$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer File: 3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer (raw, json) Hash identifier: ZmtrGsMn/aZG1lrRNtaYIIlYKZrWq7tVtz0su2mzncA= Subject key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5C1DDBE5570C0F4784EBB05677BF1785072D9E4F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft caRepository: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 13:40:04 +0000 Certificate not after: Fri 25 Sep 2026 13:45:04 +0000 Subordinate resources: AS: 53078 IP: 131.0.64.0/22 IP: 168.194.132.0/22 IP: 168.195.160.0/22 IP: 170.80.252.0/22 IP: 170.247.156.0/22 IP: 186.193.16.0/20 IP: 187.94.208.0/20 IP: 201.158.60.0/22 IP: 2804:6bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1d:db:e5:57:0c:0f:47:84:eb:b0:56:77:bf:17:85:07:2d:9e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 13:40:04 2025 GMT Not After : Sep 25 13:45:04 2026 GMT Subject: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:ff:d6:0a:b4:49:7a:4e:de:87:2e:97:d5: 39:1b:a5:36:bb:7b:ec:85:00:58:c6:2c:66:ea:37: 1a:e6:bf:4b:36:92:f4:1c:53:7c:51:d1:c7:eb:17: b3:fa:5e:39:08:fe:bf:fb:a4:d5:64:13:bc:36:59: 37:84:12:36:16:db:2b:26:5f:a6:1e:5c:1b:38:b7: 10:ce:88:9f:9e:ee:d8:e0:5d:1d:13:8e:72:a8:a7: c2:bf:d1:19:c2:47:82:2b:be:e1:ac:4c:8e:b0:c5: 9b:7d:e5:29:bf:2a:81:b1:cc:fc:c2:88:43:a0:98: 10:98:79:8a:55:81:e6:fb:4f:16:f2:dd:e9:c2:cb: fd:fa:2a:ec:74:7c:ee:4e:f9:a6:3c:d4:98:85:42: b2:ec:0f:48:dd:82:cc:e9:b5:32:0e:c9:0d:de:19: fc:fe:21:b5:2a:2f:33:1f:53:b5:84:4f:16:6c:98: 33:e1:07:9f:0e:fc:b6:6d:5c:1b:76:9e:ce:78:30: 72:17:ec:45:01:7a:35:9d:38:70:99:16:2a:53:cf: 8c:58:3e:d4:ee:b6:56:be:27:03:80:11:a4:d2:70: 61:1a:c5:d0:06:b9:c6:3e:9d:c2:b9:44:ce:c2:4d: 59:71:29:3c:6e:35:a9:71:fb:4b:34:76:3f:da:46: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.64.0/22 168.194.132.0/22 168.195.160.0/22 170.80.252.0/22 170.247.156.0/22 186.193.16.0/20 187.94.208.0/20 201.158.60.0/22 IPv6: 2804:6bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53078 Signature Algorithm: sha256WithRSAEncryption 34:2a:8c:23:ca:94:26:27:0b:a1:f8:ba:08:e3:bc:46:85:20: 3a:68:4e:d9:ce:8d:67:cc:71:33:bb:3a:f2:3d:3b:3d:62:63: 36:5c:7e:06:8d:d0:e4:2d:2c:b2:32:24:09:c9:01:2b:18:d6: 02:d8:06:b2:1e:18:ef:78:ba:cf:1d:16:4b:95:69:d4:4c:3f: 53:42:50:2d:16:4a:d1:55:fb:f8:e6:80:52:71:01:4e:f7:fc: 1f:90:90:27:df:c0:3d:ac:74:75:17:b8:8b:3c:86:d7:3b:5b: 64:07:97:bb:d4:01:8b:f2:f2:c0:82:5a:f6:bd:96:38:a0:f8: 3c:1d:95:9a:32:71:73:f9:29:d0:94:31:30:a1:ef:0f:6a:60: 77:f1:1c:13:db:c2:63:2d:c1:1e:2c:83:67:fc:9b:d1:01:09: 41:75:9d:b9:ae:09:1a:99:3d:f3:fb:2d:b6:90:0f:ee:64:1f: 07:c4:5f:46:5b:b4:08:f1:b1:9d:9d:83:e2:5b:cd:2f:c1:54: 04:43:d4:47:cc:06:4e:85:09:b7:63:9f:c8:0b:07:cb:c5:cf: c1:53:d9:16:a0:6e:59:8d:a4:8e:b2:b9:70:a1:ef:22:20:a7: 9b:9e:a9:cf:55:41:8f:4d:ee:22:83:8c:ea:68:11:2d:a5:6c: 7d:a3:df:6e -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUXB3b5VcMD0eE67BWd78XhQctnk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjYxMzQwMDRaFw0yNjA5MjUxMzQ1MDRaMDMxMTAvBgNV BAMTKDNDOEU1RjQxRjNBRjc0MEU5NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNv/WCrRJek7ehy6X1TkbpTa7 e+yFAFjGLGbqNxrmv0s2kvQcU3xR0cfrF7P6XjkI/r/7pNVkE7w2WTeEEjYW2ysm X6YeXBs4txDOiJ+e7tjgXR0TjnKop8K/0RnCR4IrvuGsTI6wxZt95Sm/KoGxzPzC iEOgmBCYeYpVgeb7Txby3enCy/36Kux0fO5O+aY81JiFQrLsD0jdgszptTIOyQ3e Gfz+IbUqLzMfU7WETxZsmDPhB58O/LZtXBt2ns54MHIX7EUBejWdOHCZFipTz4xY PtTutla+JwOAEaTScGEaxdAGucY+ncK5RM7CTVlxKTxuNalx+0s0dj/aRr93AgMB AAGjggNkMIIDYDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8jl9B8690DpQn +O0jXBIAmKoMITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0tx YWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndpU2IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NL cWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAvM0M4 RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5OEFBMEMyMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEH AQH/BEkwRzA2BAIAATAwAwQCgwBAAwQCqMKEAwQCqMOgAwQCqlD8AwQCqvecAwQE usEQAwQEu17QAwQCyZ48MA0EAgACMAcDBQAoBAa8MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDPVjANBgkqhkiG9w0BAQsFAAOCAQEANCqMI8qUJicLofi6COO8RoUg OmhO2c6NZ8xxM7s68j07PWJjNlx+Bo3Q5C0ssjIkCckBKxjWAtgGsh4Y73i6zx0W S5Vp1Ew/U0JQLRZK0VX7+OaAUnEBTvf8H5CQJ9/APax0dRe4izyG1ztbZAeXu9QB i/LywIJa9r2WOKD4PB2VmjJxc/kp0JQxMKHvD2pgd/EcE9vCYy3BHiyDZ/yb0QEJ QXWdua4JGpk98/sttpAP7mQfB8RfRlu0CPGxnZ2D4lvNL8FUBEPUR8wGToUJt2Of yAsHy8XPwVPZFqBuWY2kjrK5cKHvIiCnm56pz1VBj03uIoOM6mgRLaVsfaPfbg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:25 2025 by rpki-client