$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer File: 3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer (raw, json) Hash identifier: LL85QSXPki6GEK7jgnZZB3vIdi4/FWKa/ADH/AiQ7GM= Subject key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1370C21258B662C889C43FC8DEF6260921CB0B9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft caRepository: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 01:06:58 +0000 Certificate not after: Tue 21 Apr 2026 01:11:58 +0000 Subordinate resources: AS: 271487 IP: 201.94.144.0/22 IP: 2804:7c4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:70:c2:12:58:b6:62:c8:89:c4:3f:c8:de:f6:26:09:21:cb:0b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 01:06:58 2025 GMT Not After : Apr 21 01:11:58 2026 GMT Subject: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:02:df:b5:bd:8a:a7:e9:23:fb:86:ac:20: 69:ff:c8:c1:e5:66:51:68:a3:be:17:42:e1:a1:6c: 9e:0f:19:8e:a8:67:2f:39:2e:9f:55:92:1f:5e:b6: 0b:5c:f9:85:45:c4:7b:dd:9c:74:7c:60:ee:c5:72: d7:dc:e2:df:28:39:54:ad:fb:32:5d:df:91:47:12: 42:70:2d:32:55:68:ee:f2:63:33:df:72:0b:71:17: a2:8b:e4:29:b6:eb:5e:fc:98:6d:92:e7:9b:3a:bd: 1e:cd:1a:63:9c:7b:f8:e4:af:29:d7:b8:03:2e:7e: c5:54:9c:9b:5b:aa:13:d5:e6:d1:68:e9:23:ae:d2: ef:79:44:99:66:41:21:5b:c2:45:cf:35:e6:ea:47: 86:9f:dc:7e:70:76:16:df:be:df:09:12:f4:d1:c4: 58:1c:f6:29:b0:52:d7:8e:c8:4a:66:58:09:d6:04: e7:95:22:f3:14:34:3d:3b:be:46:c0:ce:79:f3:39: 9a:d0:d9:0c:ac:a3:4a:f9:af:f5:a0:86:d6:df:9d: 62:8a:28:0d:ca:0f:df:2b:cb:80:f2:d1:18:1f:4a: c3:dc:e3:72:5e:09:b3:d4:bc:4d:53:cd:ec:90:0f: d0:a9:47:e2:50:a9:de:22:32:5f:c5:a0:7b:2d:63: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.94.144.0/22 IPv6: 2804:7c4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271487 Signature Algorithm: sha256WithRSAEncryption 82:a1:d3:aa:39:ee:89:e9:b4:0e:6d:08:fd:01:e8:a9:c0:8e: 29:f5:ef:82:21:e5:92:9e:c6:fe:62:53:5b:52:6e:cc:3e:23: dc:23:5a:9a:d2:f5:01:48:ad:21:e7:ee:85:b0:9d:1a:31:8d: a6:17:0a:be:44:39:de:91:34:cb:10:48:2d:9a:90:e4:9c:4f: bb:cd:b0:43:62:42:26:3f:e7:01:1d:ef:8f:06:20:9a:92:ef: 6f:2e:b7:a1:5b:85:3f:47:ff:c6:e9:ef:6a:41:f5:a1:18:67: 3e:ee:c5:a5:82:8c:6b:86:7d:c5:e0:43:51:cf:81:14:c0:e0: 81:a9:46:ad:11:56:24:c6:d6:17:57:49:ad:70:3c:82:dd:b6: 8f:e3:b4:fc:d8:b9:60:74:89:29:e6:54:25:1d:02:6d:ea:04: 50:3b:60:3c:06:88:55:3a:49:be:92:38:d2:2d:cb:6b:d8:81: b2:98:de:41:4e:74:92:58:30:91:b1:d8:fc:57:47:a0:0a:15: 63:96:f5:73:8b:22:3f:3c:67:7c:16:e9:24:37:33:fb:8f:0b: b7:ae:a7:f2:ba:b1:a0:d5:53:3a:0c:63:35:f5:b3:71:b1:04: 5f:ce:c7:2f:0a:bc:d2:dd:0b:8c:c4:ab:1b:35:35:70:7b:e6: 27:0c:55:f6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUE3DCEli2YsiJxD/I3vYmCSHLC5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIwMTA2NThaFw0yNjA0MjEwMTExNThaMDMxMTAvBgNV BAMTKDNGMEVFNTFFQ0ZDMEQxRDg0QjE0QTFGRDBCMUUxNzc4NDZGMkY4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sQLftb2Kp+kj+4asIGn/yMHl ZlFoo74XQuGhbJ4PGY6oZy85Lp9Vkh9etgtc+YVFxHvdnHR8YO7Fctfc4t8oOVSt +zJd35FHEkJwLTJVaO7yYzPfcgtxF6KL5Cm26178mG2S55s6vR7NGmOce/jkrynX uAMufsVUnJtbqhPV5tFo6SOu0u95RJlmQSFbwkXPNebqR4af3H5wdhbfvt8JEvTR xFgc9imwUteOyEpmWAnWBOeVIvMUND07vkbAznnzOZrQ2Qyso0r5r/WghtbfnWKK KA3KD98ry4Dy0RgfSsPc43JeCbPUvE1TzeyQD9CpR+JQqd4iMl/FoHstY6Z1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/DuUez8DR2EsU of0LHhd4RvL4WjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0xU ZFV0UDRBUGVIWHpwSHAyc1lXbzZ1cjhXU2txSFppTDY1MUc1dHRvVkQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NM VGRVdFA0QVBlSFh6cEhwMnNZV282dXI4V1NrcUhaaUw2NTFHNXR0b1ZELzEvM0Yw RUU1MUVDRkMwRDFEODRCMTRBMUZEMEIxRTE3Nzg0NkYyRjg1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyV6QMA0EAgACMAcDBQAoBHxMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkfzANBgkqhkiG9w0BAQsFAAOCAQEAgqHTqjnuiem0Dm0I /QHoqcCOKfXvgiHlkp7G/mJTW1JuzD4j3CNamtL1AUitIefuhbCdGjGNphcKvkQ5 3pE0yxBILZqQ5JxPu82wQ2JCJj/nAR3vjwYgmpLvby63oVuFP0f/xunvakH1oRhn Pu7FpYKMa4Z9xeBDUc+BFMDggalGrRFWJMbWF1dJrXA8gt22j+O0/Ni5YHSJKeZU JR0CbeoEUDtgPAaIVTpJvpI40i3La9iBspjeQU50klgwkbHY/FdHoAoVY5b1c4si PzxnfBbpJDcz+48Lt66n8rqxoNVTOgxjNfWzcbEEX87HLwq80t0LjMSrGzU1cHvm JwxV9g== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:40 2025 by rpki-client