$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer File: DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer (raw, json) Hash identifier: yR5gnZ/fcLJp9Fon3UTmNhxNps+6vZBbuEJFHcoZOcc= Subject key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 421C277C5E5ACF4FA2CE21037D6ABFA25CB0AE36 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft caRepository: rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 31 Aug 2026 19:37:10 +0000 Certificate not after: Mon 30 Aug 2027 19:42:10 +0000 Subordinate resources: AS: 270919 IP: 138.185.68.0/22 IP: 2804:7380::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 00:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1c:27:7c:5e:5a:cf:4f:a2:ce:21:03:7d:6a:bf:a2:5c:b0:ae:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 31 19:37:10 2026 GMT Not After : Aug 30 19:42:10 2027 GMT Subject: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:c7:ec:cd:b7:db:dc:de:9b:e1:be:46:98: ab:ad:e4:53:03:0a:6b:fd:74:c1:2a:7e:e7:95:36: 28:a4:8a:06:0c:88:36:b9:c3:f9:0e:e9:15:a9:7f: 3b:25:1e:69:4b:ea:bd:ee:1a:87:44:bf:9f:69:ea: 82:74:19:24:35:42:db:cb:77:50:c7:3d:46:58:31: 96:5f:c4:0b:a3:4d:8b:4d:bf:fa:93:64:6a:95:01: aa:e4:07:27:3b:be:72:57:c5:66:a1:41:c1:0a:75: c8:77:0d:a1:a2:ac:62:de:e2:c4:cf:b9:23:3b:c8: 19:88:9c:4c:8d:78:2f:b7:e8:5f:34:b5:7c:86:8e: 12:c0:cd:37:1c:bf:05:9d:4f:4c:67:66:22:1f:83: 70:5f:6f:e2:d9:81:60:85:40:6f:eb:4b:2d:21:9f: 5c:5d:21:c4:07:67:b7:5d:16:5f:42:c4:af:e5:38: ee:71:8d:f3:0d:2a:e9:7f:27:50:1f:41:8e:30:b1: dc:75:7c:d2:81:6a:3c:41:ab:86:0a:54:1e:ae:84: e2:5f:27:0c:65:75:bc:a3:62:5c:f3:ff:31:47:39: cf:4a:83:3f:e1:d8:0f:57:02:d6:d4:bc:05:8e:29: 36:67:dd:0c:1c:48:d5:ee:a4:33:e4:1c:29:cb:79: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.68.0/22 IPv6: 2804:7380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270919 Signature Algorithm: sha256WithRSAEncryption 3c:e4:26:8e:dc:52:b7:d1:65:cc:41:fb:09:4c:f2:c6:1b:eb: 13:75:cf:9b:15:c6:66:e1:ac:db:2b:b5:41:dd:26:56:00:84: bc:bf:14:45:59:81:9a:80:70:7f:ec:ab:1b:8a:56:d7:06:98: f0:47:dc:86:48:36:28:d3:da:e5:bc:df:66:eb:48:e3:44:b8: 69:0b:0e:9d:4d:b5:e0:d9:d9:25:7d:d6:75:fb:c2:f4:72:89: 11:dd:9d:52:f8:9b:fe:67:7a:e4:25:11:08:78:b1:b6:b5:08: db:f3:c6:0d:54:21:3d:92:01:98:54:0c:9b:0b:3c:ac:85:2f: 06:6e:8d:d4:5c:f1:c9:45:86:27:41:75:ee:b3:cd:c4:f0:89: bd:13:3d:89:2b:df:27:75:20:88:e2:1f:6e:49:d4:71:e3:6a: 64:74:00:73:5b:16:c8:1f:56:9c:ea:db:7c:17:09:fa:78:fa: b2:4c:52:62:d0:e3:c5:e4:00:99:ac:ec:4d:1e:48:e1:d4:7a: c7:a6:e3:46:01:0a:7f:cc:c8:f4:4b:cf:f4:b3:63:ed:be:86: 27:5f:d4:c3:a4:ad:1a:29:b7:fb:34:62:2a:23:e8:61:d7:b1: 6c:71:b2:79:39:8a:c2:8f:49:fd:f4:17:51:80:e4:4f:b4:5c: 08:96:0a:0e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQhwnfF5az0+iziEDfWq/olywrjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MzExOTM3MTBaFw0yNzA4MzAxOTQyMTBaMDMxMTAvBgNV BAMTKERCOEVCRDMwRUVERTlDMTcwOUNFREJERjQxNUNCOUY2RDM3MEU1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/cfszbfb3N6b4b5GmKut5FMD Cmv9dMEqfueVNiikigYMiDa5w/kO6RWpfzslHmlL6r3uGodEv59p6oJ0GSQ1QtvL d1DHPUZYMZZfxAujTYtNv/qTZGqVAarkByc7vnJXxWahQcEKdch3DaGirGLe4sTP uSM7yBmInEyNeC+36F80tXyGjhLAzTccvwWdT0xnZiIfg3Bfb+LZgWCFQG/rSy0h n1xdIcQHZ7ddFl9CxK/lOO5xjfMNKul/J1AfQY4wsdx1fNKBajxBq4YKVB6uhOJf JwxldbyjYlzz/zFHOc9Kgz/h2A9XAtbUvAWOKTZn3QwcSNXupDPkHCnLeUDvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbjr0w7t6cFwnO 299BXLn203DlrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWJE NUR0MWZhWUM2VkRUOHdyNEQzR2lvZUxHTHJhbkhnTno2ZDNMYkV4VnEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vi RDVEdDFmYVlDNlZEVDh3cjREM0dpb2VMR0xyYW5IZ056NmQzTGJFeFZxLzAvREI4 RUJEMzBFRURFOUMxNzA5Q0VEQkRGNDE1Q0I5RjZEMzcwRTVBRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCirlEMA0EAgACMAcDBQAoBHOAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiRzANBgkqhkiG9w0BAQsFAAOCAQEAPOQmjtxSt9FlzEH7 CUzyxhvrE3XPmxXGZuGs2yu1Qd0mVgCEvL8URVmBmoBwf+yrG4pW1waY8Efchkg2 KNPa5bzfZutI40S4aQsOnU214NnZJX3WdfvC9HKJEd2dUvib/md65CURCHixtrUI 2/PGDVQhPZIBmFQMmws8rIUvBm6N1FzxyUWGJ0F17rPNxPCJvRM9iSvfJ3UgiOIf bknUceNqZHQAc1sWyB9WnOrbfBcJ+nj6skxSYtDjxeQAmazsTR5I4dR6x6bjRgEK f8zI9EvP9LNj7b6GJ1/Uw6StGim3+zRiKiPoYdexbHGyeTmKwo9J/fQXUYDkT7Rc CJYKDg== -----END CERTIFICATE-----Generated at Fri Sep 4 00:17:00 2026 by rpki-client