$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer File: 871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer (raw, json) Hash identifier: MQ5mw82Hnn2L40UOIntppEO/qhLHtrAC3mXiVFk8lss= Subject key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 707ABC1E494C730755C46B0CEA78C6F43ED82E20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft caRepository: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 20 Oct 2026 03:00:25 +0000 Certificate not after: Tue 19 Oct 2027 03:05:25 +0000 Subordinate resources: AS: 269155 IP: 45.180.208.0/22 IP: 2804:6040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 Oct 2026 18:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7a:bc:1e:49:4c:73:07:55:c4:6b:0c:ea:78:c6:f4:3e:d8:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 03:00:25 2026 GMT Not After : Oct 19 03:05:25 2027 GMT Subject: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:11:c5:5f:0c:f2:02:b1:0a:0a:42:02:29: bc:f6:6a:fe:c2:be:66:b3:e9:a6:08:3a:aa:ab:8c: 43:c4:65:d4:cb:7b:7a:b2:9b:ee:60:60:1e:47:c7: 69:9f:0a:35:68:f9:89:ee:73:9d:01:6e:6c:b2:af: 08:a1:1f:b0:d6:59:c7:7a:c0:5f:92:4d:d0:c9:6d: b8:05:cc:86:2c:ca:54:07:74:1f:d6:1a:a1:59:a0: 83:29:80:54:e4:ec:6c:e7:3f:5a:e2:db:9a:44:c4: 04:09:40:2d:dd:da:ff:2e:d9:e9:24:b7:47:4b:e4: 40:f9:55:03:12:9f:9f:65:ca:4a:96:a3:e3:2f:49: 22:f0:36:a1:74:1e:ad:a8:7c:7b:7c:f5:a9:0f:e3: 75:9b:c9:52:18:6a:50:47:9e:78:0a:eb:f5:a5:22: 70:d8:8c:d4:c6:42:5e:bc:d5:91:22:38:50:8a:2b: c7:6c:8f:71:14:23:49:40:90:26:c7:26:a5:88:63: d4:65:50:1c:3d:b1:a9:fa:e6:5e:8b:87:36:3d:65: 66:57:38:16:0f:ac:4a:19:98:51:46:a6:73:25:67: de:d6:1a:88:b0:3f:13:7e:d8:80:67:2d:36:3f:a7: dc:89:ea:5e:36:97:f1:50:25:3e:b3:91:e0:20:2a: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.208.0/22 IPv6: 2804:6040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269155 Signature Algorithm: sha256WithRSAEncryption d2:c2:99:45:7a:a3:9d:04:dd:2f:50:50:c4:a8:72:2f:5d:81: 77:65:c9:fb:32:90:cc:91:a5:18:6c:44:20:f6:c3:db:8e:26: 2c:b0:48:8f:a4:a4:79:aa:c9:46:d9:3b:0e:9b:cc:39:db:ef: 0b:23:21:e5:2f:2f:e7:d7:2a:86:f3:92:30:de:94:46:21:87: e3:cb:4c:dd:2b:f9:7f:2a:01:7d:fa:60:af:a3:a4:48:62:d1: d9:71:7d:f6:12:8a:4f:06:db:3e:17:2d:1a:05:ed:ed:c0:1f: 4f:a4:64:f0:d2:cb:53:3f:ae:6a:71:d6:f2:77:47:c2:e1:db: ba:f1:37:74:f3:d1:e1:21:7b:d3:02:87:e2:73:ed:60:34:b7: a4:4b:c2:a4:6d:1c:63:ae:52:ce:c1:70:83:70:a0:4c:e7:7f: ee:24:c5:e2:92:3f:cb:c4:9a:c4:91:65:56:3d:b9:dc:25:85: 79:5b:5f:20:c0:f4:44:2d:53:e9:05:cc:b6:0a:a2:e2:0f:43: 86:35:8e:60:9d:df:76:fd:5c:39:f5:02:50:f9:e0:85:14:2f: da:ba:07:c0:1a:cb:e7:9a:bb:d6:9e:f3:54:66:18:49:5a:56: 87:94:32:be:22:8c:59:d8:de:4d:cd:76:53:2e:fa:e0:8c:93: 8b:7b:f7:11 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcHq8HklMcwdVxGsM6njG9D7YLiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjAwMzAwMjVaFw0yNzEwMTkwMzA1MjVaMDMxMTAvBgNV BAMTKDg3MUYzOTUyNUJDRTg4RTY5QTVEQzIwRURCQTJDQkZFQUVEQzlFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNxHFXwzyArEKCkICKbz2av7C vmaz6aYIOqqrjEPEZdTLe3qym+5gYB5Hx2mfCjVo+Ynuc50BbmyyrwihH7DWWcd6 wF+STdDJbbgFzIYsylQHdB/WGqFZoIMpgFTk7GznP1ri25pExAQJQC3d2v8u2ekk t0dL5ED5VQMSn59lykqWo+MvSSLwNqF0Hq2ofHt89akP43WbyVIYalBHnngK6/Wl InDYjNTGQl681ZEiOFCKK8dsj3EUI0lAkCbHJqWIY9RlUBw9san65l6LhzY9ZWZX OBYPrEoZmFFGpnMlZ97WGoiwPxN+2IBnLTY/p9yJ6l42l/FQJT6zkeAgKszzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHHzlSW86I5ppd wg7bosv+rtyeUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ1 SHJpZUNrTEI3N2FNQ3h1MlNrb21zb2FtcXRwTVNCclE0M2YzanpqanovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 dUhyaWVDa0xCNzdhTUN4dTJTa29tc29hbXF0cE1TQnJRNDNmM2p6amp6LzAvODcx RjM5NTI1QkNFODhFNjlBNURDMjBFREJBMkNCRkVBRURDOUU1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbTQMA0EAgACMAcDBQAoBGBAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbYzANBgkqhkiG9w0BAQsFAAOCAQEA0sKZRXqjnQTdL1BQ xKhyL12Bd2XJ+zKQzJGlGGxEIPbD244mLLBIj6SkearJRtk7DpvMOdvvCyMh5S8v 59cqhvOSMN6URiGH48tM3Sv5fyoBffpgr6OkSGLR2XF99hKKTwbbPhctGgXt7cAf T6Rk8NLLUz+uanHW8ndHwuHbuvE3dPPR4SF70wKH4nPtYDS3pEvCpG0cY65SzsFw g3CgTOd/7iTF4pI/y8SaxJFlVj253CWFeVtfIMD0RC1T6QXMtgqi4g9DhjWOYJ3f dv1cOfUCUPnghRQv2roHwBrL55q71p7zVGYYSVpWh5QyviKMWdjeTc12Uy764IyT i3v3EQ== -----END CERTIFICATE-----Generated at Tue Oct 20 16:56:00 2026 by rpki-client