$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer File: 3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer (raw, json) Hash identifier: muOqfoqI4m+6jUPGGM2vpn4bf/VA+Yn4kRxVldekVkY= Subject key identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 385170D2ED4A33646231FC5BBAA7E4232F88ACE4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft caRepository: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 19:14:32 +0000 Certificate not after: Wed 01 Sep 2027 19:19:32 +0000 Subordinate resources: AS: 262895 IP: 177.11.248.0/22 IP: 201.140.208.0/22 IP: 2804:394::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Oct 2026 19:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:51:70:d2:ed:4a:33:64:62:31:fc:5b:ba:a7:e4:23:2f:88:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 19:14:32 2026 GMT Not After : Sep 1 19:19:32 2027 GMT Subject: CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:fb:07:f5:92:d6:be:5c:71:11:1f:df:0c: 70:2e:59:1e:8e:b8:d3:ef:ce:c3:c8:34:0f:62:cd: 55:9d:00:7b:72:e7:10:b7:1a:6f:40:2f:6c:fd:ce: 33:14:01:19:d1:39:07:1d:91:de:23:3a:1f:fc:0e: bd:41:a0:92:99:f9:a2:d6:8a:1d:1a:ad:57:35:c4: bf:e1:1c:7b:a6:7b:29:72:5b:66:f1:d8:0a:6a:41: 9a:6b:f6:f4:67:e4:f4:f7:61:5f:88:70:63:62:53: b1:68:f7:73:6d:86:a7:40:09:88:e4:0d:bc:e6:44: ef:6f:36:c2:43:61:be:33:34:23:96:6e:df:7e:e4: 23:97:fc:ba:a3:51:66:25:f6:8e:9f:05:7f:38:21: e7:1e:aa:43:6b:79:9b:f5:fd:9f:3c:97:4e:ab:11: 34:23:ca:ec:fa:c9:3e:db:a8:42:17:85:77:ca:ed: 62:c5:84:a9:9a:34:d1:22:ca:ad:d9:e8:28:0d:82: 42:16:2e:5c:bd:64:ad:fc:fc:07:5d:96:ae:99:aa: c5:93:dd:9e:9f:8d:92:c0:c2:e3:50:07:6f:cf:53: 36:c6:f0:5e:2f:8a:cd:85:ea:ce:b2:2d:21:73:9a: 4d:4f:b1:74:18:88:01:41:e8:cf:70:e2:63:38:50: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.248.0/22 201.140.208.0/22 IPv6: 2804:394::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262895 Signature Algorithm: sha256WithRSAEncryption 7b:04:0c:7f:f2:39:7e:01:31:ea:bf:c5:61:0f:49:35:82:02: c7:03:00:7c:85:db:59:dc:99:05:6b:f3:ed:bf:45:c5:59:57: 2e:1c:f8:21:2e:f7:e1:f0:e3:1a:75:31:55:fa:9d:13:6e:75: b0:ff:99:94:52:96:d2:dd:73:a7:d5:16:2e:38:84:ea:22:73: 66:85:78:6f:62:02:63:60:09:f7:c7:db:e6:4c:55:14:7e:1d: 07:20:f3:4b:66:dc:b5:58:49:ad:00:db:3c:93:f7:28:75:81: f9:98:95:8f:0f:34:0f:f4:65:1d:ae:17:bd:bb:02:c8:ad:97: 0b:1b:18:3e:81:96:26:4a:84:ee:b9:c4:ee:87:f7:95:3c:b0: 23:74:5e:2d:64:93:4f:eb:1e:c1:ce:8b:f6:29:08:87:cb:f6: 30:94:cd:a0:06:55:2b:66:26:9c:e1:1d:fc:2d:8f:f5:c7:03: e7:6f:e4:c1:b2:a1:f4:2f:6a:52:1a:1e:98:2e:c7:08:07:ef: 83:ba:11:b9:d5:82:72:70:34:eb:d0:df:97:da:ad:9b:af:66: ac:bf:0f:58:59:1b:82:8f:87:f8:34:35:1a:bf:47:de:13:91: ec:d3:40:41:f9:4d:25:76:e5:70:4d:00:f2:d4:4c:d3:14:50: de:dc:10:2a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOFFw0u1KM2RiMfxbuqfkIy+IrOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDIxOTE0MzJaFw0yNzA5MDExOTE5MzJaMDMxMTAvBgNV BAMTKDNFQjRDQjdGQTBGNTJEMENEMjk3NzBFQ0NGMUU2QUVGNUUwNzE4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKLPsH9ZLWvlxxER/fDHAuWR6O uNPvzsPINA9izVWdAHty5xC3Gm9AL2z9zjMUARnROQcdkd4jOh/8Dr1BoJKZ+aLW ih0arVc1xL/hHHumeylyW2bx2ApqQZpr9vRn5PT3YV+IcGNiU7Fo93NthqdACYjk DbzmRO9vNsJDYb4zNCOWbt9+5COX/LqjUWYl9o6fBX84IeceqkNreZv1/Z88l06r ETQjyuz6yT7bqEIXhXfK7WLFhKmaNNEiyq3Z6CgNgkIWLly9ZK38/Addlq6ZqsWT 3Z6fjZLAwuNQB2/PUzbG8F4vis2F6s6yLSFzmk1PsXQYiAFB6M9w4mM4UJllAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+tMt/oPUtDNKX cOzPHmrvXgcYjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTN5 dWJoYmROWTlIc2phQTZTamVYV0pMak1NTFJzWVBtUE1NV29ja1Raa0MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ez eXViaGJkTlk5SHNqYUE2U2plWFdKTGpNTUxSc1lQbVBNTVdvY2tUWmtDLzAvM0VC NENCN0ZBMEY1MkQwQ0QyOTc3MEVDQ0YxRTZBRUY1RTA3MTg4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsQv4AwQCyYzQMA0EAgACMAcDBQAoBAOUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQC7zANBgkqhkiG9w0BAQsFAAOCAQEAewQMf/I5 fgEx6r/FYQ9JNYICxwMAfIXbWdyZBWvz7b9FxVlXLhz4IS734fDjGnUxVfqdE251 sP+ZlFKW0t1zp9UWLjiE6iJzZoV4b2ICY2AJ98fb5kxVFH4dByDzS2bctVhJrQDb PJP3KHWB+ZiVjw80D/RlHa4XvbsCyK2XCxsYPoGWJkqE7rnE7of3lTywI3ReLWST T+sewc6L9ikIh8v2MJTNoAZVK2YmnOEd/C2P9ccD52/kwbKh9C9qUhoemC7HCAfv g7oRudWCcnA069Dfl9qtm69mrL8PWFkbgo+H+DQ1Gr9H3hOR7NNAQflNJXblcE0A 8tRM0xRQ3twQKg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:15:37 2026 by rpki-client