$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer File: 8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer (raw, json) Hash identifier: XDzqP6mbdBG0qnpQaSrTxmcqJm/ZpMU1S61kH835azU= Subject key identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6224721ACA3B1B78435F862F01D769F7F68A7AEA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft caRepository: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 31 Oct 2026 08:16:19 +0000 Certificate not after: Sat 30 Oct 2027 08:21:19 +0000 Subordinate resources: AS: 28186 IP: 138.117.176.0/22 IP: 177.8.224.0/20 IP: 177.21.0.0/19 IP: 177.23.80.0/21 IP: 177.136.112.0/20 IP: 187.44.128.0/17 IP: 189.89.128.0/18 IP: 201.55.192.0/22 IP: 2804:204::/32 IP: 2804:24dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 11:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:24:72:1a:ca:3b:1b:78:43:5f:86:2f:01:d7:69:f7:f6:8a:7a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 08:16:19 2026 GMT Not After : Oct 30 08:21:19 2027 GMT Subject: CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:b2:d3:04:06:13:4e:4b:39:94:30:35:ae: fd:55:a0:da:64:82:ff:dd:ac:71:c7:0c:ae:3a:aa: 2f:c1:77:bb:64:36:7e:33:67:a0:0a:5f:22:55:81: 12:36:35:18:26:97:e2:f4:60:08:84:2f:5c:08:00: 5e:19:8e:de:12:d1:9f:8b:58:6f:8f:ff:5f:9d:09: dc:5c:0c:03:66:c8:45:b7:9a:9d:ef:51:4d:95:3c: b2:b7:88:23:23:31:b6:65:4d:6f:59:65:11:3b:bb: d0:6a:04:17:70:38:61:72:a6:7e:f9:f8:09:a7:bb: ac:87:9f:5a:b9:17:1d:d8:b7:81:fd:a5:37:f3:1f: 6d:aa:fb:6e:b3:60:d4:84:81:19:87:73:0f:21:75: ce:74:35:7a:29:e5:ae:cc:0e:86:05:03:f1:21:5f: 26:ec:d4:85:96:46:d8:dd:ce:eb:50:3a:fd:e3:86: 8b:d6:45:ae:43:e4:5c:8b:ad:0b:85:f9:b4:60:96: 65:64:a3:c2:5a:e3:fb:9c:cc:65:6e:60:14:a6:87: e4:cd:60:59:4b:9e:fc:4d:83:3a:94:7d:4c:b3:67: 6b:bc:e4:63:58:7b:8e:02:4b:24:dc:3d:95:cb:33: 76:e1:b4:34:f1:7d:1b:c7:b0:33:9f:55:9a:7f:ea: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.176.0/22 177.8.224.0/20 177.21.0.0/19 177.23.80.0/21 177.136.112.0/20 187.44.128.0/17 189.89.128.0/18 201.55.192.0/22 IPv6: 2804:204::/32 2804:24dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28186 Signature Algorithm: sha256WithRSAEncryption 80:3a:bc:a2:08:94:71:1a:82:32:5d:7a:27:9e:7b:9c:4b:2d: 1e:49:ec:b9:6d:00:3b:94:9f:17:2b:54:78:8d:aa:7a:02:fb: 6a:c5:f1:0c:cf:16:53:b3:0b:16:4b:29:95:e3:39:99:79:73: 8a:2c:ab:3d:47:0a:74:fc:56:ab:6b:03:29:20:5a:48:40:0a: 12:2b:94:f7:ee:9e:45:c1:a0:16:de:94:00:ef:6e:6b:04:8c: 6b:8f:d4:63:89:69:66:d9:74:5c:49:4b:2b:6c:b8:03:fa:2d: 0f:41:af:43:5f:d6:a2:5d:3a:99:ba:b9:a0:4e:54:b4:62:04: 0e:a2:ed:36:48:24:50:8b:cc:08:b5:0a:40:35:fa:9b:a7:ab: 7a:dc:1e:6e:24:59:71:98:9a:6c:0e:bc:3f:e1:ed:c9:55:f0: a6:36:c6:a5:bd:5b:63:8b:87:8a:6f:56:2d:67:b9:b5:1b:9d: 7f:c2:19:a1:f3:54:3c:54:a5:0d:e8:20:e7:d3:5a:c2:67:04: ec:9c:6c:03:7a:e9:c2:29:06:b2:5f:1a:65:5a:92:6f:19:35: 7e:e9:de:bd:a2:db:9b:fc:80:b8:c0:b6:47:1e:02:ac:19:fe: 97:ef:72:00:90:06:aa:05:68:f4:e3:63:ab:ba:22:4f:77:40: 2c:c0:70:39 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUYiRyGso7G3hDX4YvAddp9/aKeuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMzEwODE2MTlaFw0yNzEwMzAwODIxMTlaMDMxMTAvBgNV BAMTKDhDQUM3NUNFMjg4MUNENzY2OUIxQTAwQjk4MTg1RDZCMzU4MzZBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATbLTBAYTTks5lDA1rv1VoNpk gv/drHHHDK46qi/Bd7tkNn4zZ6AKXyJVgRI2NRgml+L0YAiEL1wIAF4Zjt4S0Z+L WG+P/1+dCdxcDANmyEW3mp3vUU2VPLK3iCMjMbZlTW9ZZRE7u9BqBBdwOGFypn75 +Amnu6yHn1q5Fx3Yt4H9pTfzH22q+26zYNSEgRmHcw8hdc50NXop5a7MDoYFA/Eh Xybs1IWWRtjdzutQOv3jhovWRa5D5FyLrQuF+bRglmVko8Ja4/uczGVuYBSmh+TN YFlLnvxNgzqUfUyzZ2u85GNYe44CSyTcPZXLM3bhtDTxfRvHsDOfVZp/6qsrAgMB AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMrHXOKIHNdmmx oAuYGF1rNYNqFjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE5U ZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlFdnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhO VGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzAvOENB Qzc1Q0UyODgxQ0Q3NjY5QjFBMDBCOTgxODVENkIzNTgzNkExNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEH AQH/BFAwTjA2BAIAATAwAwQCinWwAwQEsQjgAwQFsRUAAwQDsRdQAwQEsYhwAwQH uyyAAwQGvVmAAwQCyTfAMBQEAgACMA4DBQAoBAIEAwUAKAQk3DAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJuGjANBgkqhkiG9w0BAQsFAAOCAQEAgDq8ogiUcRqCMl16 J557nEstHknsuW0AO5SfFytUeI2qegL7asXxDM8WU7MLFkspleM5mXlziiyrPUcK dPxWq2sDKSBaSEAKEiuU9+6eRcGgFt6UAO9uawSMa4/UY4lpZtl0XElLK2y4A/ot D0GvQ1/Wol06mbq5oE5UtGIEDqLtNkgkUIvMCLUKQDX6m6eretwebiRZcZiabA68 P+HtyVXwpjbGpb1bY4uHim9WLWe5tRudf8IZofNUPFSlDegg59NawmcE7JxsA3rp wikGsl8aZVqSbxk1funevaLbm/yAuMC2Rx4CrBn+l+9yAJAGqgVo9ONjq7oiT3dA LMBwOQ== -----END CERTIFICATE-----Generated at Sat Oct 31 12:45:14 2026 by rpki-client