$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer File: 8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer (raw, json) Hash identifier: 0yK2Y//XfBKI/5K4rwKJWaNh3pjheD7dIhVtDpqgKng= Subject key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 592413F423E106106F18EC4FD7DE73A9E3FFE348 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft caRepository: rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Aug 2026 14:37:29 +0000 Certificate not after: Fri 27 Aug 2027 14:42:29 +0000 Subordinate resources: AS: 264589 IP: 138.36.240.0/22 IP: 143.202.228.0/22 IP: 2804:2210::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:24:13:f4:23:e1:06:10:6f:18:ec:4f:d7:de:73:a9:e3:ff:e3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 28 14:37:29 2026 GMT Not After : Aug 27 14:42:29 2027 GMT Subject: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:7d:64:4f:9a:55:0a:97:c2:f7:14:72:0f: 16:21:e5:c6:a2:45:d8:ed:11:93:1e:02:bd:08:33: bf:08:89:b8:8a:27:7c:99:c8:66:ae:6b:ac:6b:d9: 81:74:1d:12:24:04:16:52:b3:3b:14:8d:67:8f:ed: cb:c7:af:1e:33:88:8e:83:d2:94:c2:66:74:4d:99: fc:2a:be:b8:bf:bb:b2:e6:0a:27:9c:22:81:7e:a5: 4a:90:50:f0:66:89:e3:ea:79:5d:9a:17:d1:44:6e: 77:51:f8:7a:a4:7d:7f:38:00:6a:10:50:bf:ab:a3: f4:82:06:9d:b6:1e:dc:52:b4:07:fa:6e:76:4a:f7: 03:83:d8:8b:85:52:97:bf:57:a2:be:f5:52:c1:26: 98:52:d5:77:97:33:d5:fb:0b:45:0a:d8:f9:4a:8b: 52:af:52:e6:69:30:12:2a:87:28:f0:be:fe:18:db: 77:56:4a:22:08:3e:24:04:7d:79:61:4f:de:33:a9: 12:34:27:ed:cd:5d:44:73:08:78:e2:88:a0:21:0c: 1a:bc:2d:0f:7a:3a:e8:9c:b6:7e:2d:d6:49:d0:c8: c9:3e:6a:0d:d3:18:de:91:6a:d9:b2:ed:13:3f:61: 88:14:41:d8:12:b4:9f:3e:8b:1e:f9:ef:6c:27:b7: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.240.0/22 143.202.228.0/22 IPv6: 2804:2210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264589 Signature Algorithm: sha256WithRSAEncryption ba:fe:f1:b6:9d:1d:14:f6:91:45:b6:09:07:92:ec:e7:94:50: 5b:5f:66:26:df:37:90:d5:93:1e:11:99:c4:33:a2:84:97:38: bb:ba:d1:3d:98:3b:9d:ee:ea:f8:9f:a1:dc:7b:32:ad:e5:4b: fb:72:49:64:91:ee:48:e2:84:a4:67:48:82:49:e6:06:e1:20: 30:10:27:ff:34:5b:f0:81:2f:5e:0c:04:3b:13:da:50:b3:dd: b7:a0:12:33:b2:9b:89:04:5c:3f:eb:cc:bd:9b:70:e3:3e:e7: 6e:59:73:6d:85:e1:99:f0:7b:91:b6:dc:9b:20:6d:0f:ca:c6: 0c:b4:c7:65:bc:61:0b:5d:7a:23:64:00:c5:53:70:d6:a5:bf: 76:35:95:99:62:84:56:99:7e:c9:d7:84:ce:31:6f:0f:62:3f: b0:b6:51:96:47:20:c7:90:97:1f:0d:06:c4:28:da:a9:3f:6e: c7:73:cd:48:c5:03:63:a5:a8:5f:9c:a8:72:0a:6f:2b:a7:56: 9f:08:00:cf:aa:99:9f:54:0a:9a:78:2e:9f:62:a0:7e:47:d9: 3d:34:52:59:14:c7:ee:58:58:89:00:b5:70:90:50:79:f5:c4: b6:1e:5e:44:93:25:b0:e4:78:bb:0c:ec:e2:62:a3:5b:4a:80: 85:fe:04:43 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWSQT9CPhBhBvGOxP195zqeP/40gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjgxNDM3MjlaFw0yNzA4MjcxNDQyMjlaMDMxMTAvBgNV BAMTKDgzODZGQjI4NjM0ODU2QjZCOTc3MEFCMzdCRjFBNjA1NzlBRkRBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoX1kT5pVCpfC9xRyDxYh5cai RdjtEZMeAr0IM78IibiKJ3yZyGaua6xr2YF0HRIkBBZSszsUjWeP7cvHrx4ziI6D 0pTCZnRNmfwqvri/u7LmCiecIoF+pUqQUPBmiePqeV2aF9FEbndR+HqkfX84AGoQ UL+ro/SCBp22HtxStAf6bnZK9wOD2IuFUpe/V6K+9VLBJphS1XeXM9X7C0UK2PlK i1KvUuZpMBIqhyjwvv4Y23dWSiIIPiQEfXlhT94zqRI0J+3NXURzCHjiiKAhDBq8 LQ96Ouictn4t1knQyMk+ag3TGN6Ratmy7RM/YYgUQdgStJ8+ix7572wnt+UVAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDhvsoY0hWtrl3 CrN78aYFea/a2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGo5 UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1aZHQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRq OVJHTHRFclR4UU1OMVYxUWk4UDNwVHZlcldGdlFwWFlWYWg2TTFtWmR0LzAvODM4 NkZCMjg2MzQ4NTZCNkI5NzcwQUIzN0JGMUE2MDU3OUFGREFEOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiiTwAwQCj8rkMA0EAgACMAcDBQAoBCIQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJjTANBgkqhkiG9w0BAQsFAAOCAQEAuv7xtp0d FPaRRbYJB5Ls55RQW19mJt83kNWTHhGZxDOihJc4u7rRPZg7ne7q+J+h3HsyreVL +3JJZJHuSOKEpGdIgknmBuEgMBAn/zRb8IEvXgwEOxPaULPdt6ASM7KbiQRcP+vM vZtw4z7nbllzbYXhmfB7kbbcmyBtD8rGDLTHZbxhC116I2QAxVNw1qW/djWVmWKE Vpl+ydeEzjFvD2I/sLZRlkcgx5CXHw0GxCjaqT9ux3PNSMUDY6WoX5yocgpvK6dW nwgAz6qZn1QKmngun2KgfkfZPTRSWRTH7lhYiQC1cJBQefXEth5eRJMlsOR4uwzs 4mKjW0qAhf4EQw== -----END CERTIFICATE-----Generated at Fri Sep 4 06:51:15 2026 by rpki-client