$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer File: 7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer (raw, json) Hash identifier: KiUuPQxrQtzdFZEvJOQgrjBQbN78i7Mzi+wRVgQc5aA= Subject key identifier: 7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17B9C97E8DA5EFDCD361ACF521D9D34F8E8C1548 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft caRepository: rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Oct 2025 15:36:39 +0000 Certificate not after: Fri 30 Oct 2026 15:41:39 +0000 Subordinate resources: AS: 266242 IP: 192.145.204.0/22 IP: 2804:3cec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b9:c9:7e:8d:a5:ef:dc:d3:61:ac:f5:21:d9:d3:4f:8e:8c:15:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 15:36:39 2025 GMT Not After : Oct 30 15:41:39 2026 GMT Subject: CN=7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:41:4f:eb:73:92:54:dc:2d:ee:7a:fd:5f: 06:a0:a5:0b:f4:9e:e8:83:93:f6:20:14:41:c3:fc: ea:15:04:05:eb:13:c7:e8:78:52:3e:3c:54:8d:60: 21:97:3f:c0:91:bb:62:fe:1d:bb:89:19:1a:63:21: 34:f4:12:45:b8:80:db:23:09:2d:09:39:9f:ab:89: 96:be:ba:7e:e9:6e:d0:08:1c:27:eb:1c:7d:a8:b5: 35:9c:ab:9b:e4:6b:3a:b0:7b:54:ab:a1:7c:ba:7e: 89:ac:a4:0b:f8:aa:c5:26:fe:f7:17:df:f5:98:70: 22:f7:2d:e0:4d:4a:64:e0:80:a6:e7:44:89:79:be: 38:a2:61:35:28:31:62:d9:f9:9e:a1:3b:16:b2:e0: 44:88:e4:1e:39:b0:d2:27:e5:61:ab:4c:e4:ec:34: 99:04:3a:63:69:ad:1b:2b:3c:1c:b4:99:d2:f2:c8: 07:3b:d6:7e:69:cc:1a:a0:ad:1f:f4:7d:5f:a9:34: 2a:67:db:29:ed:60:63:22:3f:c2:2d:d3:2e:61:67: ea:3d:d3:ba:a8:c6:d8:09:09:41:9f:0a:e5:13:32: f7:ad:f1:f9:40:ca:a5:6a:3c:5c:ca:46:b2:93:a0: 1d:f9:a2:95:f4:b2:73:4e:08:1d:27:41:09:7f:2e: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.204.0/22 IPv6: 2804:3cec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266242 Signature Algorithm: sha256WithRSAEncryption 31:38:a7:83:7d:39:dd:85:e3:fe:d9:3f:ef:8b:37:2c:eb:bb: 91:9c:84:81:4a:95:08:e5:5c:94:e3:6f:78:3b:c1:2e:ce:df: 08:84:5f:28:1c:24:f3:01:a2:0c:7f:73:71:5a:71:be:e3:96: c2:9e:15:56:7c:6d:2c:10:6e:44:87:e2:de:b7:5d:91:e1:0b: 10:27:36:f6:a8:e2:3b:0b:6a:65:99:af:9e:81:66:d2:31:31: 24:ac:7b:38:7f:2d:61:11:5e:00:b3:a9:35:0b:d0:93:97:98: b7:29:cc:be:6b:d7:89:65:35:dc:6c:6d:a9:48:5c:be:db:cb: 89:89:a7:d0:a9:c0:10:b9:12:be:32:8a:f7:04:34:d4:43:e5: bd:1a:fa:49:9f:29:1a:4a:c2:9a:e9:63:32:bd:16:c3:12:ba: cb:f5:03:cc:da:8c:3e:82:f8:b3:49:bb:65:1a:ab:33:b7:aa: 22:d3:73:35:ec:a8:48:05:2d:5f:43:d5:7c:b8:04:f2:14:29: 9d:10:3c:35:51:d0:01:11:eb:ab:9c:d4:42:0a:ee:07:ed:31: dc:ac:da:2c:b8:21:c3:c0:85:38:da:40:4d:9d:e3:02:07:91: aa:14:72:09:d8:63:77:a3:c9:67:49:ed:dd:f1:96:30:8e:56: 8f:d0:ff:05 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUF7nJfo2l79zTYaz1IdnTT46MFUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzExNTM2MzlaFw0yNjEwMzAxNTQxMzlaMDMxMTAvBgNV BAMTKDdGMTExRTg4MzZBRUU5MUQwNDYzQUQ2MTc3QTg4REUyRjVFQzZBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wkFP63OSVNwt7nr9XwagpQv0 nuiDk/YgFEHD/OoVBAXrE8foeFI+PFSNYCGXP8CRu2L+HbuJGRpjITT0EkW4gNsj CS0JOZ+riZa+un7pbtAIHCfrHH2otTWcq5vkazqwe1SroXy6fomspAv4qsUm/vcX 3/WYcCL3LeBNSmTggKbnRIl5vjiiYTUoMWLZ+Z6hOxay4ESI5B45sNIn5WGrTOTs NJkEOmNprRsrPBy0mdLyyAc71n5pzBqgrR/0fV+pNCpn2yntYGMiP8It0y5hZ+o9 07qoxtgJCUGfCuUTMvet8flAyqVqPFzKRrKToB35opX0snNOCB0nQQl/LgfJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/ER6INq7pHQRj rWF3qI3i9exqtjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXZQ bnNKcW4yMnZhd2RFUFVRUUhKdXVGVDZIM0hETTg5allFdWg5YU55N0gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F2 UG5zSnFuMjJ2YXdkRVBVUVFISnV1RlQ2SDNIRE04OWpZRXVoOWFOeTdILzAvN0Yx MTFFODgzNkFFRTkxRDA0NjNBRDYxNzdBODhERTJGNUVDNkFCNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwJHMMA0EAgACMAcDBQAoBDzsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQAjANBgkqhkiG9w0BAQsFAAOCAQEAMTing3053YXj/tk/ 74s3LOu7kZyEgUqVCOVclONveDvBLs7fCIRfKBwk8wGiDH9zcVpxvuOWwp4VVnxt LBBuRIfi3rddkeELECc29qjiOwtqZZmvnoFm0jExJKx7OH8tYRFeALOpNQvQk5eY tynMvmvXiWU13GxtqUhcvtvLiYmn0KnAELkSvjKK9wQ01EPlvRr6SZ8pGkrCmulj Mr0WwxK6y/UDzNqMPoL4s0m7ZRqrM7eqItNzNeyoSAUtX0PVfLgE8hQpnRA8NVHQ ARHrq5zUQgruB+0x3KzaLLghw8CFONpATZ3jAgeRqhRyCdhjd6PJZ0nt3fGWMI5W j9D/BQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:59 2025 by rpki-client