$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/59E78C5D795BF2F8B474AFD99A924B31257A16E5.cer File: 59E78C5D795BF2F8B474AFD99A924B31257A16E5.cer (raw, json) Hash identifier: qERXAMx7bnjS0/EXuNkQFpt73EDXu6fahjp4ZYkT4GM= Subject key identifier: 59:E7:8C:5D:79:5B:F2:F8:B4:74:AF:D9:9A:92:4B:31:25:7A:16:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 47204EB049BDFBDB835317A52A07870D78F26FDF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/59E78C5D795BF2F8B474AFD99A924B31257A16E5.mft caRepository: rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Sep 2026 19:47:40 +0000 Certificate not after: Tue 21 Sep 2027 19:52:40 +0000 Subordinate resources: AS: 262379 IP: 170.246.44.0/22 IP: 177.128.224.0/22 IP: 2804:894::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:20:4e:b0:49:bd:fb:db:83:53:17:a5:2a:07:87:0d:78:f2:6f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 19:47:40 2026 GMT Not After : Sep 21 19:52:40 2027 GMT Subject: CN=59E78C5D795BF2F8B474AFD99A924B31257A16E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4e:49:b4:3c:73:7b:de:74:26:59:b1:9a:b7: f8:24:15:11:be:5c:11:2d:5f:01:44:ad:6a:73:5a: cf:71:58:27:cb:ba:38:c6:75:07:62:c1:3c:dc:c4: 14:4b:8c:96:02:96:52:f6:d2:2b:56:f4:4c:9d:57: cd:e5:27:26:f3:e8:8d:00:e9:28:5e:a3:6d:4e:d6: f1:a2:36:bd:d2:1a:90:46:b8:78:98:b6:07:55:8f: c5:cb:3a:b2:31:9b:2e:3b:20:d8:db:9e:3f:68:6e: d3:7e:e0:05:5b:60:08:b9:65:0f:94:25:21:73:72: d2:61:23:30:4c:48:92:aa:83:58:8e:ff:86:7e:5e: f2:d7:a6:4c:cd:78:68:cc:43:a9:d9:33:bb:97:ee: cd:68:a4:c2:ea:57:ba:9d:70:84:6b:38:97:96:a1: 24:4a:8a:08:c7:81:e2:de:7e:d7:27:2a:27:73:1b: de:ae:27:6e:25:61:a4:cc:2c:60:f5:64:c7:41:b2: f4:df:d4:5e:a3:61:de:b1:da:1e:07:1d:cb:81:eb: 08:4a:e8:f2:fb:db:18:19:4d:ee:71:7e:a0:3d:03: 23:d2:c9:7b:2d:a0:ec:ba:67:be:31:60:53:af:25: b7:cd:4f:19:bb:58:8a:4c:d1:79:39:ba:23:b7:f7: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:E7:8C:5D:79:5B:F2:F8:B4:74:AF:D9:9A:92:4B:31:25:7A:16:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/59E78C5D795BF2F8B474AFD99A924B31257A16E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.44.0/22 177.128.224.0/22 IPv6: 2804:894::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262379 Signature Algorithm: sha256WithRSAEncryption 08:bf:15:ae:80:15:08:a6:f4:33:de:17:da:a3:90:36:88:da: da:d3:20:51:9f:61:b5:05:63:d3:23:e5:76:93:57:ac:72:69: d0:74:4a:9e:b8:24:dd:1f:01:32:f2:7f:66:a1:34:3e:39:1d: 5f:2d:92:ad:cf:3a:7b:e5:cb:e0:0f:cc:e6:6a:76:41:d3:e5: 35:98:be:aa:b2:49:10:c3:1b:71:e6:6b:2c:7c:b9:65:23:12: eb:7e:0e:d4:f2:bd:6d:4f:98:ee:d8:74:68:93:bc:37:f7:21: 7e:c2:ce:f5:93:6b:14:d4:2a:27:78:6d:47:2f:46:33:a4:c4: 75:5d:73:11:26:92:a5:09:65:cb:8d:91:86:6f:39:0d:3a:d1: 6f:d3:8c:fa:4c:75:8c:4c:80:3a:b4:2c:d2:2f:75:52:f1:76: d6:ce:c9:c6:5f:17:dc:a1:ea:6f:48:14:41:fc:e8:96:0b:5e: 53:a6:53:d6:c8:bb:e8:48:7f:18:e8:d7:ee:9b:ec:ad:65:07: 88:35:fb:48:25:89:36:cf:f3:61:59:e9:e1:88:b7:7a:d2:7b: 05:b5:23:9c:2d:47:33:61:15:9e:e4:1b:63:7a:fa:3b:0d:e6: c5:00:60:95:80:d0:5a:af:9f:45:1a:17:68:e5:d2:c2:d1:7f: f8:ef:a1:d0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIURyBOsEm9+9uDUxelKgeHDXjyb98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjIxOTQ3NDBaFw0yNzA5MjExOTUyNDBaMDMxMTAvBgNV BAMTKDU5RTc4QzVENzk1QkYyRjhCNDc0QUZEOTlBOTI0QjMxMjU3QTE2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTkm0PHN73nQmWbGat/gkFRG+ XBEtXwFErWpzWs9xWCfLujjGdQdiwTzcxBRLjJYCllL20itW9EydV83lJybz6I0A 6Sheo21O1vGiNr3SGpBGuHiYtgdVj8XLOrIxmy47INjbnj9obtN+4AVbYAi5ZQ+U JSFzctJhIzBMSJKqg1iO/4Z+XvLXpkzNeGjMQ6nZM7uX7s1opMLqV7qdcIRrOJeW oSRKigjHgeLeftcnKidzG96uJ24lYaTMLGD1ZMdBsvTf1F6jYd6x2h4HHcuB6whK 6PL72xgZTe5xfqA9AyPSyXstoOy6Z74xYFOvJbfNTxm7WIpM0Xk5uiO39/8ZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZ54xdeVvy+LR0 r9makksxJXoW5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmtu dTJ6RGZzb3JNSG5EV1pKWlJiR3RjVEV3YlkxcmRXTm44Z0ZqSnp6VzIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr bnUyekRmc29yTUhuRFdaSlpSYkd0Y1RFd2JZMXJkV05uOGdGakp6elcyLzAvNTlF NzhDNUQ3OTVCRjJGOEI0NzRBRkQ5OUE5MjRCMzEyNTdBMTZFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvYsAwQCsYDgMA0EAgACMAcDBQAoBAiUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQA6zANBgkqhkiG9w0BAQsFAAOCAQEACL8VroAV CKb0M94X2qOQNoja2tMgUZ9htQVj0yPldpNXrHJp0HRKnrgk3R8BMvJ/ZqE0Pjkd Xy2Src86e+XL4A/M5mp2QdPlNZi+qrJJEMMbceZrLHy5ZSMS634O1PK9bU+Y7th0 aJO8N/chfsLO9ZNrFNQqJ3htRy9GM6TEdV1zESaSpQlly42Rhm85DTrRb9OM+kx1 jEyAOrQs0i91UvF21s7Jxl8X3KHqb0gUQfzolgteU6ZT1si76Eh/GOjX7pvsrWUH iDX7SCWJNs/zYVnp4Yi3etJ7BbUjnC1HM2EVnuQbY3r6Ow3mxQBglYDQWq+fRRoX aOXSwtF/+O+h0A== -----END CERTIFICATE-----Generated at Thu Oct 8 12:20:55 2026 by rpki-client