$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer File: 35870A649E68CBFD2F520BCE3175557D92FEB67C.cer (raw, json) Hash identifier: 8daRlJEq+TkifVYVdQ11MgUmh6DwfJBsJwKvP30QfUg= Subject key identifier: 35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 027C754013DC2E4F4501584877B0F93A10EFDFEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.mft caRepository: rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 15 Sep 2026 00:27:51 +0000 Certificate not after: Tue 14 Sep 2027 00:32:51 +0000 Subordinate resources: AS: 61704 IP: 131.0.60.0/22 IP: 2804:1b08::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 17:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:75:40:13:dc:2e:4f:45:01:58:48:77:b0:f9:3a:10:ef:df:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 00:27:51 2026 GMT Not After : Sep 14 00:32:51 2027 GMT Subject: CN=35870A649E68CBFD2F520BCE3175557D92FEB67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:82:d2:20:da:e1:35:e2:b2:2e:5f:47:07: 2f:95:1a:8e:6b:87:05:26:06:15:dc:55:73:8b:76: 3f:4e:f6:75:bc:42:64:61:de:f0:a3:00:fa:ea:bf: 8a:97:59:49:ed:70:01:c1:69:67:5b:79:2d:18:e2: f2:13:c7:84:3c:57:1c:46:b1:3f:ec:f0:82:d5:8a: 33:dc:b3:8e:0c:8e:6d:21:4a:32:75:40:f5:46:9f: f5:cc:1e:07:75:6e:70:02:fb:92:05:1c:4d:36:65: 5f:98:34:3d:03:2c:14:c9:4d:7d:08:b2:f0:42:fc: e6:85:85:7f:73:57:f4:bb:b4:a8:c8:0a:bb:45:a4: 51:b2:5f:48:cd:40:37:15:27:49:77:b4:86:e4:96: 8e:38:5e:73:8e:bb:98:b6:08:58:12:3a:07:bb:e6: 8e:3c:ce:e3:ea:eb:f8:da:e3:85:9c:75:8d:b6:66: f4:1b:f2:56:52:89:f0:f3:ae:2d:88:61:2e:37:71: f1:7a:d5:81:e9:ee:fd:e9:cc:26:52:4b:52:0d:a9: 99:4c:53:b8:25:cd:17:06:ad:fd:e6:60:b8:65:96: 81:bd:98:d1:b5:33:00:3f:2c:0f:af:45:58:f9:3a: 61:a4:4c:63:fe:a5:37:45:1b:06:cd:a2:05:b8:0b: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.60.0/22 IPv6: 2804:1b08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61704 Signature Algorithm: sha256WithRSAEncryption 13:3a:ff:3a:f3:bb:02:95:d9:cf:db:c0:72:7d:4b:2f:1b:dc: 39:82:22:12:4c:90:c7:1b:62:cd:f5:05:39:bb:a7:f5:45:6b: 32:1c:22:6f:67:0e:43:92:90:01:f5:27:76:66:ba:80:49:11: 92:8b:23:f2:ab:f5:2e:b5:c7:f9:b3:c6:ed:17:6f:52:86:e1: fa:58:0d:64:34:60:cc:40:0b:59:14:2d:6c:43:51:df:5c:56: 4d:2a:71:db:03:2d:7d:17:9c:60:3e:d2:61:c7:9b:8e:6d:5b: 0c:34:d9:54:6e:2b:5c:84:e7:82:15:61:32:f6:3b:3d:4e:83: a9:26:dd:d0:af:53:c1:64:1a:aa:61:aa:58:12:9c:aa:6d:d7: 6c:53:99:ac:00:a8:03:b9:69:e4:4e:fc:42:c6:29:94:b4:f1: 13:89:a8:ef:9a:c4:09:2b:db:7c:3a:2e:4a:58:94:4a:17:8d: e6:a3:c5:3a:d5:b2:c1:86:ad:3a:60:92:1a:e1:cb:cd:5c:9a: a0:f4:03:bf:23:93:db:ed:b4:d0:32:68:62:2b:d6:3e:53:ed: bb:a6:be:7d:33:80:01:e7:76:1d:79:28:c1:cf:46:15:eb:f7: 8b:68:72:70:4e:33:da:01:07:fb:c9:08:1c:cd:44:de:23:99: 2b:a8:f6:85 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAnx1QBPcLk9FAVhId7D5OhDv3+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTUwMDI3NTFaFw0yNzA5MTQwMDMyNTFaMDMxMTAvBgNV BAMTKDM1ODcwQTY0OUU2OENCRkQyRjUyMEJDRTMxNzU1NTdEOTJGRUI2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ioLSINrhNeKyLl9HBy+VGo5r hwUmBhXcVXOLdj9O9nW8QmRh3vCjAPrqv4qXWUntcAHBaWdbeS0Y4vITx4Q8VxxG sT/s8ILVijPcs44Mjm0hSjJ1QPVGn/XMHgd1bnAC+5IFHE02ZV+YND0DLBTJTX0I svBC/OaFhX9zV/S7tKjICrtFpFGyX0jNQDcVJ0l3tIbklo44XnOOu5i2CFgSOge7 5o48zuPq6/ja44WcdY22ZvQb8lZSifDzri2IYS43cfF61YHp7v3pzCZSS1INqZlM U7glzRcGrf3mYLhlloG9mNG1MwA/LA+vRVj5OmGkTGP+pTdFGwbNogW4C4vnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1hwpknmjL/S9S C84xdVV9kv62fDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFdH RjdONEV4ZzR1WnNVNEVvOWJIYVdvc2lVRXdRUFlYUFFQUmcyQkhEamovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX R0Y3TjRFeGc0dVpzVTRFbzliSGFXb3NpVUV3UVBZWFBRUFJnMkJIRGpqLzAvMzU4 NzBBNjQ5RTY4Q0JGRDJGNTIwQkNFMzE3NTU1N0Q5MkZFQjY3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgwA8MA0EAgACMAcDBQAoBBsIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxCDANBgkqhkiG9w0BAQsFAAOCAQEAEzr/OvO7ApXZz9vA cn1LLxvcOYIiEkyQxxtizfUFObun9UVrMhwib2cOQ5KQAfUndma6gEkRkosj8qv1 LrXH+bPG7RdvUobh+lgNZDRgzEALWRQtbENR31xWTSpx2wMtfRecYD7SYcebjm1b DDTZVG4rXITnghVhMvY7PU6DqSbd0K9TwWQaqmGqWBKcqm3XbFOZrACoA7lp5E78 QsYplLTxE4mo75rECSvbfDouSliUSheN5qPFOtWywYatOmCSGuHLzVyaoPQDvyOT 2+200DJoYivWPlPtu6a+fTOAAed2HXkowc9GFev3i2hycE4z2gEH+8kIHM1E3iOZ K6j2hQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:52:42 2026 by rpki-client