$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer File: 27E1FC1146B53B145E431E07B4ED589B8C84542B.cer (raw, json) Hash identifier: U5/Q9qq/O4w1wxG3t0/+VI3ilF0yKEklH/8KI6FaJ6A= Subject key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6BA0A594506C790E22FD733CC35A2F725CFA10ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft caRepository: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 24 Oct 2026 04:17:05 +0000 Certificate not after: Sat 23 Oct 2027 04:22:05 +0000 Subordinate resources: AS: 28223 IP: 189.126.32.0 -- 189.126.38.255 IP: 2804:84ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 01:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:a5:94:50:6c:79:0e:22:fd:73:3c:c3:5a:2f:72:5c:fa:10:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 04:17:05 2026 GMT Not After : Oct 23 04:22:05 2027 GMT Subject: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:e3:ba:c2:91:1d:33:19:8d:e5:1b:15:86: a6:03:c6:6b:7c:e8:66:11:ce:3f:50:13:da:d7:f3: 63:76:d8:8a:05:fa:e8:84:4b:c0:c8:87:7c:9f:35: 69:e1:96:f7:00:ab:64:af:38:56:3f:74:6d:b1:fc: b1:35:7e:cb:2c:37:99:0c:22:9c:b1:c4:af:9c:dc: 0d:5d:2d:c3:8c:3a:81:08:46:b5:90:15:02:e9:a1: 47:79:59:8e:97:af:d9:b0:cf:15:1d:6f:ee:8f:39: 57:58:87:ca:77:fc:d9:ee:4c:15:e3:3f:8c:8c:3c: 64:bb:81:46:4f:20:25:9e:1f:6c:b2:43:c9:60:02: e2:f3:96:56:a9:24:03:a3:41:50:39:2b:02:dc:d9: a8:db:74:e7:34:96:61:3f:df:43:38:3b:4a:96:18: 46:36:b6:74:23:10:24:03:9f:12:31:0d:c1:b9:03: 78:c3:58:ba:98:66:4d:3d:20:88:bf:f0:e8:ff:2d: 40:8f:62:a4:e1:89:3c:17:4b:fc:2a:19:00:69:38: af:c9:1b:ad:19:d3:d9:88:fd:8e:c6:fa:74:91:b5: 95:42:c6:4c:45:de:ef:2b:32:a1:93:06:90:fe:95: 39:f0:5d:c2:d0:5e:75:cd:4f:6a:3b:8c:ef:58:a0: 81:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.32.0-189.126.38.255 IPv6: 2804:84ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28223 Signature Algorithm: sha256WithRSAEncryption 1d:fd:fe:ed:fd:61:cc:e7:28:38:a7:2a:18:5c:e5:c6:7e:60: 77:7e:64:a2:41:b4:9f:ed:a4:fc:c5:e4:2d:5f:bf:25:10:58: 98:df:1f:13:12:8a:74:92:44:84:18:db:8a:6b:4b:d7:e9:4e: ff:2b:c7:b2:4b:df:c6:e6:16:f7:66:c9:ea:b7:14:dc:eb:fd: 10:30:b0:61:f8:7c:30:fb:57:1d:cd:c9:6b:62:55:c3:83:2a: 2d:11:2a:68:a0:8f:c3:3d:34:7b:c1:f1:51:bb:0f:98:4e:46: 9d:e7:df:17:55:1f:f1:d2:7f:2f:03:b5:79:12:13:6f:b6:37: 39:72:c4:60:d5:09:7c:64:06:d5:f8:bb:9c:58:5d:47:1f:7a: d9:f7:30:66:c6:10:37:57:98:1d:04:73:89:ca:3d:f2:1a:14: 74:98:de:d5:61:cb:38:7d:6f:5c:af:d0:20:f8:67:af:2f:90: 47:55:0b:49:74:ac:1a:bc:1a:17:f3:2d:e9:c5:81:19:7d:b0: b5:bd:12:44:8e:12:f7:d0:b6:6b:50:89:2a:d4:10:d1:8c:78: 54:28:b9:c9:47:6d:34:e0:06:19:8f:1f:17:a7:8c:61:49:c9: b0:1e:dd:95:9b:42:de:c5:ad:8b:2b:78:2f:27:e5:a0:7a:4a: 7b:e0:b7:09 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIUa6CllFBseQ4i/XM8w1ovclz6EO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjQwNDE3MDVaFw0yNzEwMjMwNDIyMDVaMDMxMTAvBgNV BAMTKDI3RTFGQzExNDZCNTNCMTQ1RTQzMUUwN0I0RUQ1ODlCOEM4NDU0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1uO6wpEdMxmN5RsVhqYDxmt8 6GYRzj9QE9rX82N22IoF+uiES8DIh3yfNWnhlvcAq2SvOFY/dG2x/LE1fsssN5kM IpyxxK+c3A1dLcOMOoEIRrWQFQLpoUd5WY6Xr9mwzxUdb+6POVdYh8p3/NnuTBXj P4yMPGS7gUZPICWeH2yyQ8lgAuLzllapJAOjQVA5KwLc2ajbdOc0lmE/30M4O0qW GEY2tnQjECQDnxIxDcG5A3jDWLqYZk09IIi/8Oj/LUCPYqThiTwXS/wqGQBpOK/J G60Z09mI/Y7G+nSRtZVCxkxF3u8rMqGTBpD+lTnwXcLQXnXNT2o7jO9YoIGtAgMB AAGjggNBMIIDPTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQn4fwRRrU7FF5D Hge07VibjIRUKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkhS aXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4c0ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI UmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAvMjdF MUZDMTE0NkI1M0IxNDVFNDMxRTA3QjRFRDU4OUI4Qzg0NTQyQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAW9fiADBAC9fiYwDQQCAAIwBwMFACgEhKwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICbj8wDQYJKoZIhvcNAQELBQADggEBAB39/u39 YcznKDinKhhc5cZ+YHd+ZKJBtJ/tpPzF5C1fvyUQWJjfHxMSinSSRIQY24prS9fp Tv8rx7JL38bmFvdmyeq3FNzr/RAwsGH4fDD7Vx3NyWtiVcODKi0RKmigj8M9NHvB 8VG7D5hORp3n3xdVH/HSfy8DtXkSE2+2NzlyxGDVCXxkBtX4u5xYXUcfetn3MGbG EDdXmB0Ec4nKPfIaFHSY3tVhyzh9b1yv0CD4Z68vkEdVC0l0rBq8GhfzLenFgRl9 sLW9EkSOEvfQtmtQiSrUENGMeFQouclHbTTgBhmPHxenjGFJybAe3ZWbQt7FrYsr eC8n5aB6Snvgtwk= -----END CERTIFICATE-----Generated at Wed Nov 4 02:22:51 2026 by rpki-client