$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer File: 5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer (raw, json) Hash identifier: nnFFZJAQmRl0Wxp3xaVzeCf2WaIaZ4Ro4N+A7+hjyAY= Subject key identifier: 58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60EE5BAC6F6EC941AC1DDBDF34A6644785912E2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.mft caRepository: rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 Oct 2026 13:13:50 +0000 Certificate not after: Thu 30 Sep 2027 13:18:50 +0000 Subordinate resources: AS: 262512 IP: 143.137.140.0/22 IP: 177.67.56.0/22 IP: 2801:80:250::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Oct 2026 18:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ee:5b:ac:6f:6e:c9:41:ac:1d:db:df:34:a6:64:47:85:91:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 1 13:13:50 2026 GMT Not After : Sep 30 13:18:50 2027 GMT Subject: CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:53:85:a6:38:91:4a:f8:14:39:63:66:ca: 71:8e:af:d0:ef:96:23:e3:d1:08:00:ce:ed:8c:2b: b2:88:42:0f:97:97:69:8c:6f:f7:a2:5d:fc:6d:96: 1c:81:87:43:ab:fb:ba:15:fe:5d:b2:4b:32:2f:94: 78:90:2b:4f:0c:79:62:f7:32:9b:60:e8:2e:69:9e: 62:a9:fb:3d:46:1c:35:88:ff:dc:d9:16:2f:7f:c9: b9:36:b0:46:14:9b:4c:1b:7f:74:9b:17:f7:f2:e3: b7:07:84:eb:5c:6d:27:b4:a3:5c:30:64:85:1a:f4: af:97:3a:6d:7b:6e:16:1f:d6:9c:5f:a5:d7:47:2b: 9f:70:e3:ad:92:df:61:d4:61:e4:93:f7:9c:ab:65: 53:41:48:47:30:1a:37:53:bb:ae:e9:4b:08:be:80: 57:98:14:9e:80:15:90:4a:43:5a:78:2d:b1:bd:ea: 1d:f6:ad:82:bf:3e:14:97:c7:f0:34:8f:9d:65:40: 94:36:6a:57:8c:ad:3e:23:2f:ab:8c:08:ff:b1:76: c0:86:dd:30:af:bf:94:28:33:39:56:80:1a:ec:88: 2a:83:60:70:0d:2f:12:3f:a9:db:60:75:97:c8:66: 08:18:e3:91:b6:8e:fa:32:cd:4b:28:a4:48:96:76: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.140.0/22 177.67.56.0/22 IPv6: 2801:80:250::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262512 Signature Algorithm: sha256WithRSAEncryption 7f:89:16:23:19:4f:ae:f9:0b:94:68:7d:85:46:bf:d4:d4:6a: 80:11:fe:80:6a:55:4f:fd:00:af:1a:26:b1:1b:3d:38:f5:08: b8:4f:68:59:d8:ca:43:9c:66:f9:bc:27:54:b7:7f:96:9e:9d: 1b:09:84:3b:8f:ed:5d:23:0c:73:b8:c5:4b:f4:8f:6d:5c:8a: 06:31:4d:97:38:aa:3e:57:2c:37:ae:15:71:4b:0e:e9:1c:a6: 87:d7:2d:dc:f6:36:88:6f:c8:ad:b0:19:08:bc:aa:9c:d8:af: 88:0d:a2:30:6e:4f:26:02:e1:4c:33:39:1a:24:04:a7:df:99: fe:40:1a:e9:3c:92:42:98:04:d8:63:d0:18:40:fc:29:77:86: e1:7e:f4:ba:6f:47:11:35:ee:bc:b6:96:dd:54:c8:69:e9:5d: f6:ee:93:05:8f:24:22:0c:3e:fe:dc:ba:ed:bf:22:0b:f8:a5: 3e:ba:dd:0d:9f:c2:27:28:0c:53:ce:c3:f2:b6:8c:bd:76:f4: 8a:5e:4f:d6:a4:5f:4b:77:27:8c:70:16:1f:96:bc:20:1e:29: 63:cb:ae:0c:81:b7:c1:c4:2a:36:83:d8:e6:82:57:9d:77:0e: 6c:7f:d3:75:48:9a:91:b5:09:e0:50:32:75:fa:ea:e5:3e:3e: a9:a1:7b:02 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUYO5brG9uyUGsHdvfNKZkR4WRLi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDExMzEzNTBaFw0yNzA5MzAxMzE4NTBaMDMxMTAvBgNV BAMTKDU4NTNCQ0VGNjc1NDVGRDc2RDE0RDQ1ODg5QTQ1MTdEMUMyQTBFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZFOFpjiRSvgUOWNmynGOr9Dv liPj0QgAzu2MK7KIQg+Xl2mMb/eiXfxtlhyBh0Or+7oV/l2ySzIvlHiQK08MeWL3 Mptg6C5pnmKp+z1GHDWI/9zZFi9/ybk2sEYUm0wbf3SbF/fy47cHhOtcbSe0o1ww ZIUa9K+XOm17bhYf1pxfpddHK59w462S32HUYeST95yrZVNBSEcwGjdTu67pSwi+ gFeYFJ6AFZBKQ1p4LbG96h32rYK/PhSXx/A0j51lQJQ2aleMrT4jL6uMCP+xdsCG 3TCvv5QoMzlWgBrsiCqDYHANLxI/qdtgdZfIZggY45G2jvoyzUsopEiWdlCVAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYU7zvZ1Rf120U 1FiJpFF9HCoO6zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXJk Wng5V3BSenV2OFVLRFRIRzR3TXRYY3M3U0FDMkhWWUFMNDhkN1oyYmQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fy ZFp4OVdwUnp1djhVS0RUSEc0d010WGNzN1NBQzJIVllBTDQ4ZDdaMmJkLzAvNTg1 M0JDRUY2NzU0NUZENzZEMTRENDU4ODlBNDUxN0QxQzJBMEVFQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTASBAIAATAMAwQCj4mMAwQCsUM4MA8EAgACMAkDBwAoAQCAAlAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBAFwMA0GCSqGSIb3DQEBCwUAA4IBAQB/iRYj GU+u+QuUaH2FRr/U1GqAEf6AalVP/QCvGiaxGz049Qi4T2hZ2MpDnGb5vCdUt3+W np0bCYQ7j+1dIwxzuMVL9I9tXIoGMU2XOKo+Vyw3rhVxSw7pHKaH1y3c9jaIb8it sBkIvKqc2K+IDaIwbk8mAuFMMzkaJASn35n+QBrpPJJCmATYY9AYQPwpd4bhfvS6 b0cRNe68tpbdVMhp6V327pMFjyQiDD7+3LrtvyIL+KU+ut0Nn8InKAxTzsPytoy9 dvSKXk/WpF9LdyeMcBYflrwgHiljy64MgbfBxCo2g9jmgleddw5sf9N1SJqRtQng UDJ1+urlPj6poXsC -----END CERTIFICATE-----Generated at Sun Oct 4 18:01:46 2026 by rpki-client