$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/7354A431CC4C7FD9078D17D9E93E36F81A00A929.cer File: 7354A431CC4C7FD9078D17D9E93E36F81A00A929.cer (raw, json) Hash identifier: Nj/D4XQosbctG4pHb8sB+YLtE/AUQxdgps7YQZJor4k= Subject key identifier: 73:54:A4:31:CC:4C:7F:D9:07:8D:17:D9:E9:3E:36:F8:1A:00:A9:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2CAAEBA9CA8A61BA7B20EB98C351BEF929328C18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/7354A431CC4C7FD9078D17D9E93E36F81A00A929.mft caRepository: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 22 Aug 2026 19:16:05 +0000 Certificate not after: Sat 21 Aug 2027 19:21:05 +0000 Subordinate resources: AS: 266931 IP: 45.5.32.0/22 IP: 45.225.84.0/22 IP: 2804:4580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 22:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:aa:eb:a9:ca:8a:61:ba:7b:20:eb:98:c3:51:be:f9:29:32:8c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 19:16:05 2026 GMT Not After : Aug 21 19:21:05 2027 GMT Subject: CN=7354A431CC4C7FD9078D17D9E93E36F81A00A929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:df:20:87:2f:7f:d1:6a:11:79:eb:fd:bc: 09:44:75:ba:7b:98:d5:a5:fd:7c:a8:0b:3b:a3:28: 27:8b:ba:7b:1b:e6:d8:84:f2:2c:52:9c:97:95:ca: 1b:f2:56:e9:17:95:23:76:f0:d1:da:18:7c:7a:75: ed:48:58:7f:ae:ed:a3:66:ad:93:5e:e8:d7:e4:b7: 09:0b:0c:c6:5f:90:3c:2b:4b:90:40:55:b4:11:b0: 39:c9:a1:0f:36:76:30:f0:7d:1c:fb:cf:3d:e9:80: 82:ce:e3:ab:7a:84:a6:df:10:86:11:d6:01:df:cd: dc:95:1c:c3:71:fa:4a:dd:4e:3f:59:aa:b0:45:29: ef:30:92:05:a2:46:50:25:26:a7:02:eb:98:93:e0: 6a:dc:b1:1b:4c:fc:b7:a7:bc:fe:91:4c:79:e3:29: be:2a:9a:c7:e1:c1:82:a5:72:47:70:ef:a9:c0:9e: 01:37:45:31:56:31:7e:46:33:ea:96:99:45:04:29: 7d:49:dd:9b:1d:6a:8f:0e:2d:ff:81:99:02:af:81: df:89:54:92:e1:c1:c2:2d:3a:67:40:25:c5:ce:31: b6:5c:eb:2f:7a:3a:ce:f8:a8:90:a3:6d:e5:a8:e3: 8b:19:c3:58:12:e3:ae:e8:30:e2:cb:d5:46:29:7d: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:54:A4:31:CC:4C:7F:D9:07:8D:17:D9:E9:3E:36:F8:1A:00:A9:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/7354A431CC4C7FD9078D17D9E93E36F81A00A929.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.32.0/22 45.225.84.0/22 IPv6: 2804:4580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266931 Signature Algorithm: sha256WithRSAEncryption 2b:56:6e:ab:ab:96:62:74:1d:30:c1:ed:41:c6:4a:cb:a3:ec: 2c:ac:ea:9e:89:07:e0:bd:bd:83:a1:7d:dc:ed:03:c8:2c:41: 8f:11:5d:91:33:3c:82:d6:62:87:74:81:5c:d4:1f:58:d3:ff: 86:60:b2:c8:61:08:f5:e7:9d:8f:3f:f6:7b:5c:48:96:d7:1f: c3:12:9b:5e:7e:4e:ec:cd:45:37:0f:04:9f:6b:2f:53:b3:d0: 76:ab:24:e8:e4:c7:bc:2a:ca:4e:88:02:f5:b6:08:61:36:5f: 9d:33:ec:0c:16:9f:c0:29:43:01:ed:6f:63:17:02:cc:43:59: 1c:0d:e2:93:bc:54:fe:66:78:3f:41:f6:dc:88:18:c7:a3:55: 35:07:25:95:64:8e:6d:8d:56:de:7d:6f:88:7b:ff:35:65:e0: 3b:1c:a2:23:ff:f8:a3:10:5e:96:36:4d:12:f2:69:a2:17:2c: 3c:32:1c:1e:82:9c:a5:ef:a4:54:82:80:20:e5:e6:1f:32:c8: 9b:2d:3b:10:c6:c9:34:a2:11:53:d6:5c:f9:93:ad:e9:2d:da: af:c6:76:fb:91:a2:a1:bd:d6:12:d7:3e:2a:03:57:f3:a3:20: a6:5d:17:62:11:0b:9a:09:f2:58:87:ea:37:0f:f3:a0:ab:e0: 73:32:46:75 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIULKrrqcqKYbp7IOuYw1G++SkyjBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjIxOTE2MDVaFw0yNzA4MjExOTIxMDVaMDMxMTAvBgNV BAMTKDczNTRBNDMxQ0M0QzdGRDkwNzhEMTdEOUU5M0UzNkY4MUEwMEE5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWd8ghy9/0WoReev9vAlEdbp7 mNWl/XyoCzujKCeLunsb5tiE8ixSnJeVyhvyVukXlSN28NHaGHx6de1IWH+u7aNm rZNe6NfktwkLDMZfkDwrS5BAVbQRsDnJoQ82djDwfRz7zz3pgILO46t6hKbfEIYR 1gHfzdyVHMNx+krdTj9ZqrBFKe8wkgWiRlAlJqcC65iT4GrcsRtM/LenvP6RTHnj Kb4qmsfhwYKlckdw76nAngE3RTFWMX5GM+qWmUUEKX1J3Zsdao8OLf+BmQKvgd+J VJLhwcItOmdAJcXOMbZc6y96Os74qJCjbeWo44sZw1gS467oMOLL1UYpfTVNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzVKQxzEx/2QeN F9npPjb4GgCpKTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREF0 TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB dExlR0VqTUczaUFRYVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAvNzM1 NEE0MzFDQzRDN0ZEOTA3OEQxN0Q5RTkzRTM2RjgxQTAwQTkyOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQUgAwQCLeFUMA0EAgACMAcDBQAoBEWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQSszANBgkqhkiG9w0BAQsFAAOCAQEAK1Zuq6uW YnQdMMHtQcZKy6PsLKzqnokH4L29g6F93O0DyCxBjxFdkTM8gtZih3SBXNQfWNP/ hmCyyGEI9eedjz/2e1xIltcfwxKbXn5O7M1FNw8En2svU7PQdqsk6OTHvCrKTogC 9bYIYTZfnTPsDBafwClDAe1vYxcCzENZHA3ik7xU/mZ4P0H23IgYx6NVNQcllWSO bY1W3n1viHv/NWXgOxyiI//4oxBeljZNEvJpohcsPDIcHoKcpe+kVIKAIOXmHzLI my07EMbJNKIRU9Zc+ZOt6S3ar8Z2+5Giob3WEtc+KgNX86Mgpl0XYhELmgnyWIfq Nw/zoKvgczJGdQ== -----END CERTIFICATE-----Generated at Sat Aug 22 22:02:00 2026 by rpki-client