$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer File: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer (raw, json) Hash identifier: bs/M9dTIE6BzsYtoEPQ2KCT5cRtaLveO12hRKGJMGDE= Subject key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C1285C1608B378EC4F7D4C1F477348103830496 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft caRepository: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 23 Oct 2025 12:40:24 +0000 Certificate not after: Thu 22 Oct 2026 12:45:24 +0000 Subordinate resources: AS: 265449 IP: 200.23.118.0/24 IP: 2801:80:1a40::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:12:85:c1:60:8b:37:8e:c4:f7:d4:c1:f4:77:34:81:03:83:04:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 23 12:40:24 2025 GMT Not After : Oct 22 12:45:24 2026 GMT Subject: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:89:ca:06:ea:7f:74:d4:12:61:69:19:41: 1c:e1:70:c4:87:cb:3b:08:7c:8a:8b:d2:ff:59:f2: b4:7c:14:62:2c:0e:78:73:49:26:d5:48:a7:45:fb: 54:82:cd:c5:a6:c5:73:ad:f1:b8:e3:92:c0:05:99: 28:da:a8:24:44:37:05:4f:c2:2a:40:47:3e:35:9e: f0:7b:a4:11:03:aa:4f:b9:77:9c:a9:f7:10:09:51: 71:e9:85:04:8d:28:cb:83:f6:3b:45:f9:df:35:5f: 7a:6a:da:53:f9:77:7c:f4:40:f7:2a:e0:53:c0:d4: f2:28:65:57:5c:b4:9e:a3:c6:8c:37:39:9e:c9:53: a1:d0:dc:8d:9f:d0:ee:92:0b:f7:b9:1b:fc:5b:28: a0:96:02:72:13:e9:33:01:7a:7b:48:2a:81:45:c9: 32:d6:12:e5:15:fe:98:22:35:9a:45:0e:89:bb:5e: 6d:43:9c:c8:96:1f:a6:1b:ff:22:e1:74:96:6b:46: 4c:31:de:2e:31:ae:7e:66:70:34:b1:c8:4e:30:09: b5:3a:78:be:a8:10:ba:a0:fa:ae:2d:6c:fd:69:64: 67:f8:f1:62:cc:48:79:0a:30:f6:4c:d2:ec:46:db: 38:28:70:d8:2b:80:90:0a:8a:eb:d0:88:df:72:f9: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.118.0/24 IPv6: 2801:80:1a40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265449 Signature Algorithm: sha256WithRSAEncryption 18:70:a6:62:77:84:34:93:a5:0e:e2:85:15:b1:54:6f:06:dc: f5:11:6e:69:c7:cc:42:c8:02:d2:08:64:5c:82:f6:07:6a:16: b5:ae:14:bb:d0:0e:ce:b1:74:1a:b4:48:ce:f2:d2:e0:26:7c: b0:4f:bc:82:c5:d6:df:ba:15:eb:7e:58:0f:e8:6e:43:27:8a: a2:02:75:5a:4d:a5:a6:1a:67:77:cf:2e:6e:eb:00:e1:6e:85: 20:51:fe:50:b0:9c:8d:db:2e:5f:ac:0a:32:4b:df:6c:23:a2: 1b:57:16:63:51:f1:11:d2:dd:37:2a:58:16:81:99:87:07:b5: 5c:80:cb:83:cb:e1:29:d5:30:53:32:44:56:06:ae:fc:78:d5: 4c:1e:db:5c:c1:74:8e:3a:3d:fc:6c:ed:a5:34:db:67:13:2e: 31:fa:4a:c5:98:77:24:b2:3b:ab:6e:1f:e2:2c:4c:ed:5d:aa: 01:94:ed:52:6f:47:9e:76:a2:6c:b0:e1:f4:86:a0:73:5a:f5: b5:63:2f:69:32:6c:7a:29:79:5d:53:07:de:a8:a8:dc:60:5b: b8:27:fe:7a:ff:d5:c2:08:96:9b:6f:9a:9f:1f:db:01:bb:7b: cf:e0:ca:c0:10:14:68:46:50:ff:2b:ae:6e:5c:8f:69:b5:92: cb:5f:3c:cd -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUPBKFwWCLN47E99TB9Hc0gQODBJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjMxMjQwMjRaFw0yNjEwMjIxMjQ1MjRaMDMxMTAvBgNV BAMTKDJGRjRFRTlDMUZBRjE5Q0JENDRDQ0I2QzRGODAzQjU0REE5MzNFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33InKBup/dNQSYWkZQRzhcMSH yzsIfIqL0v9Z8rR8FGIsDnhzSSbVSKdF+1SCzcWmxXOt8bjjksAFmSjaqCRENwVP wipARz41nvB7pBEDqk+5d5yp9xAJUXHphQSNKMuD9jtF+d81X3pq2lP5d3z0QPcq 4FPA1PIoZVdctJ6jxow3OZ7JU6HQ3I2f0O6SC/e5G/xbKKCWAnIT6TMBentIKoFF yTLWEuUV/pgiNZpFDom7Xm1DnMiWH6Yb/yLhdJZrRkwx3i4xrn5mcDSxyE4wCbU6 eL6oELqg+q4tbP1pZGf48WLMSHkKMPZM0uxG2zgocNgrgJAKiuvQiN9y+d4/AgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv9O6cH68Zy9RM y2xPgDtU2pM+iDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFX TUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB V01DUUZ2Q3I3N1NkQ3R0MURFSzhCTGdlWlVBdmVtRFdlcXpLakdpaEtQLzAvMkZG NEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTREQTkzM0U4OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAyBd2MA8EAgACMAkDBwAoAQCAGkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBAzpMA0GCSqGSIb3DQEBCwUAA4IBAQAYcKZid4Q0k6UO 4oUVsVRvBtz1EW5px8xCyALSCGRcgvYHaha1rhS70A7OsXQatEjO8tLgJnywT7yC xdbfuhXrflgP6G5DJ4qiAnVaTaWmGmd3zy5u6wDhboUgUf5QsJyN2y5frAoyS99s I6IbVxZjUfER0t03KlgWgZmHB7VcgMuDy+Ep1TBTMkRWBq78eNVMHttcwXSOOj38 bO2lNNtnEy4x+krFmHcksjurbh/iLEztXaoBlO1Sb0eedqJssOH0hqBzWvW1Yy9p Mmx6KXldUwfeqKjcYFu4J/56/9XCCJabb5qfH9sBu3vP4MrAEBRoRlD/K65uXI9p tZLLXzzN -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:41 2025 by rpki-client