$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer File: 3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer (raw, json) Hash identifier: D/4mBHBDNfJFGmomVyRiXqpwx2QEr4ePvgkOr9Tpjh0= Subject key identifier: 3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6024C2BE7A8FA722C71C58562A6A9E8F61C29E6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.mft caRepository: rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Sep 2026 12:44:48 +0000 Certificate not after: Wed 22 Sep 2027 12:49:48 +0000 Subordinate resources: AS: 269213 IP: 45.182.24.0/22 IP: 2804:611c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Oct 2026 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:24:c2:be:7a:8f:a7:22:c7:1c:58:56:2a:6a:9e:8f:61:c2:9e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 12:44:48 2026 GMT Not After : Sep 22 12:49:48 2027 GMT Subject: CN=3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:f2:df:c1:b7:f9:cf:f4:98:b8:ee:55:22: 0f:eb:b3:c3:20:6c:73:f9:23:67:51:d9:d8:c6:b1: 82:22:6b:5f:a0:af:3c:04:31:44:eb:22:da:90:11: 67:fb:21:07:a4:7f:75:02:ae:38:3b:a7:0c:d6:59: bc:d9:f0:05:63:4a:81:55:f7:e7:6f:fe:fe:ce:0a: d0:28:c6:f2:8a:00:ba:53:33:ba:a9:97:ad:97:47: cd:2c:01:38:6e:e8:fc:c3:70:a1:12:0e:8c:b4:cc: 76:3d:44:37:ae:fa:7d:03:82:12:09:ff:e5:4e:f7: 3c:c0:b0:09:40:49:9e:6b:a3:22:16:e8:60:50:d2: ad:74:ad:73:38:2e:b7:de:ac:a0:2c:49:91:1a:37: 5a:e3:49:2c:6f:d3:09:b9:d3:59:62:f4:df:70:a6: 49:9a:b9:fb:82:c4:03:d0:a0:51:bd:93:3f:a5:ed: 72:db:2a:e6:4e:5a:bc:7a:1d:41:d4:d8:53:3c:38: 98:58:99:99:62:6e:20:73:5a:7b:32:56:cc:79:18: 34:7d:8b:42:dd:f1:a6:14:7d:a0:e6:f7:22:48:e9: 87:76:f7:c1:f3:2c:8a:db:2d:c0:0a:b7:86:92:71: de:45:6c:eb:45:9d:37:63:2c:ec:cd:86:00:24:b2: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.24.0/22 IPv6: 2804:611c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269213 Signature Algorithm: sha256WithRSAEncryption a8:91:ea:77:2f:2e:0f:9f:d1:5a:3b:d3:d3:3e:4e:b4:52:fd: 20:2c:f0:83:17:3f:12:ed:8c:50:de:1d:ac:c0:48:a2:9e:10: 1b:fe:1c:e2:3d:8c:e3:e5:c3:9d:85:b4:45:ee:1e:d8:ec:e8: 4f:0f:36:15:a8:e1:72:cc:31:cb:ec:43:c8:1e:57:a5:78:72: 48:a7:ad:25:1a:be:d6:11:27:47:8f:f7:25:3d:2a:cf:c1:f9: 33:20:b7:14:4d:c8:77:45:ce:fc:64:2b:1b:3f:e5:d7:28:65: e2:a3:8e:b4:dd:ff:6f:fb:fc:14:df:c2:04:6c:dd:31:7f:2c: eb:d2:da:cf:db:05:7d:40:b0:a7:0e:c2:95:cd:09:07:f3:93: 1e:5a:2b:00:72:2a:7d:43:dc:9a:4c:db:25:d0:0d:4e:c6:f0: e5:13:0b:82:52:37:3b:7a:ae:f5:29:8c:cd:cf:88:79:aa:cd: 45:f6:49:ab:66:d9:52:e2:62:b9:a5:2d:e5:6e:df:3b:33:6c: 98:0a:1e:4b:7b:54:31:0b:78:9c:09:89:16:1d:1f:71:93:2f: 74:29:9c:91:03:4c:3d:81:a6:f6:90:4e:16:51:6c:9e:61:30: 45:a8:c8:57:7d:4a:bb:91:88:d6:e7:c4:52:54:ee:a1:56:5b: ee:fb:0f:5a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYCTCvnqPpyLHHFhWKmqej2HCnmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjMxMjQ0NDhaFw0yNzA5MjIxMjQ5NDhaMDMxMTAvBgNV BAMTKDNBOUY4OUI1NzQxRjgwM0RGQjMzRjQzRTVBRTVGNDRDQkM5NEQxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQ/Lfwbf5z/SYuO5VIg/rs8Mg bHP5I2dR2djGsYIia1+grzwEMUTrItqQEWf7IQekf3UCrjg7pwzWWbzZ8AVjSoFV 9+dv/v7OCtAoxvKKALpTM7qpl62XR80sAThu6PzDcKESDoy0zHY9RDeu+n0DghIJ /+VO9zzAsAlASZ5royIW6GBQ0q10rXM4LrferKAsSZEaN1rjSSxv0wm501li9N9w pkmaufuCxAPQoFG9kz+l7XLbKuZOWrx6HUHU2FM8OJhYmZlibiBzWnsyVsx5GDR9 i0Ld8aYUfaDm9yJI6Yd298HzLIrbLcAKt4aScd5FbOtFnTdjLOzNhgAksmrzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6n4m1dB+APfsz 9D5a5fRMvJTR+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXIx Sjk4TWlFNDlOQ0xueXhwWXNUVnVXaFZieDFWU3Vzb2hSM2o4Q2Y0MTgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVy MUo5OE1pRTQ5TkNMbnl4cFlzVFZ1V2hWYngxVlN1c29oUjNqOENmNDE4LzAvM0E5 Rjg5QjU3NDFGODAzREZCMzNGNDNFNUFFNUY0NENCQzk0RDFGOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbYYMA0EAgACMAcDBQAoBGEcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbnTANBgkqhkiG9w0BAQsFAAOCAQEAqJHqdy8uD5/RWjvT 0z5OtFL9ICzwgxc/Eu2MUN4drMBIop4QG/4c4j2M4+XDnYW0Re4e2OzoTw82Fajh cswxy+xDyB5XpXhySKetJRq+1hEnR4/3JT0qz8H5MyC3FE3Id0XO/GQrGz/l1yhl 4qOOtN3/b/v8FN/CBGzdMX8s69Laz9sFfUCwpw7Clc0JB/OTHlorAHIqfUPcmkzb JdANTsbw5RMLglI3O3qu9SmMzc+IearNRfZJq2bZUuJiuaUt5W7fOzNsmAoeS3tU MQt4nAmJFh0fcZMvdCmckQNMPYGm9pBOFlFsnmEwRajIV31Ku5GI1ufEUlTuoVZb 7vsPWg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:15:33 2026 by rpki-client