$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer File: 3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer (raw, json) Hash identifier: dq/q9LC/nmBPUJvI27ESL9Ifs8xI+KxE4IlQT102CA4= Subject key identifier: 3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A2A0EA731CF85F1A41544F61AF0DFD541716DE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft caRepository: rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Feb 2026 17:15:42 +0000 Certificate not after: Mon 01 Feb 2027 17:20:42 +0000 Subordinate resources: AS: 275631 IP: 2804:9790::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 02:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2a:0e:a7:31:cf:85:f1:a4:15:44:f6:1a:f0:df:d5:41:71:6d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 2 17:15:42 2026 GMT Not After : Feb 1 17:20:42 2027 GMT Subject: CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:e8:65:dc:d7:af:bd:c8:c9:29:48:8a:39: 59:0b:3a:1e:82:cb:45:6b:a8:f5:b5:ab:e4:e8:cc: 28:a8:20:bf:e0:78:83:2c:82:db:73:9c:1d:2d:f2: 48:37:3c:d2:43:c4:db:d6:b8:4a:ed:6d:35:7d:0c: bd:1d:9e:e8:54:46:df:d2:66:2a:d9:77:ec:ff:c7: 8c:83:17:71:22:c3:6d:f0:53:ce:69:83:ec:9c:be: 8f:b3:81:70:d4:e6:ea:28:cf:5a:40:79:b3:d3:05: 35:f7:80:f2:2e:0e:cd:84:4a:83:ae:0c:a9:9b:21: 27:09:54:fe:e1:80:aa:d7:66:b1:6f:83:15:66:eb: 72:32:7b:77:c5:77:e5:25:7b:e6:7f:df:60:f7:96: af:e7:0f:82:9c:ba:33:51:65:cd:55:51:35:e3:7b: ee:17:b1:bb:91:c2:19:e6:28:cc:fb:86:75:cb:d8: 71:2d:2f:ad:08:c9:44:d7:27:19:51:c2:39:3e:f0: e6:7b:71:57:87:da:9b:2c:9f:65:41:a1:e8:18:83: f6:42:e6:4a:aa:f1:67:01:33:bd:7c:95:c8:f7:4a: 4e:20:63:66:20:b3:90:a9:fd:73:e4:42:20:db:9b: 71:e8:74:06:75:7e:d1:6f:f8:eb:7c:6e:3d:00:71: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275631 Signature Algorithm: sha256WithRSAEncryption 33:f4:43:ca:41:f6:de:f3:d2:5f:2c:a3:aa:f9:b9:21:2f:1e: 0e:09:82:55:07:59:51:ba:63:e2:e2:8d:b7:76:f0:65:40:83: 12:4c:a1:1b:d9:f9:38:67:91:ce:8a:11:34:75:0d:7c:7a:70: a1:38:54:d8:e4:11:cb:42:c6:7e:9f:44:c9:a3:30:6a:df:32: b6:fa:8d:cf:ba:64:cb:3b:c1:39:38:43:23:dc:b8:a1:f6:64: ad:c5:f5:f9:7a:01:34:15:8a:65:7f:a1:5e:4b:b8:89:18:e9: f2:e9:9d:6e:e3:06:82:39:d6:99:b2:64:16:ca:60:38:45:89: e6:f3:6e:0b:b3:5b:39:f1:7a:d8:89:8b:ee:e2:a0:67:2b:78: 84:ed:48:1c:f7:9b:49:79:02:7c:fe:e5:e6:b9:3f:0d:84:df: 05:40:34:83:ee:99:bd:82:4d:f6:aa:7c:08:12:0c:28:64:60: 4f:0f:c9:fb:f9:5a:4e:79:55:b8:9e:39:05:64:5e:09:d6:c5: 10:9b:d7:82:4f:46:ec:cd:a8:16:65:fe:98:ba:9b:a5:b4:13: c9:f3:c5:8a:07:69:92:31:6d:ca:cf:62:2f:04:79:bc:70:b2: d2:f0:01:3b:cb:74:cd:f4:7a:8e:f3:26:05:2d:07:e2:11:f7: 21:24:d9:95 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUKioOpzHPhfGkFUT2GvDf1UFxbegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDIxNzE1NDJaFw0yNzAyMDExNzIwNDJaMDMxMTAvBgNV BAMTKDNEMDk4NzRGQUJBQjY2NDBFMUFGOTBDRDMzRjZFRUM0M0NFNjVBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJ+hl3NevvcjJKUiKOVkLOh6C y0VrqPW1q+TozCioIL/geIMsgttznB0t8kg3PNJDxNvWuErtbTV9DL0dnuhURt/S ZirZd+z/x4yDF3Eiw23wU85pg+ycvo+zgXDU5uooz1pAebPTBTX3gPIuDs2ESoOu DKmbIScJVP7hgKrXZrFvgxVm63Iye3fFd+Ule+Z/32D3lq/nD4KcujNRZc1VUTXj e+4XsbuRwhnmKMz7hnXL2HEtL60IyUTXJxlRwjk+8OZ7cVeH2pssn2VBoegYg/ZC 5kqq8WcBM718lcj3Sk4gY2Ygs5Cp/XPkQiDbm3HodAZ1ftFv+Ot8bj0AcdZJAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9CYdPq6tmQOGv kM0z9u7EPOZa+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjVz RlNQZXZ6M24zZ2JkY3l5cE5iaTJSa1M3OUVTaHBLWjE1Y05Ma3ZQTUEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y1 c0ZTUGV2ejNuM2diZGN5eXBOYmkyUmtTNzlFU2hwS1oxNWNOTGt2UE1BLzAvM0Qw OTg3NEZBQkFCNjY0MEUxQUY5MENEMzNGNkVFQzQzQ0U2NUFGOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASXkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME NK8wDQYJKoZIhvcNAQELBQADggEBADP0Q8pB9t7z0l8so6r5uSEvHg4JglUHWVG6 Y+Lijbd28GVAgxJMoRvZ+Thnkc6KETR1DXx6cKE4VNjkEctCxn6fRMmjMGrfMrb6 jc+6ZMs7wTk4QyPcuKH2ZK3F9fl6ATQVimV/oV5LuIkY6fLpnW7jBoI51pmyZBbK YDhFiebzbguzWznxetiJi+7ioGcreITtSBz3m0l5Anz+5ea5Pw2E3wVANIPumb2C TfaqfAgSDChkYE8Pyfv5Wk55VbieOQVkXgnWxRCb14JPRuzNqBZl/pi6m6W0E8nz xYoHaZIxbcrPYi8EebxwstLwATvLdM30eo7zJgUtB+IR9yEk2ZU= -----END CERTIFICATE-----Generated at Mon Feb 23 01:34:28 2026 by rpki-client