$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer File: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer (raw, json) Hash identifier: IDlt5zoAl2LBUCFhwEsilLRaW66nPppVy4DAiy0SN0E= Subject key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2288C10B8B9F60A5D7F69C349704941ADB4B5471 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft caRepository: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Oct 2026 01:01:54 +0000 Certificate not after: Thu 07 Oct 2027 01:06:54 +0000 Subordinate resources: AS: 265449 IP: 200.23.118.0/24 IP: 2801:80:1a40::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:88:c1:0b:8b:9f:60:a5:d7:f6:9c:34:97:04:94:1a:db:4b:54:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 01:01:54 2026 GMT Not After : Oct 7 01:06:54 2027 GMT Subject: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:89:ca:06:ea:7f:74:d4:12:61:69:19:41: 1c:e1:70:c4:87:cb:3b:08:7c:8a:8b:d2:ff:59:f2: b4:7c:14:62:2c:0e:78:73:49:26:d5:48:a7:45:fb: 54:82:cd:c5:a6:c5:73:ad:f1:b8:e3:92:c0:05:99: 28:da:a8:24:44:37:05:4f:c2:2a:40:47:3e:35:9e: f0:7b:a4:11:03:aa:4f:b9:77:9c:a9:f7:10:09:51: 71:e9:85:04:8d:28:cb:83:f6:3b:45:f9:df:35:5f: 7a:6a:da:53:f9:77:7c:f4:40:f7:2a:e0:53:c0:d4: f2:28:65:57:5c:b4:9e:a3:c6:8c:37:39:9e:c9:53: a1:d0:dc:8d:9f:d0:ee:92:0b:f7:b9:1b:fc:5b:28: a0:96:02:72:13:e9:33:01:7a:7b:48:2a:81:45:c9: 32:d6:12:e5:15:fe:98:22:35:9a:45:0e:89:bb:5e: 6d:43:9c:c8:96:1f:a6:1b:ff:22:e1:74:96:6b:46: 4c:31:de:2e:31:ae:7e:66:70:34:b1:c8:4e:30:09: b5:3a:78:be:a8:10:ba:a0:fa:ae:2d:6c:fd:69:64: 67:f8:f1:62:cc:48:79:0a:30:f6:4c:d2:ec:46:db: 38:28:70:d8:2b:80:90:0a:8a:eb:d0:88:df:72:f9: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.118.0/24 IPv6: 2801:80:1a40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265449 Signature Algorithm: sha256WithRSAEncryption 9f:d8:bc:26:c7:79:06:08:69:2b:23:a4:22:e5:f9:74:00:fd: 07:33:f5:9a:26:e8:85:76:54:cf:ba:b5:82:45:a5:78:1f:14: 25:d0:68:bf:fb:a0:5e:c2:b8:2c:6f:4d:a8:7c:3e:6a:33:92: c0:c9:d9:29:83:e2:73:f9:d1:75:58:f8:a3:28:d9:b2:67:d2: 9a:34:50:9d:c3:29:16:17:b0:f7:9f:89:42:e9:56:3e:31:a4: d7:21:56:bc:17:36:1c:58:08:54:e8:52:71:72:0c:1a:98:e2: ea:9c:89:4e:9c:3d:dc:ea:7b:1f:91:12:bd:d2:b1:d5:8f:6d: 6f:ab:75:35:db:13:a7:d2:74:2c:1f:48:28:41:1d:b1:31:9e: c7:6c:12:ae:a2:19:d0:33:56:82:26:52:90:c5:22:5b:fe:f7: 96:a4:5a:a2:8e:26:92:25:3e:8e:a8:3d:61:4f:e5:8e:d2:a9: 5a:de:b8:5d:63:b4:ce:08:b2:22:bc:c9:ce:b2:05:e9:99:80: 95:4b:3b:d7:6a:76:68:61:35:f3:a4:2f:7b:18:0a:28:a6:89: 26:c6:d9:0c:ce:bd:bf:a8:ea:36:a5:8a:ba:3f:9c:36:81:73: 15:a6:84:77:b4:bf:88:f3:19:65:45:14:9e:78:97:cf:37:88: 02:42:2b:ab -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUIojBC4ufYKXX9pw0lwSUGttLVHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDgwMTAxNTRaFw0yNzEwMDcwMTA2NTRaMDMxMTAvBgNV BAMTKDJGRjRFRTlDMUZBRjE5Q0JENDRDQ0I2QzRGODAzQjU0REE5MzNFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33InKBup/dNQSYWkZQRzhcMSH yzsIfIqL0v9Z8rR8FGIsDnhzSSbVSKdF+1SCzcWmxXOt8bjjksAFmSjaqCRENwVP wipARz41nvB7pBEDqk+5d5yp9xAJUXHphQSNKMuD9jtF+d81X3pq2lP5d3z0QPcq 4FPA1PIoZVdctJ6jxow3OZ7JU6HQ3I2f0O6SC/e5G/xbKKCWAnIT6TMBentIKoFF yTLWEuUV/pgiNZpFDom7Xm1DnMiWH6Yb/yLhdJZrRkwx3i4xrn5mcDSxyE4wCbU6 eL6oELqg+q4tbP1pZGf48WLMSHkKMPZM0uxG2zgocNgrgJAKiuvQiN9y+d4/AgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv9O6cH68Zy9RM y2xPgDtU2pM+iDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFX TUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB V01DUUZ2Q3I3N1NkQ3R0MURFSzhCTGdlWlVBdmVtRFdlcXpLakdpaEtQLzAvMkZG NEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTREQTkzM0U4OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAyBd2MA8EAgACMAkDBwAoAQCAGkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBAzpMA0GCSqGSIb3DQEBCwUAA4IBAQCf2Lwmx3kGCGkr I6Qi5fl0AP0HM/WaJuiFdlTPurWCRaV4HxQl0Gi/+6Bewrgsb02ofD5qM5LAydkp g+Jz+dF1WPijKNmyZ9KaNFCdwykWF7D3n4lC6VY+MaTXIVa8FzYcWAhU6FJxcgwa mOLqnIlOnD3c6nsfkRK90rHVj21vq3U12xOn0nQsH0goQR2xMZ7HbBKuohnQM1aC JlKQxSJb/veWpFqijiaSJT6OqD1hT+WO0qla3rhdY7TOCLIivMnOsgXpmYCVSzvX anZoYTXzpC97GAoopokmxtkMzr2/qOo2pYq6P5w2gXMVpoR3tL+I8xllRRSeeJfP N4gCQiur -----END CERTIFICATE-----Generated at Thu Oct 8 13:46:39 2026 by rpki-client