$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer File: FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer (raw, json) Hash identifier: 1xnUw5ZWSbzKBCGPIBwiDwkMQ809aZctKS4SJ1SQtaY= Subject key identifier: FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 48A3E12E8A44EED92FA583DDD6AD7F47CE027667 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.mft caRepository: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Jul 2025 12:21:44 +0000 Certificate not after: Tue 28 Jul 2026 12:26:44 +0000 Subordinate resources: AS: 28182 IP: 170.231.128.0/21 IP: 189.89.0.0/20 IP: 2001:1294::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a3:e1:2e:8a:44:ee:d9:2f:a5:83:dd:d6:ad:7f:47:ce:02:76:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 29 12:21:44 2025 GMT Not After : Jul 28 12:26:44 2026 GMT Subject: CN=FEEF18BFC0F438C174F899A158ED9751D2D84B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:b7:2f:de:89:94:f7:c8:cc:12:7d:f7:b8: f0:47:8e:56:ad:b3:32:eb:9f:5f:bc:ab:f6:db:67: 9c:fe:d5:d5:56:55:7c:87:86:5a:89:22:43:8d:15: 37:50:57:5c:22:95:03:b7:bc:f5:9a:a7:1d:4b:0c: e0:25:9a:27:43:3e:25:ce:92:2a:5a:e7:5d:3e:0b: f6:ed:de:2f:49:e1:bf:c3:9a:78:67:22:92:f3:07: 1a:85:34:b9:a4:9c:fc:ff:4f:21:3a:23:55:c4:d7: 81:4a:a9:98:80:48:71:be:dd:83:3a:37:c7:05:0e: a2:49:89:da:00:63:a1:91:f2:d0:31:46:6d:f7:27: 63:ec:3a:e2:11:e6:e7:2b:d1:e8:26:78:2c:5a:92: e9:47:88:6d:ee:75:fd:6e:2b:d9:4c:16:ec:f8:e8: 88:58:1c:68:49:c3:3f:49:41:63:bb:2f:7c:a5:64: df:43:e5:30:05:0b:85:1a:2b:72:de:d6:7a:54:c1: ec:20:99:b2:e2:ec:a3:76:aa:ce:24:19:95:ae:cf: ed:cd:a3:d6:b7:98:ab:20:11:bc:08:c9:f3:b3:8b: 6a:01:39:d2:30:bd:9a:bf:8b:5a:9a:1d:ed:ff:aa: 18:d2:43:21:8b:25:82:5b:ef:f1:f2:6b:4e:85:70: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.128.0/21 189.89.0.0/20 IPv6: 2001:1294::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28182 Signature Algorithm: sha256WithRSAEncryption 44:ac:2a:67:dd:ff:63:b6:cd:0f:8c:ea:a5:ef:c3:b8:ec:72: 7e:88:d9:9c:c0:7d:b5:7f:a3:8a:3a:c2:65:fd:61:45:b7:4f: b2:e7:d8:0c:62:77:f7:ad:e0:40:a7:fa:ad:04:f2:0b:93:3b: 05:85:e3:c0:d6:5b:5c:4c:71:7d:48:94:1b:79:7f:f9:73:ef: b6:85:94:ea:ee:53:81:84:68:45:19:1e:32:42:1e:a1:2f:59: 2c:c8:74:59:1c:df:69:39:30:00:6f:9d:b8:72:5f:7a:05:d8: 61:d0:93:38:f7:08:8d:42:d9:df:08:f9:29:9e:81:e2:00:57: 8b:84:67:c5:ee:28:bf:88:b8:3b:7e:8d:2c:5a:1f:4e:2a:83: c9:94:3a:7f:5c:23:89:4d:b1:9a:0b:89:88:7c:38:0b:5e:3d: 24:c3:43:ea:fc:a7:d9:40:da:30:9a:04:d4:83:16:e2:a7:40: 31:83:50:00:38:e5:50:a9:20:b4:9a:98:d1:4c:c2:76:fb:d6: 7d:2a:43:7f:63:b6:34:de:69:46:3e:eb:34:c8:4f:86:ec:9f: 4c:65:1d:bd:09:8e:b5:27:d9:75:1d:61:29:e8:5e:4c:b5:b8: 71:ca:5e:87:dc:c9:a8:fa:72:5f:b7:84:89:1e:81:a2:47:cc: 5e:34:55:24 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUSKPhLopE7tkvpYPd1q1/R84CdmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjkxMjIxNDRaFw0yNjA3MjgxMjI2NDRaMDMxMTAvBgNV BAMTKEZFRUYxOEJGQzBGNDM4QzE3NEY4OTlBMTU4RUQ5NzUxRDJEODRCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ7cv3omU98jMEn33uPBHjlat szLrn1+8q/bbZ5z+1dVWVXyHhlqJIkONFTdQV1wilQO3vPWapx1LDOAlmidDPiXO kipa510+C/bt3i9J4b/DmnhnIpLzBxqFNLmknPz/TyE6I1XE14FKqZiASHG+3YM6 N8cFDqJJidoAY6GR8tAxRm33J2PsOuIR5ucr0egmeCxakulHiG3udf1uK9lMFuz4 6IhYHGhJwz9JQWO7L3ylZN9D5TAFC4UaK3Le1npUwewgmbLi7KN2qs4kGZWuz+3N o9a3mKsgEbwIyfOzi2oBOdIwvZq/i1qaHe3/qhjSQyGLJYJb7/Hya06FcDm9AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+7xi/wPQ4wXT4 maFY7ZdR0thLbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Vq ejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJwNnovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d1 ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAvRkVF RjE4QkZDMEY0MzhDMTc0Rjg5OUExNThFRDk3NTFEMkQ4NEI2Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDqueAAwQEvVkAMA0EAgACMAcDBQAgARKUMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm4WMA0GCSqGSIb3DQEBCwUAA4IBAQBErCpn3f9j ts0PjOql78O47HJ+iNmcwH21f6OKOsJl/WFFt0+y59gMYnf3reBAp/qtBPILkzsF hePA1ltcTHF9SJQbeX/5c++2hZTq7lOBhGhFGR4yQh6hL1ksyHRZHN9pOTAAb524 cl96Bdhh0JM49wiNQtnfCPkpnoHiAFeLhGfF7ii/iLg7fo0sWh9OKoPJlDp/XCOJ TbGaC4mIfDgLXj0kw0Pq/KfZQNowmgTUgxbip0Axg1AAOOVQqSC0mpjRTMJ2+9Z9 KkN/Y7Y03mlGPus0yE+G7J9MZR29CY61J9l1HWEp6F5Mtbhxyl6H3Mmo+nJft4SJ HoGiR8xeNFUk -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:14 2025 by rpki-client