$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer File: 7FA00725B865657CC24A17AD7A99947906B51243.cer (raw, json) Hash identifier: HC+A+mUj726yvN1PtsmrmZK2sqZMbRHCK2x2eISfifw= Subject key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 504E490F2835E908291EA7A9D30328C766712312 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft caRepository: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Oct 2025 20:36:21 +0000 Certificate not after: Wed 14 Oct 2026 20:41:21 +0000 Subordinate resources: AS: 268770 IP: 45.172.128.0/22 IP: 2804:5a64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4e:49:0f:28:35:e9:08:29:1e:a7:a9:d3:03:28:c7:66:71:23:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 15 20:36:21 2025 GMT Not After : Oct 14 20:41:21 2026 GMT Subject: CN=7FA00725B865657CC24A17AD7A99947906B51243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:44:66:e3:38:61:64:3a:18:d0:85:6c:53: 3f:86:4e:53:d2:af:4a:76:d4:81:98:02:1c:28:66: 4b:fb:fb:67:44:f9:84:6c:47:43:2f:2e:2c:08:f9: c0:1f:49:9e:21:81:df:36:a2:10:d5:6d:19:6a:9a: c0:d5:17:9f:85:7a:25:ce:af:68:74:a8:d4:86:2d: 57:ce:50:f7:2c:4b:9f:25:56:ea:f9:43:6c:3e:2f: 27:48:f0:a5:9e:ac:c9:c6:9a:35:33:6a:3f:8e:5b: 83:9d:63:61:0c:e2:73:a8:fc:39:17:72:1d:c1:56: 03:04:d9:60:92:35:4c:a6:45:e4:ec:fa:f4:db:78: 30:b9:ca:40:1e:31:5c:de:53:57:32:12:22:ba:de: 80:5b:ba:6b:e5:07:91:8b:46:36:a6:4a:de:a2:0d: 5b:5a:1f:75:a8:a9:1b:c9:e8:67:60:26:71:2f:bd: 8d:d8:1e:14:8a:b5:8c:b7:a3:9c:f8:a0:7d:bf:04: 04:74:cd:e2:b4:1f:9e:1b:e1:9b:79:69:92:f9:6b: 75:23:ee:6b:77:0c:ad:06:76:50:d2:97:8e:17:90: 99:44:e7:d9:02:07:d9:7e:62:c1:ac:3f:c0:cd:39: 4a:5b:60:f2:f7:23:1e:58:df:00:1d:cb:af:b5:be: ab:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.128.0/22 IPv6: 2804:5a64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268770 Signature Algorithm: sha256WithRSAEncryption 33:88:39:28:3e:2f:ea:4d:c1:57:5d:11:ec:a0:99:97:1c:56: 0a:ee:48:2a:98:c7:3c:eb:6e:ec:83:ca:37:d9:62:0e:eb:62: 33:ad:ba:f3:7b:b7:32:68:92:5f:18:bc:6d:50:74:d9:f2:0b: 4a:c0:75:29:e3:05:94:9a:bb:51:ab:be:f2:40:6c:dc:9f:cf: ad:06:8e:1f:3b:ae:43:48:ad:49:37:6b:9b:55:a2:ad:8e:bf: f9:cd:33:90:7b:7b:e7:38:a1:42:4d:ed:15:0e:ed:b5:d8:0d: 2d:bc:28:7a:10:f9:85:59:b4:d4:ca:cd:c6:6b:4c:6e:83:f9: 83:32:e8:2a:30:89:88:64:ae:59:8f:b9:c5:a5:f7:d8:56:c4: bf:60:ab:87:75:c7:b6:c0:c1:97:5b:27:22:65:6f:2b:ca:4b: 86:a5:8d:c2:19:df:4d:c6:b6:4e:a0:d2:cf:43:aa:41:1b:02: b3:24:94:e4:36:e1:12:71:67:88:de:d1:08:14:59:ff:cc:48: e7:05:25:cd:68:20:d3:8a:ee:19:bb:cc:48:a4:9b:a3:ae:be: a5:fe:e8:e5:eb:2b:c2:81:7e:4b:38:e2:bd:ad:12:71:b7:db: 6e:c2:fd:c6:11:3b:a4:1d:39:9e:1f:4a:0b:be:77:95:f6:d8: 87:68:d0:a2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUE5JDyg16QgpHqep0wMox2ZxIxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTUyMDM2MjFaFw0yNjEwMTQyMDQxMjFaMDMxMTAvBgNV BAMTKDdGQTAwNzI1Qjg2NTY1N0NDMjRBMTdBRDdBOTk5NDc5MDZCNTEyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/URm4zhhZDoY0IVsUz+GTlPS r0p21IGYAhwoZkv7+2dE+YRsR0MvLiwI+cAfSZ4hgd82ohDVbRlqmsDVF5+FeiXO r2h0qNSGLVfOUPcsS58lVur5Q2w+LydI8KWerMnGmjUzaj+OW4OdY2EM4nOo/DkX ch3BVgME2WCSNUymReTs+vTbeDC5ykAeMVzeU1cyEiK63oBbumvlB5GLRjamSt6i DVtaH3WoqRvJ6GdgJnEvvY3YHhSKtYy3o5z4oH2/BAR0zeK0H54b4Zt5aZL5a3Uj 7mt3DK0GdlDSl44XkJlE59kCB9l+YsGsP8DNOUpbYPL3Ix5Y3wAdy6+1vqs3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/oAcluGVlfMJK F616mZR5BrUSQzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGpz YmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3UmEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hq c2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAvN0ZB MDA3MjVCODY1NjU3Q0MyNEExN0FEN0E5OTk0NzkwNkI1MTI0My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLayAMA0EAgACMAcDBQAoBFpkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZ4jANBgkqhkiG9w0BAQsFAAOCAQEAM4g5KD4v6k3BV10R 7KCZlxxWCu5IKpjHPOtu7IPKN9liDutiM62683u3MmiSXxi8bVB02fILSsB1KeMF lJq7Uau+8kBs3J/PrQaOHzuuQ0itSTdrm1WirY6/+c0zkHt75zihQk3tFQ7ttdgN LbwoehD5hVm01MrNxmtMboP5gzLoKjCJiGSuWY+5xaX32FbEv2Crh3XHtsDBl1sn ImVvK8pLhqWNwhnfTca2TqDSz0OqQRsCsySU5DbhEnFniN7RCBRZ/8xI5wUlzWgg 04ruGbvMSKSbo66+pf7o5esrwoF+Szjiva0ScbfbbsL9xhE7pB05nh9KC753lfbY h2jQog== -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:35 2025 by rpki-client