$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.cer File: 72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.cer (raw, json) Hash identifier: jtEYxS+O7zQb+CtoI2y9pmOaHOfALmu9l9nNruftfSQ= Subject key identifier: 72:DA:45:DD:2C:53:0A:9C:98:04:6E:C0:80:44:A1:CB:D6:8F:F0:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2926C3AE89C5BAD611F974F4763FFAE801C4F8E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.mft caRepository: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Sep 2026 13:24:16 +0000 Certificate not after: Thu 02 Sep 2027 13:29:16 +0000 Subordinate resources: AS: 52941 IP: 45.169.212.0/22 IP: 177.38.40.0/21 IP: 2804:b18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:26:c3:ae:89:c5:ba:d6:11:f9:74:f4:76:3f:fa:e8:01:c4:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 3 13:24:16 2026 GMT Not After : Sep 2 13:29:16 2027 GMT Subject: CN=72DA45DD2C530A9C98046EC08044A1CBD68FF0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:78:b6:ac:55:69:e2:43:db:64:90:05:ae: 84:2d:c7:71:31:02:c4:5f:09:42:43:b5:05:0e:fd: 52:93:d1:75:e1:6b:2e:1b:f0:b1:91:f5:28:76:2b: e4:de:c9:c7:28:84:fe:ce:f7:9e:ae:a1:70:5f:5a: 4f:ce:f5:59:8f:ee:18:5b:f6:19:14:e6:8c:d3:fc: d1:c1:90:f3:c6:9a:bd:44:0c:94:f7:f7:18:72:5c: bb:a4:f4:81:ff:2b:68:3b:fa:9a:7f:23:54:fc:d1: f4:ba:b1:9e:1a:25:45:65:d8:76:92:52:66:32:a9: 72:cf:a6:bd:bf:58:63:96:5b:a6:76:98:dc:4a:9a: 6a:ef:00:f3:d5:b4:55:bd:ef:c2:8b:b5:21:a7:e6: 6f:4f:67:1b:0b:55:f5:e1:bb:1b:5d:c0:4b:be:1e: 94:9c:ec:94:28:06:d9:e9:d2:6d:14:1a:57:95:8c: 5d:65:49:d3:11:68:37:5c:47:95:8a:33:41:22:93: 58:2a:2e:d5:98:a7:7d:0e:b0:0d:44:87:09:39:df: a9:e7:25:4e:fb:ef:d6:47:7e:8a:21:f9:eb:2d:9b: 29:e0:4d:b5:6e:3a:bf:69:9c:00:dd:88:f3:6c:7b: 54:e4:96:a4:1d:37:ed:02:3a:d5:3c:aa:f8:05:17: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:DA:45:DD:2C:53:0A:9C:98:04:6E:C0:80:44:A1:CB:D6:8F:F0:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.212.0/22 177.38.40.0/21 IPv6: 2804:b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52941 Signature Algorithm: sha256WithRSAEncryption 05:6f:11:28:69:9a:4b:d5:4b:d2:30:4a:29:84:71:7f:b0:a7: b4:ab:87:4a:68:1a:2f:99:65:1a:2f:cb:d0:ca:5f:35:4d:b9: 31:40:70:67:a2:04:70:24:4d:57:e6:d5:df:78:20:a0:61:f2: 2d:cd:05:4f:3d:a7:09:b0:cb:77:50:eb:dc:1d:f9:c4:0f:98: 06:3c:9e:eb:ce:ea:8b:7c:0e:e7:84:fd:d3:f4:16:d8:ae:83: 12:64:26:81:dc:67:c6:fc:52:c1:de:40:a3:c1:be:11:aa:ba: ed:6c:29:13:e4:44:29:4c:00:9c:a6:06:a8:b9:16:6b:e3:72: 87:9b:a1:1f:56:ef:c9:6f:e8:86:9f:25:13:a7:4d:24:c3:62: 6c:54:d6:86:58:fd:11:92:ee:57:22:26:88:90:24:69:cc:7b: 23:59:cb:66:c3:d2:2a:eb:8b:e5:e2:58:57:9a:40:f7:b3:6e: 25:a2:a7:c5:05:a3:dd:b3:1c:c4:65:8b:ee:ba:98:0a:54:40: 81:97:69:fe:13:69:a4:d0:3e:6d:78:2d:13:a1:e6:ad:67:07: 3a:ce:f8:86:4b:9b:8a:58:08:ee:b7:9d:79:c8:34:7e:b6:c2: d6:57:c0:26:90:27:13:31:0e:02:23:cd:a9:2c:87:da:77:ab: cd:b0:a3:57 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKSbDronFutYR+XT0dj/66AHE+OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDMxMzI0MTZaFw0yNzA5MDIxMzI5MTZaMDMxMTAvBgNV BAMTKDcyREE0NUREMkM1MzBBOUM5ODA0NkVDMDgwNDRBMUNCRDY4RkYwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKHi2rFVp4kPbZJAFroQtx3Ex AsRfCUJDtQUO/VKT0XXhay4b8LGR9Sh2K+TeyccohP7O956uoXBfWk/O9VmP7hhb 9hkU5ozT/NHBkPPGmr1EDJT39xhyXLuk9IH/K2g7+pp/I1T80fS6sZ4aJUVl2HaS UmYyqXLPpr2/WGOWW6Z2mNxKmmrvAPPVtFW978KLtSGn5m9PZxsLVfXhuxtdwEu+ HpSc7JQoBtnp0m0UGleVjF1lSdMRaDdcR5WKM0Eik1gqLtWYp30OsA1Ehwk536nn JU7779ZHfooh+estmyngTbVuOr9pnADdiPNse1TklqQdN+0COtU8qvgFFxSRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy2kXdLFMKnJgE bsCARKHL1o/w4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN25q cmNDY3U2MTdiRzdqV1F3endUMVpRWXpudHJqQ29DMzdOOXBRcU1DV0wvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdu anJjQ2N1NjE3Ykc3aldRd3p3VDFaUVl6bnRyakNvQzM3TjlwUXFNQ1dMLzAvNzJE QTQ1REQyQzUzMEE5Qzk4MDQ2RUMwODA0NEExQ0JENjhGRjBFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLanUAwQDsSYoMA0EAgACMAcDBQAoBAsYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOzTANBgkqhkiG9w0BAQsFAAOCAQEABW8RKGma S9VL0jBKKYRxf7CntKuHSmgaL5llGi/L0MpfNU25MUBwZ6IEcCRNV+bV33ggoGHy Lc0FTz2nCbDLd1Dr3B35xA+YBjye687qi3wO54T90/QW2K6DEmQmgdxnxvxSwd5A o8G+Eaq67WwpE+REKUwAnKYGqLkWa+Nyh5uhH1bvyW/ohp8lE6dNJMNibFTWhlj9 EZLuVyImiJAkacx7I1nLZsPSKuuL5eJYV5pA97NuJaKnxQWj3bMcxGWL7rqYClRA gZdp/hNppNA+bXgtE6HmrWcHOs74hkubilgI7redecg0frbC1lfAJpAnEzEOAiPN qSyH2nerzbCjVw== -----END CERTIFICATE-----Generated at Fri Sep 4 06:50:57 2026 by rpki-client