$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer File: 6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer (raw, json) Hash identifier: T3LI/YUph/7qK5UTNie579kVrYAZPjaTyLDCOS6Pjd8= Subject key identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42746AF64B977EB50E7C4A5071D6B066D893FDD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft caRepository: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Oct 2025 17:53:25 +0000 Certificate not after: Mon 12 Oct 2026 17:58:25 +0000 Subordinate resources: AS: 52999 IP: 168.195.68.0/22 IP: 177.66.32.0/21 IP: 186.216.216.0/21 IP: 186.226.96.0/20 IP: 2804:508::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:74:6a:f6:4b:97:7e:b5:0e:7c:4a:50:71:d6:b0:66:d8:93:fd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 13 17:53:25 2025 GMT Not After : Oct 12 17:58:25 2026 GMT Subject: CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:10:76:18:86:b3:ee:09:2e:f3:e7:c7:ab: 48:15:6d:fb:2f:05:16:44:48:76:93:29:d7:7c:12: 81:28:47:a0:5c:02:74:db:58:d6:63:fc:25:1f:70: a0:c3:c5:b7:44:5e:0c:2a:01:a7:e7:63:96:71:28: 7b:6b:46:81:46:d8:55:a0:51:fa:38:cd:10:98:9b: 05:83:e9:69:a1:09:fc:9e:a2:ab:39:da:88:2f:c0: 33:b7:9d:5b:a1:ad:40:8c:30:fa:53:62:a1:14:90: 14:6b:55:ad:3e:93:b2:86:ba:77:79:58:a4:94:81: e8:6a:7d:15:2a:51:c2:62:d2:f4:10:23:61:0a:70: 4f:ba:58:ac:ac:90:ea:ed:01:16:69:26:89:ac:21: bd:21:6a:f2:81:88:5d:99:b0:fd:c3:8c:2b:23:24: 44:19:28:cf:8f:89:15:39:7a:bd:c9:07:62:e7:eb: a0:4d:39:06:f4:42:be:e0:57:2f:bf:e7:d0:e0:a6: 6f:d5:ce:a9:30:40:29:3b:8c:a6:29:d3:73:f7:7f: cd:1f:5c:3b:99:17:fa:3e:fb:7f:20:6a:f6:ee:b5: a7:0a:15:79:58:07:16:87:b0:d2:2f:d1:07:ce:e8: fe:0d:bd:c9:05:62:c9:41:32:9d:f0:48:d6:38:9a: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.68.0/22 177.66.32.0/21 186.216.216.0/21 186.226.96.0/20 IPv6: 2804:508::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52999 Signature Algorithm: sha256WithRSAEncryption 9e:f9:3f:34:11:fe:f0:d6:41:e6:fe:80:d8:48:98:48:53:74: fa:6e:9c:93:bd:11:12:2d:39:7a:ab:1c:6f:53:cc:cf:50:96: 3f:1b:67:f9:72:44:ac:52:ff:ea:80:90:e0:3f:de:4f:5e:6e: 91:77:6c:1a:d6:87:db:11:57:8c:36:bb:33:64:ca:06:30:1e: 2c:cc:9e:5e:5d:58:0f:06:dc:d3:e7:20:c1:fd:52:81:60:67: 5e:3f:fb:7e:2e:94:98:de:3a:87:5f:38:6b:7f:ca:ea:74:91: f8:0a:b6:15:f9:08:e8:c9:16:63:d4:94:a6:6f:84:de:cd:ab: bb:55:e6:80:eb:aa:63:69:07:66:14:c4:9f:87:a9:34:d8:60: 5c:35:bd:a7:a4:fc:9c:9e:b9:e4:7c:cc:a3:2e:f0:e1:fd:3e: d1:a5:84:68:8a:88:6e:e7:22:05:b1:7e:e0:49:f1:6c:8d:a2: 17:70:67:c7:83:bb:f4:57:1d:de:2f:a0:04:ac:43:7a:51:6c: 2a:e2:e8:e0:b9:22:5d:6e:b2:25:30:b4:a6:09:5c:57:09:37: 0d:28:f5:05:6e:5b:e6:b7:89:ef:b2:8f:b3:ae:48:a9:90:ed: 1e:74:e1:2c:bb:0d:51:86:cf:4f:92:3e:f7:da:4b:1e:df:81: a7:2c:c8:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUQnRq9kuXfrUOfEpQcdawZtiT/dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTMxNzUzMjVaFw0yNjEwMTIxNzU4MjVaMDMxMTAvBgNV BAMTKDZGNkE4MjFBMUQ1RkZDQUY3NTBERENBQjQ2MjZFMUE0MUY0RTBDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVlxB2GIaz7gku8+fHq0gVbfsv BRZESHaTKdd8EoEoR6BcAnTbWNZj/CUfcKDDxbdEXgwqAafnY5ZxKHtrRoFG2FWg Ufo4zRCYmwWD6WmhCfyeoqs52ogvwDO3nVuhrUCMMPpTYqEUkBRrVa0+k7KGund5 WKSUgehqfRUqUcJi0vQQI2EKcE+6WKyskOrtARZpJomsIb0havKBiF2ZsP3DjCsj JEQZKM+PiRU5er3JB2Ln66BNOQb0Qr7gVy+/59Dgpm/VzqkwQCk7jKYp03P3f80f XDuZF/o++38gavbutacKFXlYBxaHsNIv0QfO6P4NvckFYslBMp3wSNY4mlgbAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvaoIaHV/8r3UN 3KtGJuGkH04MvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdy bzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pTY3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk3 cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAvNkY2 QTgyMUExRDVGRkNBRjc1MEREQ0FCNDYyNkUxQTQxRjRFMENCRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCqMNEAwQDsUIgAwQDutjYAwQEuuJgMA0EAgACMAcD BQAoBAUIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPBzANBgkqhkiG9w0BAQsF AAOCAQEAnvk/NBH+8NZB5v6A2EiYSFN0+m6ck70REi05eqscb1PMz1CWPxtn+XJE rFL/6oCQ4D/eT15ukXdsGtaH2xFXjDa7M2TKBjAeLMyeXl1YDwbc0+cgwf1SgWBn Xj/7fi6UmN46h184a3/K6nSR+Aq2FfkI6MkWY9SUpm+E3s2ru1XmgOuqY2kHZhTE n4epNNhgXDW9p6T8nJ655HzMoy7w4f0+0aWEaIqIbuciBbF+4EnxbI2iF3Bnx4O7 9Fcd3i+gBKxDelFsKuLo4LkiXW6yJTC0pglcVwk3DSj1BW5b5reJ77KPs65IqZDt HnThLLsNUYbPT5I+99pLHt+BpyzIMw== -----END CERTIFICATE-----Generated at Mon Oct 20 03:39:52 2025 by rpki-client