$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer File: F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer (raw, json) Hash identifier: OCgK+3x9MFr8AguVUMDqtUEgCcVoRVSiinEj7QP4yKo= Subject key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6D789F22E108C1528A99C8F7C5C1759AC164F79B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft caRepository: rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 12:58:44 +0000 Certificate not after: Tue 06 Oct 2026 13:03:44 +0000 Subordinate resources: AS: 264117 IP: 138.97.28.0/22 IP: 143.255.4.0/22 IP: 177.66.76.0/22 IP: 2804:22b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:78:9f:22:e1:08:c1:52:8a:99:c8:f7:c5:c1:75:9a:c1:64:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 12:58:44 2025 GMT Not After : Oct 6 13:03:44 2026 GMT Subject: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:32:24:49:96:dc:36:90:af:24:f7:23:45: 81:fb:77:16:20:1f:a8:9b:0f:84:67:9c:e7:77:0b: 5c:51:22:3a:f6:a2:49:f8:6f:3a:67:e0:40:f4:17: 25:01:bb:19:db:cd:50:c5:d2:75:71:39:6b:54:6c: 9f:42:b8:bd:2c:12:1a:0c:06:b6:9d:b0:ff:c6:4d: 28:fb:de:4b:31:3e:8f:a7:42:5c:22:d1:3e:06:23: f4:7e:ac:23:b9:50:ce:0d:e7:6b:c9:18:fe:c1:b7: 83:84:d0:86:34:22:8b:c3:ca:55:ce:f2:00:fc:da: 15:1c:e6:90:38:43:3b:db:59:d3:9e:a7:1f:f4:78: 23:6a:bc:e5:03:56:00:90:2c:fb:eb:2c:a2:8c:1b: 7c:81:63:de:d4:c8:93:2e:2e:be:61:99:bf:93:b0: a0:bf:9f:b9:87:fe:39:a3:c1:2b:ec:37:fd:b1:ea: 1b:c0:77:62:04:aa:c4:93:c5:bf:3e:e2:96:05:5a: 31:72:8a:2d:fc:41:e3:13:bf:99:62:6c:cb:0f:9a: cc:c7:7a:08:94:b6:df:8c:80:01:dc:24:6b:b9:90: 33:6d:04:34:76:28:36:60:67:15:46:e3:ec:a7:57: 44:a3:65:2b:ba:e2:67:c5:3e:14:29:08:f3:d0:00: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.28.0/22 143.255.4.0/22 177.66.76.0/22 IPv6: 2804:22b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264117 Signature Algorithm: sha256WithRSAEncryption bc:82:df:3c:cf:8d:20:63:fb:cd:b9:38:e7:77:11:4c:0f:92: 9d:66:b4:71:3d:ec:26:c5:61:5a:3f:ce:55:03:94:a6:7a:91: 13:a8:e5:c7:49:ba:c3:cb:43:b0:30:1d:9a:4f:59:9b:6c:00: fc:68:13:27:15:e2:57:1c:2b:de:fd:95:3e:49:37:8f:43:b9: 0f:4a:44:18:1e:42:a5:98:7a:7b:5d:33:f4:13:30:b8:59:a9: 64:b8:e7:f8:4c:5a:1b:df:d9:f0:41:88:e2:54:a1:fc:a3:e4: 7a:53:59:a7:2a:64:dc:e4:b8:b8:af:f7:73:32:aa:ac:59:49: 56:64:65:7c:30:4f:2f:7d:a5:ed:3c:9d:75:ca:24:29:72:7f: 4b:54:a5:8f:58:4b:3f:a4:80:9c:19:1d:3a:6b:55:3d:10:b4: d1:dd:32:fe:b6:4f:f8:84:65:7d:bf:0e:cc:ef:09:71:3c:e6: 39:08:54:10:ef:63:be:70:2c:51:76:30:9c:62:61:4e:38:b7: 99:88:ec:b5:f0:48:10:34:2b:b1:69:c8:0f:6c:bd:38:81:a9: 10:25:83:43:b6:d5:60:3d:c6:ea:25:56:82:6f:8c:d1:53:d7: 25:1c:79:4b:bb:17:a3:14:c6:bf:7b:d3:d4:cc:72:a4:48:07: 67:f0:37:45 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUbXifIuEIwVKKmcj3xcF1msFk95swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcxMjU4NDRaFw0yNjEwMDYxMzAzNDRaMDMxMTAvBgNV BAMTKEYzRDdCQzJBNjJBM0EzNTVBNDM4QkE2QkY0M0M2RTk5M0IzN0NFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ujIkSZbcNpCvJPcjRYH7dxYg H6ibD4RnnOd3C1xRIjr2okn4bzpn4ED0FyUBuxnbzVDF0nVxOWtUbJ9CuL0sEhoM BradsP/GTSj73ksxPo+nQlwi0T4GI/R+rCO5UM4N52vJGP7Bt4OE0IY0IovDylXO 8gD82hUc5pA4QzvbWdOepx/0eCNqvOUDVgCQLPvrLKKMG3yBY97UyJMuLr5hmb+T sKC/n7mH/jmjwSvsN/2x6hvAd2IEqsSTxb8+4pYFWjFyii38QeMTv5libMsPmszH egiUtt+MgAHcJGu5kDNtBDR2KDZgZxVG4+ynV0SjZSu64mfFPhQpCPPQACPjAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTz17wqYqOjVaQ4 umv0PG6ZOzfO0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEJi SFVIVXVLQk42WmZ4R0VSSnRDR3Rvb0drZkxLRkJTMWhRczI5WlVXb0gvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRC YkhVSFV1S0JONlpmeEdFUkp0Q0d0b29Ha2ZMS0ZCUzFoUXMyOVpVV29ILzIvRjNE N0JDMkE2MkEzQTM1NUE0MzhCQTZCRjQzQzZFOTkzQjM3Q0VEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCimEcAwQCj/8EAwQCsUJMMA0EAgACMAcDBQAoBCK0 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHtTANBgkqhkiG9w0BAQsFAAOCAQEA vILfPM+NIGP7zbk453cRTA+SnWa0cT3sJsVhWj/OVQOUpnqRE6jlx0m6w8tDsDAd mk9Zm2wA/GgTJxXiVxwr3v2VPkk3j0O5D0pEGB5CpZh6e10z9BMwuFmpZLjn+Exa G9/Z8EGI4lSh/KPkelNZpypk3OS4uK/3czKqrFlJVmRlfDBPL32l7TyddcokKXJ/ S1Slj1hLP6SAnBkdOmtVPRC00d0y/rZP+IRlfb8OzO8JcTzmOQhUEO9jvnAsUXYw nGJhTji3mYjstfBIEDQrsWnID2y9OIGpECWDQ7bVYD3G6iVWgm+M0VPXJRx5S7sX oxTGv3vT1MxypEgHZ/A3RQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:35 2025 by rpki-client