$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.cer File: 44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.cer (raw, json) Hash identifier: coWHBwn/xm5U+DzZ3tziX+a7EhxtuxsviTlwpZgTtZs= Subject key identifier: 44:46:3A:E9:A0:B8:D2:15:D4:D8:BA:6E:B3:3A:39:92:6B:D8:A5:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6E98BBBD92723C4FEB83526106403138752D6001 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.mft caRepository: rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 23:30:43 +0000 Certificate not after: Mon 14 Sep 2026 23:35:43 +0000 Subordinate resources: AS: 273800 IP: 168.194.18.0/23 IP: 2804:8c68::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:98:bb:bd:92:72:3c:4f:eb:83:52:61:06:40:31:38:75:2d:60:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 23:30:43 2025 GMT Not After : Sep 14 23:35:43 2026 GMT Subject: CN=44463AE9A0B8D215D4D8BA6EB33A39926BD8A599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:3c:d8:e1:76:6e:75:29:5b:1c:bb:16:b0: 8b:14:12:53:65:27:5d:cf:56:1b:84:d1:05:d1:3b: 9c:e3:19:27:41:0b:f6:df:a6:d7:25:2a:31:c4:48: cc:ed:6b:31:2f:68:43:cb:42:41:17:59:48:dd:39: 1b:8e:60:55:8d:2a:03:ce:b6:32:82:53:6c:db:13: 31:c1:56:81:8a:99:e8:d3:20:1e:59:9c:91:11:ff: 43:9d:71:f5:5d:67:a4:60:bb:88:4f:dc:b8:14:85: 3a:59:42:ef:b4:30:87:b9:8a:a8:b1:2a:4e:d0:88: 91:e6:86:b6:04:ed:43:11:24:7f:49:0b:a8:68:f3: ec:dc:28:a4:bc:ab:ea:a4:29:59:25:81:87:63:53: 34:96:c0:e6:fa:04:5b:0c:e8:ff:74:87:4f:14:c0: 5a:c6:b2:4e:5b:18:d8:6a:ea:66:08:a3:7d:8a:c5: aa:93:16:32:ba:fa:fd:34:98:80:43:68:7e:7b:4c: 80:7e:25:60:d4:95:fc:2a:1a:e1:af:c9:82:18:5d: 84:ad:f4:d4:f7:83:b4:aa:2d:a9:cd:d0:dd:e8:2e: 83:22:08:2a:e9:ee:80:7b:5a:17:95:a0:cd:a5:cb: 04:19:9f:46:2e:44:f7:b3:e3:40:c7:75:b6:09:06: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:46:3A:E9:A0:B8:D2:15:D4:D8:BA:6E:B3:3A:39:92:6B:D8:A5:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.18.0/23 IPv6: 2804:8c68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273800 Signature Algorithm: sha256WithRSAEncryption 41:eb:5e:4d:f1:79:e4:39:50:40:09:58:93:f3:11:c0:e4:f4: ec:27:52:66:84:16:57:7c:d8:14:02:40:5e:e7:36:6d:77:93: 66:d5:d7:1b:1a:5b:8b:84:12:6f:e1:3b:10:fe:86:33:fd:2c: e9:c5:60:eb:ef:bd:02:ec:5d:19:7d:41:d2:aa:44:8c:c9:a4: 4e:bb:9f:fc:18:20:39:e4:73:88:dc:0a:70:91:20:57:63:d5: b8:d1:47:15:b9:39:12:d5:eb:4a:9d:d4:1c:9f:5f:a5:a4:98: bd:25:7e:ca:ce:8e:f5:8a:76:bf:bb:f9:61:b4:79:71:ae:b7: cd:99:2b:4c:2a:9b:67:15:64:45:0a:7b:ef:fa:de:f7:58:8d: 90:43:7b:86:dd:b6:1f:85:af:23:60:e0:5d:f3:d3:1a:52:d9: a5:83:e2:81:69:33:7c:4f:af:59:9c:08:76:9b:95:02:79:5e: c0:c8:d0:c4:40:f4:ca:43:da:b0:86:20:b3:60:12:e5:b4:5d: 6f:b6:c2:d8:3e:f0:06:97:2d:c3:47:d4:8f:f7:c8:bf:4d:f6: 53:2c:63:c8:5f:35:15:5a:f2:c7:1a:65:57:7e:ff:0e:93:5a: eb:d1:2f:47:06:68:48:76:ac:6b:87:c5:2d:e8:a3:e6:97:09: 58:cf:ed:22 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbpi7vZJyPE/rg1JhBkAxOHUtYAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUyMzMwNDNaFw0yNjA5MTQyMzM1NDNaMDMxMTAvBgNV BAMTKDQ0NDYzQUU5QTBCOEQyMTVENEQ4QkE2RUIzM0EzOTkyNkJEOEE1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8DzY4XZudSlbHLsWsIsUElNl J13PVhuE0QXRO5zjGSdBC/bfptclKjHESMztazEvaEPLQkEXWUjdORuOYFWNKgPO tjKCU2zbEzHBVoGKmejTIB5ZnJER/0OdcfVdZ6Rgu4hP3LgUhTpZQu+0MIe5iqix Kk7QiJHmhrYE7UMRJH9JC6ho8+zcKKS8q+qkKVklgYdjUzSWwOb6BFsM6P90h08U wFrGsk5bGNhq6mYIo32KxaqTFjK6+v00mIBDaH57TIB+JWDUlfwqGuGvyYIYXYSt 9NT3g7SqLanN0N3oLoMiCCrp7oB7WheVoM2lywQZn0YuRPez40DHdbYJBuBrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRERjrpoLjSFdTY um6zOjmSa9ilmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmJX TXFENDdGMXA2SEVaRGJUdndTeWJtRGlQUFVzNWlRVjVtcExNYmkyVkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi V01xRDQ3RjFwNkhFWkRiVHZ3U3libURpUFBVczVpUVY1bXBMTWJpMlZMLzAvNDQ0 NjNBRTlBMEI4RDIxNUQ0RDhCQTZFQjMzQTM5OTI2QkQ4QTU5OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBqMISMA0EAgACMAcDBQAoBIxoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQtiDANBgkqhkiG9w0BAQsFAAOCAQEAQeteTfF55DlQQAlY k/MRwOT07CdSZoQWV3zYFAJAXuc2bXeTZtXXGxpbi4QSb+E7EP6GM/0s6cVg6++9 AuxdGX1B0qpEjMmkTruf/BggOeRziNwKcJEgV2PVuNFHFbk5EtXrSp3UHJ9fpaSY vSV+ys6O9Yp2v7v5YbR5ca63zZkrTCqbZxVkRQp77/re91iNkEN7ht22H4WvI2Dg XfPTGlLZpYPigWkzfE+vWZwIdpuVAnlewMjQxED0ykPasIYgs2AS5bRdb7bC2D7w Bpctw0fUj/fIv032UyxjyF81FVryxxplV37/DpNa69EvRwZoSHasa4fFLeij5pcJ WM/tIg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:31:17 2025 by rpki-client