$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.cer File: E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.cer (raw, json) Hash identifier: NF7HptI11il8Qj8QjeN2kmMcSjkifMTYfmcKcJynG6E= Subject key identifier: E0:DF:F7:58:D8:C7:6F:C4:5D:57:B1:3F:7B:2C:4D:C5:05:E8:A2:64 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45E1F6A061F1CB90513E86D15B3CA794A184BCB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.mft caRepository: rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 20:33:50 +0000 Certificate not after: Wed 25 Aug 2027 20:38:50 +0000 Subordinate resources: AS: 264954 IP: 168.232.200.0/22 IP: 2804:307c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 18:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e1:f6:a0:61:f1:cb:90:51:3e:86:d1:5b:3c:a7:94:a1:84:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 20:33:50 2026 GMT Not After : Aug 25 20:38:50 2027 GMT Subject: CN=E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:19:53:02:bf:46:25:fa:ca:58:48:11:ad: 79:51:02:13:28:fd:2e:9e:7e:c3:59:f3:b5:f8:be: ce:5c:79:4a:c0:5d:19:0b:be:83:8c:bd:73:f9:ab: 13:ce:af:81:25:68:1a:61:37:30:cc:ec:9f:e2:6f: 3f:22:e4:a9:8f:af:10:ef:30:6e:5d:42:8e:6e:70: 28:f6:39:8b:fb:9f:22:b3:06:cc:03:1b:eb:ec:27: 51:b1:e6:31:1e:86:31:11:d1:39:92:ce:6e:6c:73: fd:f8:0c:c8:c1:37:8a:4b:b8:39:f1:32:32:a2:00: b8:17:20:0e:b3:37:e5:38:ee:c9:56:96:c2:88:11: d2:37:ea:0b:a9:0d:34:e8:2d:69:b2:d0:be:38:35: a0:d3:00:26:0c:85:a0:7d:84:1c:a7:5e:f6:4a:c1: 44:76:88:a7:fc:df:f1:ee:b4:e2:31:82:7d:7d:23: 17:b0:85:f2:73:c8:8a:80:c8:06:e5:42:94:48:9b: e3:2a:f6:d7:c5:d3:1a:27:c5:37:0a:d6:d1:c2:1d: 91:cd:23:4e:f7:0d:8a:b7:d1:47:52:f4:14:5c:21: bb:19:02:5e:b1:7f:e4:8b:56:4a:80:d9:b1:d4:15: a6:ea:55:1d:d5:cd:c9:c5:99:5d:19:b2:4e:15:04: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:DF:F7:58:D8:C7:6F:C4:5D:57:B1:3F:7B:2C:4D:C5:05:E8:A2:64 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.200.0/22 IPv6: 2804:307c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264954 Signature Algorithm: sha256WithRSAEncryption 9d:58:7c:48:3d:58:ca:1d:ef:17:ba:0b:99:95:33:57:51:08: 44:cd:fb:35:f9:46:e2:89:ef:b8:ab:fa:76:3b:25:8b:30:61: cf:3f:67:d8:86:c4:d4:c2:d7:ee:e0:4d:bd:ab:28:36:ec:61: 9a:c1:67:7c:07:d9:5f:ae:d2:68:e3:46:cb:38:78:b0:08:8e: fa:7c:04:35:fb:df:7c:ac:dd:30:3a:8c:d6:f2:67:e3:03:fd: 0a:07:70:98:1d:58:cd:0d:c1:ad:26:66:4a:9d:2f:80:cb:6a: f5:d5:3e:d0:a1:2d:3d:bd:1c:18:d1:5d:2e:3c:dc:32:ee:5c: d2:f0:aa:a9:71:94:78:4e:34:b9:6b:ba:e2:2a:6f:6d:71:01: e4:78:2b:7b:da:be:f2:45:52:8a:04:38:e9:a1:99:4d:bd:79: 42:3d:f8:fa:64:2c:7c:64:9c:55:4a:be:c2:69:20:c3:92:67: cd:f5:21:6e:70:c0:c0:0d:97:69:0a:3a:af:cd:03:68:eb:8c: 72:fb:b4:cb:d2:ef:7f:1c:7a:f3:92:7d:47:90:40:16:91:2b: ab:91:52:38:3b:a8:1a:91:d8:1b:cd:84:09:bf:43:23:f0:b6: ed:ac:7d:4d:61:cf:0d:44:60:3e:90:68:76:d7:bd:64:f3:80: d2:9a:32:e3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUReH2oGHxy5BRPobRWzynlKGEvLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjYyMDMzNTBaFw0yNzA4MjUyMDM4NTBaMDMxMTAvBgNV BAMTKEUwREZGNzU4RDhDNzZGQzQ1RDU3QjEzRjdCMkM0REM1MDVFOEEyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DBlTAr9GJfrKWEgRrXlRAhMo /S6efsNZ87X4vs5ceUrAXRkLvoOMvXP5qxPOr4ElaBphNzDM7J/ibz8i5KmPrxDv MG5dQo5ucCj2OYv7nyKzBswDG+vsJ1Gx5jEehjER0TmSzm5sc/34DMjBN4pLuDnx MjKiALgXIA6zN+U47slWlsKIEdI36gupDTToLWmy0L44NaDTACYMhaB9hBynXvZK wUR2iKf83/HutOIxgn19IxewhfJzyIqAyAblQpRIm+Mq9tfF0xonxTcK1tHCHZHN I073DYq30UdS9BRcIbsZAl6xf+SLVkqA2bHUFabqVR3VzcnFmV0Zsk4VBJ0xAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTg3/dY2MdvxF1X sT97LE3FBeiiZDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzUx UHNxa0Y1cHhKclpqYmU4aHlEOGs5WUV5anFQaThiTFRSNEd5ZkRTTXEvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1 MVBzcWtGNXB4SnJaamJlOGh5RDhrOVlFeWpxUGk4YkxUUjRHeWZEU01xLzIvRTBE RkY3NThEOEM3NkZDNDVENTdCMTNGN0IyQzREQzUwNUU4QTI2NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqOjIMA0EAgACMAcDBQAoBDB8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK+jANBgkqhkiG9w0BAQsFAAOCAQEAnVh8SD1Yyh3vF7oL mZUzV1EIRM37NflG4onvuKv6djslizBhzz9n2IbE1MLX7uBNvasoNuxhmsFnfAfZ X67SaONGyzh4sAiO+nwENfvffKzdMDqM1vJn4wP9CgdwmB1YzQ3BrSZmSp0vgMtq 9dU+0KEtPb0cGNFdLjzcMu5c0vCqqXGUeE40uWu64ipvbXEB5Hgre9q+8kVSigQ4 6aGZTb15Qj34+mQsfGScVUq+wmkgw5JnzfUhbnDAwA2XaQo6r80DaOuMcvu0y9Lv fxx685J9R5BAFpErq5FSODuoGpHYG82ECb9DI/C27ax9TWHPDURgPpBodte9ZPOA 0poy4w== -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:10 2026 by rpki-client