$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.cer File: 1D68CECB62F0D929B81B4909208D8C9DBE6292A0.cer (raw, json) Hash identifier: YR0tvBalQM/l9XVsi0fE0bVwv/DJF/8joIRgNd8GiSI= Subject key identifier: 1D:68:CE:CB:62:F0:D9:29:B8:1B:49:09:20:8D:8C:9D:BE:62:92:A0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 305CA1A79A9BFD160C83FA2E7373F60CEA16AF3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.mft caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 18:10:02 +0000 Certificate not after: Mon 31 May 2027 18:15:02 +0000 Subordinate resources: AS: 264233 IP: 138.117.116.0/22 IP: 170.80.100.0/22 IP: 2804:249c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 03:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5c:a1:a7:9a:9b:fd:16:0c:83:fa:2e:73:73:f6:0c:ea:16:af:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 1 18:10:02 2026 GMT Not After : May 31 18:15:02 2027 GMT Subject: CN=1D68CECB62F0D929B81B4909208D8C9DBE6292A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:24:7a:79:41:72:84:77:7e:9a:52:e1:70: 99:61:d2:f4:79:71:c6:6f:d7:35:89:dd:23:96:6f: dc:96:16:6a:30:94:d9:a3:46:c7:74:56:48:7b:f6: d3:5b:4d:c6:b7:ba:12:8d:aa:78:9f:9e:cd:40:93: a2:92:ac:d8:54:c3:c8:a2:16:2a:ac:5f:ac:30:bf: f4:95:b8:14:b9:b6:cc:e5:18:da:44:d9:d2:e3:4d: f1:37:45:1e:a2:53:1d:94:b8:ab:09:98:17:05:09: a6:2a:89:52:08:9e:78:29:ea:c7:9a:28:a3:08:d4: 53:6d:77:3c:14:b5:23:05:b4:1e:5c:0f:af:0a:49: f6:96:dd:e5:19:4b:3f:de:62:3f:12:07:c9:05:b7: bb:fe:a8:54:17:e9:22:ef:ca:c6:60:e6:12:fe:23: 16:70:b8:8f:3a:b3:26:d9:e2:fd:6c:20:2f:02:1e: 09:14:56:a6:32:4d:5c:dc:09:38:7e:43:8f:f2:33: 70:3c:97:81:ae:82:74:c4:79:63:b9:3c:84:53:4c: a0:5d:f3:7c:5d:04:ef:b4:43:48:b8:b8:d6:17:9f: be:2e:da:f1:9b:b1:d9:78:52:71:ca:2c:a2:62:b7: f4:9b:db:ac:f4:29:47:db:46:fe:d1:ec:87:65:87: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:68:CE:CB:62:F0:D9:29:B8:1B:49:09:20:8D:8C:9D:BE:62:92:A0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.116.0/22 170.80.100.0/22 IPv6: 2804:249c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264233 Signature Algorithm: sha256WithRSAEncryption d8:e9:d7:ff:09:42:d2:97:a1:b2:45:9a:f1:d1:e1:fc:eb:bd: 9a:16:15:5a:b1:f0:3f:3d:fe:7f:18:b0:8b:3c:73:cd:36:b2: df:17:ed:42:70:48:49:d1:bf:22:de:78:5f:eb:27:dc:b9:ac: 20:98:34:a4:15:31:e7:ac:d6:62:ac:0b:3e:23:67:51:87:c8: 3c:d7:3f:c7:89:28:40:67:02:64:b6:6f:56:f5:76:5c:6e:7f: b3:21:dd:a8:6c:71:d5:10:90:9e:59:3f:a3:3e:43:7a:2d:cd: fb:50:f6:7c:2a:f1:30:17:9e:d6:08:7f:ad:1e:38:3c:b1:f1: 9e:f8:54:48:f2:97:66:3d:78:c7:c8:38:76:3e:67:91:3f:19: 37:31:f8:14:b4:b7:0f:03:e1:60:d1:44:fd:63:10:d8:5c:78: 1a:72:37:02:31:e7:b2:51:39:b6:fa:f9:42:e4:a0:1c:b2:51: 68:d6:78:cc:51:d7:88:ad:74:86:f1:03:34:71:14:e6:2c:60: ea:75:d9:15:e3:24:6d:c6:55:2c:3d:b8:a4:c3:9b:e3:a6:a7: 70:0e:db:95:08:86:6d:7a:34:f4:73:2b:bd:fe:9c:15:83:87: e0:51:81:0b:c3:70:e1:3d:60:b8:38:09:3d:8f:70:4d:f9:87: 61:03:08:58 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMFyhp5qb/RYMg/ouc3P2DOoWrz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MDExODEwMDJaFw0yNzA1MzExODE1MDJaMDMxMTAvBgNV BAMTKDFENjhDRUNCNjJGMEQ5MjlCODFCNDkwOTIwOEQ4QzlEQkU2MjkyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7iR6eUFyhHd+mlLhcJlh0vR5 ccZv1zWJ3SOWb9yWFmowlNmjRsd0Vkh79tNbTca3uhKNqnifns1Ak6KSrNhUw8ii FiqsX6wwv/SVuBS5tszlGNpE2dLjTfE3RR6iUx2UuKsJmBcFCaYqiVIInngp6sea KKMI1FNtdzwUtSMFtB5cD68KSfaW3eUZSz/eYj8SB8kFt7v+qFQX6SLvysZg5hL+ IxZwuI86sybZ4v1sIC8CHgkUVqYyTVzcCTh+Q4/yM3A8l4GugnTEeWO5PIRTTKBd 83xdBO+0Q0i4uNYXn74u2vGbsdl4UnHKLKJit/Sb26z0KUfbRv7R7Idlh+gRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdaM7LYvDZKbgb SQkgjYydvmKSoDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFRT cmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RU U3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzAvMUQ2 OENFQ0I2MkYwRDkyOUI4MUI0OTA5MjA4RDhDOURCRTYyOTJBMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinV0AwQCqlBkMA0EAgACMAcDBQAoBCScMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIKTANBgkqhkiG9w0BAQsFAAOCAQEA2OnX/wlC 0pehskWa8dHh/Ou9mhYVWrHwPz3+fxiwizxzzTay3xftQnBISdG/It54X+sn3Lms IJg0pBUx56zWYqwLPiNnUYfIPNc/x4koQGcCZLZvVvV2XG5/syHdqGxx1RCQnlk/ oz5Dei3N+1D2fCrxMBee1gh/rR44PLHxnvhUSPKXZj14x8g4dj5nkT8ZNzH4FLS3 DwPhYNFE/WMQ2Fx4GnI3AjHnslE5tvr5QuSgHLJRaNZ4zFHXiK10hvEDNHEU5ixg 6nXZFeMkbcZVLD24pMOb46ancA7blQiGbXo09HMrvf6cFYOH4FGBC8Nw4T1guDgJ PY9wTfmHYQMIWA== -----END CERTIFICATE-----Generated at Sat Jun 13 04:44:39 2026 by rpki-client