$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer File: 3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer (raw, json) Hash identifier: s3C6TtJpI0EzLEsq50P2eIQFC61V1SPbHm6G8P4GUgc= Subject key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35C03F2AA1D929D0FB900A39AF6F57F5565AD104 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft caRepository: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 14:44:20 +0000 Certificate not after: Mon 14 Sep 2026 14:49:20 +0000 Subordinate resources: AS: 266502 IP: 170.244.172.0/22 IP: 2804:38cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c0:3f:2a:a1:d9:29:d0:fb:90:0a:39:af:6f:57:f5:56:5a:d1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 14:44:20 2025 GMT Not After : Sep 14 14:49:20 2026 GMT Subject: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:5f:f0:79:94:6b:a8:4d:27:04:8b:df:a4: a4:3b:ee:57:30:06:e1:0b:16:bf:bf:06:ea:ad:c1: 5d:71:2c:32:4a:22:78:9d:51:4c:5f:38:88:cd:6d: b6:79:07:cb:70:be:b9:4c:39:cd:95:06:7c:ec:03: ae:ab:5a:7d:ef:08:6a:31:36:89:13:ed:1a:01:09: da:22:0d:0e:ef:4d:61:00:01:45:9e:fc:c3:2b:19: e6:eb:05:14:34:dd:2e:1f:58:ae:b6:80:7a:5b:24: d8:18:97:b1:4c:ce:e4:e3:10:f0:c4:6e:af:9c:4a: 21:23:9c:c4:e4:46:6a:35:69:f6:83:3f:09:bc:0f: 9e:9a:c2:42:93:c1:4f:3f:82:f2:d8:f3:84:22:2d: 71:4f:49:52:3c:f0:7f:a7:8d:00:c1:53:bb:fe:fa: 8c:0f:15:32:c9:8d:cd:88:99:67:50:00:6f:b8:9c: b4:a5:ea:37:40:b2:65:1b:f5:a7:d2:bc:16:f1:dc: 57:07:36:e9:21:49:97:9b:9c:e0:a2:bb:3d:5a:c9: 05:c4:70:a2:90:1f:6f:9e:3f:6a:50:d0:7a:d6:0b: 2f:54:38:90:39:17:bd:b8:df:16:2a:ae:24:b2:99: b0:ec:1c:bf:c3:4a:74:bf:8e:d3:99:0d:20:59:db: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.172.0/22 IPv6: 2804:38cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266502 Signature Algorithm: sha256WithRSAEncryption 86:c7:4e:27:e3:d0:c8:bd:8f:ff:da:05:d1:35:f2:31:68:e9: 10:c5:2d:5e:2d:13:00:53:ab:a7:f2:29:15:bf:78:40:04:23: ba:5f:1d:7f:e5:ba:d0:62:aa:f4:2b:00:b3:73:b7:96:9e:cb: e2:fe:d9:f3:41:df:ad:46:59:73:77:7e:61:f5:8d:80:d1:31: 7e:c7:1a:17:c3:0e:01:06:d0:00:e0:1b:07:2e:90:48:1d:34: f9:9f:dd:a7:6e:3d:0c:9f:ed:7d:fe:78:6e:73:32:ca:61:5b: e2:0d:4a:8d:84:2f:89:95:55:3e:1e:63:4d:1f:da:b9:30:00: 20:d7:44:2e:47:eb:63:89:fb:af:50:06:b6:85:62:11:33:41: 85:8a:ae:98:64:2a:f8:76:01:7f:d2:93:89:78:de:f7:e8:2e: 6d:4f:15:ae:e4:d0:d0:14:bb:0b:0a:d1:42:7f:dd:93:2f:13: 69:d5:cd:44:fb:88:04:09:dc:d4:96:bf:d9:28:4e:2a:f4:6d: 94:2a:c1:c9:93:04:d7:cd:22:ef:16:ba:f6:1f:f8:f8:22:65: a1:e7:ca:58:4f:3b:12:f8:c5:a7:69:72:87:2d:c3:93:7c:f7: ed:a2:1a:a1:f3:7d:38:a9:c4:f4:8d:30:2b:0f:1b:6e:9e:d5: eb:c4:65:4e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNcA/KqHZKdD7kAo5r29X9VZa0QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUxNDQ0MjBaFw0yNjA5MTQxNDQ5MjBaMDMxMTAvBgNV BAMTKDNFNENFM0ZDMEYxNTExMUU4MTdGNkNFNTI2MjU2QUE3QzNCRjgyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lV/weZRrqE0nBIvfpKQ77lcw BuELFr+/BuqtwV1xLDJKInidUUxfOIjNbbZ5B8twvrlMOc2VBnzsA66rWn3vCGox NokT7RoBCdoiDQ7vTWEAAUWe/MMrGebrBRQ03S4fWK62gHpbJNgYl7FMzuTjEPDE bq+cSiEjnMTkRmo1afaDPwm8D56awkKTwU8/gvLY84QiLXFPSVI88H+njQDBU7v+ +owPFTLJjc2ImWdQAG+4nLSl6jdAsmUb9afSvBbx3FcHNukhSZebnOCiuz1ayQXE cKKQH2+eP2pQ0HrWCy9UOJA5F7243xYqriSymbDsHL/DSnS/jtOZDSBZ2wGBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+TOP8DxURHoF/ bOUmJWqnw7+CijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVhX cU5aekRZcDFBTmUza0FlZkhaZDVHWEo4QlY5ck5jQ1FNMTRzelhSb1AvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVY V3FOWnpEWXAxQU5lM2tBZWZIWmQ1R1hKOEJWOXJOY0NRTTE0c3pYUm9QLzEvM0U0 Q0UzRkMwRjE1MTExRTgxN0Y2Q0U1MjYyNTZBQTdDM0JGODI4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvSsMA0EAgACMAcDBQAoBDjMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRBjANBgkqhkiG9w0BAQsFAAOCAQEAhsdOJ+PQyL2P/9oF 0TXyMWjpEMUtXi0TAFOrp/IpFb94QAQjul8df+W60GKq9CsAs3O3lp7L4v7Z80Hf rUZZc3d+YfWNgNExfscaF8MOAQbQAOAbBy6QSB00+Z/dp249DJ/tff54bnMyymFb 4g1KjYQviZVVPh5jTR/auTAAINdELkfrY4n7r1AGtoViETNBhYqumGQq+HYBf9KT iXje9+gubU8VruTQ0BS7CwrRQn/dky8TadXNRPuIBAnc1Ja/2ShOKvRtlCrByZME 180i7xa69h/4+CJloefKWE87EvjFp2lyhy3Dk3z37aIaofN9OKnE9I0wKw8bbp7V 68RlTg== -----END CERTIFICATE-----Generated at Thu Sep 18 03:28:22 2025 by rpki-client