$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/429F7E9A576973FBB0202EE7725E531EA20CCB5A.cer File: 429F7E9A576973FBB0202EE7725E531EA20CCB5A.cer (raw, json) Hash identifier: ozvdFQdANhO7aNmsdrN3HYVMOe9mWS3H/3zVZT88zQk= Subject key identifier: 42:9F:7E:9A:57:69:73:FB:B0:20:2E:E7:72:5E:53:1E:A2:0C:CB:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 285DD46FBDC2061C2431D46D35A5B3738577D64E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/429F7E9A576973FBB0202EE7725E531EA20CCB5A.mft caRepository: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jul 2026 15:06:24 +0000 Certificate not after: Thu 29 Jul 2027 15:11:24 +0000 Subordinate resources: AS: 268750 IP: 45.171.104.0/22 IP: 45.172.52.0/22 IP: 2804:5a20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Aug 2026 08:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5d:d4:6f:bd:c2:06:1c:24:31:d4:6d:35:a5:b3:73:85:77:d6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 15:06:24 2026 GMT Not After : Jul 29 15:11:24 2027 GMT Subject: CN=429F7E9A576973FBB0202EE7725E531EA20CCB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:b6:75:0c:20:0c:b1:8e:90:9f:ca:a9:77: b7:b9:0a:a4:c2:b7:ac:e5:cb:e7:7a:64:1c:ac:87: 50:80:9b:52:35:7e:98:64:b0:a2:42:2c:98:9c:d0: 2f:86:c1:d2:a7:51:3d:97:2e:d6:26:82:25:f8:71: 78:24:56:87:3f:da:e6:f7:aa:f7:22:d5:7a:31:8c: 87:a1:4f:17:c9:ad:c0:50:af:7d:30:a8:75:1f:41: c6:3f:00:86:d4:12:23:5a:15:68:cc:0f:20:fe:11: 89:ea:f9:55:ef:fc:0c:ec:87:d7:4c:fe:2d:ed:1d: c5:c5:3b:ca:f1:34:77:69:b7:18:dc:11:59:88:ba: c9:8a:af:a5:94:57:d6:e9:e3:39:7b:0c:93:2b:62: 58:75:ae:47:96:27:e3:1e:d1:4b:d1:2b:06:44:ef: c8:07:24:bf:15:21:ae:a8:bd:fc:95:8c:15:0a:5a: 62:1b:9f:6c:1d:da:a8:1e:55:f2:a8:aa:05:cb:fd: 91:f9:e7:9c:71:81:c2:60:a7:87:ce:6b:ab:ef:7c: c8:52:2c:09:0a:d9:d9:86:05:38:81:8b:5b:fc:e8: 7b:ad:82:1c:a7:38:a2:29:87:6f:7a:d4:ad:ed:04: 1a:07:03:5d:e1:60:28:26:65:f1:94:e8:0c:88:72: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:9F:7E:9A:57:69:73:FB:B0:20:2E:E7:72:5E:53:1E:A2:0C:CB:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/429F7E9A576973FBB0202EE7725E531EA20CCB5A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.104.0/22 45.172.52.0/22 IPv6: 2804:5a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268750 Signature Algorithm: sha256WithRSAEncryption 26:18:63:62:54:2a:78:36:94:eb:e1:a5:e9:e3:da:bb:ff:f9: f1:bf:2c:dc:3a:78:de:e9:57:c6:87:0b:2a:cc:ac:5e:3c:b3: f2:6f:b5:e6:e7:84:01:8d:0a:f9:a6:e5:ca:af:02:dc:19:7f: c5:4d:e6:29:a2:c7:f0:28:1f:08:c6:35:e9:1d:0d:b7:83:63: ea:4c:b6:b3:a9:35:ac:4b:66:66:e6:dc:ea:1a:f1:e9:3b:c1: e1:38:a7:c6:75:cd:d0:99:1b:b6:12:2d:e7:0f:0d:b2:dd:f8: 63:83:b4:fb:f2:8b:17:fa:64:54:22:b4:27:4b:0b:5e:77:a1: fb:1f:21:b1:b2:b9:dd:f9:a8:ba:ee:c1:6c:f6:91:65:54:4b: 8f:59:17:43:b9:b6:04:20:2a:a2:7a:95:70:ec:c7:d2:b4:5f: 87:1b:81:a7:fb:ac:e9:ac:af:86:e1:e0:d3:20:bb:fb:37:42: d7:6d:80:d0:68:28:e2:fd:d7:53:1b:26:db:2b:be:1e:c8:b9: b6:18:0b:a7:15:b1:f5:15:e2:05:b9:76:32:86:36:aa:30:29: 09:67:c8:27:e9:f5:b0:79:b9:d7:ba:70:f1:3d:cd:fa:6e:a1: 1e:c1:15:45:4e:69:d0:ff:e6:ef:14:b1:ef:1c:20:2b:83:31: 44:3b:d6:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKF3Ub73CBhwkMdRtNaWzc4V31k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MzAxNTA2MjRaFw0yNzA3MjkxNTExMjRaMDMxMTAvBgNV BAMTKDQyOUY3RTlBNTc2OTczRkJCMDIwMkVFNzcyNUU1MzFFQTIwQ0NCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHbZ1DCAMsY6Qn8qpd7e5CqTC t6zly+d6ZBysh1CAm1I1fphksKJCLJic0C+GwdKnUT2XLtYmgiX4cXgkVoc/2ub3 qvci1XoxjIehTxfJrcBQr30wqHUfQcY/AIbUEiNaFWjMDyD+EYnq+VXv/Azsh9dM /i3tHcXFO8rxNHdptxjcEVmIusmKr6WUV9bp4zl7DJMrYlh1rkeWJ+Me0UvRKwZE 78gHJL8VIa6ovfyVjBUKWmIbn2wd2qgeVfKoqgXL/ZH555xxgcJgp4fOa6vvfMhS LAkK2dmGBTiBi1v86HutghynOKIph2961K3tBBoHA13hYCgmZfGU6AyIcq6BAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCn36aV2lz+7Ag LudyXlMeogzLWjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjdp RGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlUWnYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I3 aURmMm1udUZZNm9WNGFqS2JNdnhuR0x4NTI2TUtxYnNieFFtamFZVFp2LzAvNDI5 RjdFOUE1NzY5NzNGQkIwMjAyRUU3NzI1RTUzMUVBMjBDQ0I1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLatoAwQCLaw0MA0EAgACMAcDBQAoBFogMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZzjANBgkqhkiG9w0BAQsFAAOCAQEAJhhjYlQq eDaU6+Gl6ePau//58b8s3Dp43ulXxocLKsysXjyz8m+15ueEAY0K+ablyq8C3Bl/ xU3mKaLH8CgfCMY16R0Nt4Nj6ky2s6k1rEtmZubc6hrx6TvB4TinxnXN0JkbthIt 5w8Nst34Y4O0+/KLF/pkVCK0J0sLXneh+x8hsbK53fmouu7BbPaRZVRLj1kXQ7m2 BCAqonqVcOzH0rRfhxuBp/us6ayvhuHg0yC7+zdC122A0Ggo4v3XUxsm2yu+Hsi5 thgLpxWx9RXiBbl2MoY2qjApCWfIJ+n1sHm517pw8T3N+m6hHsEVRU5p0P/m7xSx 7xwgK4MxRDvWVA== -----END CERTIFICATE-----Generated at Thu Aug 13 07:49:13 2026 by rpki-client