$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json) Hash identifier: Xw/eczaN0SkQ4FVPDsZq4nxZR2nCfwwdX1bk5VBlLWA= Subject key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22AF46F8AD9DAF78150082DE2A86F65FF6524222 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Jul 2026 12:05:02 +0000 Certificate not after: Tue 06 Jul 2027 12:10:02 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:af:46:f8:ad:9d:af:78:15:00:82:de:2a:86:f6:5f:f6:52:42:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 12:05:02 2026 GMT Not After : Jul 6 12:10:02 2027 GMT Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61: 04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e: a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9: ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96: 14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7: 10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68: 98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80: 92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e: d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2: 9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65: 00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74: c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69: ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e: 34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c: 63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f: e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87: b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption 5b:7c:b4:bf:61:89:09:8d:4a:00:f6:ff:36:67:e4:af:f6:9b: 61:91:0a:ee:bb:0b:cd:e7:41:fc:aa:88:7a:6a:85:f1:e1:6d: 8c:a5:d1:e5:10:ea:51:57:71:ce:ef:d3:00:4c:d7:27:af:31: d8:43:a3:b2:f4:d3:95:9a:53:0b:9f:2d:81:37:4d:9b:b0:1f: 88:a6:a2:4d:27:41:33:00:06:24:18:09:ee:fe:dd:a9:6a:7a: 84:00:10:5f:5a:80:40:5f:51:f0:6e:a9:f0:2f:37:22:68:fe: 6e:b0:6c:0c:6e:3a:9a:43:5b:70:f7:9a:fd:c2:e0:74:29:8b: 4c:16:43:5f:39:2a:e0:b1:75:22:51:42:c5:3d:98:9f:e9:bd: ac:65:64:26:0f:ef:ca:69:b4:6c:79:37:f3:7a:3a:14:4c:32: ff:e0:db:83:bb:1a:28:94:ed:7b:f5:9e:2b:79:f2:d6:a8:fc: 8b:05:df:ac:ab:53:5d:aa:f8:e6:79:fc:f4:ca:30:1b:ed:cd: 91:f5:d9:8d:80:0e:86:39:60:24:82:f0:09:14:37:17:7e:28: a3:60:9f:10:51:8c:91:bf:7f:57:85:0d:31:3e:01:da:ed:4b: dd:11:7a:6b:f0:0c:d3:a8:ac:a5:bd:42:db:a4:73:9a:44:3c: 8e:49:6b:86 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUIq9G+K2dr3gVAILeKob2X/ZSQiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDcxMjA1MDJaFw0yNzA3MDYxMjEwMDJaMDMxMTAvBgNV BAMTKDJGRThBNjU5REI0QkVEQTFFMEI5Q0Y2MzFDRDJCQTgwMkE3N0M2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdMLdZpRpwrQsQr0YQQ52N8L oE6Jp5Ab6UdtDqCAcpBnym2j3I3iBWXr6cpT7z9BN3JKRiwqJy4+lhQHHHohh5bf 6ozYlKTPxxCPJYXHuYutugXXXy0waJi+pPL8rGu2zBguCDndgJI3QGbag+TAtD91 4fH8jthcz63rUozixoOYaHJX4p2XU8lclsQ/6fDDdnU7ZQD5tqjQ9npQ6edBasSi dMF7jKaGuaXGgeGpJ7Kraez90hS3ocTMVdOCCCcGHjTZJtgsyYdXXT2QhQsUXGMO TzJi1dpk0e74Yupbj+fKi4deJl0DhF9xk20fh7Pomlgqa+9pMGUcJeMOAnbDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv6KZZ20vtoeC5 z2Mc0rqAKnfGVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZF OEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQBbfLS/YYkJjUoA 9v82Z+Sv9pthkQruuwvN50H8qoh6aoXx4W2MpdHlEOpRV3HO79MATNcnrzHYQ6Oy 9NOVmlMLny2BN02bsB+IpqJNJ0EzAAYkGAnu/t2panqEABBfWoBAX1HwbqnwLzci aP5usGwMbjqaQ1tw95r9wuB0KYtMFkNfOSrgsXUiUULFPZif6b2sZWQmD+/KabRs eTfzejoUTDL/4NuDuxoolO179Z4refLWqPyLBd+sq1Ndqvjmefz0yjAb7c2R9dmN gA6GOWAkgvAJFDcXfiijYJ8QUYyRv39XhQ0xPgHa7UvdEXpr8AzTqKylvULbpHOa RDyOSWuG -----END CERTIFICATE-----Generated at Wed Jul 8 15:19:47 2026 by rpki-client