$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer File: A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer (raw, json) Hash identifier: oNsGlz5+N/J7OZ0B0p7ywjR/kNgyDChrII6m6SF6+uo= Subject key identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5875B316A43438F1449DF204AD8A237976CB632F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft caRepository: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 06 Sep 2025 13:21:20 +0000 Certificate not after: Sat 05 Sep 2026 13:26:20 +0000 Subordinate resources: AS: 273339 IP: 2804:8d28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:75:b3:16:a4:34:38:f1:44:9d:f2:04:ad:8a:23:79:76:cb:63:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 6 13:21:20 2025 GMT Not After : Sep 5 13:26:20 2026 GMT Subject: CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:42:0f:57:7a:b6:ac:30:27:46:d5:50:25: 8a:55:5e:e5:98:c5:0b:bf:01:29:2f:dc:cc:70:1a: 16:7b:1f:ea:06:f7:11:47:a4:ce:96:41:fa:6e:2c: 30:18:7e:48:a4:dd:7c:ea:65:c5:12:db:56:5d:8f: 4f:4f:47:39:5c:1f:0a:c7:5e:1f:83:9f:9f:ad:72: b9:3b:3a:0d:78:78:1e:fd:8b:f8:5f:fd:d9:27:0e: 83:c1:6d:29:90:62:8d:cc:0f:87:89:b4:af:e7:14: b0:83:c3:59:fa:87:4f:3b:9e:62:44:45:30:e9:1a: 0b:2d:e0:8b:7c:51:4e:85:b6:c2:e7:34:c5:ba:d2: c5:80:d4:38:0c:97:2a:d7:45:44:13:5e:4f:72:5b: 84:ac:55:d2:16:5e:a1:48:10:b7:e2:a4:4e:f5:a3: 1b:d0:fb:26:97:c2:e8:a9:11:3f:18:4c:da:78:c3: 65:82:8c:b6:15:ca:f7:62:1c:5f:77:30:80:85:64: e5:0a:9b:db:52:13:f1:96:16:09:30:49:17:fa:0e: b6:09:98:cd:95:43:5f:e5:da:32:ed:9c:f9:09:29: ec:be:67:f5:c3:5a:2c:41:89:76:b0:7c:a1:8a:49: 6e:d4:5e:f5:75:10:2a:94:43:f9:e3:92:20:e8:0d: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273339 Signature Algorithm: sha256WithRSAEncryption d4:e7:e3:2a:00:09:2e:48:91:bc:45:7d:72:b0:44:50:b4:c3: e8:ae:db:b2:d9:ba:a0:c8:28:47:53:f4:b4:b0:c9:01:41:44: 07:7d:08:7d:f1:1b:41:c7:7b:80:31:e2:de:9a:53:09:71:a8: 7d:f7:ec:83:a6:6f:5e:ef:a9:36:3d:96:9c:a6:0a:5e:da:ae: c2:46:b6:30:af:63:d2:31:e5:8d:70:91:6a:d3:a5:6a:d3:98: 0b:2e:bd:5d:ed:8f:cc:b6:87:08:94:b3:d2:60:ab:46:5c:af: 1d:d5:89:fc:db:d3:a7:84:2d:5c:af:bf:51:3c:4f:60:50:28: be:20:6d:a8:9a:f8:45:ae:0e:f3:83:82:bf:cd:5f:dc:69:ce: cb:fa:0b:4a:0e:28:ee:7f:6f:5a:2d:dd:59:e8:fd:11:25:0f: 75:25:c2:32:6e:d1:3e:77:c7:1f:55:6a:22:dd:39:62:4f:5c: 28:77:cb:e0:d1:a2:29:72:28:cd:83:33:da:e9:ee:5e:e3:d5: bc:e3:ef:50:b3:50:d3:ac:ba:85:ee:74:a9:99:57:26:a7:19: 87:9a:cc:b9:52:ff:f7:71:a4:66:ce:1c:e5:a5:80:49:cd:2d: c2:57:11:6d:12:cf:8c:ff:3e:0e:a1:1a:bc:6f:62:84:f5:8f: 52:58:df:b5 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWHWzFqQ0OPFEnfIErYojeXbLYy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDYxMzIxMjBaFw0yNjA5MDUxMzI2MjBaMDMxMTAvBgNV BAMTKEE3QzNGQ0Q0MTBFNTNDQkNGN0Y2NERDMzY3MjY5RUY5NjI1OTk3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqkIPV3q2rDAnRtVQJYpVXuWY xQu/ASkv3MxwGhZ7H+oG9xFHpM6WQfpuLDAYfkik3XzqZcUS21Zdj09PRzlcHwrH Xh+Dn5+tcrk7Og14eB79i/hf/dknDoPBbSmQYo3MD4eJtK/nFLCDw1n6h087nmJE RTDpGgst4It8UU6FtsLnNMW60sWA1DgMlyrXRUQTXk9yW4SsVdIWXqFIELfipE71 oxvQ+yaXwuipET8YTNp4w2WCjLYVyvdiHF93MICFZOUKm9tSE/GWFgkwSRf6DrYJ mM2VQ1/l2jLtnPkJKey+Z/XDWixBiXawfKGKSW7UXvV1ECqUQ/njkiDoDc+PAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnw/zUEOU8vPf2 TcNnJp75YlmXpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnRy aExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtzSEwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ0 cmhMZ2FqdXZ5dXpOemV2Qm83WWZvMVd1bVc2REpTV3RhclR4V1Frc0hMLzAvQTdD M0ZDRDQxMEU1M0NCQ0Y3RjY0REMzNjcyNjlFRjk2MjU5OTdBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNKDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME K7swDQYJKoZIhvcNAQELBQADggEBANTn4yoACS5IkbxFfXKwRFC0w+iu27LZuqDI KEdT9LSwyQFBRAd9CH3xG0HHe4Ax4t6aUwlxqH337IOmb17vqTY9lpymCl7arsJG tjCvY9Ix5Y1wkWrTpWrTmAsuvV3tj8y2hwiUs9Jgq0Zcrx3Vifzb06eELVyvv1E8 T2BQKL4gbaia+EWuDvODgr/NX9xpzsv6C0oOKO5/b1ot3Vno/RElD3UlwjJu0T53 xx9VaiLdOWJPXCh3y+DRoilyKM2DM9rp7l7j1bzj71CzUNOsuoXudKmZVyanGYea zLlS//dxpGbOHOWlgEnNLcJXEW0Sz4z/Pg6hGrxvYoT1j1JY37U= -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:55 2025 by rpki-client