$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer File: 7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer (raw, json) Hash identifier: 3VMkT7IJvKonskWIpIsMswvOSe5RmPGWbD326suQznM= Subject key identifier: 7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B6B5E828D63479E836F3823CA801659EA09B19B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft caRepository: rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Sep 2025 17:28:53 +0000 Certificate not after: Mon 28 Sep 2026 17:33:53 +0000 Subordinate resources: AS: 268221 IP: 45.236.52.0/22 IP: 2804:4dd0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:5e:82:8d:63:47:9e:83:6f:38:23:ca:80:16:59:ea:09:b1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 29 17:28:53 2025 GMT Not After : Sep 28 17:33:53 2026 GMT Subject: CN=7FA9BF9F12750C277B09128D03E40ED5D7E48CEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:3b:70:9b:2a:f5:d8:d4:18:01:12:37:d4: 27:16:58:09:4c:88:ae:22:d1:df:da:55:08:40:56: 67:89:5a:2c:b4:7d:28:a1:6b:9a:8d:6f:05:c3:ca: 81:56:fe:6b:45:f2:6f:ec:ef:cd:cb:55:c4:54:e0: 9b:c0:c7:18:b1:18:8a:e8:98:1d:24:4f:34:34:44: a2:e5:d2:aa:52:5b:4b:aa:05:92:4b:7d:bb:e5:12: 2f:f1:6f:41:c8:a9:b4:04:84:83:17:08:c8:48:1f: fb:e6:94:39:99:ce:0f:93:91:77:d6:f3:ad:4d:c0: 5f:f9:f1:d9:03:62:52:25:26:d6:6d:2a:d4:e6:65: 77:27:72:9a:1b:3d:91:ac:82:5c:db:44:76:df:06: de:ca:05:f4:b0:8a:e5:17:10:cc:15:06:c5:b9:bd: ad:42:46:55:47:26:1b:8a:7b:d9:b8:10:6e:85:3a: 04:73:45:98:d4:d9:e7:c3:d1:c0:31:ac:33:ca:c0: 13:5a:c6:d2:40:89:ee:aa:76:42:d9:86:49:ab:30: 82:59:43:84:8e:c5:25:65:53:7b:8a:a0:e9:c2:fa: 0e:57:eb:df:37:30:05:7f:63:18:39:23:f6:33:59: 6f:c2:01:5d:95:df:8c:a3:5a:44:19:0d:19:44:21: fa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.52.0/22 IPv6: 2804:4dd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268221 Signature Algorithm: sha256WithRSAEncryption 54:ea:6f:e0:c3:4b:d0:ef:97:7d:24:0e:07:06:20:76:01:66: 25:0b:53:f0:2a:84:58:0f:ec:28:7f:fc:6b:48:5d:52:5b:1a: af:fa:9c:22:b2:c7:9f:21:5e:e2:47:e0:40:10:d3:1b:75:43: 74:e6:65:62:9c:e8:2c:af:66:3f:28:33:2c:1f:fa:f8:75:ac: 0b:74:1a:e8:9f:f5:49:b8:7e:d2:14:d1:96:f4:08:d5:c6:12: 8d:5d:07:0f:4e:d7:58:b1:8a:b8:30:f2:fb:89:2f:6c:a8:26: d9:82:27:58:82:03:53:77:c5:84:13:aa:68:e5:56:c3:a5:fc: 9b:f4:bf:aa:c4:69:37:4f:a7:22:c2:c2:10:e5:da:1b:78:0c: 17:c7:94:6a:42:ad:f3:b7:08:5c:b3:48:51:2a:05:0d:b6:81: 2c:a9:7e:19:62:25:c8:67:4d:af:8e:9b:29:8f:e7:4d:aa:c9: 77:b5:b2:af:6b:90:15:3d:2e:29:00:66:72:0a:c0:0b:cf:86: a0:1e:8c:75:03:a6:7b:45:c7:f0:66:b6:04:52:c0:3f:51:c2: 9b:4e:de:ca:ca:3b:45:2e:4b:f6:d2:92:60:67:da:ab:04:e6: e1:c6:15:ba:21:61:65:e4:76:1c:c8:5e:e9:4f:70:f9:63:53: 01:02:6c:a7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG2tego1jR56DbzgjyoAWWeoJsZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjkxNzI4NTNaFw0yNjA5MjgxNzMzNTNaMDMxMTAvBgNV BAMTKDdGQTlCRjlGMTI3NTBDMjc3QjA5MTI4RDAzRTQwRUQ1RDdFNDhDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/ztwmyr12NQYARI31CcWWAlM iK4i0d/aVQhAVmeJWiy0fSiha5qNbwXDyoFW/mtF8m/s783LVcRU4JvAxxixGIro mB0kTzQ0RKLl0qpSW0uqBZJLfbvlEi/xb0HIqbQEhIMXCMhIH/vmlDmZzg+TkXfW 861NwF/58dkDYlIlJtZtKtTmZXcncpobPZGsglzbRHbfBt7KBfSwiuUXEMwVBsW5 va1CRlVHJhuKe9m4EG6FOgRzRZjU2efD0cAxrDPKwBNaxtJAie6qdkLZhkmrMIJZ Q4SOxSVlU3uKoOnC+g5X6983MAV/Yxg5I/YzWW/CAV2V34yjWkQZDRlEIfoFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/qb+fEnUMJ3sJ Eo0D5A7V1+SM7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDV1 Q2Z4UlNBV3F4NzYzTGlNdVEzOEFMWVBkMzVIRXdEWHp3WXZyZzRqMnAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q1 dUNmeFJTQVdxeDc2M0xpTXVRMzhBTFlQZDM1SEV3RFh6d1l2cmc0ajJwLzAvN0ZB OUJGOUYxMjc1MEMyNzdCMDkxMjhEMDNFNDBFRDVEN0U0OENFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLew0MA0EAgACMAcDBQAoBE3QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXvTANBgkqhkiG9w0BAQsFAAOCAQEAVOpv4MNL0O+XfSQO BwYgdgFmJQtT8CqEWA/sKH/8a0hdUlsar/qcIrLHnyFe4kfgQBDTG3VDdOZlYpzo LK9mPygzLB/6+HWsC3Qa6J/1Sbh+0hTRlvQI1cYSjV0HD07XWLGKuDDy+4kvbKgm 2YInWIIDU3fFhBOqaOVWw6X8m/S/qsRpN0+nIsLCEOXaG3gMF8eUakKt87cIXLNI USoFDbaBLKl+GWIlyGdNr46bKY/nTarJd7Wyr2uQFT0uKQBmcgrAC8+GoB6MdQOm e0XH8Ga2BFLAP1HCm07eyso7RS5L9tKSYGfaqwTm4cYVuiFhZeR2HMhe6U9w+WNT AQJspw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:58 2025 by rpki-client