$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer File: 3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer (raw, json) Hash identifier: 4EmvJlgfY2fCAJ+8k+F2WigHZrlOuwxQAGiS88EUcIs= Subject key identifier: 3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 14B35F2FE2E6BDAABA1BE6C185EEE62A68ADC53B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft caRepository: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Oct 2025 19:38:04 +0000 Certificate not after: Thu 29 Oct 2026 19:43:04 +0000 Subordinate resources: AS: 263086 IP: 138.99.40.0/22 IP: 186.208.248.0/22 IP: 2804:970::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b3:5f:2f:e2:e6:bd:aa:ba:1b:e6:c1:85:ee:e6:2a:68:ad:c5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 30 19:38:04 2025 GMT Not After : Oct 29 19:43:04 2026 GMT Subject: CN=3CF934353EBFDABA82A37BB01E2978A8416E4E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:0d:d0:b3:ef:2b:c7:ed:f9:38:cd:52:cf: 90:ad:f0:2f:d4:ec:93:bd:e4:f2:ea:8d:67:f6:c2: 0f:bf:fc:d2:6b:a6:04:5a:8c:4b:b0:1b:77:b5:13: 82:f5:c9:37:72:46:81:8f:9a:a8:0c:8d:f2:5d:55: ba:9c:a9:bb:d9:f6:d2:7e:46:4f:33:c5:0c:6c:3c: a9:1d:52:35:06:ee:ba:ac:be:be:77:6f:6b:d5:39: 92:f5:04:11:79:50:85:8e:bd:31:1d:7d:d4:c1:f4: 98:ad:b7:43:ac:70:32:74:45:83:fd:e6:f9:2d:9f: 5b:40:80:7a:b5:0a:e2:00:26:98:7b:32:1e:58:34: 02:51:a7:91:18:9e:7e:ba:3f:e1:09:6e:22:57:18: e8:60:99:6d:dd:f9:81:6b:57:ed:2a:12:5a:1a:e4: 9f:62:62:76:8b:22:ba:68:b0:4a:cf:07:cf:8a:c0: 1d:46:d5:1d:73:ac:dc:0e:70:6a:f3:16:31:21:43: 61:4d:ab:12:5a:dd:ac:0e:70:1e:06:61:ed:19:3a: 1b:f3:97:6f:00:d3:aa:be:96:bc:d1:ab:d5:6d:84: f7:f3:d8:a4:97:78:59:f5:ec:65:01:95:c5:9b:3e: c2:ac:b7:6d:9a:fb:f4:01:e2:d5:21:ed:f2:50:b2: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.40.0/22 186.208.248.0/22 IPv6: 2804:970::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263086 Signature Algorithm: sha256WithRSAEncryption 02:b1:4f:a6:c3:7c:06:64:af:2e:be:35:d4:78:dc:7b:60:cc: 70:d2:45:e2:a2:d6:bd:ca:df:52:eb:6c:77:65:80:6e:ce:56: c2:d1:05:2c:23:08:f9:fd:fc:ce:fe:59:79:57:14:29:2e:a4: be:38:15:28:4b:06:c5:2d:b8:20:1f:d9:3a:97:f4:b0:03:22: cf:e1:f0:b8:ac:3f:f0:b0:f6:0b:6d:53:48:c7:56:8b:de:8b: 91:b6:b4:59:22:6a:c2:16:5c:b1:a0:24:5a:69:a6:bd:b1:1b: e4:68:4f:d0:b9:01:c0:83:79:e3:c0:0e:83:93:5b:0b:8d:ae: 85:25:9f:8e:46:da:18:76:36:77:e4:fe:aa:25:6d:b2:0a:e7: d1:63:83:8f:69:f4:64:46:03:50:b4:99:b3:35:3c:31:45:34: 95:ef:c6:d9:0c:75:17:49:50:cc:19:e3:e7:3a:89:0d:57:ad: 9c:cd:45:7c:d7:40:30:db:01:8d:fa:84:92:82:94:74:fe:4f: 76:1e:5e:a5:e3:8b:95:72:1c:48:6e:42:13:ec:77:d9:80:a7: a3:5c:98:73:69:c8:e7:bd:16:f1:86:0b:c3:6c:40:ff:71:34: aa:18:da:77:19:19:44:31:9a:88:9a:26:07:1c:87:63:e6:e5: e9:83:8d:d6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFLNfL+Lmvaq6G+bBhe7mKmitxTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzAxOTM4MDRaFw0yNjEwMjkxOTQzMDRaMDMxMTAvBgNV BAMTKDNDRjkzNDM1M0VCRkRBQkE4MkEzN0JCMDFFMjk3OEE4NDE2RTRFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhA3Qs+8rx+35OM1Sz5Ct8C/U 7JO95PLqjWf2wg+//NJrpgRajEuwG3e1E4L1yTdyRoGPmqgMjfJdVbqcqbvZ9tJ+ Rk8zxQxsPKkdUjUG7rqsvr53b2vVOZL1BBF5UIWOvTEdfdTB9Jitt0OscDJ0RYP9 5vktn1tAgHq1CuIAJph7Mh5YNAJRp5EYnn66P+EJbiJXGOhgmW3d+YFrV+0qEloa 5J9iYnaLIrposErPB8+KwB1G1R1zrNwOcGrzFjEhQ2FNqxJa3awOcB4GYe0ZOhvz l28A06q+lrzRq9VthPfz2KSXeFn17GUBlcWbPsKst22a+/QB4tUh7fJQsvPzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8+TQ1Pr/auoKj e7AeKXioQW5OYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFU2 SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RV Nko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAvM0NG OTM0MzUzRUJGREFCQTgyQTM3QkIwMUUyOTc4QTg0MTZFNEU2MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimMoAwQCutD4MA0EAgACMAcDBQAoBAlwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDrjANBgkqhkiG9w0BAQsFAAOCAQEAArFPpsN8 BmSvLr411Hjce2DMcNJF4qLWvcrfUutsd2WAbs5WwtEFLCMI+f38zv5ZeVcUKS6k vjgVKEsGxS24IB/ZOpf0sAMiz+HwuKw/8LD2C21TSMdWi96Lkba0WSJqwhZcsaAk WmmmvbEb5GhP0LkBwIN548AOg5NbC42uhSWfjkbaGHY2d+T+qiVtsgrn0WODj2n0 ZEYDULSZszU8MUU0le/G2Qx1F0lQzBnj5zqJDVetnM1FfNdAMNsBjfqEkoKUdP5P dh5epeOLlXIcSG5CE+x32YCno1yYc2nI570W8YYLw2xA/3E0qhjadxkZRDGaiJom BxyHY+bl6YON1g== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:49 2025 by rpki-client