$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer File: D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer (raw, json) Hash identifier: Kc0+gd0cfDGdWf+4DAfqXgf8cQhs4qey/BEqw4YzfNM= Subject key identifier: D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73F7328EF2DADF3D6F4FEA35D9F6032D34BC0BF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.mft caRepository: rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Aug 2026 13:20:07 +0000 Certificate not after: Fri 27 Aug 2027 13:25:07 +0000 Subordinate resources: AS: 263078 IP: 170.244.132.0/22 IP: 186.233.168.0/22 IP: 2804:960::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f7:32:8e:f2:da:df:3d:6f:4f:ea:35:d9:f6:03:2d:34:bc:0b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 28 13:20:07 2026 GMT Not After : Aug 27 13:25:07 2027 GMT Subject: CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:2b:61:5e:52:90:4a:c2:04:f9:19:e6:38: 70:a0:e6:dd:a7:97:55:0d:50:45:02:d2:74:0d:e6: 16:23:e6:de:72:59:57:5e:51:11:e7:37:aa:c9:04: 81:d2:c6:2c:bc:d1:33:a5:04:8f:20:46:0b:b8:ed: 93:3d:c3:b4:e8:71:78:4c:43:63:84:1d:fd:50:cb: 36:67:5d:f2:3e:a3:7f:06:86:cf:ef:f0:49:5c:22: 94:93:3b:d4:47:6d:5f:ec:a7:2d:a5:b0:a4:c4:d1: a0:61:0a:80:06:87:4d:6e:98:72:06:04:74:e0:15: c4:27:da:91:20:fb:7d:35:51:e9:05:87:37:05:f7: 59:ae:35:35:47:35:f9:01:00:c0:29:5c:29:7e:de: 29:ad:f2:44:dc:3c:13:95:2c:60:7a:27:f9:de:ee: 4d:e3:3a:e1:d9:f9:4b:75:78:05:8b:a0:d5:77:83: 6d:8c:df:b0:b3:ef:3a:8e:91:36:60:dd:f5:11:2a: e2:9e:ff:79:31:4a:0a:a3:f8:14:c2:0e:99:ed:94: 41:61:db:4e:ff:30:dd:97:8d:29:cf:14:99:f9:09: 2a:2e:d9:e4:c0:3a:0c:79:74:87:f9:86:36:ce:2a: 96:94:23:9b:b8:59:e4:d2:40:d0:b8:ff:ca:ca:fe: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.132.0/22 186.233.168.0/22 IPv6: 2804:960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263078 Signature Algorithm: sha256WithRSAEncryption ab:b1:d2:41:4b:fc:e0:dc:bb:fd:89:e8:63:2d:c1:f0:2a:c4: 33:49:66:c3:0d:8b:c7:cb:2b:40:d4:4d:f4:71:79:e1:a6:5f: 96:5b:5a:60:6b:6c:81:37:f5:f4:00:78:a8:78:63:2e:90:40: 4e:4f:2b:8d:99:02:68:11:19:06:1b:30:46:b9:6a:19:74:10: 99:87:27:d4:0b:2f:44:57:93:70:12:6a:83:b2:8e:4c:17:cb: 84:62:c5:19:6c:2b:48:5e:2f:c2:16:ff:74:9d:8b:44:52:4c: bc:c5:73:b6:6e:4e:89:69:ad:59:ec:96:24:cf:ea:b9:78:e0: e1:73:99:11:c6:8d:08:90:47:4c:d1:44:bb:c1:7f:ec:0c:fe: ea:a7:cd:48:58:ad:92:2a:18:cb:1b:9d:fa:3f:4e:82:e6:89: 06:28:f6:da:ff:7d:bf:6f:ac:4f:24:5b:7e:9b:ee:c6:d1:6d: 7f:d0:f3:08:c7:ef:fa:49:ac:17:07:f7:54:74:5c:18:3c:3a: 7a:67:ff:6e:d9:b9:87:3d:c4:74:1d:85:d8:95:31:3e:55:54: 0e:4a:16:33:ed:65:77:25:53:55:f4:cf:b8:03:33:f2:2b:60: ee:06:96:1a:8d:10:f7:e5:c5:65:eb:2f:9f:98:17:1d:bb:b0: 51:38:e9:aa -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUc/cyjvLa3z1vT+o12fYDLTS8C/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjgxMzIwMDdaFw0yNzA4MjcxMzI1MDdaMDMxMTAvBgNV BAMTKEQ1MDM2QUZFM0YwQjgwNERBMjQyRjg1NUQ1NUY3QzQ2N0E5QkY0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpbythXlKQSsIE+RnmOHCg5t2n l1UNUEUC0nQN5hYj5t5yWVdeURHnN6rJBIHSxiy80TOlBI8gRgu47ZM9w7TocXhM Q2OEHf1QyzZnXfI+o38Ghs/v8ElcIpSTO9RHbV/spy2lsKTE0aBhCoAGh01umHIG BHTgFcQn2pEg+301UekFhzcF91muNTVHNfkBAMApXCl+3imt8kTcPBOVLGB6J/ne 7k3jOuHZ+Ut1eAWLoNV3g22M37Cz7zqOkTZg3fURKuKe/3kxSgqj+BTCDpntlEFh 207/MN2XjSnPFJn5CSou2eTAOgx5dIf5hjbOKpaUI5u4WeTSQNC4/8rK/m8rAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVA2r+PwuATaJC +FXVX3xGepv0kzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjZI dmF5MkQ0eWZBaXpKN1Z0M3FuM29VeFZ4M1hqQXNHUXVCc3d0SHpQaVQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y2 SHZheTJENHlmQWl6SjdWdDNxbjNvVXhWeDNYakFzR1F1QnN3dEh6UGlULzAvRDUw MzZBRkUzRjBCODA0REEyNDJGODU1RDU1RjdDNDY3QTlCRjQ5My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvSEAwQCuumoMA0EAgACMAcDBQAoBAlgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDpjANBgkqhkiG9w0BAQsFAAOCAQEAq7HSQUv8 4Ny7/YnoYy3B8CrEM0lmww2Lx8srQNRN9HF54aZflltaYGtsgTf19AB4qHhjLpBA Tk8rjZkCaBEZBhswRrlqGXQQmYcn1AsvRFeTcBJqg7KOTBfLhGLFGWwrSF4vwhb/ dJ2LRFJMvMVztm5OiWmtWeyWJM/quXjg4XOZEcaNCJBHTNFEu8F/7Az+6qfNSFit kioYyxud+j9OguaJBij22v99v2+sTyRbfpvuxtFtf9DzCMfv+kmsFwf3VHRcGDw6 emf/btm5hz3EdB2F2JUxPlVUDkoWM+1ldyVTVfTPuAMz8itg7gaWGo0Q9+XFZesv n5gXHbuwUTjpqg== -----END CERTIFICATE-----Generated at Fri Sep 4 21:03:48 2026 by rpki-client