$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer (raw, json) Hash identifier: CeE5uSz63bhe9W9H+VWez8+0titJpALL3/iFXC4ADTk= Subject key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19227B715D00711BC4F0099A821F6297E7CB0A97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft caRepository: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 13:24:47 +0000 Certificate not after: Mon 02 Nov 2026 13:29:47 +0000 Subordinate resources: AS: 264293 IP: 45.160.124.0/22 IP: 45.232.160.0/22 IP: 138.121.120.0/22 IP: 2804:25a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:22:7b:71:5d:00:71:1b:c4:f0:09:9a:82:1f:62:97:e7:cb:0a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 13:24:47 2025 GMT Not After : Nov 2 13:29:47 2026 GMT Subject: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:7a:d4:0b:cb:f9:19:a3:97:ae:d0:8a:eb: e1:9c:06:7d:fe:f5:3b:7c:18:35:3f:4b:a0:a6:7e: 83:c2:c1:48:15:90:68:2d:f0:b3:8a:fd:ae:bc:ec: 62:07:ec:ee:fd:a5:16:48:0e:a4:46:e2:09:fd:ad: 47:9c:2d:c3:07:6c:3f:4d:fe:b5:77:c3:7d:b5:f7: 27:67:b9:af:d1:f8:09:ab:99:3c:e1:1f:18:ac:69: b9:44:d5:6b:2a:87:eb:dd:75:3f:c7:19:a7:d2:5b: d9:a3:03:85:88:e1:f9:fe:64:d3:c5:83:08:35:d8: 02:46:90:e3:1e:2f:0a:f5:02:65:1e:94:5b:07:c6: 2e:83:86:f4:77:76:b0:41:61:01:a8:4c:69:9b:83: 14:35:e6:55:08:4f:69:3c:e2:96:f2:af:6c:72:c7: 8c:ef:c2:b6:6d:c6:7c:b3:bc:47:46:45:83:90:ab: a0:74:7f:25:d0:b8:06:b3:7f:4c:17:c5:48:5b:18: cd:9c:72:5a:ec:ab:cb:0c:b7:51:86:1d:33:58:aa: 2e:47:83:80:e7:ce:64:4c:b4:00:30:8e:ce:6b:ac: 2c:46:98:57:16:e7:54:f9:41:69:d9:66:92:05:32: 32:e7:d2:81:69:bc:0f:57:01:ed:6f:3a:14:08:25: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.160.124.0/22 45.232.160.0/22 138.121.120.0/22 IPv6: 2804:25a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264293 Signature Algorithm: sha256WithRSAEncryption 98:c8:fb:4d:22:6e:e5:1c:85:04:2a:f7:66:0a:e3:ad:31:11: 1b:99:bc:33:94:dc:50:d8:dc:84:02:43:18:09:b6:e8:b2:dd: 6e:00:a4:f9:48:aa:47:a2:84:db:95:31:76:01:0b:43:4e:34: eb:eb:a2:6e:6a:1b:e0:8d:00:be:4c:03:92:3f:46:44:50:78: fb:a1:48:e5:29:e0:d9:a3:8f:99:06:1f:1f:82:46:bb:ed:c0: f9:04:66:79:84:bf:36:4c:7a:d9:99:a7:e1:28:21:ab:d3:34: cd:f5:62:70:8a:1f:55:c0:5e:9b:f9:b1:bb:7a:16:a3:dc:a6: 9c:ea:67:74:a5:fa:9b:20:53:86:f3:1c:5b:42:1d:4b:f5:61: 7b:0b:89:7a:f8:35:83:aa:56:de:3a:dc:1b:15:fe:69:1a:3a: 58:56:bd:e3:5e:fa:85:2b:57:f5:5d:a3:d6:e8:09:27:92:b6: e7:fc:bd:5b:4e:84:37:ab:e3:3a:67:bb:16:2c:94:a0:4a:b3: bc:ff:8b:c6:51:6d:0d:1b:32:ce:27:1a:c6:7f:81:5f:18:01: b8:0d:18:51:c5:e9:f2:df:19:d0:3b:3d:0b:a3:db:25:ca:7a: c9:7c:8f:da:e6:7d:15:3f:7a:31:a5:7f:eb:f4:3b:8b:13:a9: 04:1b:90:68 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUGSJ7cV0AcRvE8Amagh9il+fLCpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxMzI0NDdaFw0yNjExMDIxMzI5NDdaMDMxMTAvBgNV BAMTKEEyQTNGMzRBRDM3N0REOEIxODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2HrUC8v5GaOXrtCK6+GcBn3+ 9Tt8GDU/S6CmfoPCwUgVkGgt8LOK/a687GIH7O79pRZIDqRG4gn9rUecLcMHbD9N /rV3w3219ydnua/R+AmrmTzhHxisablE1Wsqh+vddT/HGafSW9mjA4WI4fn+ZNPF gwg12AJGkOMeLwr1AmUelFsHxi6DhvR3drBBYQGoTGmbgxQ15lUIT2k84pbyr2xy x4zvwrZtxnyzvEdGRYOQq6B0fyXQuAazf0wXxUhbGM2cclrsq8sMt1GGHTNYqi5H g4DnzmRMtAAwjs5rrCxGmFcW51T5QWnZZpIFMjLn0oFpvA9XAe1vOhQIJbAVAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSio/NK03fdixhf ti8pRHmklT6inzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Fr dHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh a3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzAvQTJB M0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5NTNFQTI5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLaB8AwQCLeigAwQCinl4MA0EAgACMAcDBQAoBCWo MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQIZTANBgkqhkiG9w0BAQsFAAOCAQEA mMj7TSJu5RyFBCr3ZgrjrTERG5m8M5TcUNjchAJDGAm26LLdbgCk+UiqR6KE25Ux dgELQ0406+uibmob4I0AvkwDkj9GRFB4+6FI5Sng2aOPmQYfH4JGu+3A+QRmeYS/ Nkx62Zmn4Sghq9M0zfVicIofVcBem/mxu3oWo9ymnOpndKX6myBThvMcW0IdS/Vh ewuJevg1g6pW3jrcGxX+aRo6WFa94176hStX9V2j1ugJJ5K25/y9W06EN6vjOme7 FiyUoEqzvP+LxlFtDRsyzicaxn+BXxgBuA0YUcXp8t8Z0Ds9C6PbJcp6yXyP2uZ9 FT96MaV/6/Q7ixOpBBuQaA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:44 2025 by rpki-client