$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer File: FB435E794D86CB9BAE800A6D289A88F771B5B583.cer (raw, json) Hash identifier: rJAL31ufDMXymTE0pTTeaBHjZDDYm9TjZDWaehWh2II= Subject key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03E375477470A2283FADE571F52E1906E48F315D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft caRepository: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 23:59:33 +0000 Certificate not after: Tue 22 Sep 2026 00:04:33 +0000 Subordinate resources: AS: 264550 IP: 138.0.136.0/22 IP: 170.0.32.0/22 IP: 2804:215c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e3:75:47:74:70:a2:28:3f:ad:e5:71:f5:2e:19:06:e4:8f:31:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 23:59:33 2025 GMT Not After : Sep 22 00:04:33 2026 GMT Subject: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a7:5c:18:3e:14:21:52:8b:6a:ac:0a:86: fe:58:ae:cc:5a:8a:f8:3e:58:f4:90:e6:15:f5:e6: bb:03:98:24:49:0d:33:fa:80:37:75:49:6a:b0:56: 9b:d8:eb:d4:92:57:c5:63:ff:db:54:2d:be:8c:ff: 22:ae:6e:a8:e7:c3:97:ff:a9:17:fe:a0:99:bc:f5: bf:e5:93:d2:29:fd:8d:84:d4:53:3d:1c:66:78:29: f2:db:57:7b:c5:27:20:52:65:5c:80:94:f4:8b:38: 61:df:bc:b2:8b:e2:91:14:53:53:40:af:a8:69:15: c5:8f:e0:30:75:57:2d:cf:9a:5d:1a:ed:6b:03:f6: ef:cb:d9:3f:57:c6:b1:c1:4d:cb:cb:74:b6:50:1c: ab:42:83:3f:6f:16:f9:5a:34:c3:74:52:50:bb:42: e5:27:9f:30:c2:38:8c:78:fb:d4:57:57:e7:65:8a: 55:e1:35:c9:66:a5:ee:26:57:13:cf:16:46:74:8d: 80:4c:b6:cc:dc:4d:1b:af:84:29:04:4e:0b:94:03: cf:c0:d9:6f:30:b0:1f:6c:c0:c3:85:97:38:44:80: f4:6a:33:77:7e:78:f0:f0:f8:ed:83:1f:4c:2c:9d: 7f:ba:be:c8:1f:db:00:ed:9e:c3:c1:88:d0:c7:41: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.136.0/22 170.0.32.0/22 IPv6: 2804:215c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264550 Signature Algorithm: sha256WithRSAEncryption 58:df:40:d5:23:8c:91:ab:d7:87:e1:3d:44:8d:67:08:c6:5d: 1d:06:9f:6d:d1:d6:bd:89:d0:af:ba:97:34:61:b8:15:87:01: e8:c0:f8:04:b0:f4:3c:7e:2e:8d:8e:d4:a9:97:de:74:fd:ae: e4:c0:57:68:90:40:e8:97:dd:22:a6:58:74:4b:eb:20:3d:4e: 14:56:bd:45:ed:9b:25:bc:8d:2c:68:d9:e9:e2:cd:75:8a:82: 05:4f:43:bb:60:c7:78:50:2d:71:62:c6:33:39:9b:45:96:f4: 1a:29:6a:70:b7:7c:74:5e:c1:80:77:60:6e:46:e2:95:c1:89: f9:5d:37:47:52:76:fd:8f:3e:cb:3e:d7:db:69:b4:15:bb:95: 5e:2a:ee:4e:65:00:1a:c3:7f:bb:72:1d:73:67:19:12:f1:d1: 60:78:b5:e7:3f:07:a6:5b:a6:06:4d:12:d4:77:45:12:2b:a2: e9:75:18:5a:6e:7d:c2:f4:3a:84:3b:d2:f3:0d:41:e2:78:7c: 6a:c9:0e:0f:c9:38:32:30:33:b6:58:1b:19:59:f8:8b:6b:b0: 80:d9:96:1e:d4:7e:c2:5d:2d:6d:bf:65:91:f5:03:54:5f:09: a0:43:0d:1c:b9:c1:e1:71:af:92:cb:95:d8:4f:2b:14:fd:a8: 7c:b3:68:78 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUA+N1R3Rwoig/reVx9S4ZBuSPMV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjIyMzU5MzNaFw0yNjA5MjIwMDA0MzNaMDMxMTAvBgNV BAMTKEZCNDM1RTc5NEQ4NkNCOUJBRTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMKdcGD4UIVKLaqwKhv5Yrsxa ivg+WPSQ5hX15rsDmCRJDTP6gDd1SWqwVpvY69SSV8Vj/9tULb6M/yKubqjnw5f/ qRf+oJm89b/lk9Ip/Y2E1FM9HGZ4KfLbV3vFJyBSZVyAlPSLOGHfvLKL4pEUU1NA r6hpFcWP4DB1Vy3Pml0a7WsD9u/L2T9XxrHBTcvLdLZQHKtCgz9vFvlaNMN0UlC7 QuUnnzDCOIx4+9RXV+dlilXhNclmpe4mVxPPFkZ0jYBMtszcTRuvhCkETguUA8/A 2W8wsB9swMOFlzhEgPRqM3d+ePDw+O2DH0wsnX+6vsgf2wDtnsPBiNDHQYK7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7Q155TYbLm66A Cm0omoj3cbW1gzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlZ1 SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1VVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJW dUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAvRkI0 MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3MUI1QjU4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCigCIAwQCqgAgMA0EAgACMAcDBQAoBCFcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJZjANBgkqhkiG9w0BAQsFAAOCAQEAWN9A1SOM kavXh+E9RI1nCMZdHQafbdHWvYnQr7qXNGG4FYcB6MD4BLD0PH4ujY7UqZfedP2u 5MBXaJBA6JfdIqZYdEvrID1OFFa9Re2bJbyNLGjZ6eLNdYqCBU9Du2DHeFAtcWLG MzmbRZb0GilqcLd8dF7BgHdgbkbilcGJ+V03R1J2/Y8+yz7X22m0FbuVXiruTmUA GsN/u3Idc2cZEvHRYHi15z8HplumBk0S1HdFEiui6XUYWm59wvQ6hDvS8w1B4nh8 askOD8k4MjAztlgbGVn4i2uwgNmWHtR+wl0tbb9lkfUDVF8JoEMNHLnB4XGvksuV 2E8rFP2ofLNoeA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:48 2025 by rpki-client