$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.cer File: 679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.cer (raw, json) Hash identifier: hgjW2yrWOLeU8OXpMQzoXKD4/JBtCDmBdk9fbOmRBD4= Subject key identifier: 67:9A:CC:24:3D:2D:BF:E3:D5:F5:4F:D8:FE:F9:DD:1C:E6:64:E5:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 05A090C516DA56A00121C0A9F364149E4614B650 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.mft caRepository: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Aug 2026 10:45:45 +0000 Certificate not after: Thu 05 Aug 2027 10:50:45 +0000 Subordinate resources: AS: 264997 IP: 170.84.144.0/22 IP: 177.12.144.0/21 IP: 2804:3128::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 04:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a0:90:c5:16:da:56:a0:01:21:c0:a9:f3:64:14:9e:46:14:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 6 10:45:45 2026 GMT Not After : Aug 5 10:50:45 2027 GMT Subject: CN=679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:3e:61:f7:fa:36:da:29:27:f1:c4:ac:12: d4:ee:37:6e:48:88:c5:e8:7f:9e:1e:5d:f0:ce:0a: ac:fd:94:08:61:26:2a:ee:16:c8:b6:e3:89:e0:02: 3f:3f:48:7a:56:69:56:a3:f9:52:77:db:f0:8c:8d: 13:27:f2:be:fa:70:5a:16:32:9b:de:54:39:c9:07: 8b:e8:2b:5d:e5:73:8e:e8:48:eb:17:93:e5:4c:b1: 40:de:46:be:f0:86:3e:2e:63:21:ea:96:fe:02:9a: 66:91:33:30:27:8b:48:00:20:28:db:ce:33:42:99: f1:5c:26:33:ad:80:ba:43:2b:53:67:b5:71:59:1e: 9c:c3:68:85:88:0b:96:ca:4a:d1:a1:32:2b:52:83: 89:27:1f:87:1b:e3:69:ec:be:4f:e7:75:b6:10:0b: 32:cb:f3:c0:69:72:f9:68:85:47:a7:be:c8:03:de: 6c:f1:54:4d:95:62:e7:5f:1a:53:1f:73:28:2f:3a: 44:2f:c7:ec:10:92:04:a8:b0:c9:ef:fc:40:5d:31: 15:4a:12:d5:a7:19:47:19:db:22:e5:30:eb:c1:71: e4:2f:d0:40:f4:60:d1:70:7d:7e:2c:fa:b7:8d:bc: 68:a2:8a:e7:30:1f:a6:25:cc:d6:5e:a7:87:cd:d0: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:9A:CC:24:3D:2D:BF:E3:D5:F5:4F:D8:FE:F9:DD:1C:E6:64:E5:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.144.0/22 177.12.144.0/21 IPv6: 2804:3128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264997 Signature Algorithm: sha256WithRSAEncryption b9:82:b6:24:8c:23:cb:3b:26:48:f4:34:95:d0:a1:01:6b:eb: 5f:28:ca:1a:6d:d7:4a:f1:4d:14:c8:1d:1a:0e:28:8e:0f:42: 44:b0:26:a8:2f:76:ba:8b:fa:f3:2f:90:f7:49:60:86:6a:13: de:d6:d3:e1:d9:62:ad:58:b6:7f:49:48:fa:75:22:0c:8c:54: 4d:65:98:fb:76:39:b0:9e:6a:9f:46:a4:0f:bf:8e:22:15:d9: 48:8d:b6:50:2a:e4:50:06:23:46:15:f9:4c:7f:81:d4:86:6a: af:31:1b:f1:24:27:9e:bf:b6:63:91:e2:15:db:73:21:bc:11: 08:e5:58:67:33:8d:14:3a:b7:25:43:d4:a6:bb:aa:cd:c4:04: 8e:a4:f4:28:0a:6b:0e:12:62:cc:d5:10:17:5f:db:38:07:e6: 65:4e:29:12:0c:56:9b:05:4f:7b:7f:43:04:8e:bf:6c:57:02: 40:bc:b7:91:ce:7e:f7:de:46:76:88:01:c4:53:0c:ff:67:f3: 48:35:d4:a7:64:97:c1:57:24:af:1b:c6:b9:1c:42:32:13:83: b3:c3:a6:1c:2c:f0:96:5c:3a:a8:ef:b2:aa:cd:dd:1a:98:cd: 39:66:9b:6d:4a:bf:04:3f:d2:19:71:55:24:84:04:4b:d0:96: 68:a7:af:b6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBaCQxRbaVqABIcCp82QUnkYUtlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MDYxMDQ1NDVaFw0yNzA4MDUxMDUwNDVaMDMxMTAvBgNV BAMTKDY3OUFDQzI0M0QyREJGRTNENUY1NEZEOEZFRjlERDFDRTY2NEU1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoz5h9/o22ikn8cSsEtTuN25I iMXof54eXfDOCqz9lAhhJiruFsi244ngAj8/SHpWaVaj+VJ32/CMjRMn8r76cFoW MpveVDnJB4voK13lc47oSOsXk+VMsUDeRr7whj4uYyHqlv4CmmaRMzAni0gAICjb zjNCmfFcJjOtgLpDK1NntXFZHpzDaIWIC5bKStGhMitSg4knH4cb42nsvk/ndbYQ CzLL88BpcvlohUenvsgD3mzxVE2VYudfGlMfcygvOkQvx+wQkgSosMnv/EBdMRVK EtWnGUcZ2yLlMOvBceQv0ED0YNFwfX4s+reNvGiiiucwH6YlzNZep4fN0PX/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnmswkPS2/49X1 T9j++d0c5mTlfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlU TTN3YVNRUnV3ZHc0c0RxdnlnR0IyR0Q5N2JNWGh1UDRHc0o1ZXFaTlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp VE0zd2FTUVJ1d2R3NHNEcXZ5Z0dCMkdEOTdiTVhodVA0R3NKNWVxWk5XLzAvNjc5 QUNDMjQzRDJEQkZFM0Q1RjU0RkQ4RkVGOUREMUNFNjY0RTU3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlSQAwQDsQyQMA0EAgACMAcDBQAoBDEoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLJTANBgkqhkiG9w0BAQsFAAOCAQEAuYK2JIwj yzsmSPQ0ldChAWvrXyjKGm3XSvFNFMgdGg4ojg9CRLAmqC92uov68y+Q90lghmoT 3tbT4dlirVi2f0lI+nUiDIxUTWWY+3Y5sJ5qn0akD7+OIhXZSI22UCrkUAYjRhX5 TH+B1IZqrzEb8SQnnr+2Y5HiFdtzIbwRCOVYZzONFDq3JUPUpruqzcQEjqT0KApr DhJizNUQF1/bOAfmZU4pEgxWmwVPe39DBI6/bFcCQLy3kc5+995GdogBxFMM/2fz SDXUp2SXwVckrxvGuRxCMhODs8OmHCzwllw6qO+yqs3dGpjNOWabbUq/BD/SGXFV JIQES9CWaKevtg== -----END CERTIFICATE-----Generated at Sun Aug 23 05:11:36 2026 by rpki-client