$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/67E247F9E48B1143AE3DCA7A35533CBA0D6A491D.cer File: 67E247F9E48B1143AE3DCA7A35533CBA0D6A491D.cer (raw, json) Hash identifier: zC+mIalubXLiatrV2w+En0QNn5fhsmfl7SA/3gDV4Ic= Subject key identifier: 67:E2:47:F9:E4:8B:11:43:AE:3D:CA:7A:35:53:3C:BA:0D:6A:49:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73AF456B89C53469AA1C0902465E7D800171E6EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/67E247F9E48B1143AE3DCA7A35533CBA0D6A491D.mft caRepository: rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 17 Sep 2026 19:09:21 +0000 Certificate not after: Thu 16 Sep 2027 19:14:21 +0000 Subordinate resources: AS: 267540 IP: 179.42.12.0/22 IP: 201.182.216.0/22 IP: 2804:42f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Oct 2026 10:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:45:6b:89:c5:34:69:aa:1c:09:02:46:5e:7d:80:01:71:e6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 17 19:09:21 2026 GMT Not After : Sep 16 19:14:21 2027 GMT Subject: CN=67E247F9E48B1143AE3DCA7A35533CBA0D6A491D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:fd:e4:1b:40:e8:36:e2:93:e3:da:78:e3: 1d:81:44:c9:0d:a1:3a:69:95:1f:af:69:40:c7:e6: d5:30:6e:b5:7c:e4:eb:c9:35:8d:de:5b:44:e9:39: 63:cd:4d:03:3b:d0:b3:53:7f:4e:e4:7f:37:15:53: 35:7d:71:a0:25:9f:9d:50:1e:0a:90:3e:da:3c:16: b3:77:65:6e:e9:e9:2f:8c:40:33:ed:d9:6d:9b:e6: 6e:67:bc:8d:86:78:f3:e9:21:3b:85:a5:f4:57:be: b0:9c:3d:7f:d0:70:28:c9:e7:b1:92:be:8a:61:ba: 6f:f6:65:0e:2b:be:6a:21:3f:1e:73:db:da:e2:08: c0:b0:c3:e0:8e:81:27:60:a4:e6:72:a2:0a:a2:be: ff:04:25:fc:17:41:3e:7d:ff:4b:8c:ee:98:5c:ed: bf:56:4e:37:a9:31:1d:41:19:40:fa:1c:44:aa:72: 29:84:d3:1c:1b:7f:e7:84:4b:92:5f:eb:53:ba:74: d7:63:62:e8:ec:bd:f9:93:d8:34:4e:c5:7b:b1:03: 85:22:ae:25:78:db:73:3b:d8:91:c5:00:ad:4a:0a: 72:6f:66:5c:79:92:bb:c1:2a:d9:05:8d:53:c1:76: 66:cb:f6:b1:c8:4f:7e:ec:57:8f:ed:7b:0e:d3:7e: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:E2:47:F9:E4:8B:11:43:AE:3D:CA:7A:35:53:3C:BA:0D:6A:49:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/67E247F9E48B1143AE3DCA7A35533CBA0D6A491D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.12.0/22 201.182.216.0/22 IPv6: 2804:42f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267540 Signature Algorithm: sha256WithRSAEncryption 3a:45:cd:44:ed:c7:40:6d:d0:f3:bd:49:9d:56:42:ac:5b:e8: da:09:40:14:82:9a:b2:b6:10:95:23:de:9b:47:88:06:2f:79: 5f:9e:64:b9:2f:b8:36:ef:96:94:b6:e3:f4:6c:87:c3:a0:cb: d9:a3:7c:ca:dc:4f:54:e3:d2:e3:15:17:f2:95:3b:f9:9b:0e: df:d8:0f:77:e4:b4:50:c8:c0:d0:f8:5b:61:89:da:64:48:89: 2b:a0:0d:27:c5:70:14:e2:9a:40:6f:1d:4c:b8:51:31:f5:da: 73:5d:05:fd:9c:4b:7c:b8:3b:bb:92:38:17:02:2b:87:5a:e3: a8:ef:b4:66:91:52:2b:7b:4b:84:8e:8e:87:64:e7:0c:a9:2c: 46:14:ff:52:85:d3:a4:22:4b:e5:a3:46:ab:12:47:18:37:43: 30:40:55:62:04:0e:d6:6d:17:10:d9:4d:65:91:e4:9e:e5:d9: f7:0c:a5:42:19:c0:48:f5:d5:86:0e:58:91:66:ac:0b:bb:43: 1c:d8:64:45:81:34:02:ec:9b:02:ae:95:f0:77:08:4a:55:44: 3a:71:cf:d2:6f:c4:56:be:fc:06:45:75:62:3a:8d:35:dc:4a: 33:cd:92:3c:cc:29:33:fa:5a:ca:0b:8a:36:f0:8e:10:09:d4: c7:5f:4c:f3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUc69Fa4nFNGmqHAkCRl59gAFx5uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTcxOTA5MjFaFw0yNzA5MTYxOTE0MjFaMDMxMTAvBgNV BAMTKDY3RTI0N0Y5RTQ4QjExNDNBRTNEQ0E3QTM1NTMzQ0JBMEQ2QTQ5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHr/3kG0DoNuKT49p44x2BRMkN oTpplR+vaUDH5tUwbrV85OvJNY3eW0TpOWPNTQM70LNTf07kfzcVUzV9caAln51Q HgqQPto8FrN3ZW7p6S+MQDPt2W2b5m5nvI2GePPpITuFpfRXvrCcPX/QcCjJ57GS vophum/2ZQ4rvmohPx5z29riCMCww+COgSdgpOZyogqivv8EJfwXQT59/0uM7phc 7b9WTjepMR1BGUD6HESqcimE0xwbf+eES5Jf61O6dNdjYujsvfmT2DROxXuxA4Ui riV423M72JHFAK1KCnJvZlx5krvBKtkFjVPBdmbL9rHIT37sV4/tew7Tfq1rAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRn4kf55IsRQ649 yno1Uzy6DWpJHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRC NzZ4Z0c0WW1lOTFnR3JNTHNyWU1wUGpaZ0ZSYldRUUpucVVnY1hqUkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o0 Qjc2eGdHNFltZTkxZ0dyTUxzcllNcFBqWmdGUmJXUVFKbnFVZ2NYalJMLzAvNjdF MjQ3RjlFNDhCMTE0M0FFM0RDQTdBMzU1MzNDQkEwRDZBNDkxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsyoMAwQCybbYMA0EAgACMAcDBQAoBEL4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQVFDANBgkqhkiG9w0BAQsFAAOCAQEAOkXNRO3H QG3Q871JnVZCrFvo2glAFIKasrYQlSPem0eIBi95X55kuS+4Nu+WlLbj9GyHw6DL 2aN8ytxPVOPS4xUX8pU7+ZsO39gPd+S0UMjA0PhbYYnaZEiJK6ANJ8VwFOKaQG8d TLhRMfXac10F/ZxLfLg7u5I4FwIrh1rjqO+0ZpFSK3tLhI6Oh2TnDKksRhT/UoXT pCJL5aNGqxJHGDdDMEBVYgQO1m0XENlNZZHknuXZ9wylQhnASPXVhg5YkWasC7tD HNhkRYE0AuybAq6V8HcISlVEOnHP0m/EVr78BkV1YjqNNdxKM82SPMwpM/payguK NvCOEAnUx19M8w== -----END CERTIFICATE-----Generated at Tue Oct 6 09:32:31 2026 by rpki-client