$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer File: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer (raw, json) Hash identifier: RDFuMF+9oph3pBOUmgAqv1IVdgeOngOr6FMHSLk7Dgk= Subject key identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 26AA3EF4483A71374934BD36A7EF0348618D3AE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft caRepository: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 12:05:33 +0000 Certificate not after: Fri 23 Oct 2026 12:10:33 +0000 Subordinate resources: AS: 271512 IP: 181.232.128.0/22 IP: 2804:7cb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:aa:3e:f4:48:3a:71:37:49:34:bd:36:a7:ef:03:48:61:8d:3a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 12:05:33 2025 GMT Not After : Oct 23 12:10:33 2026 GMT Subject: CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:62:71:27:f4:8f:3c:47:96:54:4a:de:b5: 28:79:bf:97:56:d8:b4:93:1a:a6:0c:3a:86:6c:92: 3d:a9:e8:0a:90:33:e2:5b:07:62:4e:ea:e2:3a:de: 47:71:39:c5:a5:46:39:16:dd:9e:52:23:5f:8f:7d: e9:7a:fc:5a:7c:08:d5:81:dd:f3:ac:9a:f4:78:3e: 37:c7:2e:2d:99:32:bd:74:c7:a6:12:e0:d4:d4:ca: a8:a6:f7:2e:9c:5f:51:1c:b0:8c:f5:56:31:df:80: fd:2b:31:4b:91:ef:e4:73:fe:e6:0f:62:f5:48:89: e2:02:33:04:04:c5:dc:c5:01:de:c4:3a:ea:ec:c1: bc:7b:7a:e6:4c:17:c1:49:7b:97:a0:e5:a4:4f:67: a4:a3:2b:fc:ca:2a:4c:21:9b:70:dd:04:e7:6d:b5: f0:fb:e7:3a:d8:81:a9:44:bb:96:b9:78:6c:3e:a3: 3f:ec:89:f0:9d:0f:79:39:e6:9b:f3:bd:c3:10:d4: fa:c7:1a:fd:84:3b:be:81:61:97:39:27:a2:15:4c: af:5b:1b:79:a1:bc:29:5e:a7:dd:b7:d6:2b:2d:6d: d3:dd:da:14:41:7a:3f:4b:7d:b3:81:ca:92:37:4c: 6d:55:e2:1a:cd:9f:9f:bf:7f:55:8e:33:aa:b6:38: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.128.0/22 IPv6: 2804:7cb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271512 Signature Algorithm: sha256WithRSAEncryption be:da:5a:65:87:66:3a:4d:58:08:da:67:95:dc:45:fb:e2:03: b2:5c:06:e7:a6:70:ed:e0:b6:84:60:8f:52:0a:54:f9:71:36: 64:38:00:16:e4:3c:06:1f:a8:58:aa:21:be:08:ad:fb:ff:2c: 00:3b:4a:3d:01:80:01:29:62:46:8a:80:27:3f:2c:e4:c9:da: 67:a9:02:39:48:0e:77:f4:57:01:05:64:d8:45:9f:f1:03:74: f0:2a:83:6b:c1:1d:93:ee:0b:9a:13:73:05:32:33:60:7d:1e: 5f:f4:93:a3:de:cc:36:3c:73:70:07:f4:c6:e2:15:23:e2:00: 6f:fb:b7:2f:87:bb:0f:b2:d2:5e:da:ff:f8:cf:68:a2:db:87: c9:93:52:7b:46:f1:5b:b9:46:25:de:d9:76:17:3b:48:08:03: 65:4d:a3:76:54:9c:1b:f8:c0:4a:0c:f3:71:73:d8:c2:06:9f: 8c:2c:ea:d6:a2:51:f5:46:66:f0:c6:fe:0e:ec:4c:0f:d8:ba: db:81:7c:b1:18:82:c7:aa:b4:17:c1:9d:2d:f8:4a:aa:84:50: 9e:8f:8d:47:1d:ee:f6:a4:41:9a:77:41:3d:b0:1b:78:52:52: 22:de:0a:a4:2d:37:50:93:1e:36:b9:5c:ed:d7:15:10:47:72: f1:be:b3:86 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUJqo+9Eg6cTdJNL02p+8DSGGNOuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjQxMjA1MzNaFw0yNjEwMjMxMjEwMzNaMDMxMTAvBgNV BAMTKENGRjE0NTVDRjRCNDkwOEQ0MDQ2QUUzRTI5NjdFRDVGNEUyQ0MyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AWJxJ/SPPEeWVEretSh5v5dW 2LSTGqYMOoZskj2p6AqQM+JbB2JO6uI63kdxOcWlRjkW3Z5SI1+Pfel6/Fp8CNWB 3fOsmvR4PjfHLi2ZMr10x6YS4NTUyqim9y6cX1EcsIz1VjHfgP0rMUuR7+Rz/uYP YvVIieICMwQExdzFAd7EOurswbx7euZMF8FJe5eg5aRPZ6SjK/zKKkwhm3DdBOdt tfD75zrYgalEu5a5eGw+oz/sifCdD3k55pvzvcMQ1PrHGv2EO76BYZc5J6IVTK9b G3mhvClep9231istbdPd2hRBej9LfbOBypI3TG1V4hrNn5+/f1WOM6q2OFNzAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTP8UVc9LSQjUBG rj4pZ+1fTizCajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRw Wkpjd3V2aEhkWjg0Q2MzS0VDcFdYMUJyZlFqZ1VoQ01tdWhuMTlzTS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRw Wkpjd3V2aEhkWjg0Q2MzS0VDcFdYMUJyZlFqZ1VoQ01tdWhuMTlzTS8wL0NGRjE0 NTVDRjRCNDkwOEQ0MDQ2QUUzRTI5NjdFRDVGNEUyQ0MyNkEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEArXogDANBAIAAjAHAwUAKAR8sDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEJJgwDQYJKoZIhvcNAQELBQADggEBAL7aWmWHZjpNWAjaZ5Xc RfviA7JcBuemcO3gtoRgj1IKVPlxNmQ4ABbkPAYfqFiqIb4Irfv/LAA7Sj0BgAEp YkaKgCc/LOTJ2mepAjlIDnf0VwEFZNhFn/EDdPAqg2vBHZPuC5oTcwUyM2B9Hl/0 k6PezDY8c3AH9MbiFSPiAG/7ty+Huw+y0l7a//jPaKLbh8mTUntG8Vu5RiXe2XYX O0gIA2VNo3ZUnBv4wEoM83Fz2MIGn4ws6taiUfVGZvDG/g7sTA/YutuBfLEYgseq tBfBnS34SqqEUJ6PjUcd7vakQZp3QT2wG3hSUiLeCqQtN1CTHja5XO3XFRBHcvG+ s4Y= -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:57 2025 by rpki-client