$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer File: FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer (raw, json) Hash identifier: C16/65JMBeI9BcqYGcNmHYHlklGGvW8AOzZTv0+SScQ= Subject key identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29495107226CF4E66562F4F7A312F4B359BA37A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft caRepository: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 12:13:51 +0000 Certificate not after: Tue 23 Mar 2027 12:18:51 +0000 Subordinate resources: AS: 268885 IP: 45.175.60.0/22 IP: 2804:5c10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:49:51:07:22:6c:f4:e6:65:62:f4:f7:a3:12:f4:b3:59:ba:37:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 12:13:51 2026 GMT Not After : Mar 23 12:18:51 2027 GMT Subject: CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:00:9e:66:ac:59:38:9d:72:4a:a5:54:3f: eb:0c:96:7c:25:7a:dd:50:c7:e9:41:d9:4f:a3:10: 92:63:f0:13:9d:ce:0b:b8:07:80:0f:e2:8d:d2:26: ff:f5:c6:b4:3e:ac:db:c3:02:ee:f3:9b:7c:aa:b5: 2a:a1:de:db:20:75:23:2a:f9:7b:8e:88:e4:41:18: aa:91:e6:84:e2:49:af:42:3c:f0:f4:6f:bc:3a:4c: 7a:5c:0d:ed:98:05:1a:38:94:58:79:b6:21:c3:d3: e8:94:06:59:64:ff:e7:3f:93:38:be:f0:3b:24:1e: 59:3f:30:25:b7:36:09:fd:c2:4e:ae:aa:f4:40:ac: d0:c6:3a:ec:0e:3b:ed:94:f0:73:74:44:69:3c:5a: d6:6c:13:08:d2:66:e9:ec:ab:6b:5b:95:08:7e:4b: 96:df:8c:61:67:2a:44:7b:65:d6:17:21:d6:f7:77: ac:0c:a7:7c:69:1e:57:fd:34:1d:e0:ae:fa:b2:3c: 70:76:a7:b3:ac:06:77:5f:ac:7d:85:53:4d:cd:da: ee:27:e8:b0:9c:14:71:0c:14:6d:93:89:ff:5a:ab: d0:c1:e0:d4:68:df:51:68:de:aa:58:8e:83:25:29: 25:99:9d:7a:84:9a:4c:b7:0d:c6:3e:dc:00:cd:04: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.60.0/22 IPv6: 2804:5c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268885 Signature Algorithm: sha256WithRSAEncryption 62:46:e9:6e:82:a1:f9:40:aa:40:fd:4b:4a:6f:40:d3:9d:3e: 50:1b:f1:79:ad:25:d9:38:fd:e5:07:17:4b:ac:9e:95:2a:ae: f8:51:b8:fb:a9:9f:2d:9a:79:84:9b:7f:c2:94:7e:c7:0d:d2: 2f:79:63:f1:29:6d:e8:39:bd:39:98:43:e7:a5:71:8e:c8:93: 45:76:09:8d:4e:ba:b6:dc:b5:4e:48:b9:ae:62:86:6e:02:23: c8:46:1f:fa:15:bb:ed:aa:25:48:c9:ef:0b:44:a6:dc:2a:6a: fa:60:5a:88:ac:20:27:2e:b3:66:eb:70:0f:da:a3:5b:4f:3a: 9a:f5:79:f0:8d:06:05:55:5d:f2:aa:d1:de:e1:80:1b:25:0d: c0:fe:13:83:b7:60:fc:ba:ea:88:32:fc:86:d6:d9:9a:5d:32: d6:ba:95:da:75:d4:4d:9a:62:51:1e:22:c4:7b:51:f0:02:ff: 93:b5:e8:cb:37:7e:53:98:47:0f:06:b0:80:41:0a:9b:43:f2: ba:cc:e3:27:d9:0f:63:ff:f3:fe:ad:8b:aa:ad:34:44:13:3d: 7a:19:5d:85:58:81:28:34:04:57:8c:c7:60:c1:7c:0c:9d:0b: 1c:4b:eb:5e:fa:43:6c:a5:06:94:8e:86:f9:58:77:3d:34:c0: c9:3b:fa:44 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKUlRByJs9OZlYvT3oxL0s1m6N6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxMjEzNTFaFw0yNzAzMjMxMjE4NTFaMDMxMTAvBgNV BAMTKEZBQTNDQTcyNTNGRjdEQTJGMjVBNEQ0Qzk1MzM2N0U5NjYyMTU0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbwCeZqxZOJ1ySqVUP+sMlnwl et1Qx+lB2U+jEJJj8BOdzgu4B4AP4o3SJv/1xrQ+rNvDAu7zm3yqtSqh3tsgdSMq +XuOiORBGKqR5oTiSa9CPPD0b7w6THpcDe2YBRo4lFh5tiHD0+iUBllk/+c/kzi+ 8DskHlk/MCW3Ngn9wk6uqvRArNDGOuwOO+2U8HN0RGk8WtZsEwjSZunsq2tblQh+ S5bfjGFnKkR7ZdYXIdb3d6wMp3xpHlf9NB3grvqyPHB2p7OsBndfrH2FU03N2u4n 6LCcFHEMFG2Tif9aq9DB4NRo31Fo3qpYjoMlKSWZnXqEmky3DcY+3ADNBOv/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6o8pyU/99ovJa TUyVM2fpZiFU3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlJR ZnQ1ZVMzYWNUQ1M0a0tyTVhNQmNFcEhUamtTaVlyQWQ4Mms2VDJqbnEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JS UWZ0NWVTM2FjVENTNGtLck1YTUJjRXBIVGprU2lZckFkODJrNlQyam5xLzAvRkFB M0NBNzI1M0ZGN0RBMkYyNUE0RDRDOTUzMzY3RTk2NjIxNTRERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa88MA0EAgACMAcDBQAoBFwQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaVTANBgkqhkiG9w0BAQsFAAOCAQEAYkbpboKh+UCqQP1L Sm9A050+UBvxea0l2Tj95QcXS6yelSqu+FG4+6mfLZp5hJt/wpR+xw3SL3lj8Slt 6Dm9OZhD56VxjsiTRXYJjU66tty1Tki5rmKGbgIjyEYf+hW77aolSMnvC0Sm3Cpq +mBaiKwgJy6zZutwD9qjW086mvV58I0GBVVd8qrR3uGAGyUNwP4Tg7dg/LrqiDL8 htbZml0y1rqV2nXUTZpiUR4ixHtR8AL/k7Xoyzd+U5hHDwawgEEKm0PyuszjJ9kP Y//z/q2Lqq00RBM9ehldhViBKDQEV4zHYMF8DJ0LHEvrXvpDbKUGlI6G+Vh3PTTA yTv6RA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:58 2026 by rpki-client