$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer File: FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer (raw, json) Hash identifier: XvNOS3GrCjDhPb9w0fJEPNon0guksZ29KoMDlDDpw3k= Subject key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 56F00CD4659A846A33E66E42E506DBA8CD1B234F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft caRepository: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 15:14:33 +0000 Certificate not after: Mon 06 Jul 2026 15:19:33 +0000 Subordinate resources: AS: 264425 IP: 131.221.184.0/22 IP: 2804:1e60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f0:0c:d4:65:9a:84:6a:33:e6:6e:42:e5:06:db:a8:cd:1b:23:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 15:14:33 2025 GMT Not After : Jul 6 15:19:33 2026 GMT Subject: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:f0:29:8a:8b:dc:83:7f:2f:7d:9e:d6:cb: 01:13:4c:0e:8c:c1:d7:0d:29:84:fc:5f:83:6b:f3: 05:45:47:26:18:f1:37:0a:58:eb:a9:38:74:e6:0e: ed:a4:7f:e5:14:d6:c6:76:56:64:97:c7:f9:bd:67: 6c:2e:af:4a:94:d1:d0:9f:8c:df:be:fc:7c:44:79: 42:c8:21:13:d1:54:62:19:83:e5:9a:36:c7:5c:86: 40:aa:4e:8d:9c:fb:ea:86:34:c5:ed:99:96:7f:72: 35:ed:a4:71:37:16:ea:da:9d:50:af:ae:95:f3:9d: 67:22:ee:62:2a:b5:66:4e:08:f2:35:e5:e6:2a:3b: 4b:a3:fc:5c:cc:2a:4c:af:b5:10:96:27:d4:aa:9e: 09:0e:96:97:09:8e:c7:a4:8a:06:fb:64:97:24:1d: 47:9d:74:da:73:2f:8c:6d:32:73:4c:2d:09:c7:4a: 39:e3:00:77:63:f2:4e:53:92:97:62:89:2c:a4:f2: 4c:9f:0a:f9:82:1a:c1:ed:79:87:22:44:d2:26:50: bf:db:d0:41:44:97:19:19:1e:6a:4f:d3:5d:ec:d2: de:44:f2:81:9d:ab:85:6a:25:96:2a:a1:8d:39:0a: 31:ba:e3:e3:7d:6d:59:3f:69:6d:94:14:40:0a:26: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.184.0/22 IPv6: 2804:1e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264425 Signature Algorithm: sha256WithRSAEncryption 63:ec:e4:43:5e:0a:d9:0d:18:91:ad:97:e2:1e:86:cc:4e:c0: 50:cf:5f:0d:ca:e6:59:c9:29:77:3d:7c:f2:4c:05:05:41:27: 0f:0a:4b:18:e5:81:3c:ba:f3:48:78:60:8c:ef:e5:f5:9f:3c: 57:9d:a9:08:78:5a:2c:b3:90:18:50:58:b2:9a:a5:4e:3d:af: aa:e1:7a:ad:30:7c:d0:64:7d:c0:ea:66:4e:70:5e:a9:3e:f4: 26:13:eb:e0:cc:b3:cd:47:9b:5e:4a:f3:f5:34:a4:27:4c:e5: 45:b8:5b:fa:80:15:04:88:6e:78:3b:d5:aa:3d:61:27:f4:61: a4:b5:30:19:ee:88:24:5f:a6:21:0e:ad:21:ea:10:1e:e5:a1: 65:52:ba:a8:f2:51:8c:31:e4:44:98:5c:45:54:3d:48:1b:fd: 23:f7:dc:ab:6b:52:77:2e:28:7b:eb:47:92:6a:ba:9a:6e:be: f3:69:8e:56:20:f4:48:ca:d0:04:b5:e9:81:c3:5e:ab:d0:b8: 6d:3a:6a:ff:55:2c:65:ca:bc:2f:42:f2:57:0a:8e:e5:72:0a: 93:b7:69:8a:11:3c:9e:4b:b3:0b:0f:70:f6:8c:f6:c0:7a:13: 67:73:ea:c2:73:d5:17:87:40:84:78:f3:39:ad:4f:16:7f:f0: 73:ff:65:3a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVvAM1GWahGoz5m5C5QbbqM0bI08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDcxNTE0MzNaFw0yNjA3MDYxNTE5MzNaMDMxMTAvBgNV BAMTKEZBMUZFM0JCNzZEMjJGOUI1NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqvApiovcg38vfZ7WywETTA6M wdcNKYT8X4Nr8wVFRyYY8TcKWOupOHTmDu2kf+UU1sZ2VmSXx/m9Z2wur0qU0dCf jN++/HxEeULIIRPRVGIZg+WaNsdchkCqTo2c++qGNMXtmZZ/cjXtpHE3FuranVCv rpXznWci7mIqtWZOCPI15eYqO0uj/FzMKkyvtRCWJ9SqngkOlpcJjsekigb7ZJck HUeddNpzL4xtMnNMLQnHSjnjAHdj8k5TkpdiiSyk8kyfCvmCGsHteYciRNImUL/b 0EFElxkZHmpP013s0t5E8oGdq4VqJZYqoY05CjG64+N9bVk/aW2UFEAKJnLNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6H+O7dtIvm1dq wkD6jgUKjclKnzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0dS TExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpLNGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NH UkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAvRkEx RkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4REM5NEE5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg924MA0EAgACMAcDBQAoBB5gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQI6TANBgkqhkiG9w0BAQsFAAOCAQEAY+zkQ14K2Q0Yka2X 4h6GzE7AUM9fDcrmWckpdz188kwFBUEnDwpLGOWBPLrzSHhgjO/l9Z88V52pCHha LLOQGFBYspqlTj2vquF6rTB80GR9wOpmTnBeqT70JhPr4MyzzUebXkrz9TSkJ0zl Rbhb+oAVBIhueDvVqj1hJ/RhpLUwGe6IJF+mIQ6tIeoQHuWhZVK6qPJRjDHkRJhc RVQ9SBv9I/fcq2tSdy4oe+tHkmq6mm6+82mOViD0SMrQBLXpgcNeq9C4bTpq/1Us Zcq8L0LyVwqO5XIKk7dpihE8nkuzCw9w9oz2wHoTZ3PqwnPVF4dAhHjzOa1PFn/w c/9lOg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:49 2025 by rpki-client