$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/55B24825DA017BBEC2BF04A7273FA5F1FE57C41F.cer File: 55B24825DA017BBEC2BF04A7273FA5F1FE57C41F.cer (raw, json) Hash identifier: 6EASZ4tTDMiDoVZ5AWZJTkv/o96KfEtFvFMmDSKGjCs= Subject key identifier: 55:B2:48:25:DA:01:7B:BE:C2:BF:04:A7:27:3F:A5:F1:FE:57:C4:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 27DBFD0FC12D29D7BAD13F54A1B1D7B14BF8E4A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/55B24825DA017BBEC2BF04A7273FA5F1FE57C41F.mft caRepository: rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Sep 2026 13:50:25 +0000 Certificate not after: Fri 24 Sep 2027 13:55:25 +0000 Subordinate resources: AS: 263543 IP: 143.202.120.0/22 IP: 191.5.236.0/22 IP: 2804:13a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Oct 2026 18:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:db:fd:0f:c1:2d:29:d7:ba:d1:3f:54:a1:b1:d7:b1:4b:f8:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 25 13:50:25 2026 GMT Not After : Sep 24 13:55:25 2027 GMT Subject: CN=55B24825DA017BBEC2BF04A7273FA5F1FE57C41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:03:5d:ca:b1:66:06:12:ec:0e:ba:1a:22: fc:7e:9b:62:cb:33:17:05:49:d9:7d:81:b5:b7:5d: 55:93:5e:e3:8f:81:2a:03:c6:4e:28:da:39:f5:52: 48:76:ea:02:87:4a:9d:73:e4:29:f6:4a:f7:b9:f6: e3:be:1b:32:73:b0:ac:87:93:f5:c3:d6:b6:e4:2f: 05:9b:51:c1:04:69:93:f2:82:b7:8b:a1:ec:58:e5: bb:cd:43:bc:57:dc:29:cb:3f:0c:9f:bb:7d:cc:17: 71:90:30:4a:ff:98:44:12:26:36:3b:e8:f5:8c:27: a1:98:53:93:69:d6:41:64:50:01:24:9d:a0:5c:ab: 4c:6f:03:a5:fa:cd:07:0e:37:88:b4:f4:88:41:e9: af:50:a1:2d:93:4d:19:24:33:c8:4e:4a:55:4f:ce: 5e:d7:38:29:f8:c8:d8:e7:72:28:b9:44:6c:45:21: 57:b5:d6:1b:20:8c:4d:71:bb:90:f3:d7:3c:00:ec: 2a:e8:ae:94:6f:4e:85:d7:f5:e4:51:07:7d:af:46: 42:c0:3c:8a:0d:b0:11:77:1c:df:0a:eb:af:60:a6: 0b:14:20:08:8a:85:7b:4d:8f:65:62:62:d3:08:ea: ec:5c:47:91:a1:d2:0b:93:7f:2b:f6:7f:a2:6a:4e: e9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:B2:48:25:DA:01:7B:BE:C2:BF:04:A7:27:3F:A5:F1:FE:57:C4:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/55B24825DA017BBEC2BF04A7273FA5F1FE57C41F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.120.0/22 191.5.236.0/22 IPv6: 2804:13a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263543 Signature Algorithm: sha256WithRSAEncryption 3a:4c:bc:95:a5:1c:9e:d7:b1:de:e4:53:2a:b1:dc:74:54:8c: 85:ee:33:6c:2b:cf:45:0e:06:ff:ad:23:8f:b2:da:78:6e:2c: 13:d9:b2:1e:33:2f:18:4b:a1:c7:fd:9f:18:9e:1c:65:ec:ad: 9e:1c:ba:34:ee:c8:cb:2c:20:f1:b8:0a:5e:24:62:6b:14:94: be:2c:8a:2d:82:37:9a:c6:ec:0d:6b:fd:b4:61:a6:a8:cb:0d: 87:13:d8:72:f8:76:1e:60:df:69:3e:af:45:c8:93:20:14:f9: 36:10:a7:a5:9c:f8:8d:a9:ec:f0:6b:a7:93:f4:d4:57:93:c5: bb:64:a0:6d:60:46:e3:78:7e:15:97:25:3c:57:91:ac:40:c7: 7d:38:82:c0:d7:e8:1f:c5:1b:66:49:d5:5a:06:0a:81:c6:87: 09:e6:49:7f:7b:9e:f7:ff:62:19:d0:a6:d7:85:6f:2e:a3:49: 89:c9:d3:32:e2:7d:55:4e:0d:22:09:8c:37:53:ff:6c:1e:7d: 1d:ba:97:ac:ae:23:6a:92:f9:59:5f:27:9e:6e:fd:de:f8:1c: 07:6b:21:eb:71:56:02:88:16:ca:5d:ef:00:3c:4d:8f:d8:99: 3b:f6:f1:03:01:c6:64:b2:c8:b9:a8:8d:64:67:21:f7:ed:05: 1d:00:dd:90 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJ9v9D8EtKde60T9UobHXsUv45KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjUxMzUwMjVaFw0yNzA5MjQxMzU1MjVaMDMxMTAvBgNV BAMTKDU1QjI0ODI1REEwMTdCQkVDMkJGMDRBNzI3M0ZBNUYxRkU1N0M0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmANdyrFmBhLsDroaIvx+m2LL MxcFSdl9gbW3XVWTXuOPgSoDxk4o2jn1Ukh26gKHSp1z5Cn2Sve59uO+GzJzsKyH k/XD1rbkLwWbUcEEaZPygreLoexY5bvNQ7xX3CnLPwyfu33MF3GQMEr/mEQSJjY7 6PWMJ6GYU5Np1kFkUAEknaBcq0xvA6X6zQcON4i09IhB6a9QoS2TTRkkM8hOSlVP zl7XOCn4yNjncii5RGxFIVe11hsgjE1xu5Dz1zwA7CrorpRvToXX9eRRB32vRkLA PIoNsBF3HN8K669gpgsUIAiKhXtNj2ViYtMI6uxcR5Gh0guTfyv2f6JqTumrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVskgl2gF7vsK/ BKcnP6Xx/lfEHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0pj VXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3JtV3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdK Y1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzAvNTVC MjQ4MjVEQTAxN0JCRUMyQkYwNEE3MjczRkE1RjFGRTU3QzQxRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj8p4AwQCvwXsMA0EAgACMAcDBQAoBBOkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFdzANBgkqhkiG9w0BAQsFAAOCAQEAOky8laUc ntex3uRTKrHcdFSMhe4zbCvPRQ4G/60jj7LaeG4sE9myHjMvGEuhx/2fGJ4cZeyt nhy6NO7Iyywg8bgKXiRiaxSUviyKLYI3msbsDWv9tGGmqMsNhxPYcvh2HmDfaT6v RciTIBT5NhCnpZz4jans8Gunk/TUV5PFu2SgbWBG43h+FZclPFeRrEDHfTiCwNfo H8UbZknVWgYKgcaHCeZJf3ue9/9iGdCm14VvLqNJicnTMuJ9VU4NIgmMN1P/bB59 HbqXrK4japL5WV8nnm793vgcB2sh63FWAogWyl3vADxNj9iZO/bxAwHGZLLIuaiN ZGch9+0FHQDdkA== -----END CERTIFICATE-----Generated at Sun Oct 4 18:01:41 2026 by rpki-client