$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json) Hash identifier: ficcaFzDhjILXH+GbBfit6Ec2bEJ15XfHJ8Dbur5MEM= Subject key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7CA7DF7E2A89D491930F89ED39F60560CAB0DFFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 May 2026 16:05:03 +0000 Certificate not after: Thu 13 May 2027 16:10:03 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a7:df:7e:2a:89:d4:91:93:0f:89:ed:39:f6:05:60:ca:b0:df:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 14 16:05:03 2026 GMT Not After : May 13 16:10:03 2027 GMT Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61: 04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e: a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9: ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96: 14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7: 10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68: 98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80: 92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e: d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2: 9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65: 00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74: c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69: ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e: 34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c: 63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f: e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87: b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption a4:88:76:06:63:a3:87:c4:87:6b:33:f9:f8:b5:2f:06:bd:1e: c0:ad:1a:b7:5b:8b:d1:08:aa:8a:c2:78:19:89:de:b9:f0:46: eb:f4:26:2a:98:86:cd:89:28:01:90:4d:94:3d:9a:48:0c:e1: b3:10:c5:27:5a:bf:33:18:bb:12:9f:3c:1c:f0:01:86:5c:da: 55:8d:4f:93:fd:ae:f2:94:74:93:02:ca:d0:07:4e:ec:65:36: 40:e6:a1:78:69:61:bd:7f:2c:a7:f8:b6:f7:ac:59:83:88:9a: e9:df:4a:7d:23:27:95:68:97:36:a9:6a:52:b4:47:34:10:14: da:48:16:ab:fd:fe:be:2a:fc:f1:7c:cd:71:ce:54:1d:67:a2: 9d:c8:60:90:b9:f1:2b:6b:91:aa:a7:7c:ad:c6:b8:16:7b:73: 19:a3:e0:fc:e1:2b:0b:f3:ae:68:59:6d:61:5a:1d:e7:e8:54: 32:60:25:53:e7:bb:90:9b:d3:6a:f6:17:5f:8f:03:a8:f9:e3: dd:6d:e7:03:49:2a:10:76:c0:6a:8f:e3:70:0b:5b:1c:4a:64: fc:b0:2c:52:dc:e6:db:6a:a4:c4:77:19:98:a9:f9:20:86:7d: e4:e0:8e:cc:bc:7b:f1:2d:aa:86:bc:8f:a4:f6:86:00:e2:83: 8a:22:e7:85 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUfKfffiqJ1JGTD4ntOfYFYMqw3/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTQxNjA1MDNaFw0yNzA1MTMxNjEwMDNaMDMxMTAvBgNV BAMTKDJGRThBNjU5REI0QkVEQTFFMEI5Q0Y2MzFDRDJCQTgwMkE3N0M2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdMLdZpRpwrQsQr0YQQ52N8L oE6Jp5Ab6UdtDqCAcpBnym2j3I3iBWXr6cpT7z9BN3JKRiwqJy4+lhQHHHohh5bf 6ozYlKTPxxCPJYXHuYutugXXXy0waJi+pPL8rGu2zBguCDndgJI3QGbag+TAtD91 4fH8jthcz63rUozixoOYaHJX4p2XU8lclsQ/6fDDdnU7ZQD5tqjQ9npQ6edBasSi dMF7jKaGuaXGgeGpJ7Kraez90hS3ocTMVdOCCCcGHjTZJtgsyYdXXT2QhQsUXGMO TzJi1dpk0e74Yupbj+fKi4deJl0DhF9xk20fh7Pomlgqa+9pMGUcJeMOAnbDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv6KZZ20vtoeC5 z2Mc0rqAKnfGVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZF OEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQCkiHYGY6OHxIdr M/n4tS8GvR7ArRq3W4vRCKqKwngZid658Ebr9CYqmIbNiSgBkE2UPZpIDOGzEMUn Wr8zGLsSnzwc8AGGXNpVjU+T/a7ylHSTAsrQB07sZTZA5qF4aWG9fyyn+Lb3rFmD iJrp30p9IyeVaJc2qWpStEc0EBTaSBar/f6+KvzxfM1xzlQdZ6KdyGCQufEra5Gq p3ytxrgWe3MZo+D84SsL865oWW1hWh3n6FQyYCVT57uQm9Nq9hdfjwOo+ePdbecD SSoQdsBqj+NwC1scSmT8sCxS3ObbaqTEdxmYqfkghn3k4I7MvHvxLaqGvI+k9oYA 4oOKIueF -----END CERTIFICATE-----Generated at Sun May 24 11:56:28 2026 by rpki-client