$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer File: 924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer (raw, json) Hash identifier: ra88Jjg/8gtE2IoJmJHJfpGcsj6i3Tj55Xwk5zgu7kE= Subject key identifier: 92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64B012854DBC9C94B4F430765C4EA778031E7C76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft caRepository: rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Sep 2025 18:25:05 +0000 Certificate not after: Mon 07 Sep 2026 18:30:05 +0000 Subordinate resources: AS: 266423 IP: 170.81.208.0/22 IP: 2804:3798::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 16:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b0:12:85:4d:bc:9c:94:b4:f4:30:76:5c:4e:a7:78:03:1e:7c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 8 18:25:05 2025 GMT Not After : Sep 7 18:30:05 2026 GMT Subject: CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:f3:53:14:3e:60:cd:39:88:bd:fe:05:31: 9c:c2:2a:34:32:96:7e:89:27:47:27:e3:2d:af:8c: 74:09:fa:07:f0:22:05:c6:eb:bf:17:fb:96:6b:e5: 77:1e:59:0f:b6:56:7a:0e:2a:13:73:01:50:3f:db: d5:02:79:39:f9:3a:f2:d9:c3:34:b4:ea:da:1d:2a: 4f:1d:51:2c:d3:ce:bb:02:8a:7d:aa:9d:bb:ca:1e: e1:82:45:c4:af:73:36:f5:3a:fa:11:f4:69:15:7e: 90:d6:9b:31:b5:22:e0:ab:e3:85:97:b0:7e:6f:92: c4:a9:b9:3d:2b:68:bc:95:62:3a:c0:00:62:ca:13: 56:cc:ae:03:b6:36:d2:05:34:1a:d9:df:59:e3:53: 7e:3e:c6:a8:8d:d9:81:b1:db:ce:1f:6a:c1:fb:61: c6:b0:83:93:5b:18:3e:36:8f:36:57:ef:69:95:1b: dc:28:5e:c3:32:7c:a3:48:5f:ea:3a:97:98:c3:2d: 37:b4:1a:c2:ae:6b:ef:c4:38:56:25:e3:1e:ce:a8: 45:b1:b5:40:8d:55:37:6c:47:10:bb:33:72:f2:db: 1c:b2:b0:cd:6d:82:8a:3b:06:d4:0c:4e:d1:0f:75: 15:82:ff:fe:a8:44:e2:51:e4:3b:de:f9:b3:ce:7e: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.208.0/22 IPv6: 2804:3798::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266423 Signature Algorithm: sha256WithRSAEncryption 5c:d5:fc:63:af:1a:ae:a1:e5:74:89:cb:d3:fc:3b:1f:27:01: a8:97:71:af:26:84:75:92:21:76:f6:82:2e:41:3e:49:3f:47: e1:d7:b3:4d:a6:ca:b6:c5:1f:b9:23:c2:fe:e5:d3:93:1a:44: f3:8a:75:82:29:2e:ad:79:41:84:e5:db:cc:aa:67:3c:8c:d3: b4:93:d6:a9:35:c2:11:bd:3d:67:8a:ee:56:7e:32:0e:9f:b1: 35:1c:01:ea:1b:4e:44:2f:61:24:83:85:56:fc:4b:34:3f:9c: 59:f2:3b:3b:15:6b:8c:bc:20:ff:fb:24:20:f6:be:9b:e5:76: a4:a9:ce:af:72:c6:69:7f:2f:f4:ef:47:ba:e4:4d:e9:bb:61: 16:73:a3:5b:05:d9:48:33:07:75:a5:11:b5:bd:74:15:7d:99: 47:4d:c7:12:01:4f:eb:04:d2:2b:ac:b6:92:5a:f6:5d:e0:05: 02:85:98:91:4f:b8:00:60:ef:3e:a0:b2:5b:1e:95:85:33:30: 11:80:ee:50:4c:6a:04:1f:5c:c8:5d:c2:c6:63:cf:ed:51:da: d1:e7:e3:21:57:2f:63:ab:69:68:78:19:b2:78:d7:63:bd:a1: 9b:b6:a4:2f:ea:35:4b:c4:55:46:6b:93:a3:ad:9a:95:4d:14: 71:cd:04:0d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZLAShU28nJS09DB2XE6neAMefHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDgxODI1MDVaFw0yNjA5MDcxODMwMDVaMDMxMTAvBgNV BAMTKDkyNEEzNDIzRDJFQUUwRjkxNkNERDYwNUVCNUVDMzFGRjBERkI5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTvNTFD5gzTmIvf4FMZzCKjQy ln6JJ0cn4y2vjHQJ+gfwIgXG678X+5Zr5XceWQ+2VnoOKhNzAVA/29UCeTn5OvLZ wzS06todKk8dUSzTzrsCin2qnbvKHuGCRcSvczb1OvoR9GkVfpDWmzG1IuCr44WX sH5vksSpuT0raLyVYjrAAGLKE1bMrgO2NtIFNBrZ31njU34+xqiN2YGx284fasH7 Ycawg5NbGD42jzZX72mVG9woXsMyfKNIX+o6l5jDLTe0GsKua+/EOFYl4x7OqEWx tUCNVTdsRxC7M3Ly2xyysM1tgoo7BtQMTtEPdRWC//6oROJR5Dve+bPOfmEJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSSjQj0urg+RbN 1gXrXsMf8N+5jzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jz RTR6bmg5OFBTdHRTa1c5NGRhRWp3ZVN5RjY0QXpRRHFFREFEOFk0YmkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi c0U0em5oOThQU3R0U2tXOTRkYUVqd2VTeUY2NEF6UURxRURBRDhZNGJpLzAvOTI0 QTM0MjNEMkVBRTBGOTE2Q0RENjA1RUI1RUMzMUZGMERGQjk4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlHQMA0EAgACMAcDBQAoBDeYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQtzANBgkqhkiG9w0BAQsFAAOCAQEAXNX8Y68arqHldInL 0/w7HycBqJdxryaEdZIhdvaCLkE+ST9H4dezTabKtsUfuSPC/uXTkxpE84p1giku rXlBhOXbzKpnPIzTtJPWqTXCEb09Z4ruVn4yDp+xNRwB6htORC9hJIOFVvxLND+c WfI7OxVrjLwg//skIPa+m+V2pKnOr3LGaX8v9O9HuuRN6bthFnOjWwXZSDMHdaUR tb10FX2ZR03HEgFP6wTSK6y2klr2XeAFAoWYkU+4AGDvPqCyWx6VhTMwEYDuUExq BB9cyF3CxmPP7VHa0efjIVcvY6tpaHgZsnjXY72hm7akL+o1S8RVRmuTo62alU0U cc0EDQ== -----END CERTIFICATE-----Generated at Thu Sep 18 14:30:18 2025 by rpki-client