$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer File: 84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer (raw, json) Hash identifier: oJSe9APDNN4v8OTTRamLVwV6FKs3OqJY8x/MkXvIxMw= Subject key identifier: 84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18DFD74B9AAED5850CC4830AFB50814681FAE9FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft caRepository: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 21:29:45 +0000 Certificate not after: Tue 06 Oct 2026 21:34:45 +0000 Subordinate resources: AS: 274749 IP: 2804:9304::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:df:d7:4b:9a:ae:d5:85:0c:c4:83:0a:fb:50:81:46:81:fa:e9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 21:29:45 2025 GMT Not After : Oct 6 21:34:45 2026 GMT Subject: CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:9e:c0:42:8d:0f:b5:a7:3e:be:46:64:6c: aa:4d:04:d0:04:73:80:83:c0:d6:80:c2:cc:d9:3a: ee:10:2f:b5:78:f7:27:9a:3f:f5:9b:ea:71:0e:5c: ff:fe:12:fe:4c:df:44:41:d4:e4:c1:23:fa:85:db: ce:fa:19:fd:f2:b0:6f:09:93:3c:51:1b:2f:d7:d7: a1:79:9a:3e:da:05:0c:c4:c0:0e:88:7a:1d:0c:13: e4:09:ce:c6:0c:f2:50:e3:85:b0:17:3b:cb:aa:ba: 32:61:f8:fa:8a:9c:0b:39:7d:e2:bc:f8:7a:b1:a9: f7:1e:2a:31:c7:dc:0b:8f:9c:be:28:35:06:96:dd: ea:eb:2b:d9:b9:cf:9f:0b:0a:d3:82:10:6b:79:82: 5a:3d:d0:3d:33:ea:37:1e:ec:25:1c:71:5a:80:1b: 54:d0:a1:ff:61:f1:de:62:0b:af:21:24:d3:9b:5d: 89:38:72:f5:05:4b:91:fe:44:82:9e:24:03:78:26: fa:0d:7e:3a:23:e5:49:7c:9d:1f:fe:91:86:bd:6b: 47:c0:93:25:9d:ce:85:de:ff:63:55:32:71:f2:3d: 4e:b7:ec:49:6e:e4:d4:ee:e9:ac:80:ee:7a:5f:86: 06:e9:36:eb:51:e8:8c:21:ea:30:ce:59:e8:90:bd: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9304::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274749 Signature Algorithm: sha256WithRSAEncryption b6:f3:ae:fc:61:c5:c1:1a:0c:41:f9:b4:d3:33:cb:30:31:bc: 21:c2:2b:45:f3:6f:b0:ef:a4:b9:58:82:ff:98:fd:40:17:12: 98:3c:9f:4a:0a:25:d6:3e:6c:46:ff:25:d1:55:52:47:f0:69: ae:64:9b:07:4b:82:59:cd:37:90:ee:48:95:3d:6b:d8:1a:bc: 8c:7d:29:79:31:4b:60:bf:16:cd:1c:52:c9:2b:ec:d8:d6:8b: fa:c5:22:fc:e9:a8:f0:91:85:fd:b5:b8:f5:eb:3d:b0:a1:b7: 0e:93:56:10:a1:33:d6:2c:50:c3:9b:01:3d:17:48:c3:d6:e3: 86:fc:c9:28:fa:a0:d4:a9:3b:66:ca:3d:f3:a9:4c:c7:bd:d2: ff:ed:7e:3f:73:8c:0d:d8:e9:d6:f3:96:90:5b:42:a6:41:76: 75:ee:3b:36:f2:11:bb:e5:db:56:2e:ac:a2:1b:c5:62:84:75: ce:03:b0:07:85:5f:06:07:f6:33:45:13:47:8e:81:55:af:33: 19:06:37:80:f3:9c:b1:51:f7:90:4a:25:3f:3a:6e:53:b7:bb: 20:c0:56:1d:80:51:e9:0f:58:f1:f5:d2:f6:7e:a7:96:ec:38: 3c:f4:45:6e:96:73:56:ed:11:71:7b:d9:b6:11:61:93:df:4c: 16:62:71:35 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUGN/XS5qu1YUMxIMK+1CBRoH66fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcyMTI5NDVaFw0yNjEwMDYyMTM0NDVaMDMxMTAvBgNV BAMTKDg0OTU1QTNCNTU2MjVDMzVFNUNENkZCRTEzODAxRTlBOEUxRjFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sp7AQo0Ptac+vkZkbKpNBNAE c4CDwNaAwszZOu4QL7V49yeaP/Wb6nEOXP/+Ev5M30RB1OTBI/qF2876Gf3ysG8J kzxRGy/X16F5mj7aBQzEwA6Ieh0ME+QJzsYM8lDjhbAXO8uqujJh+PqKnAs5feK8 +HqxqfceKjHH3AuPnL4oNQaW3errK9m5z58LCtOCEGt5glo90D0z6jce7CUccVqA G1TQof9h8d5iC68hJNObXYk4cvUFS5H+RIKeJAN4JvoNfjoj5Ul8nR/+kYa9a0fA kyWdzoXe/2NVMnHyPU637Elu5NTu6ayA7npfhgbpNutR6Iwh6jDOWeiQvUfpAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSElVo7VWJcNeXN b74TgB6ajh8fOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWlZ OUZmd2llYm5ySlkySmFEaHA3RFNUZHBFM0pCSkdWemlCdzV4WHI1Z0ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fp WTlGZndpZWJuckpZMkphRGhwN0RTVGRwRTNKQkpHVnppQnc1eFhyNWdKLzAvODQ5 NTVBM0I1NTYyNUMzNUU1Q0Q2RkJFMTM4MDFFOUE4RTFGMUYzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASTBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MT0wDQYJKoZIhvcNAQELBQADggEBALbzrvxhxcEaDEH5tNMzyzAxvCHCK0Xzb7Dv pLlYgv+Y/UAXEpg8n0oKJdY+bEb/JdFVUkfwaa5kmwdLglnNN5DuSJU9a9gavIx9 KXkxS2C/Fs0cUskr7NjWi/rFIvzpqPCRhf21uPXrPbChtw6TVhChM9YsUMObAT0X SMPW44b8ySj6oNSpO2bKPfOpTMe90v/tfj9zjA3Y6dbzlpBbQqZBdnXuOzbyEbvl 21YurKIbxWKEdc4DsAeFXwYH9jNFE0eOgVWvMxkGN4DznLFR95BKJT86blO3uyDA Vh2AUekPWPH10vZ+p5bsODz0RW6Wc1btEXF72bYRYZPfTBZicTU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:50 2025 by rpki-client