$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/1D04DA2167EAB61049603273A1F09A004273C40A.cer File: 1D04DA2167EAB61049603273A1F09A004273C40A.cer (raw, json) Hash identifier: Caq/sPRi8LgRV4v6X02646aFbw6dR5BrHaKGeL5e6NU= Subject key identifier: 1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0846E38FCBED2E81DC5321CD261FEC2EB6BB7AD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/1D04DA2167EAB61049603273A1F09A004273C40A.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Aug 2026 19:30:08 +0000 Certificate not after: Mon 09 Aug 2027 19:35:08 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 01:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:46:e3:8f:cb:ed:2e:81:dc:53:21:cd:26:1f:ec:2e:b6:bb:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 10 19:30:08 2026 GMT Not After : Aug 9 19:35:08 2027 GMT Subject: CN=1D04DA2167EAB61049603273A1F09A004273C40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:3e:59:c2:4e:94:b7:c5:a0:de:4d:32:aa: b7:a2:d1:e7:a5:ac:9c:4f:0a:96:a4:2b:13:c7:c1: 0c:0e:e2:4e:d7:0b:10:63:3d:08:f4:6b:12:5a:20: e1:7d:dc:df:69:aa:bc:54:92:20:88:fa:3d:aa:9e: b3:e9:14:30:d5:cc:ac:01:f8:b2:42:36:68:08:57: 4c:96:51:dd:66:49:c9:ef:03:bd:0c:9c:8e:08:15: c2:ab:02:b8:bd:c2:4f:bd:54:b1:dc:91:5b:2b:a1: b4:e7:f9:98:ce:17:53:a0:85:b8:91:ee:ce:57:c5: 52:7d:c0:8e:e6:26:46:b5:fa:71:bf:be:b7:c0:64: 5c:c9:24:d0:60:36:30:29:cd:91:07:9e:63:69:f5: 40:21:6d:69:75:54:8d:87:61:5a:58:47:f2:3f:57: cd:ad:7d:9c:69:10:ca:cf:eb:c3:6e:b1:de:2d:e3: a4:16:76:ca:c5:3f:66:06:06:bd:2a:70:cf:4d:2e: 58:a6:86:2d:ab:72:22:ce:55:46:01:04:1e:37:30: 7b:3e:be:4f:e9:5f:10:17:c5:3e:c4:9f:88:c5:b5: 28:a2:3d:ba:b9:bb:8e:38:02:73:8b:bd:52:2e:3a: b6:f2:7f:ba:f7:0d:d4:df:65:05:90:52:94:df:41: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/1D04DA2167EAB61049603273A1F09A004273C40A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption d2:34:28:04:70:0c:18:d0:86:92:71:fb:b1:81:ec:a6:ee:e8: da:a6:10:71:30:d5:96:d4:8e:77:ed:39:89:c1:dc:59:bb:a5: 86:56:44:87:72:8f:82:d7:3a:8f:a5:d5:cd:36:bf:94:01:34: 9a:f5:5f:ff:9c:6d:3c:97:31:3c:8f:be:05:83:7c:f8:56:d6: 4b:5b:29:0d:b2:e7:cc:fb:13:e8:65:42:f3:da:6b:0a:8d:63: 7b:e5:02:09:dd:5b:f1:49:9a:62:a6:cc:7d:ce:3e:e5:0d:51: 75:9d:5a:8d:4e:89:64:aa:33:bb:3f:cd:b6:48:c8:b7:32:48: be:56:b4:9b:8c:ce:c2:30:c6:96:90:cc:b5:4e:ae:a1:3b:3f: c1:35:85:49:f4:7d:9d:a8:8d:52:ff:80:85:96:94:ae:e1:5f: bd:14:ca:92:a4:e6:70:31:92:fc:f6:46:8d:65:81:5d:c1:67: 70:72:7d:14:78:be:e5:2f:27:73:cb:67:e7:e9:29:58:07:0e: 44:be:d3:f7:56:18:31:30:38:f1:ab:e0:19:d7:b6:fd:6a:0a: 91:20:cf:5d:2b:f8:9f:1a:5d:33:ad:cd:7c:fb:69:93:7e:8e: 39:f0:da:d4:48:a8:ec:c6:50:c7:5b:a6:0c:52:8e:77:4b:a5: 6f:e9:22:6a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCEbjj8vtLoHcUyHNJh/sLra7etIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTAxOTMwMDhaFw0yNzA4MDkxOTM1MDhaMDMxMTAvBgNV BAMTKDFEMDREQTIxNjdFQUI2MTA0OTYwMzI3M0ExRjA5QTAwNDI3M0M0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7j5Zwk6Ut8Wg3k0yqrei0eel rJxPCpakKxPHwQwO4k7XCxBjPQj0axJaIOF93N9pqrxUkiCI+j2qnrPpFDDVzKwB +LJCNmgIV0yWUd1mScnvA70MnI4IFcKrAri9wk+9VLHckVsrobTn+ZjOF1OghbiR 7s5XxVJ9wI7mJka1+nG/vrfAZFzJJNBgNjApzZEHnmNp9UAhbWl1VI2HYVpYR/I/ V82tfZxpEMrP68Nusd4t46QWdsrFP2YGBr0qcM9NLlimhi2rciLOVUYBBB43MHs+ vk/pXxAXxT7En4jFtSiiPbq5u444AnOLvVIuOrbyf7r3DdTfZQWQUpTfQV43AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdBNohZ+q2EElg MnOh8JoAQnPECjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvMUQw NERBMjE2N0VBQjYxMDQ5NjAzMjczQTFGMDlBMDA0MjczQzQwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEA0jQoBHAM GNCGknH7sYHspu7o2qYQcTDVltSOd+05icHcWbulhlZEh3KPgtc6j6XVzTa/lAE0 mvVf/5xtPJcxPI++BYN8+FbWS1spDbLnzPsT6GVC89prCo1je+UCCd1b8UmaYqbM fc4+5Q1RdZ1ajU6JZKozuz/NtkjItzJIvla0m4zOwjDGlpDMtU6uoTs/wTWFSfR9 naiNUv+AhZaUruFfvRTKkqTmcDGS/PZGjWWBXcFncHJ9FHi+5S8nc8tn5+kpWAcO RL7T91YYMTA48avgGde2/WoKkSDPXSv4nxpdM63NfPtpk36OOfDa1Eio7MZQx1um DFKOd0ulb+kiag== -----END CERTIFICATE-----Generated at Sun Aug 23 00:30:20 2026 by rpki-client