$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer File: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer (raw, json) Hash identifier: +ats3d9vYazlN8h/12M1BHXfdSY1IFhARJsk/RwbKfQ= Subject key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5AFDDAC9D3B7E724F1A61370AD8084359587DCA2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft caRepository: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 25 Oct 2025 06:48:53 +0000 Certificate not after: Sat 24 Oct 2026 06:53:53 +0000 Subordinate resources: AS: 265949 IP: 164.163.96.0/22 IP: 2804:4048::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fd:da:c9:d3:b7:e7:24:f1:a6:13:70:ad:80:84:35:95:87:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 06:48:53 2025 GMT Not After : Oct 24 06:53:53 2026 GMT Subject: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:e4:ab:e9:01:c1:a8:a3:17:0c:76:f0:e4: f1:35:52:66:86:bc:92:c9:da:f8:7d:63:dc:c3:c5: d7:a9:54:39:2b:e4:19:13:df:27:10:8c:6c:8c:94: 86:02:a7:ae:fd:30:55:fd:dd:90:62:1b:1c:d1:16: 87:66:d2:bc:7c:ff:70:c3:7a:2f:86:1b:5d:c2:0d: b2:3e:bf:a6:91:50:88:92:c8:a8:e4:9e:be:e6:2e: b3:9e:1e:86:b0:3a:c7:cd:61:8e:50:33:18:be:21: 87:d9:32:d8:9d:b4:f6:af:89:7b:99:21:7e:84:9c: a0:3f:d7:f4:c0:d6:a6:3d:a8:ea:15:a3:8a:a6:76: d9:bf:40:f0:94:0a:59:f3:d4:a6:ed:8c:dd:1f:e3: 46:cb:54:b7:1e:e3:e8:61:88:d2:b1:9b:44:61:73: b5:93:24:58:2a:16:aa:09:1f:83:8e:cf:62:88:6e: fd:f5:81:16:a5:b9:3d:ea:7a:40:7a:69:f1:cb:ed: 3c:d4:6c:85:62:a6:b0:da:11:9a:5b:31:14:e6:9d: be:74:94:f5:c5:92:42:e2:31:b3:db:31:05:62:ea: 85:ae:27:d7:28:50:c7:a9:d7:6e:6f:89:37:5d:3d: f7:5d:aa:4f:08:bc:3d:38:aa:b8:e9:ad:c5:81:33: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.96.0/22 IPv6: 2804:4048::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265949 Signature Algorithm: sha256WithRSAEncryption 0b:68:d5:e6:6c:ac:51:2a:87:df:70:d8:b8:9f:f6:25:64:ea: ea:32:a9:24:1a:88:75:c1:f9:6d:1d:ca:23:3e:b1:68:f7:d8: f4:44:3e:7d:ec:69:e4:bf:5e:34:d6:07:6c:16:73:7a:5f:26: f0:92:bf:33:05:49:bc:f9:4e:68:38:10:11:27:31:05:7a:ce: c4:4c:ad:d7:d5:a0:bb:82:7c:cf:34:6d:6a:3b:f6:7f:5b:e1: c5:23:ae:18:77:a8:0e:b9:54:b3:6a:a5:56:ef:5d:2d:18:5c: fb:b2:2b:e3:67:f7:67:7f:b6:3d:2c:c4:e6:b5:83:c8:ea:37: 08:89:66:4d:70:d2:1c:31:3b:0d:63:e3:41:e0:c3:87:62:5e: 15:a7:f8:ad:d5:f0:0f:c6:ff:1c:5d:58:d1:54:55:fc:21:13: 47:23:36:7a:31:2d:8e:bf:95:4d:8d:f3:16:17:0c:d1:25:1d: cf:ad:22:c2:34:92:23:c1:f1:08:2c:30:b7:a4:5a:d2:62:9f: 05:05:c8:95:91:fa:54:9d:47:cc:33:13:eb:a7:2d:b4:1b:7b: 11:f1:96:b2:7a:38:5b:4e:c9:23:40:36:7e:51:3f:cd:be:e0: dd:7e:96:69:73:4c:25:07:be:fa:8b:75:c8:04:a7:8a:46:86: e9:49:5d:cb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWv3aydO35yTxphNwrYCENZWH3KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjUwNjQ4NTNaFw0yNjEwMjQwNjUzNTNaMDMxMTAvBgNV BAMTKEZGNEFDQjA4MjgxMDFGRkQ2RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpOSr6QHBqKMXDHbw5PE1UmaG vJLJ2vh9Y9zDxdepVDkr5BkT3ycQjGyMlIYCp679MFX93ZBiGxzRFodm0rx8/3DD ei+GG13CDbI+v6aRUIiSyKjknr7mLrOeHoawOsfNYY5QMxi+IYfZMtidtPaviXuZ IX6EnKA/1/TA1qY9qOoVo4qmdtm/QPCUClnz1KbtjN0f40bLVLce4+hhiNKxm0Rh c7WTJFgqFqoJH4OOz2KIbv31gRaluT3qekB6afHL7TzUbIViprDaEZpbMRTmnb50 lPXFkkLiMbPbMQVi6oWuJ9coUMep125viTddPfddqk8IvD04qrjprcWBMzEHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/SssIKBAf/W+R v7z78F7pjy+ZIjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDl3 QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pXZVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q5 d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAvRkY0 QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4RjJGOTkyMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKNgMA0EAgACMAcDBQAoBEBIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO3TANBgkqhkiG9w0BAQsFAAOCAQEAC2jV5mysUSqH33DY uJ/2JWTq6jKpJBqIdcH5bR3KIz6xaPfY9EQ+fexp5L9eNNYHbBZzel8m8JK/MwVJ vPlOaDgQEScxBXrOxEyt19Wgu4J8zzRtajv2f1vhxSOuGHeoDrlUs2qlVu9dLRhc +7Ir42f3Z3+2PSzE5rWDyOo3CIlmTXDSHDE7DWPjQeDDh2JeFaf4rdXwD8b/HF1Y 0VRV/CETRyM2ejEtjr+VTY3zFhcM0SUdz60iwjSSI8HxCCwwt6Ra0mKfBQXIlZH6 VJ1HzDMT66cttBt7EfGWsno4W07JI0A2flE/zb7g3X6WaXNMJQe++ot1yASnikaG 6Uldyw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:26:49 2025 by rpki-client