$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer File: 3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer (raw, json) Hash identifier: W1JeBC1YF1LtWV3u+AxCrBKf5Yn/zUFIkDinrtDmN7w= Subject key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DE190CFCD2598A66DD62E796F904453D4041EA2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft caRepository: rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 01 Nov 2026 10:22:35 +0000 Certificate not after: Sun 31 Oct 2027 10:27:35 +0000 Subordinate resources: AS: 265141 IP: 143.255.12.0/22 IP: 170.0.216.0/22 IP: 170.78.152.0/22 IP: 170.246.108.0/22 IP: 189.90.24.0/22 IP: 2804:2b38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 14:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e1:90:cf:cd:25:98:a6:6d:d6:2e:79:6f:90:44:53:d4:04:1e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 1 10:22:35 2026 GMT Not After : Oct 31 10:27:35 2027 GMT Subject: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:dc:2e:a3:c6:ae:bd:a1:17:ef:ae:13:bf: b5:2d:f9:2c:40:0b:1f:d8:fe:65:5d:86:86:48:b3: 49:02:23:ec:c6:98:fd:6f:95:21:4c:16:7d:a6:f5: 07:c1:ef:ef:a0:25:d7:41:f7:db:6f:3a:ed:54:06: 8c:65:04:80:b5:ef:46:af:7b:21:7b:3c:c3:da:54: 40:6c:69:47:13:ca:65:8c:de:ce:75:1d:00:02:0f: d3:e1:9b:dd:ee:cf:b9:35:4d:6f:d8:db:3f:54:2e: 64:0e:8c:62:8b:3c:4b:39:e4:7a:1c:90:07:db:c1: 69:0d:11:8f:57:1c:cf:e4:d4:32:11:10:f2:09:ab: f9:ef:f3:38:24:00:49:cd:e9:d2:52:47:c5:28:01: 5f:2d:d6:04:df:fb:86:8e:88:c6:96:f1:b1:a0:8f: 1f:f5:ed:20:a2:8c:1a:0e:e1:69:9c:ac:ef:5a:3a: 08:d1:92:9d:3a:7e:c3:3a:98:bc:4a:fb:fd:df:07: 16:09:32:73:c0:e4:6a:61:46:68:1b:21:7c:e8:98: ac:64:5b:be:7d:a9:0a:1a:56:70:d9:58:70:a5:99: 50:1b:7b:3b:92:82:b7:67:88:56:ad:a4:89:af:08: b0:a1:4a:6d:d6:df:b4:a1:bd:9c:1a:72:dd:21:13: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.12.0/22 170.0.216.0/22 170.78.152.0/22 170.246.108.0/22 189.90.24.0/22 IPv6: 2804:2b38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265141 Signature Algorithm: sha256WithRSAEncryption 68:0b:de:26:43:3f:44:9c:88:11:a7:d7:cf:5c:fa:2b:aa:3a: 0e:38:7e:49:94:07:46:8f:86:3f:36:0e:f3:89:48:e1:78:75: 0e:ca:b9:5b:f6:68:23:0a:80:7d:27:db:b5:76:71:e9:15:9b: 20:54:b1:de:5a:47:bf:31:2b:5f:16:b7:87:ac:fe:30:5b:75: 8d:0e:17:96:9d:90:2a:ab:4a:ec:e5:f1:ed:51:c5:17:64:5e: d3:7e:d4:ef:0b:0a:f8:47:7b:f1:20:ef:93:65:13:59:47:00: 4a:6a:f6:d9:8f:fd:ba:a2:db:58:4f:af:79:2c:b5:18:86:de: 10:28:07:2a:da:13:6c:98:9b:ec:a7:a2:66:82:0d:11:7d:5c: c6:c1:29:8a:c4:95:62:e2:ce:8f:70:e8:53:20:c0:65:9a:3c: 5d:91:2e:af:ca:dd:e6:c4:fe:4b:32:70:e7:cc:58:f1:98:ba: 4e:95:b6:c0:a4:6f:ee:4b:6c:7d:67:3c:4a:b5:f2:d1:2d:fd: 05:82:7d:88:c5:a1:7f:78:ec:dc:62:7b:7a:8c:6b:4d:47:2a: a3:85:d3:e0:41:55:89:7b:71:60:17:96:12:e3:78:13:6c:75: 30:f3:68:07:2b:48:83:e7:ec:3a:12:99:b6:46:f1:02:86:ea: d2:4f:56:98 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIULeGQz80lmKZt1i55b5BEU9QEHqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjExMDExMDIyMzVaFw0yNzEwMzExMDI3MzVaMDMxMTAvBgNV BAMTKDNGRTc3Qjg4NTVGNjFERjJBRDY4MTg1REQwOTc3QkNCNDJDNzA4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVdwuo8auvaEX764Tv7Ut+SxA Cx/Y/mVdhoZIs0kCI+zGmP1vlSFMFn2m9QfB7++gJddB99tvOu1UBoxlBIC170av eyF7PMPaVEBsaUcTymWM3s51HQACD9Phm93uz7k1TW/Y2z9ULmQOjGKLPEs55Hoc kAfbwWkNEY9XHM/k1DIREPIJq/nv8zgkAEnN6dJSR8UoAV8t1gTf+4aOiMaW8bGg jx/17SCijBoO4WmcrO9aOgjRkp06fsM6mLxK+/3fBxYJMnPA5GphRmgbIXzomKxk W759qQoaVnDZWHClmVAbezuSgrdniFatpImvCLChSm3W37ShvZwact0hE97XAgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/53uIVfYd8q1o GF3Ql3vLQscI9DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVha d0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1jdjEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VY WndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAvM0ZF NzdCODg1NUY2MURGMkFENjgxODVERDA5NzdCQ0I0MkM3MDhGNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCj/8MAwQCqgDYAwQCqk6YAwQCqvZsAwQCvVoYMA0E AgACMAcDBQAoBCs4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQLtTANBgkqhkiG 9w0BAQsFAAOCAQEAaAveJkM/RJyIEafXz1z6K6o6Djh+SZQHRo+GPzYO84lI4Xh1 Dsq5W/ZoIwqAfSfbtXZx6RWbIFSx3lpHvzErXxa3h6z+MFt1jQ4Xlp2QKqtK7OXx 7VHFF2Re037U7wsK+Ed78SDvk2UTWUcASmr22Y/9uqLbWE+veSy1GIbeECgHKtoT bJib7KeiZoINEX1cxsEpisSVYuLOj3DoUyDAZZo8XZEur8rd5sT+SzJw58xY8Zi6 TpW2wKRv7ktsfWc8SrXy0S39BYJ9iMWhf3js3GJ7eoxrTUcqo4XT4EFViXtxYBeW EuN4E2x1MPNoBytIg+fsOhKZtkbxAobq0k9WmA== -----END CERTIFICATE-----Generated at Sun Nov 1 13:04:31 2026 by rpki-client