$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer File: 08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer (raw, json) Hash identifier: GZ1FlfhzMjJ/DMVKo6m6CExKtcAsIOUq1hshw3Brvmc= Subject key identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0D9103849F24B8D7A58D5905A2318EBC5449CB6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft caRepository: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 22 Aug 2026 07:10:21 +0000 Certificate not after: Sat 21 Aug 2027 07:15:21 +0000 Subordinate resources: AS: 270699 IP: 200.187.108.0/22 IP: 2804:6ffc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 16:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:91:03:84:9f:24:b8:d7:a5:8d:59:05:a2:31:8e:bc:54:49:cb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 07:10:21 2026 GMT Not After : Aug 21 07:15:21 2027 GMT Subject: CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:41:9d:53:4a:35:5f:f1:e3:f6:2d:58:b7: b0:3f:0c:66:eb:24:20:5a:9d:28:e1:1f:88:84:31: 44:41:54:3e:84:29:b8:e9:41:73:3c:be:84:8e:a3: f9:a5:d5:38:b6:da:09:95:d3:68:f6:69:92:63:33: bd:a0:b4:a6:5d:d6:5a:19:ce:ba:24:e8:c5:44:68: 08:94:cc:64:54:da:90:fe:da:4b:54:f8:a2:f5:5e: bb:72:38:3e:51:9c:33:95:d4:2c:9e:74:1a:b6:28: 56:2d:11:32:8e:e2:17:46:66:07:32:f0:be:4f:df: d7:fd:de:9f:18:17:01:84:15:26:61:ea:12:7b:98: 04:80:61:83:c7:0b:bd:d6:f7:53:79:97:ad:79:0e: d8:6a:ee:d2:3b:0a:e5:aa:d6:4c:7a:cb:36:54:45: e9:5c:a7:35:12:71:90:41:00:45:9f:b7:ec:f8:59: 0d:a6:b1:ee:d6:34:69:20:7a:76:d6:84:9e:56:d3: 8e:d3:b9:6b:22:5b:c5:2d:7a:97:e2:ce:76:d5:92: 03:bd:03:7d:27:8b:2a:d6:1c:14:86:9e:1e:1b:7a: f5:13:db:a7:a8:c4:50:5d:7a:13:82:f6:4d:64:fe: 4a:35:b4:e0:ec:6e:b5:c8:29:51:f9:22:62:c3:9e: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.187.108.0/22 IPv6: 2804:6ffc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270699 Signature Algorithm: sha256WithRSAEncryption 55:47:39:b4:13:78:2c:62:14:da:ce:cc:7a:cf:fd:9b:41:d1: 89:cc:bd:2d:e1:40:d9:03:31:9d:af:a0:8a:af:d3:26:23:2f: 63:30:86:35:ca:f3:1b:92:73:a6:15:67:82:42:5f:1c:73:b1: e3:c8:95:f2:4b:88:4d:ff:9f:67:6d:ee:2d:f6:3a:8a:ba:39: a4:e4:eb:9e:42:18:42:1d:19:04:41:27:be:1b:93:4e:8d:65: 95:3b:a1:b8:ce:b0:93:bc:3c:2b:ed:b1:42:05:0b:eb:5c:04: 12:4a:39:77:25:ee:48:2f:03:ab:03:d1:a6:b3:2a:e7:a2:75: db:49:a3:9a:d4:f7:63:23:86:ba:7c:87:d3:01:bf:a1:c2:0d: c8:ac:c4:8d:da:49:88:6d:1f:cb:a9:69:55:41:b6:70:0b:d7: 0d:e4:50:ad:65:cd:4e:c5:11:79:8e:ba:78:1a:ff:00:88:76: 2c:37:a5:72:3c:04:32:ea:76:14:7a:d0:45:56:51:30:97:c7: a0:f4:c5:87:c9:95:5f:94:8b:de:3a:b9:46:a0:97:7b:d1:0b: e1:b8:55:9e:d2:3f:da:fb:37:3d:da:fd:6a:fc:a9:2c:bc:8a: 69:64:d7:a7:d7:b1:01:0a:d8:85:a3:ac:69:9c:48:7f:0e:c2: 50:f4:ac:ea -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDZEDhJ8kuNeljVkFojGOvFRJy24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjIwNzEwMjFaFw0yNzA4MjEwNzE1MjFaMDMxMTAvBgNV BAMTKDA4RERERDNEOTU0OTIwNDZERTVEREYwQTgwREZBNDA3NkIyNEIxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcUGdU0o1X/Hj9i1Yt7A/DGbr JCBanSjhH4iEMURBVD6EKbjpQXM8voSOo/ml1Ti22gmV02j2aZJjM72gtKZd1loZ zrok6MVEaAiUzGRU2pD+2ktU+KL1XrtyOD5RnDOV1CyedBq2KFYtETKO4hdGZgcy 8L5P39f93p8YFwGEFSZh6hJ7mASAYYPHC73W91N5l615Dthq7tI7CuWq1kx6yzZU RelcpzUScZBBAEWft+z4WQ2mse7WNGkgenbWhJ5W047TuWsiW8UtepfiznbVkgO9 A30niyrWHBSGnh4bevUT26eoxFBdehOC9k1k/ko1tODsbrXIKVH5ImLDnixJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQI3d09lUkgRt5d 3wqA36QHaySxmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDZh dFZlNlFmZzhpRDM5NzVEVmVaWTl5ZTNTeEMyelVkWTdxWGRrcTVMY0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2 YXRWZTZRZmc4aUQzOTc1RFZlWlk5eWUzU3hDMnpVZFk3cVhka3E1TGNHLzAvMDhE REREM0Q5NTQ5MjA0NkRFNURERjBBODBERkE0MDc2QjI0QjE5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyLtsMA0EAgACMAcDBQAoBG/8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhazANBgkqhkiG9w0BAQsFAAOCAQEAVUc5tBN4LGIU2s7M es/9m0HRicy9LeFA2QMxna+giq/TJiMvYzCGNcrzG5JzphVngkJfHHOx48iV8kuI Tf+fZ23uLfY6iro5pOTrnkIYQh0ZBEEnvhuTTo1llTuhuM6wk7w8K+2xQgUL61wE Eko5dyXuSC8DqwPRprMq56J120mjmtT3YyOGunyH0wG/ocINyKzEjdpJiG0fy6lp VUG2cAvXDeRQrWXNTsUReY66eBr/AIh2LDelcjwEMup2FHrQRVZRMJfHoPTFh8mV X5SL3jq5RqCXe9EL4bhVntI/2vs3Pdr9avypLLyKaWTXp9exAQrYhaOsaZxIfw7C UPSs6g== -----END CERTIFICATE-----Generated at Sun Aug 23 15:17:28 2026 by rpki-client