$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer File: 9A8CDCA9443D140D02860AA0070928656A172CE1.cer (raw, json) Hash identifier: 71NloKz3foWr4ZBFlAbJlcWGI9UyVY4muYxQ4UGajrg= Subject key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 395394A0319F7C7B9026D46C4B2774CF3F995175 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft caRepository: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 02:55:15 +0000 Certificate not after: Sat 06 Feb 2027 03:00:15 +0000 Subordinate resources: AS: 266520 IP: 45.177.140.0/22 IP: 170.245.92.0/22 IP: 2804:390c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 13:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:53:94:a0:31:9f:7c:7b:90:26:d4:6c:4b:27:74:cf:3f:99:51:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 7 02:55:15 2026 GMT Not After : Feb 6 03:00:15 2027 GMT Subject: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:7e:05:94:1a:e2:15:3a:a2:37:d2:7b:a1: f5:e1:3b:2c:3d:f2:69:e0:82:e2:34:6d:d8:88:82: e7:7e:dc:e8:3f:c7:bc:4c:e4:9b:72:16:b5:d4:53: 42:2d:70:75:8e:0f:88:cb:56:ee:ec:d2:78:03:cd: a2:b9:ff:82:e8:07:bc:b3:f8:06:f2:f5:94:88:ad: 59:2b:b1:31:e0:0d:80:cd:99:0f:b5:77:16:43:6f: 5d:a2:ed:e0:10:eb:6f:cd:e7:4b:92:37:2a:a1:19: e5:33:51:e9:43:94:b9:d6:ad:ee:f0:1c:dc:2c:22: 90:b2:77:0e:c6:69:a1:22:e2:01:47:6a:30:bb:12: e9:6a:0a:dc:d1:38:3c:23:66:07:ec:07:9e:ba:9d: 97:56:ee:77:be:3b:bb:30:c4:71:f6:36:0b:cc:bc: 23:76:7b:ee:22:07:85:2b:29:3b:56:ce:f6:7a:4a: c5:5a:fe:d7:83:f1:e4:8e:8e:85:e9:9f:3b:d8:1b: b1:fb:26:89:a9:67:5d:e9:d0:56:e3:bb:3b:47:64: fa:22:c3:3f:58:3e:3a:34:c4:97:80:7e:b4:81:1b: 0b:7b:2c:f8:ea:21:13:eb:bd:4e:ff:a1:70:18:a9: a6:4f:47:e9:c9:36:81:29:8b:8b:b6:8a:04:f6:ba: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.140.0/22 170.245.92.0/22 IPv6: 2804:390c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266520 Signature Algorithm: sha256WithRSAEncryption b8:20:9b:24:bf:9b:c9:c2:11:8f:c6:65:84:99:c5:04:0b:fa: be:b7:9d:68:86:15:25:06:93:e4:1a:ac:24:65:7b:fd:87:0b: ef:3b:67:56:08:37:25:5d:aa:57:ab:b2:15:fd:76:6d:55:44: dc:86:ea:bb:e2:81:82:95:21:09:21:5a:da:c3:ee:f5:0a:a6: 6e:b3:8a:2b:f8:e8:72:56:02:fe:a3:39:78:ff:47:6b:b3:0b: b3:62:21:42:16:9d:23:9d:cd:2b:9d:3f:a6:b2:c0:e6:9d:d9: 65:86:69:69:fa:39:02:d3:fd:21:67:c5:a3:0f:dd:68:1b:3c: a6:b8:dc:40:a3:3d:20:05:22:1c:17:17:89:b0:07:2d:88:ad: db:58:5c:a1:98:43:db:33:54:49:66:63:23:a4:36:cd:fc:dd: ca:8d:02:5b:98:fd:c2:cc:de:a1:62:54:d5:9c:3b:9c:cc:d1: 67:b6:3b:87:62:14:44:f3:1d:7f:69:b7:15:13:16:62:11:22: 0f:47:0a:06:17:33:32:92:7b:1e:ef:09:4d:2f:be:c6:3c:29: f2:bb:38:e7:d6:7e:38:cd:3a:e6:b4:57:9a:d1:48:b4:c4:36: 7b:6e:97:28:b8:8e:59:50:34:ea:de:28:be:74:6d:03:fa:a8: 8d:01:0b:59 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUOVOUoDGffHuQJtRsSyd0zz+ZUXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDcwMjU1MTVaFw0yNzAyMDYwMzAwMTVaMDMxMTAvBgNV BAMTKDlBOENEQ0E5NDQzRDE0MEQwMjg2MEFBMDA3MDkyODY1NkExNzJDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6X4FlBriFTqiN9J7ofXhOyw9 8mngguI0bdiIgud+3Og/x7xM5JtyFrXUU0ItcHWOD4jLVu7s0ngDzaK5/4LoB7yz +Aby9ZSIrVkrsTHgDYDNmQ+1dxZDb12i7eAQ62/N50uSNyqhGeUzUelDlLnWre7w HNwsIpCydw7GaaEi4gFHajC7EulqCtzRODwjZgfsB566nZdW7ne+O7swxHH2NgvM vCN2e+4iB4UrKTtWzvZ6SsVa/teD8eSOjoXpnzvYG7H7JompZ13p0FbjuztHZPoi wz9YPjo0xJeAfrSBGwt7LPjqIRPrvU7/oXAYqaZPR+nJNoEpi4u2igT2uve7AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSajNypRD0UDQKG CqAHCShlahcs4TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85QThD RENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItsYwDBAKq9VwwDQQCAAIwBwMFACgEOQwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBEYMA0GCSqGSIb3DQEBCwUAA4IBAQC4IJskv5vJ whGPxmWEmcUEC/q+t51ohhUlBpPkGqwkZXv9hwvvO2dWCDclXapXq7IV/XZtVUTc huq74oGClSEJIVraw+71CqZus4or+OhyVgL+ozl4/0drswuzYiFCFp0jnc0rnT+m ssDmndllhmlp+jkC0/0hZ8WjD91oGzymuNxAoz0gBSIcFxeJsActiK3bWFyhmEPb M1RJZmMjpDbN/N3KjQJbmP3CzN6hYlTVnDuczNFntjuHYhRE8x1/abcVExZiESIP RwoGFzMyknse7wlNL77GPCnyuzjn1n44zTrmtFea0Ui0xDZ7bpcouI5ZUDTq3ii+ dG0D+qiNAQtZ -----END CERTIFICATE-----Generated at Thu Feb 19 14:21:53 2026 by rpki-client