$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer File: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer (raw, json) Hash identifier: 1EWsC20r3W9gWwcboYUnORaTkc9RF9f4+hoDWNnpC3I= Subject key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D098DF51610357B47CEB1BF69CEC7FC48B13975 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft caRepository: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 20 Aug 2026 21:40:43 +0000 Certificate not after: Thu 19 Aug 2027 21:45:43 +0000 Subordinate resources: AS: 263350 IP: 191.37.12.0/22 IP: 2804:14c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 22:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:09:8d:f5:16:10:35:7b:47:ce:b1:bf:69:ce:c7:fc:48:b1:39:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 20 21:40:43 2026 GMT Not After : Aug 19 21:45:43 2027 GMT Subject: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:40:c0:28:2b:74:45:8c:cb:0c:db:c5:f9: 1f:10:0e:a9:63:9e:72:6a:92:9d:03:57:f8:80:a1: c1:0b:27:a4:3b:1d:0f:a7:0a:d0:7a:23:f5:74:f9: 9b:ce:0a:6f:b1:4e:db:02:6b:13:e1:ea:67:0a:ac: 13:77:e6:56:73:8f:4a:36:30:f9:79:37:a3:48:63: 70:59:5c:81:e2:9e:85:52:4f:a6:ab:0a:67:50:7e: a9:a0:05:ff:4e:d8:d7:fd:bb:7b:54:46:e2:d3:14: 78:0c:f9:50:30:cc:3c:bb:06:54:7d:26:53:45:3d: 01:8e:09:de:8e:1c:62:7f:95:0d:dc:87:72:23:34: 00:35:62:6e:45:e6:2d:98:17:0b:43:df:2c:ea:81: 61:cc:e1:57:ca:74:aa:50:ba:d7:e0:a4:21:48:5e: 18:28:e7:cf:85:91:4c:f0:6c:e4:72:93:20:90:7b: be:cc:0f:85:65:ba:9c:5c:54:e1:0f:dd:fd:7b:34: fa:84:21:d0:d6:06:12:3d:fc:16:cb:c7:9a:c2:f0: d9:55:6d:36:23:5f:c3:82:af:74:68:eb:29:87:7c: 3b:1c:7f:85:d6:ef:2d:68:e4:39:f1:81:f9:27:03: 2a:f7:aa:44:1a:63:d4:6b:6c:b2:4a:b8:4b:cc:de: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.37.12.0/22 IPv6: 2804:14c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263350 Signature Algorithm: sha256WithRSAEncryption 02:04:ee:72:c1:ca:7d:5b:68:d0:86:2b:fd:c3:05:57:f5:a2: 15:f9:d2:23:0f:46:51:2f:01:2a:6a:7c:c9:1a:ad:f7:0e:cc: d7:3c:55:e7:13:b2:b5:13:c2:e7:8e:2c:aa:a1:88:dd:24:6e: 3a:a9:75:ff:e1:f5:3e:e2:68:56:b1:b2:c4:67:73:b0:23:e9: b3:01:de:60:4b:c8:43:ee:b6:d6:ae:91:07:db:79:74:d7:3f: d4:e4:e0:e9:aa:31:f2:db:d2:91:aa:93:01:68:dd:65:f8:8e: 7b:fe:c7:5d:33:62:14:41:96:07:c3:ed:9c:75:16:42:44:b5: 47:cf:b0:0b:86:9f:b0:b3:85:6d:87:7a:92:e2:46:55:87:69: 65:a2:7e:01:c0:f8:18:69:c2:24:8a:69:a0:96:aa:5e:83:83: 12:d3:54:5c:0e:a9:31:fc:ca:0b:3f:10:98:ec:18:f8:45:9f: 1b:ee:c6:93:07:6a:42:88:ff:ee:f9:a3:94:d5:b8:e0:2e:b6: 5c:72:4a:db:f5:a7:66:60:c3:15:a2:d9:46:0d:d8:d9:70:96: 83:7e:33:d5:32:1f:3b:37:12:b5:64:9f:72:e3:5c:c1:40:72: f7:05:33:05:bb:ff:89:03:3c:6c:9a:02:ae:a2:72:d1:83:3a: dd:a5:9d:23 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTQmN9RYQNXtHzrG/ac7H/EixOXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjAyMTQwNDNaFw0yNzA4MTkyMTQ1NDNaMDMxMTAvBgNV BAMTKDY1OEZEMkM0QzhBNURBMDc5QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaUDAKCt0RYzLDNvF+R8QDqlj nnJqkp0DV/iAocELJ6Q7HQ+nCtB6I/V0+ZvOCm+xTtsCaxPh6mcKrBN35lZzj0o2 MPl5N6NIY3BZXIHinoVST6arCmdQfqmgBf9O2Nf9u3tURuLTFHgM+VAwzDy7BlR9 JlNFPQGOCd6OHGJ/lQ3ch3IjNAA1Ym5F5i2YFwtD3yzqgWHM4VfKdKpQutfgpCFI Xhgo58+FkUzwbORykyCQe77MD4VlupxcVOEP3f17NPqEIdDWBhI9/BbLx5rC8NlV bTYjX8OCr3Ro6ymHfDscf4XW7y1o5DnxgfknAyr3qkQaY9RrbLJKuEvM3lKZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlj9LEyKXaB5rB MH1TFRK3xXJAqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkRZ TlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFSS2YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZE WU5WTExKR0ZGZUhWd1FlM0NzUmFFVmdweU5lUjFva2RmVTdhM3BRUktmLzAvNjU4 RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdDNTcyNDBBQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvyUMMA0EAgACMAcDBQAoBBTIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEtjANBgkqhkiG9w0BAQsFAAOCAQEAAgTucsHKfVto0IYr /cMFV/WiFfnSIw9GUS8BKmp8yRqt9w7M1zxV5xOytRPC544sqqGI3SRuOql1/+H1 PuJoVrGyxGdzsCPpswHeYEvIQ+621q6RB9t5dNc/1OTg6aox8tvSkaqTAWjdZfiO e/7HXTNiFEGWB8PtnHUWQkS1R8+wC4afsLOFbYd6kuJGVYdpZaJ+AcD4GGnCJIpp oJaqXoODEtNUXA6pMfzKCz8QmOwY+EWfG+7GkwdqQoj/7vmjlNW44C62XHJK2/Wn ZmDDFaLZRg3Y2XCWg34z1TIfOzcStWSfcuNcwUBy9wUzBbv/iQM8bJoCrqJy0YM6 3aWdIw== -----END CERTIFICATE-----Generated at Fri Sep 4 23:17:34 2026 by rpki-client