$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer File: 8D649BA756DE234532A1E9A858DEBF41843906BD.cer (raw, json) Hash identifier: 65d5kKjBIhO6X6sn1HSaSRP5mmdmGvu3Y/QVm+GoW58= Subject key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 68805644D593A7BEFBCA14A5B89E2FF443D70C53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft caRepository: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 18 May 2026 21:27:00 +0000 Certificate not after: Mon 17 May 2027 21:32:00 +0000 Subordinate resources: AS: 263427 IP: 45.162.240.0/22 IP: 170.0.200.0/22 IP: 177.91.44.0/22 IP: 2804:119c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:80:56:44:d5:93:a7:be:fb:ca:14:a5:b8:9e:2f:f4:43:d7:0c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 18 21:27:00 2026 GMT Not After : May 17 21:32:00 2027 GMT Subject: CN=8D649BA756DE234532A1E9A858DEBF41843906BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0e:ed:5c:a6:53:75:85:d7:04:9d:f2:e5:70: ed:ef:76:89:31:7e:23:01:d9:f9:d3:f9:e5:3c:2f: 6f:49:92:6a:33:bc:99:f7:b6:f8:da:bb:78:42:59: 1f:78:4b:59:25:5b:83:a5:c0:98:1d:e7:6c:cc:f0: be:90:60:f8:f0:6f:f6:56:85:92:f4:97:33:d7:4f: c1:63:3a:d2:17:85:6f:11:cc:6f:58:90:f8:e1:ae: cd:59:57:60:ff:e4:88:61:cd:2e:a3:54:6c:e5:77: d3:fb:94:de:1e:f2:64:cc:06:38:fc:31:45:13:27: 65:61:7c:35:06:a4:9c:49:d3:dc:66:6a:c4:1c:d8: e4:8d:f9:94:1b:51:4e:a2:de:92:8f:a5:fa:d2:bc: ba:00:24:c9:7e:fd:64:2b:ce:ab:75:44:bf:46:49: 09:05:76:46:bd:6e:06:80:9a:7b:0a:41:71:32:6f: 94:96:2c:53:04:43:e6:72:01:d3:5c:6e:b7:fb:85: bc:6c:dd:4f:73:84:47:e7:18:38:3f:d3:5e:be:bb: 93:e3:c8:18:8b:2f:00:08:2d:96:3b:e9:34:3e:ae: 9e:35:01:a3:23:9a:b3:8e:fc:cc:81:18:c4:70:4d: e0:b2:9e:de:b4:d1:00:bd:ef:c8:2e:89:61:10:a8: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.240.0/22 170.0.200.0/22 177.91.44.0/22 IPv6: 2804:119c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263427 Signature Algorithm: sha256WithRSAEncryption da:a9:8b:46:d2:91:ad:4e:49:80:79:ef:fa:d1:5e:e3:97:3f: 24:f6:37:0d:44:1d:63:62:cf:ad:e3:7f:13:25:83:db:15:49: 19:73:47:9b:3f:78:52:bd:28:b7:e2:9c:14:11:2b:42:90:d9: 46:40:22:17:b5:f2:eb:97:ed:5e:b1:dc:42:c6:3d:8a:9e:01: 35:88:47:c2:0d:cc:fd:a2:02:9f:d6:31:d7:f5:c8:c5:19:73: 93:f1:0b:f6:ca:ed:3e:b5:2c:d1:be:ee:05:56:0c:04:8f:ee: 9a:3a:9b:bf:2b:47:d6:99:79:1a:b0:72:a4:4e:9b:19:05:f0: d2:78:df:80:ce:c3:fc:6b:1b:21:a4:39:be:2d:29:80:7a:b7: c4:8f:8c:06:86:13:f7:bb:1a:d2:48:79:21:57:fe:d5:3f:47: 19:4b:40:15:c2:8c:24:f0:5c:57:25:f2:3a:0f:e6:a7:92:32: b3:fb:6d:cc:bb:ff:d5:57:e8:1e:94:68:07:a3:a0:9f:dc:96: b2:23:6f:33:d2:5a:52:c0:03:a3:5b:36:2d:2a:58:08:a2:e1: 92:1e:ec:1e:84:e5:d5:e5:3e:85:5e:12:94:a0:0a:42:6f:51: a1:c9:53:2f:f5:6e:bd:b8:72:dc:3e:64:84:0f:1d:51:32:a8: be:2f:e9:31 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUaIBWRNWTp777yhSluJ4v9EPXDFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTgyMTI3MDBaFw0yNzA1MTcyMTMyMDBaMDMxMTAvBgNV BAMTKDhENjQ5QkE3NTZERTIzNDUzMkExRTlBODU4REVCRjQxODQzOTA2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwDu1cplN1hdcEnfLlcO3vdokx fiMB2fnT+eU8L29JkmozvJn3tvjau3hCWR94S1klW4OlwJgd52zM8L6QYPjwb/ZW hZL0lzPXT8FjOtIXhW8RzG9YkPjhrs1ZV2D/5IhhzS6jVGzld9P7lN4e8mTMBjj8 MUUTJ2VhfDUGpJxJ09xmasQc2OSN+ZQbUU6i3pKPpfrSvLoAJMl+/WQrzqt1RL9G SQkFdka9bgaAmnsKQXEyb5SWLFMEQ+ZyAdNcbrf7hbxs3U9zhEfnGDg/016+u5Pj yBiLLwAILZY76TQ+rp41AaMjmrOO/MyBGMRwTeCynt600QC978guiWEQqN/ZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNZJunVt4jRTKh 6ahY3r9BhDkGvTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdH eHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16TTQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3 R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAvOEQ2 NDlCQTc1NkRFMjM0NTMyQTFFOUE4NThERUJGNDE4NDM5MDZCRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLaLwAwQCqgDIAwQCsVssMA0EAgACMAcDBQAoBBGc MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFAzANBgkqhkiG9w0BAQsFAAOCAQEA 2qmLRtKRrU5JgHnv+tFe45c/JPY3DUQdY2LPreN/EyWD2xVJGXNHmz94Ur0ot+Kc FBErQpDZRkAiF7Xy65ftXrHcQsY9ip4BNYhHwg3M/aICn9Yx1/XIxRlzk/EL9srt PrUs0b7uBVYMBI/umjqbvytH1pl5GrBypE6bGQXw0njfgM7D/GsbIaQ5vi0pgHq3 xI+MBoYT97sa0kh5IVf+1T9HGUtAFcKMJPBcVyXyOg/mp5Iys/ttzLv/1VfoHpRo B6Ogn9yWsiNvM9JaUsADo1s2LSpYCKLhkh7sHoTl1eU+hV4SlKAKQm9RoclTL/Vu vbhy3D5khA8dUTKovi/pMQ== -----END CERTIFICATE-----Generated at Sun May 24 11:58:38 2026 by rpki-client