:f9:c1:c3:75:c9:83: eb:2d:7e:72:01:e5:71:f3:1a:6a:6e:25:7a:60:42: 02:53:70:8f:de:9a:ff:38:87:1f:a3:8c:99:dc:39: 2a:04:02:95:8d:5d:7f:35:b9:5d:30:9e:d8:e1:b0: 55:c9:8b:91:e7:8b:1a:bf:8f:93:75:95:17:ac:e0: 88:c7:f6:b4:9d:91:74:8c:21:d0:25:73:56:03:a2: 56:d2:ce:2b:9d:a4:bd:c3:66:9d:08:7b:4a:04:43: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:E8:8E:BB:C8:FA:C1:97:7E:42:AF:4B:B8:64:1A:94:DD:CD:5A:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8f0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273464 Signature Algorithm: sha256WithRSAEncryption 53:1e:42:a1:05:49:42:72:b0:0b:44:66:4f:ba:c5:40:4a:22: dd:9a:b8:99:03:f6:d0:91:63:1f:62:cd:02:49:20:d8:33:d9: fb:15:e0:3d:66:df:b3:46:08:b2:f3:51:98:a0:3a:26:84:49: 23:e7:a2:7d:6f:0c:52:86:20:69:b1:25:5f:f3:56:5d:a3:39: 4d:32:25:89:0b:fe:ce:26:45:b3:37:6b:9f:ea:7f:5e:83:59: 7f:6e:4a:f2:5f:64:be:f8:f4:83:ad:09:52:10:aa:7a:7f:9d: cd:3c:f1:ff:93:cf:7e:54:54:e0:a0:bd:64:9b:46:24:10:94: 16:23:08:a9:27:fb:e3:ae:ca:da:b2:91:93:7e:13:40:96:7d: ac:80:2b:fc:d2:ba:87:33:e5:e4:5d:ce:b0:7c:97:9e:87:73: 78:8c:5e:56:d5:ba:64:cf:c2:e9:1b:73:e5:c2:32:24:f6:9f: 0d:0e:26:f1:1e:7d:e1:bc:95:df:70:76:09:9d:29:4d:8e:04: b4:fc:37:d2:7e:5e:d6:a4:6b:ab:e1:90:2d:03:94:84:06:13: 6f:91:40:1e:23:f5:02:d6:5b:26:91:a0:87:92:33:ec:e2:9e: c8:c7:91:7e:55:e8:3a:14:ff:2b:4d:32:ba:40:b9:2d:53:13: dd:5e:be:1d -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUcaTlTZD5N6w31E3OlsG1WP3msIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDQxMjUzNTVaFw0yNjEwMDMxMjU4NTVaMDMxMTAvBgNV BAMTKDM5RTg4RUJCQzhGQUMxOTc3RTQyQUY0QkI4NjQxQTk0RERDRDVBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKxQUmBRJWU9pZRIhKHA9V//f VHQ+g2xYGUP1d5JYUOQ66FVIzFADf3iakJsm+VLhKD1H+UnrVRNj/73l93X+QJLn zfSUplvLq/9eOuXZTOSvpFSv05IeS6JfAmWxeYmQy0Q8r0tSkeXOmQsL9wDpn3wg 8dwEYK19hT11mBJ/xFrqUfEIq/iVoa4yEdTtZLllzMhyE98KesOhY7OQVPnBw3XJ g+stfnIB5XHzGmpuJXpgQgJTcI/emv84hx+jjJncOSoEApWNXX81uV0wntjhsFXJ i5Hnixq/j5N1lRes4IjH9rSdkXSMIdAlc1YDolbSziudpL3DZp0Ie0oEQ1MnAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ56I67yPrBl35C r0u4ZBqU3c1aIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRThG MWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdnVGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U4 RjFnWmF2VVplMXYyV0ZkSm90dUtvTVBqRzV6TGdkZnpGRGhNVkJnZ1RkLzAvMzlF ODhFQkJDOEZBQzE5NzdFNDJBRjRCQjg2NDFBOTRERENENUEyMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASPDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LDgwDQYJKoZIhvcNAQELBQADggEBAFMeQqEFSUJysAtEZk+6xUBKIt2auJkD9tCR Yx9izQJJINgz2fsV4D1m37NGCLLzUZigOiaESSPnon1vDFKGIGmxJV/zVl2jOU0y JYkL/s4mRbM3a5/qf16DWX9uSvJfZL749IOtCVIQqnp/nc088f+Tz35UVOCgvWSb RiQQlBYjCKkn++OuytqykZN+E0CWfayAK/zSuocz5eRdzrB8l56Hc3iMXlbVumTP wukbc+XCMiT2nw0OJvEefeG8ld9wdgmdKU2OBLT8N9J+Xtaka6vhkC0DlIQGE2+R QB4j9QLWWyaRoIeSM+zinsjHkX5V6DoU/ytNMrpAuS1TE91evh0= -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:00 2025 by rpki-client