$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.cer File: 89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.cer (raw, json) Hash identifier: uNQvSn4F+ggpR+hcBA6+rGJdT8wvj/qQc7maQoe6oN8= Subject key identifier: 89:CE:62:B4:14:3C:BF:1B:EB:8F:3D:89:AA:75:A6:FE:61:80:38:A0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21C98C2A08E17CF95DADDAD091E195EFCCE58732 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.mft caRepository: rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Feb 2026 13:29:16 +0000 Certificate not after: Wed 03 Feb 2027 13:34:16 +0000 Subordinate resources: AS: 262367 IP: 170.231.212.0/22 IP: 177.128.40.0/22 IP: 2804:323c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 23:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:8c:2a:08:e1:7c:f9:5d:ad:da:d0:91:e1:95:ef:cc:e5:87:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 4 13:29:16 2026 GMT Not After : Feb 3 13:34:16 2027 GMT Subject: CN=89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:2b:91:2a:19:16:91:6e:a5:bd:96:5c:91: 3b:39:57:3e:71:b9:1b:54:97:8d:16:4e:fc:f9:1a: b3:58:1c:1c:31:ef:0c:e8:ae:e1:1b:20:44:fa:2d: a8:7d:50:bc:5a:c9:af:41:89:74:6f:b9:96:53:fe: 58:b1:f9:17:38:76:b1:8e:e1:1c:5d:e6:49:3f:fa: e9:0d:f3:6a:7b:05:57:e2:5a:d2:0f:d3:ce:77:3a: 4a:49:dc:ec:c0:1d:34:bf:bd:87:ca:d5:7a:38:7d: 3d:e8:70:e5:ba:b8:54:7d:b6:85:46:43:84:59:5e: 2d:d7:d0:4b:c4:47:01:7a:87:aa:d5:8c:88:48:85: 33:d1:c0:ad:8b:b5:41:9a:c9:f7:ab:36:ea:cd:9d: 30:2c:24:4e:c7:62:ea:cd:39:b5:df:2d:d7:90:27: 6b:27:f7:85:dd:f9:6d:d1:38:52:8a:3e:1d:99:3c: 1d:5d:8c:b3:67:78:e3:3c:20:70:2a:89:46:b7:f6: e6:00:47:b5:6d:0c:c4:27:8b:41:91:f1:74:7d:72: 12:89:31:65:ba:b5:09:49:88:52:4c:f2:f3:ff:68: 5d:9d:c6:ae:af:f4:9a:76:da:7b:93:02:54:e4:1c: a4:73:06:bf:32:dc:11:14:f9:4e:37:3f:9f:9e:d4: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:CE:62:B4:14:3C:BF:1B:EB:8F:3D:89:AA:75:A6:FE:61:80:38:A0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.212.0/22 177.128.40.0/22 IPv6: 2804:323c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262367 Signature Algorithm: sha256WithRSAEncryption 82:d0:f7:14:3d:3a:5f:54:46:ce:5b:67:f2:51:a7:4e:b1:9a: 75:15:3a:69:a2:7b:04:2b:b6:c6:88:83:65:1b:55:de:53:bc: ff:55:81:cd:59:7e:26:42:17:6a:72:f6:cf:ba:1d:04:93:6e: 7d:e4:13:c9:40:3f:a6:59:9b:6f:b3:19:18:86:81:a1:37:bf: 2b:25:7b:b6:06:6f:8a:08:bb:5c:d6:6c:39:98:b6:8e:51:ba: 2b:31:b2:84:9b:ab:44:bd:9e:88:c0:fe:95:9b:fb:0f:ce:21: f6:76:e1:3e:10:a6:b5:e0:ab:07:64:90:2a:01:a1:2b:10:a0: 38:1d:67:84:5d:d7:61:8a:fa:39:56:be:69:13:23:9f:f9:fd: 9f:85:6f:24:31:5c:ad:df:e2:2e:2c:b5:fe:7e:a6:4e:23:59: d0:54:2d:1d:8f:e2:e1:8a:03:3f:3f:6f:28:0c:d8:0b:90:14: 4f:51:ce:3a:5f:e0:a1:8f:23:8f:61:d3:e7:04:89:a6:d8:7d: 4c:a2:07:c6:4e:e0:37:86:eb:53:6c:f7:58:74:d6:7b:12:33: db:71:71:0c:fd:94:56:d3:b0:dc:a7:42:b3:02:40:ad:36:dc: e8:df:68:ad:e6:2f:f5:e0:fe:b8:ca:f1:45:d0:4a:c4:33:16: f7:19:cb:5e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIcmMKgjhfPldrdrQkeGV78zlhzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDQxMzI5MTZaFw0yNzAyMDMxMzM0MTZaMDMxMTAvBgNV BAMTKDg5Q0U2MkI0MTQzQ0JGMUJFQjhGM0Q4OUFBNzVBNkZFNjE4MDM4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjSuRKhkWkW6lvZZckTs5Vz5x uRtUl40WTvz5GrNYHBwx7wzoruEbIET6Lah9ULxaya9BiXRvuZZT/lix+Rc4drGO 4Rxd5kk/+ukN82p7BVfiWtIP0853OkpJ3OzAHTS/vYfK1Xo4fT3ocOW6uFR9toVG Q4RZXi3X0EvERwF6h6rVjIhIhTPRwK2LtUGayferNurNnTAsJE7HYurNObXfLdeQ J2sn94Xd+W3ROFKKPh2ZPB1djLNneOM8IHAqiUa39uYAR7VtDMQni0GR8XR9chKJ MWW6tQlJiFJM8vP/aF2dxq6v9Jp22nuTAlTkHKRzBr8y3BEU+U43P5+e1AFfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJzmK0FDy/G+uP PYmqdab+YYA4oDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmR1 cTU2OThDMUI5bVBXQnlVN2paa3d0WmJKdkhyVXlRMjNTSkIxd3JCb0EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jk dXE1Njk4QzFCOW1QV0J5VTdqWmt3dFpiSnZIclV5UTIzU0pCMXdyQm9BLzAvODlD RTYyQjQxNDNDQkYxQkVCOEYzRDg5QUE3NUE2RkU2MTgwMzhBMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqufUAwQCsYAoMA0EAgACMAcDBQAoBDI8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQA3zANBgkqhkiG9w0BAQsFAAOCAQEAgtD3FD06 X1RGzltn8lGnTrGadRU6aaJ7BCu2xoiDZRtV3lO8/1WBzVl+JkIXanL2z7odBJNu feQTyUA/plmbb7MZGIaBoTe/KyV7tgZvigi7XNZsOZi2jlG6KzGyhJurRL2eiMD+ lZv7D84h9nbhPhCmteCrB2SQKgGhKxCgOB1nhF3XYYr6OVa+aRMjn/n9n4VvJDFc rd/iLiy1/n6mTiNZ0FQtHY/i4YoDPz9vKAzYC5AUT1HOOl/goY8jj2HT5wSJpth9 TKIHxk7gN4brU2z3WHTWexIz23FxDP2UVtOw3KdCswJArTbc6N9oreYv9eD+uMrx RdBKxDMW9xnLXg== -----END CERTIFICATE-----Generated at Mon Feb 23 00:21:27 2026 by rpki-client