$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer (raw, json) Hash identifier: LuT/NsZRZYMMAbMLqHdi6gwQneQ/4n30hqBvgoDDX3k= Subject key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3DB1941FC2705F72EC300B6D78920E12C975A0C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft caRepository: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 17:34:25 +0000 Certificate not after: Tue 01 Sep 2026 17:39:25 +0000 Subordinate resources: AS: 263963 IP: 138.219.220.0/22 IP: 170.246.168.0/22 IP: 2804:2878::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:94:1f:c2:70:5f:72:ec:30:0b:6d:78:92:0e:12:c9:75:a0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 17:34:25 2025 GMT Not After : Sep 1 17:39:25 2026 GMT Subject: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:f5:0f:0e:23:a7:d4:53:2d:d9:6c:23:91: 42:d3:19:38:ca:17:b9:66:8e:68:d9:6d:40:24:db: c2:9f:e7:81:e3:18:49:09:9b:3a:99:a1:58:40:f4: 06:de:6f:0c:ed:b2:05:af:05:a7:a6:6b:44:1c:52: bd:d7:e6:da:2b:6b:51:c6:9a:a7:2e:40:64:10:95: 31:fe:dc:8c:9a:e7:17:05:d2:a6:7e:00:65:f2:d3: e4:87:fb:1e:b8:8d:e1:d8:f4:84:e2:c6:7c:16:7f: 71:63:87:9b:4a:5e:2a:80:c4:c7:34:94:05:b0:19: 0d:0b:e0:0c:7a:ee:39:b3:47:ea:32:6a:d5:f0:12: 64:76:95:20:80:94:1e:23:36:15:09:20:3d:60:84: d2:9d:cb:c1:e9:7b:af:2a:37:be:82:44:aa:68:fe: cd:f5:f0:88:54:68:6e:a8:0c:0c:09:92:d4:6a:c7: 9d:1d:42:d0:d7:3d:0d:c9:4d:e6:3a:c8:ce:e1:49: 71:bc:73:6e:8e:de:92:86:bf:66:14:d0:b7:df:ab: ca:c8:bf:db:99:8b:fd:29:f4:f3:7d:bb:e1:18:88: 2d:37:04:45:07:88:c7:35:ed:21:cf:c4:df:c0:c3: 82:2d:55:e8:5e:c9:5e:1f:9d:23:8b:48:23:3d:ee: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.220.0/22 170.246.168.0/22 IPv6: 2804:2878::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263963 Signature Algorithm: sha256WithRSAEncryption ae:3d:9d:0e:2e:56:36:5d:c2:e2:ea:c8:77:f9:10:3c:a3:ea: a8:68:a5:a9:56:be:4c:6c:64:c0:18:ea:92:82:06:76:33:6a: b1:94:a9:08:77:c8:be:4f:d7:42:a9:31:2b:fe:71:6c:d3:3d: 76:0f:54:8c:42:5d:74:4e:be:b9:a2:9b:3b:61:8f:b1:19:d2: 0e:1c:37:71:48:ac:57:3e:94:2b:55:87:69:b7:94:7d:cf:87: f4:7c:e9:db:a9:f7:8e:fb:c4:25:bd:2d:d7:07:d4:f9:20:74: bf:4b:5f:40:33:c1:60:bb:c6:23:29:89:f8:2b:c2:be:dc:8a: ad:e9:9a:fb:64:59:75:a1:ba:dc:fb:93:c9:c0:91:09:56:3b: 2e:20:bb:4e:17:98:5b:26:cf:a0:50:a0:30:d5:66:e6:12:c1: 12:e2:2a:77:40:96:3c:51:e9:38:c2:3e:68:ed:d8:f6:4f:0c: 92:c4:86:4a:b4:1b:85:a5:ff:74:70:69:18:b7:57:b3:e7:14: 67:45:3e:ce:8f:a3:b4:1e:bc:ad:cc:6d:0b:ea:70:7b:5f:a1: c8:93:5b:bd:37:f6:90:7b:8f:7b:8d:57:dd:e1:5d:1b:7e:56: 68:de:03:5d:24:76:67:d8:37:a3:84:14:88:8d:31:d8:82:25: 0f:5c:f3:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPbGUH8JwX3LsMAtteJIOEsl1oMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDIxNzM0MjVaFw0yNjA5MDExNzM5MjVaMDMxMTAvBgNV BAMTKEZBQTIwRDAxNzZBOEUwOTkzRUI2M0M3RjUxMDcxNjNCQkU1REJBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBPUPDiOn1FMt2WwjkULTGTjK F7lmjmjZbUAk28Kf54HjGEkJmzqZoVhA9AbebwztsgWvBaema0QcUr3X5tora1HG mqcuQGQQlTH+3Iya5xcF0qZ+AGXy0+SH+x64jeHY9ITixnwWf3Fjh5tKXiqAxMc0 lAWwGQ0L4Ax67jmzR+oyatXwEmR2lSCAlB4jNhUJID1ghNKdy8Hpe68qN76CRKpo /s318IhUaG6oDAwJktRqx50dQtDXPQ3JTeY6yM7hSXG8c26O3pKGv2YU0Lffq8rI v9uZi/0p9PN9u+EYiC03BEUHiMc17SHPxN/Aw4ItVeheyV4fnSOLSCM97us/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6og0BdqjgmT62 PH9RBxY7vl26jzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2FK QW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhIZkcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh SkFuRDVQTktweEt4cTlkUUpHZjJuUU5KNU1wVG5xdzVQN2ExWFh4SGZHLzAvRkFB MjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JCRTVEQkE4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCitvcAwQCqvaoMA0EAgACMAcDBQAoBCh4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHGzANBgkqhkiG9w0BAQsFAAOCAQEArj2dDi5W Nl3C4urId/kQPKPqqGilqVa+TGxkwBjqkoIGdjNqsZSpCHfIvk/XQqkxK/5xbNM9 dg9UjEJddE6+uaKbO2GPsRnSDhw3cUisVz6UK1WHabeUfc+H9Hzp26n3jvvEJb0t 1wfU+SB0v0tfQDPBYLvGIymJ+CvCvtyKrema+2RZdaG63PuTycCRCVY7LiC7TheY WybPoFCgMNVm5hLBEuIqd0CWPFHpOMI+aO3Y9k8MksSGSrQbhaX/dHBpGLdXs+cU Z0U+zo+jtB68rcxtC+pwe1+hyJNbvTf2kHuPe41X3eFdG35WaN4DXSR2Z9g3o4QU iI0x2IIlD1zzMQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:38:14 2025 by rpki-client