$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer File: FF5D171186C7F92AA82E56A3848B9D1390938458.cer (raw, json) Hash identifier: ZI/nrUuE5GHGpNRbNz3pUx6Bi8nOHiGaHseRFngmVgo= Subject key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7BDA2A9519918DD5F872C0A1203ABDA6A8EA35E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft caRepository: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 04:20:33 +0000 Certificate not after: Thu 06 Aug 2026 04:25:33 +0000 Subordinate resources: AS: 28635 AS: 52547 AS: 52609 AS: 52682 AS: 61794 AS: 262526 AS: 264367 AS: 264487 AS: 266130 AS: 267601 IP: 45.6.108.0/22 IP: 45.71.68.0/22 IP: 45.174.156.0/22 IP: 131.108.32.0/22 IP: 131.255.112.0/22 IP: 138.185.216.0/22 IP: 168.196.136.0/22 IP: 168.228.36.0/22 IP: 170.233.52.0/22 IP: 177.67.192.0/21 IP: 177.152.176.0/21 IP: 177.200.176.0/20 IP: 177.221.192.0/19 IP: 179.189.48.0/20 IP: 200.11.8.0/21 IP: 201.71.128.0/18 IP: 201.140.220.0/22 IP: 2804:598::/32 IP: 2804:e28::/32 IP: 2804:1408::/32 IP: 2804:196c::/32 IP: 2804:1d68::/32 IP: 2804:2058::/32 IP: 2804:2d90::/32 IP: 2804:30bc::/32 IP: 2804:3b1c::/32 IP: 2804:43f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:da:2a:95:19:91:8d:d5:f8:72:c0:a1:20:3a:bd:a6:a8:ea:35:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 04:20:33 2025 GMT Not After : Aug 6 04:25:33 2026 GMT Subject: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:d9:d2:08:3c:af:7a:a5:cd:e0:d2:62:e9: 8d:37:c6:6d:c3:6a:bb:34:1e:d8:a5:30:c1:ad:a6: 35:b2:25:7f:9e:e8:09:69:3b:be:8e:67:77:58:c6: 4e:4d:df:dd:6d:8d:47:b6:1f:01:8c:3a:5a:1b:9d: 79:86:09:ff:04:4b:09:99:08:2a:a4:bc:b5:12:cb: 5d:d4:52:21:91:8e:5e:64:3d:da:f3:06:1a:c0:45: 0c:e8:6e:da:d9:0d:5d:6e:93:e1:3a:2c:80:2e:e1: cf:7d:81:02:43:29:e7:4a:26:2c:2d:f9:40:b7:60: b9:24:32:a6:78:7b:0a:74:c6:30:7c:7f:55:2a:02: b7:e9:8d:40:f2:6a:b2:2e:a7:ab:2e:83:18:5e:86: 73:b0:93:ab:72:7b:94:03:d5:23:d2:64:54:64:da: bc:30:fd:d5:5a:6f:70:5a:d0:a8:9a:dd:7c:4f:48: 0d:2a:ed:60:f3:e0:e3:ec:50:04:1c:54:56:28:e3: c5:c4:a2:75:35:0a:ea:32:85:16:02:71:1f:8b:7c: 77:98:4b:1f:73:ea:bf:bb:5d:b8:42:0f:26:dc:9d: b2:eb:f5:fc:a5:11:e4:46:22:65:60:eb:34:eb:27: 9f:bc:da:95:48:3c:04:e2:2f:59:a0:c6:05:08:4b: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.108.0/22 45.71.68.0/22 45.174.156.0/22 131.108.32.0/22 131.255.112.0/22 138.185.216.0/22 168.196.136.0/22 168.228.36.0/22 170.233.52.0/22 177.67.192.0/21 177.152.176.0/21 177.200.176.0/20 177.221.192.0/19 179.189.48.0/20 200.11.8.0/21 201.71.128.0/18 201.140.220.0/22 IPv6: 2804:598::/32 2804:e28::/32 2804:1408::/32 2804:196c::/32 2804:1d68::/32 2804:2058::/32 2804:2d90::/32 2804:30bc::/32 2804:3b1c::/32 2804:43f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28635 52547 52609 52682 61794 262526 264367 264487 266130 267601 Signature Algorithm: sha256WithRSAEncryption d7:5f:4d:19:fc:e1:3e:c7:90:c9:4f:ef:8a:e3:dd:52:19:7c: 91:e2:3d:11:fc:6c:f5:1d:28:78:11:b5:b4:e0:22:fc:68:da: 4c:de:ec:44:74:fb:e9:5d:45:c2:95:aa:cd:12:64:08:35:77: 63:4f:08:12:cb:0f:56:83:99:b7:29:c8:c3:d1:f3:1d:ea:23: 4a:21:7d:72:80:86:1a:a6:06:de:3b:0a:c2:bb:e6:5c:63:63: 12:3e:e7:b7:a3:1d:04:2f:cd:9a:4d:75:f5:cc:a3:c6:98:04: 7e:77:f6:ae:94:1c:d6:4b:9d:24:c9:e3:6a:06:f4:07:de:44: 23:89:d4:b0:8b:24:ca:43:c7:9b:6e:03:5a:1d:3d:d5:7e:be: 6f:64:39:04:34:17:df:b3:23:f1:76:a7:09:da:d1:f7:85:a5: 70:0b:b2:44:81:fb:4f:e0:c7:8c:e4:40:2c:57:d7:b8:58:65: 81:d2:12:e4:a3:3b:5f:0e:26:50:a2:df:d4:c9:60:bc:fb:3d: e4:33:a7:07:20:96:01:0a:e9:39:29:d8:b9:9e:66:ad:25:e5: 5a:6c:67:b7:04:15:12:37:84:34:1e:97:33:b3:5b:d7:9b:e9: 5a:b1:87:48:85:52:c0:f2:ea:b1:dc:6a:53:46:99:af:a3:79: 6d:91:c6:5a -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUe9oqlRmRjdX4csChIDq9pqjqNeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcwNDIwMzNaFw0yNjA4MDYwNDI1MzNaMDMxMTAvBgNV BAMTKEZGNUQxNzExODZDN0Y5MkFBODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwNnSCDyveqXN4NJi6Y03xm3D ars0HtilMMGtpjWyJX+e6AlpO76OZ3dYxk5N391tjUe2HwGMOlobnXmGCf8ESwmZ CCqkvLUSy13UUiGRjl5kPdrzBhrARQzobtrZDV1uk+E6LIAu4c99gQJDKedKJiwt +UC3YLkkMqZ4ewp0xjB8f1UqArfpjUDyarIup6sugxhehnOwk6tye5QD1SPSZFRk 2rww/dVab3Ba0Kia3XxPSA0q7WDz4OPsUAQcVFYo48XEonU1CuoyhRYCcR+LfHeY Sx9z6r+7XbhCDybcnbLr9fylEeRGImVg6zTrJ5+82pVIPATiL1mgxgUISyU5AgMB AAGjggQIMIIEBDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/XRcRhsf5Kqgu VqOEi50TkJOEWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZh Qk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0SDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RW YUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAvRkY1 RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5MDkzODQ1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHPBggrBgEFBQcB BwEB/wSBvzCBvDBsBAIAATBmAwQCLQZsAwQCLUdEAwQCLa6cAwQCg2wgAwQCg/9w AwQCirnYAwQCqMSIAwQCqOQkAwQCquk0AwQDsUPAAwQDsZiwAwQEsciwAwQFsd3A AwQEs70wAwQDyAsIAwQGyUeAAwQCyYzcMEwEAgACMEYDBQAoBAWYAwUAKAQOKAMF ACgEFAgDBQAoBBlsAwUAKAQdaAMFACgEIFgDBQAoBC2QAwUAKAQwvAMFACgEOxwD BQAoBEP0MEYGCCsGAQUFBwEIAQH/BDcwNaAzMDECAm/bAgMAzUMCAwDNgQIDAM3K AgMA8WICAwQBfgIDBAivAgMECScCAwQPkgIDBBVRMA0GCSqGSIb3DQEBCwUAA4IB AQDXX00Z/OE+x5DJT++K491SGXyR4j0R/Gz1HSh4EbW04CL8aNpM3uxEdPvpXUXC larNEmQINXdjTwgSyw9Wg5m3KcjD0fMd6iNKIX1ygIYapgbeOwrCu+ZcY2MSPue3 ox0EL82aTXX1zKPGmAR+d/aulBzWS50kyeNqBvQH3kQjidSwiyTKQ8ebbgNaHT3V fr5vZDkENBffsyPxdqcJ2tH3haVwC7JEgftP4MeM5EAsV9e4WGWB0hLkoztfDiZQ ot/UyWC8+z3kM6cHIJYBCuk5Kdi5nmatJeVabGe3BBUSN4Q0Hpczs1vXm+lasYdI hVLA8uqx3GpTRpmvo3ltkcZa -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:44 2025 by rpki-client