$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer File: 829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer (raw, json) Hash identifier: DCOtMAkdrquGpSQyRzBNBNcPFJfNtQma7R3OyA7jFBI= Subject key identifier: 82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2B2F5C134BECD1D52A7AE5AB1C059423FECC7706 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft caRepository: rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Oct 2025 12:06:05 +0000 Certificate not after: Fri 30 Oct 2026 12:11:05 +0000 Subordinate resources: AS: 274678 IP: 2804:91f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2f:5c:13:4b:ec:d1:d5:2a:7a:e5:ab:1c:05:94:23:fe:cc:77:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 12:06:05 2025 GMT Not After : Oct 30 12:11:05 2026 GMT Subject: CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:b8:25:71:ef:78:1b:67:98:dc:35:1d:e5: 85:3c:49:fd:d5:c8:80:57:b7:7c:d7:9f:b7:9e:05: dc:a4:38:97:8f:45:30:df:26:ab:00:fe:e7:20:28: fd:9f:39:c0:2a:b4:19:fa:50:fb:a3:54:13:70:13: 30:61:25:0a:89:aa:fe:86:fa:90:70:61:52:4f:5f: 78:09:fd:13:cd:19:ef:36:46:74:51:94:ad:75:be: 95:e5:c6:f4:6c:76:bc:93:4a:0d:f7:e6:c8:dd:90: 95:a4:2b:3e:29:9f:96:1b:1c:f2:14:e5:40:73:34: 6f:08:97:c5:69:5f:13:2c:cd:20:4c:dd:db:50:3e: 3f:ed:3e:3e:d5:a3:f4:54:dd:58:9b:57:22:4d:9c: f9:69:a9:12:53:19:b0:59:ec:8a:27:a7:8d:90:8f: 89:f6:35:54:3b:52:5c:84:86:ee:86:fa:82:77:4e: 6f:b3:09:39:f3:db:ce:33:25:74:8f:2d:36:1e:c5: 2f:ba:aa:13:6b:e3:3b:7c:66:ab:6c:07:91:2c:71: 3e:5c:65:78:15:a3:64:f7:51:d7:0b:86:bb:7a:25: ae:57:a6:d1:ad:ae:97:58:53:56:c0:02:c3:fb:aa: 01:91:98:a4:7c:9c:f7:c1:7e:33:4e:b4:79:3e:55: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:91f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274678 Signature Algorithm: sha256WithRSAEncryption a8:ed:90:b5:91:d3:84:ae:25:74:b6:9d:10:18:c6:b5:bf:85: 53:7c:cd:28:a8:91:cd:25:ec:85:23:20:62:19:c8:fd:96:d5: 94:7f:5c:9c:f3:9b:90:6c:a0:8d:20:91:2b:d5:03:5b:b7:3d: 33:3e:e7:d5:e1:a3:7a:40:cc:a2:97:f6:45:b0:f7:9d:d4:1b: be:1f:d2:f4:4b:ac:18:9a:e7:db:c9:5e:76:4d:50:55:3f:b9: 95:69:0b:2b:51:a7:3f:ae:02:d3:4f:17:14:95:59:f6:a8:e9: 1c:8a:87:3a:ee:3a:08:3f:87:6f:bc:4b:aa:9e:1e:34:7c:ff: dd:0b:a7:fb:76:21:56:e2:ff:58:2d:de:fe:7e:93:b6:b1:9e: 32:55:50:a1:78:46:82:7e:03:0e:7b:e7:8c:73:e5:94:62:6b: 8f:a0:e6:9e:e8:c9:89:92:08:cb:e1:d2:ed:0f:3f:a0:cb:c2: 18:25:6a:2e:25:45:5b:16:99:0c:5d:5f:37:6b:13:76:58:2a: b0:34:d1:97:e7:b9:9a:49:8d:7e:c8:d5:ac:d8:87:ec:77:32: 8f:68:e1:99:cf:69:a1:1d:db:79:df:02:56:ae:c6:ec:13:7e: 9f:98:0f:dd:d5:f6:08:98:e5:43:2a:e4:61:bd:56:47:1d:d1: 73:4e:e3:76 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUKy9cE0vs0dUqeuWrHAWUI/7MdwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzExMjA2MDVaFw0yNjEwMzAxMjExMDVaMDMxMTAvBgNV BAMTKDgyOUU5RTQ0NjI2QTIzQzM1N0RCQkJFREJGRjQ3NjlBM0Y0MEI4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicLglce94G2eY3DUd5YU8Sf3V yIBXt3zXn7eeBdykOJePRTDfJqsA/ucgKP2fOcAqtBn6UPujVBNwEzBhJQqJqv6G +pBwYVJPX3gJ/RPNGe82RnRRlK11vpXlxvRsdryTSg335sjdkJWkKz4pn5YbHPIU 5UBzNG8Il8VpXxMszSBM3dtQPj/tPj7Vo/RU3VibVyJNnPlpqRJTGbBZ7Ionp42Q j4n2NVQ7UlyEhu6G+oJ3Tm+zCTnz284zJXSPLTYexS+6qhNr4zt8ZqtsB5EscT5c ZXgVo2T3UdcLhrt6Ja5XptGtrpdYU1bAAsP7qgGRmKR8nPfBfjNOtHk+VQLnAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCnp5EYmojw1fb u+2/9HaaP0C4ejAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlr Rkp1UHlic21jcFkxb1FlN1pUTm5zVnplTUxrVndzNHZBMkt2ejFOY1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZ a0ZKdVB5YnNtY3BZMW9RZTdaVE5uc1Z6ZU1Ma1Z3czR2QTJLdnoxTmNaLzAvODI5 RTlFNDQ2MjZBMjNDMzU3REJCQkVEQkZGNDc2OUEzRjQwQjg3QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASR9DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MPYwDQYJKoZIhvcNAQELBQADggEBAKjtkLWR04SuJXS2nRAYxrW/hVN8zSiokc0l 7IUjIGIZyP2W1ZR/XJzzm5BsoI0gkSvVA1u3PTM+59Xho3pAzKKX9kWw953UG74f 0vRLrBia59vJXnZNUFU/uZVpCytRpz+uAtNPFxSVWfao6RyKhzruOgg/h2+8S6qe HjR8/90Lp/t2IVbi/1gt3v5+k7axnjJVUKF4RoJ+Aw5754xz5ZRia4+g5p7oyYmS CMvh0u0PP6DLwhglai4lRVsWmQxdXzdrE3ZYKrA00ZfnuZpJjX7I1azYh+x3Mo9o 4ZnPaaEd23nfAlauxuwTfp+YD93V9giY5UMq5GG9Vkcd0XNO43Y= -----END CERTIFICATE-----Generated at Sun Nov 2 23:00:30 2025 by rpki-client