$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer (raw, json) Hash identifier: 2jg0IzdA742o4AsbKGuSnUALPxFQbwvcJaVPu9Cnnfg= Subject key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D896A476FB35B21D26B0868079D5A9B7439507C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft caRepository: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 15:27:48 +0000 Certificate not after: Fri 05 Feb 2027 15:32:48 +0000 Subordinate resources: AS: 264182 IP: 138.97.104.0/22 IP: 2804:23c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 16:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:6a:47:6f:b3:5b:21:d2:6b:08:68:07:9d:5a:9b:74:39:50:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 6 15:27:48 2026 GMT Not After : Feb 5 15:32:48 2027 GMT Subject: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:65:10:2f:da:ce:e5:42:52:b9:41:86:ec: 42:3b:e3:9f:87:52:c9:aa:f3:f9:66:de:8c:30:66: 2f:c5:00:a3:f3:d7:aa:07:8b:b2:cf:05:92:b3:3d: 87:45:50:ff:3c:96:c1:ed:1b:7d:59:8e:3e:03:76: 9d:4a:7a:cd:2e:9d:69:ee:06:1b:b6:3b:aa:7c:8f: 5e:77:f3:f9:b0:1e:56:af:ea:0a:f2:cb:91:ce:ad: 09:e3:68:0f:b4:d7:d6:e7:18:84:22:6f:4d:14:2d: c0:f1:de:61:e7:a3:99:e1:57:7f:98:8f:4e:65:bd: 47:cb:24:94:a3:36:31:3a:a2:75:0c:07:6d:60:cc: 85:a0:6d:66:b4:5d:a2:5b:84:2b:9c:96:70:e8:41: f9:b6:e6:20:57:48:39:0d:ca:98:be:df:37:0e:87: 08:de:81:20:da:bf:32:0b:20:c2:20:6e:1a:b9:b6: 52:96:d2:ef:d8:a0:78:26:74:33:8e:83:ee:3a:0e: 56:1d:4e:40:8b:e4:91:3c:8b:0e:53:01:26:d0:ca: 25:9c:ae:d2:ef:53:52:ff:7d:3f:33:58:0a:ba:9a: 25:f8:55:63:5e:29:ff:85:96:38:6d:80:2a:96:b8: 81:4a:b9:a9:7f:56:c7:93:3b:6e:7b:f1:d4:66:94: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.104.0/22 IPv6: 2804:23c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264182 Signature Algorithm: sha256WithRSAEncryption 55:18:cc:77:c8:98:94:c5:04:c3:06:7f:a7:d0:e6:1e:b4:18: 5d:ce:fe:54:f6:97:6c:af:fc:d4:5f:98:19:17:cf:75:30:b3: a3:ca:3b:46:90:d6:a8:c8:a2:f8:6f:56:0f:0a:75:19:46:ad: b2:98:76:3b:0c:36:d0:1d:96:c6:97:7b:48:11:2c:13:7e:71: 2e:4c:7c:ca:62:c6:8a:20:0f:09:cf:af:48:25:9b:47:6a:65: 4e:85:98:11:65:69:90:b2:4c:96:9c:98:f5:3b:a8:b4:29:8d: 58:91:38:6f:2a:a2:88:de:03:e6:6c:68:1b:b7:b5:c4:fd:27: 7a:18:43:39:3d:63:af:ba:4a:94:06:5c:c9:c0:6f:1f:6d:9e: 19:55:5c:2a:bf:6a:28:00:e9:d2:73:6c:9d:da:ee:38:6f:ad: e0:11:a2:c9:a3:70:17:85:de:06:bf:60:25:f5:c8:e1:40:e5: 79:ab:8f:a5:79:74:79:ba:ef:f7:37:58:c8:d4:9e:9b:3e:c3: 28:1a:1d:23:44:66:fb:15:c1:e4:03:2a:cc:ab:87:67:b4:2b: 8f:52:70:cf:a9:c2:54:ab:42:6a:f6:f0:10:92:88:05:f2:35: 06:ed:7d:16:71:95:f5:55:4c:eb:5e:4e:c3:e9:0f:7b:f1:04: 02:c5:53:4e -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULYlqR2+zWyHSawhoB51am3Q5UHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDYxNTI3NDhaFw0yNzAyMDUxNTMyNDhaMDMxMTAvBgNV BAMTKDcxMjVCRURERkVDMjlDMEE0Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA2UQL9rO5UJSuUGG7EI745+H Usmq8/lm3owwZi/FAKPz16oHi7LPBZKzPYdFUP88lsHtG31Zjj4Ddp1Kes0unWnu Bhu2O6p8j1538/mwHlav6gryy5HOrQnjaA+019bnGIQib00ULcDx3mHno5nhV3+Y j05lvUfLJJSjNjE6onUMB21gzIWgbWa0XaJbhCuclnDoQfm25iBXSDkNypi+3zcO hwjegSDavzILIMIgbhq5tlKW0u/YoHgmdDOOg+46DlYdTkCL5JE8iw5TASbQyiWc rtLvU1L/fT8zWAq6miX4VWNeKf+FljhtgCqWuIFKual/VseTO2578dRmlCVnAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxJb7d/sKcCkz1 keXrQIOL/jx6wTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEhn SnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEhn SnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83MTI1 QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKYWgwDQQCAAIwBwMFACgEI8gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAf2MA0GCSqGSIb3DQEBCwUAA4IBAQBVGMx3yJiUxQTDBn+n 0OYetBhdzv5U9pdsr/zUX5gZF891MLOjyjtGkNaoyKL4b1YPCnUZRq2ymHY7DDbQ HZbGl3tIESwTfnEuTHzKYsaKIA8Jz69IJZtHamVOhZgRZWmQskyWnJj1O6i0KY1Y kThvKqKI3gPmbGgbt7XE/Sd6GEM5PWOvukqUBlzJwG8fbZ4ZVVwqv2ooAOnSc2yd 2u44b63gEaLJo3AXhd4Gv2Al9cjhQOV5q4+leXR5uu/3N1jI1J6bPsMoGh0jRGb7 FcHkAyrMq4dntCuPUnDPqcJUq0Jq9vAQkogF8jUG7X0WcZX1VUzrXk7D6Q978QQC xVNO -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:44 2026 by rpki-client