$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer File: F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer (raw, json) Hash identifier: TiJaZCXhALSW9GtZEbdZeKjPpEixt30eJcMbWI5ZRxI= Subject key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 424714D6DE8EC0E16758690311DB081816B94F5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft caRepository: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Oct 2025 18:02:15 +0000 Certificate not after: Mon 12 Oct 2026 18:07:15 +0000 Subordinate resources: AS: 262518 IP: 138.122.172.0/22 IP: 177.67.112.0/20 IP: 2804:580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:47:14:d6:de:8e:c0:e1:67:58:69:03:11:db:08:18:16:b9:4f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 13 18:02:15 2025 GMT Not After : Oct 12 18:07:15 2026 GMT Subject: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:01:f5:e4:7e:fb:b6:3f:b8:99:2e:c9:ca: 67:85:1e:31:0e:83:9a:c2:14:2e:cb:6f:92:e2:98: dc:63:8d:d9:11:ec:96:f5:fc:70:b1:81:7e:9c:8c: 1e:f4:af:bd:67:85:ee:0d:4f:33:c0:51:c8:c3:bf: 3f:e2:95:88:23:c8:e5:84:c6:d5:0e:3b:83:a9:c4: ed:96:a9:26:2c:ed:81:42:92:90:a6:58:92:a9:5c: 47:60:68:95:8c:41:fb:42:c3:0c:59:7e:ea:c7:d3: 90:13:11:df:7c:22:f2:68:1d:07:9e:f9:a5:9f:a7: af:4d:4d:dd:0f:ee:c7:0d:04:0c:1d:cd:f0:09:25: 15:aa:6c:95:7f:33:4d:58:2f:c4:b2:d7:e1:61:f5: 2b:7c:43:95:1a:30:ab:55:22:1e:bd:dd:b1:5f:66: 61:01:63:27:6b:a2:bd:20:30:27:4f:d4:00:c9:82: 4d:1e:4b:6b:9c:c1:14:b5:3e:21:8c:42:47:70:05: 2f:8d:f2:7f:08:12:6e:f7:15:8c:65:2b:d0:6f:c9: b5:6a:d2:ad:0e:03:48:f5:e2:03:95:ce:42:f7:21: ca:9e:83:b1:30:e1:97:31:17:d0:36:f2:13:b4:53: 53:87:92:32:b3:57:86:ed:4a:c2:8f:be:ef:ea:81: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.172.0/22 177.67.112.0/20 IPv6: 2804:580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262518 Signature Algorithm: sha256WithRSAEncryption ac:2f:b9:4e:6a:b5:22:99:f9:ad:8f:d1:82:36:cf:c3:6d:03: 35:ac:a2:09:55:78:98:eb:5c:31:ca:10:e5:97:60:2d:47:7e: e4:bc:9d:24:ff:a1:5a:95:25:b7:82:63:f4:9f:c5:68:aa:24: f7:e3:9d:05:11:81:78:3b:f7:dc:4d:a6:e5:25:f9:71:42:cf: c5:2c:00:5c:b6:f1:7e:41:a2:b5:57:6f:b5:45:a1:85:8b:c2: 28:26:15:90:2f:eb:ff:21:95:bc:0c:eb:3e:aa:62:28:da:ac: 7b:eb:45:35:66:a2:75:0e:34:35:1b:5f:b9:3a:8e:8e:51:6a: 7d:41:e7:98:53:87:bc:0b:25:39:71:63:06:99:06:c8:c5:45: 35:ac:22:2b:8c:a5:f6:4f:f8:4f:67:51:4c:be:53:a5:c3:a0: e4:9d:8b:43:ab:d7:54:4b:12:39:de:fb:39:b2:4e:55:ae:60: 7a:b2:fd:96:12:5a:bf:61:e8:f7:4e:01:ee:9e:f0:64:54:5f: db:6b:ab:57:3e:04:9a:94:14:7f:55:4d:bc:3d:aa:85:46:b1: f0:c1:76:dc:5c:02:72:14:4d:e5:52:7f:c9:26:0c:1c:4f:f8: a5:ed:a5:df:05:53:54:1b:91:21:13:d9:79:e6:66:59:2a:3b: 0e:57:eb:12 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQkcU1t6OwOFnWGkDEdsIGBa5T10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTMxODAyMTVaFw0yNjEwMTIxODA3MTVaMDMxMTAvBgNV BAMTKEYxNDEzQkMzRDU5NzYwMUQ1Q0NBRTRBMDA0ODk4M0RFREFDRUU1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0gH15H77tj+4mS7JymeFHjEO g5rCFC7Lb5LimNxjjdkR7Jb1/HCxgX6cjB70r71nhe4NTzPAUcjDvz/ilYgjyOWE xtUOO4OpxO2WqSYs7YFCkpCmWJKpXEdgaJWMQftCwwxZfurH05ATEd98IvJoHQee +aWfp69NTd0P7scNBAwdzfAJJRWqbJV/M01YL8Sy1+Fh9St8Q5UaMKtVIh693bFf ZmEBYydror0gMCdP1ADJgk0eS2ucwRS1PiGMQkdwBS+N8n8IEm73FYxlK9BvybVq 0q0OA0j14gOVzkL3Icqeg7Ew4ZcxF9A28hO0U1OHkjKzV4btSsKPvu/qgaf1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxQTvD1ZdgHVzK 5KAEiYPe2s7l0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Fp U3JRZWE1ZGdGNEEydXNqQkpWWG0xd1Z6SG9HdkxuV3Bra2Qza2JoaWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nx aVNyUWVhNWRnRjRBMnVzakJKVlhtMXdWekhvR3ZMbldwa2tkM2tiaGlhLzAvRjE0 MTNCQzNENTk3NjAxRDVDQ0FFNEEwMDQ4OTgzREVEQUNFRTVEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinqsAwQEsUNwMA0EAgACMAcDBQAoBAWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBdjANBgkqhkiG9w0BAQsFAAOCAQEArC+5Tmq1 Ipn5rY/RgjbPw20DNayiCVV4mOtcMcoQ5ZdgLUd+5LydJP+hWpUlt4Jj9J/FaKok 9+OdBRGBeDv33E2m5SX5cULPxSwAXLbxfkGitVdvtUWhhYvCKCYVkC/r/yGVvAzr PqpiKNqse+tFNWaidQ40NRtfuTqOjlFqfUHnmFOHvAslOXFjBpkGyMVFNawiK4yl 9k/4T2dRTL5TpcOg5J2LQ6vXVEsSOd77ObJOVa5gerL9lhJav2Ho904B7p7wZFRf 22urVz4EmpQUf1VNvD2qhUax8MF23FwCchRN5VJ/ySYMHE/4pe2l3wVTVBuRIRPZ eeZmWSo7DlfrEg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:47 2025 by rpki-client