$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer File: FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer (raw, json) Hash identifier: h+ugwciRKtgfTHazFC7VQcvID5s1lQ9XNO1zr/fjvsE= Subject key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E383181A85BDC67642209B9F7CD047777CAE6B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft caRepository: rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 05 Feb 2026 16:00:48 +0000 Certificate not after: Thu 04 Feb 2027 16:05:48 +0000 Subordinate resources: AS: 28267 IP: 187.17.224.0/20 IP: 187.108.0.0/20 IP: 2804:20d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 03:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:38:31:81:a8:5b:dc:67:64:22:09:b9:f7:cd:04:77:77:ca:e6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 5 16:00:48 2026 GMT Not After : Feb 4 16:05:48 2027 GMT Subject: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:53:f3:32:35:06:22:ff:0b:f5:f8:d7:53: 64:ea:50:f0:09:d9:e2:57:a2:73:bd:06:19:1a:80: c7:08:5b:fe:75:f1:44:7f:01:8e:14:d6:dc:e4:9a: 3c:c0:cb:82:96:70:8e:e2:4b:eb:b6:9b:12:8c:6d: d2:26:84:55:d2:fd:02:58:34:d9:6e:42:43:f6:69: 14:67:5c:bf:ac:3b:9e:ee:8b:b3:6f:2e:79:fd:bc: 97:bb:09:ac:1a:92:d0:94:24:be:02:b1:87:eb:66: 81:43:9e:6e:ac:79:8b:aa:79:c3:d6:b7:4c:1f:35: ec:e8:61:2c:56:8a:bb:42:52:5c:5b:7b:5e:31:38: 34:72:bf:52:be:09:9c:51:40:d4:8d:18:cd:60:90: 49:35:85:67:60:2b:01:1b:ac:88:53:66:1e:03:f0: 5f:d4:ce:68:d7:6a:b9:f3:42:99:62:6b:51:60:35: 39:11:b0:e0:eb:af:2e:6b:20:7e:0c:f3:24:ab:c2: de:c9:97:a3:56:2f:a0:ec:62:a5:1e:1f:9e:75:0b: f1:b2:75:ae:88:24:38:7d:b8:a8:e1:d9:43:4f:4b: c4:47:4c:d7:f5:79:55:1c:36:b4:9d:06:97:54:46: 19:66:ed:17:ad:d5:97:7e:3e:ce:4d:3a:b9:e9:57: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.17.224.0/20 187.108.0.0/20 IPv6: 2804:20d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28267 Signature Algorithm: sha256WithRSAEncryption 31:c3:fc:d5:73:cb:07:8d:07:b4:c2:e8:5d:5a:83:c1:1d:88: a3:d5:e1:f6:c8:35:c6:37:32:57:1d:af:fb:85:c1:3d:ae:fc: 92:a0:6b:18:72:8f:9d:e4:21:e4:4d:2c:95:c4:fc:d7:50:f4: 3c:27:fe:f2:d4:67:54:57:db:2e:10:d3:9c:ee:59:3c:c0:b6: 76:03:cb:21:74:d5:cb:5f:92:12:b3:94:1f:83:7c:31:d7:39: f7:26:39:a1:7e:91:3d:b2:c4:9c:9b:e2:38:f3:40:97:d9:14: 85:b6:f1:fc:29:2f:40:da:11:95:2c:d5:ac:18:18:78:53:8e: 81:0e:83:d2:c5:b9:8b:22:40:f6:5a:a6:e0:92:99:58:8a:ea: 81:49:83:da:59:37:57:a9:44:f8:0f:17:07:c2:1d:15:54:94: f8:7c:a0:06:55:ee:22:0e:24:9a:50:ec:4e:90:6b:64:fb:6d: ff:a9:fe:dc:dd:c5:fe:04:a7:62:65:21:68:9c:55:13:46:b9: 2b:a5:c2:9c:38:50:df:5e:17:24:9e:94:24:8d:63:f0:61:b2: 08:ef:85:84:39:98:4b:bd:d5:78:c6:1c:c9:49:ee:c3:49:60: bf:fd:f4:bb:0c:2c:23:1d:8a:3c:a9:7b:83:de:0c:44:ad:77: 8e:e6:98:5d -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUDjgxgahb3GdkIgm5980Ed3fK5rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDUxNjAwNDhaFw0yNzAyMDQxNjA1NDhaMDMxMTAvBgNV BAMTKEZBOTc2RUI3OUJDOUZERDFENzI4M0JENUNFMTBBQ0IyMkMxQjk4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdO1PzMjUGIv8L9fjXU2TqUPAJ 2eJXonO9BhkagMcIW/518UR/AY4U1tzkmjzAy4KWcI7iS+u2mxKMbdImhFXS/QJY NNluQkP2aRRnXL+sO57ui7NvLnn9vJe7CawaktCUJL4CsYfrZoFDnm6seYuqecPW t0wfNezoYSxWirtCUlxbe14xODRyv1K+CZxRQNSNGM1gkEk1hWdgKwEbrIhTZh4D 8F/UzmjXarnzQplia1FgNTkRsODrry5rIH4M8ySrwt7Jl6NWL6DsYqUeH551C/Gy da6IJDh9uKjh2UNPS8RHTNf1eVUcNrSdBpdURhlm7Ret1Zd+Ps5NOrnpVxs/AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6l263m8n90dco O9XOEKyyLBuYwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNldI bUdkUWZQRkVGUGJRZjVmSDFOckFlaDhTb055SEVHYnhTU3dxZHZnWVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZX SG1HZFFmUEZFRlBiUWY1ZkgxTnJBZWg4U29OeUhFR2J4U1N3cWR2Z1lQLzAvRkE5 NzZFQjc5QkM5RkREMUQ3MjgzQkQ1Q0UxMEFDQjIyQzFCOThDMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEuxHgAwQEu2wAMA0EAgACMAcDBQAoBCDUMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm5rMA0GCSqGSIb3DQEBCwUAA4IBAQAxw/zVc8sH jQe0wuhdWoPBHYij1eH2yDXGNzJXHa/7hcE9rvySoGsYco+d5CHkTSyVxPzXUPQ8 J/7y1GdUV9suENOc7lk8wLZ2A8shdNXLX5ISs5Qfg3wx1zn3JjmhfpE9ssScm+I4 80CX2RSFtvH8KS9A2hGVLNWsGBh4U46BDoPSxbmLIkD2WqbgkplYiuqBSYPaWTdX qUT4DxcHwh0VVJT4fKAGVe4iDiSaUOxOkGtk+23/qf7c3cX+BKdiZSFonFUTRrkr pcKcOFDfXhcknpQkjWPwYbII74WEOZhLvdV4xhzJSe7DSWC//fS7DCwjHYo8qXuD 3gxErXeO5phd -----END CERTIFICATE-----Generated at Thu Feb 19 01:39:24 2026 by rpki-client