$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer (raw, json) Hash identifier: PdZLgtfr/3rtUBCJ8VWYpXx1R96HYSfnh6jtYBHcIM4= Subject key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 63163A1B8CD9EE5A0EE3484272A686A299A2611A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft caRepository: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 19 Sep 2025 13:03:34 +0000 Certificate not after: Fri 18 Sep 2026 13:08:34 +0000 Subordinate resources: AS: 53138 IP: 177.53.224.0/21 IP: 186.192.240.0/20 IP: 2804:140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:16:3a:1b:8c:d9:ee:5a:0e:e3:48:42:72:a6:86:a2:99:a2:61:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 19 13:03:34 2025 GMT Not After : Sep 18 13:08:34 2026 GMT Subject: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:cd:4d:13:23:35:f2:e3:fb:70:2a:b7:7d: 9c:29:33:30:7d:73:85:34:ab:ef:f9:00:a4:01:99: 38:15:74:47:09:39:7b:04:e7:26:e2:a4:68:92:c4: 43:09:ec:67:b8:ab:64:a5:74:98:8a:64:95:40:ec: 43:18:81:2b:8c:96:d2:4b:4c:0d:c5:db:97:e8:44: 57:7c:b8:fe:5c:43:11:02:34:d7:fd:65:0e:2d:0f: 4d:d1:e4:19:89:74:ee:a8:d5:05:9d:5e:31:14:5c: 64:e2:92:75:6d:f1:88:cd:e3:ee:95:21:61:ba:20: b7:1e:2a:2d:95:7c:db:0d:ff:fd:39:0d:4d:bf:ac: 1c:5d:23:0b:cc:73:8a:e6:f6:a2:eb:bc:94:d8:59: 33:9f:ad:60:31:a6:94:c3:33:fb:e5:67:f7:3e:d5: fe:e6:cd:a7:77:05:95:7c:a6:a3:84:d1:70:58:d9: ad:82:b3:7b:0b:f7:59:65:d0:ae:32:8d:e2:0a:61: 27:6a:1a:e3:41:e8:5e:43:84:e1:fc:6a:61:7c:fa: b8:d2:7d:6e:44:7d:5d:7c:e1:96:03:50:6a:9d:07: a4:6e:6d:fc:29:89:df:de:d3:30:71:32:f5:7a:ae: 0d:64:b4:48:85:52:05:07:98:4c:2f:d2:e3:4c:eb: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.224.0/21 186.192.240.0/20 IPv6: 2804:140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53138 Signature Algorithm: sha256WithRSAEncryption 97:6b:73:4f:7a:89:83:c2:7f:e8:13:82:19:1c:6a:21:f0:11: e1:6f:49:6c:cf:00:46:da:c8:ad:0e:1c:b3:c3:8a:d5:bb:96: 1c:4c:6e:e7:e4:23:94:ff:40:2d:2c:45:95:83:4c:92:3b:ef: 04:60:32:cd:08:2d:af:1a:f6:7b:2d:54:84:02:c4:12:ed:87: 60:20:3a:61:e8:5a:0a:e8:27:6a:f1:38:02:cb:da:0c:81:fa: 86:38:e3:0e:1e:73:55:75:fb:47:cd:54:48:82:ca:69:fa:4f: 6c:cc:c0:53:49:4d:a0:6b:bf:c7:eb:00:a4:7e:52:f0:16:dd: d5:93:bc:0e:b3:1c:57:c3:6e:ac:61:2e:37:a5:9a:d8:09:2b: 05:36:d2:79:c3:df:bc:80:86:d7:e3:8b:2c:d7:5c:6a:00:e6: a7:d9:8a:0a:b3:2c:65:72:01:59:19:e4:3f:6e:14:d9:25:06: ec:83:46:6b:ba:4d:a1:e0:46:0c:d3:a6:df:c3:93:7a:a2:86: 72:29:e2:bd:45:ef:28:d0:f7:25:b6:9f:35:30:68:32:58:33: 7a:d7:ab:62:8b:92:62:4e:79:99:19:05:1e:f0:57:5c:77:bc: 50:e7:86:39:f3:0c:cd:41:bb:c8:dd:23:df:4a:65:03:ed:34: 7c:f3:6c:e8 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYxY6G4zZ7loO40hCcqaGopmiYRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTkxMzAzMzRaFw0yNjA5MTgxMzA4MzRaMDMxMTAvBgNV BAMTKDM5MTdFNEJCQjREMUZEOTk0MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gs1NEyM18uP7cCq3fZwpMzB9 c4U0q+/5AKQBmTgVdEcJOXsE5ybipGiSxEMJ7Ge4q2SldJiKZJVA7EMYgSuMltJL TA3F25foRFd8uP5cQxECNNf9ZQ4tD03R5BmJdO6o1QWdXjEUXGTiknVt8YjN4+6V IWG6ILceKi2VfNsN//05DU2/rBxdIwvMc4rm9qLrvJTYWTOfrWAxppTDM/vlZ/c+ 1f7mzad3BZV8pqOE0XBY2a2Cs3sL91ll0K4yjeIKYSdqGuNB6F5DhOH8amF8+rjS fW5EfV184ZYDUGqdB6Rubfwpid/e0zBxMvV6rg1ktEiFUgUHmEwv0uNM6163AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5F+S7tNH9mUAO 2YyYoyOtqrOJdzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFlY cTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RZ WHEzQ0pLMzJHaVhxR2JZU01rbWtlMkZNMnhmNEZ4VmVnbjc1b05CZGtHLzAvMzkx N0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURBQUIzODk3Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsTXgAwQEusDwMA0EAgACMAcDBQAoBAFAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPkjANBgkqhkiG9w0BAQsFAAOCAQEAl2tzT3qJ g8J/6BOCGRxqIfAR4W9JbM8ARtrIrQ4cs8OK1buWHExu5+QjlP9ALSxFlYNMkjvv BGAyzQgtrxr2ey1UhALEEu2HYCA6YehaCugnavE4AsvaDIH6hjjjDh5zVXX7R81U SILKafpPbMzAU0lNoGu/x+sApH5S8Bbd1ZO8DrMcV8NurGEuN6Wa2AkrBTbSecPf vICG1+OLLNdcagDmp9mKCrMsZXIBWRnkP24U2SUG7INGa7pNoeBGDNOm38OTeqKG cinivUXvKND3JbafNTBoMlgzeterYouSYk55mRkFHvBXXHe8UOeGOfMMzUG7yN0j 30plA+00fPNs6A== -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:28 2025 by rpki-client