$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer File: 8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer (raw, json) Hash identifier: PDX2k/rIHRWtp+kDV5tqZpTH4Vp1RC3UtjNzKus8DIE= Subject key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E915AE0199E7F7734DCCC36C1A65B10D15A575C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft caRepository: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 15:42:18 +0000 Certificate not after: Fri 29 Jan 2027 15:47:18 +0000 Subordinate resources: AS: 52689 IP: 177.73.120.0/22 IP: 200.3.16.0/20 IP: 200.9.88.0/22 IP: 200.189.8.0/21 IP: 2804:c4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 22:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:91:5a:e0:19:9e:7f:77:34:dc:cc:36:c1:a6:5b:10:d1:5a:57:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 15:42:18 2026 GMT Not After : Jan 29 15:47:18 2027 GMT Subject: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:79:80:d4:54:fa:0a:2d:b8:e6:80:90:d6: d0:0e:ee:44:d8:9f:dd:e7:0d:00:62:09:ed:41:eb: 7f:41:14:6d:77:76:e2:11:56:eb:a1:fc:06:7b:ae: a1:40:f1:70:03:c9:0f:6b:32:bd:5d:c8:07:d1:21: 8e:f4:0f:95:06:bb:30:59:2b:a9:62:2c:18:48:0a: 22:70:8e:8b:b6:8d:30:c4:e4:ae:a3:3f:9d:1c:36: 73:74:6e:3d:33:70:d3:42:f6:b3:c9:69:3b:7b:65: fa:d0:50:1f:2a:0c:8c:68:1b:5a:1f:eb:0c:52:f2: 63:94:88:d8:77:97:c5:ca:60:93:55:ac:13:2f:ac: 2c:07:9e:47:ae:83:c1:0e:18:e3:f6:76:e6:b9:73: d3:34:f0:cb:8f:29:bb:ee:e8:61:09:d3:d7:22:4f: d5:c5:c4:19:d4:77:7c:a2:87:3e:43:47:5d:bd:9b: c2:ba:3a:e9:76:48:ed:6e:af:63:af:4d:93:4d:ac: 84:e8:1f:a7:9e:a1:3a:a5:ab:77:5f:26:b7:e5:ce: e4:ac:6f:f6:2d:23:ed:83:fc:a7:c5:e8:b4:5c:82: 09:6a:03:92:f5:31:c3:4c:e1:9a:d7:76:26:e9:0f: 4b:cb:d7:20:ff:63:fa:9d:03:3c:f2:12:3f:28:05: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.120.0/22 200.3.16.0/20 200.9.88.0/22 200.189.8.0/21 IPv6: 2804:c4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52689 Signature Algorithm: sha256WithRSAEncryption bf:21:f1:ab:69:5f:68:b7:ec:47:1b:4f:5a:e9:43:be:14:75: c0:67:04:34:6c:fb:73:4b:5a:d9:5b:2a:92:76:f1:87:83:34: 14:bb:5c:59:f8:f2:10:68:ea:9f:88:ec:0f:f7:da:98:71:46: 38:a1:eb:4c:fc:27:b0:18:e8:8e:e0:6f:fb:22:55:2d:b5:47: 89:f1:98:08:e7:eb:f1:ed:b0:f6:48:e5:cc:a4:32:d8:7d:96: 21:8c:02:a6:52:3f:60:62:00:43:86:9b:0a:df:17:80:db:66: 3e:e7:c8:42:6d:ef:e9:bb:b7:a7:66:aa:13:8a:9c:b2:5d:01: 8e:ed:c2:0e:90:00:97:e5:9e:dd:8c:82:50:5f:ff:a6:d6:16: 70:93:14:ca:68:a4:70:d9:94:7e:57:dd:03:71:60:ab:77:58: 9d:1d:10:c0:35:30:73:1a:81:cd:7b:39:ae:98:b8:d8:3b:1a: 23:f1:89:ed:7d:dc:53:6b:ef:b5:33:b1:5f:c3:84:e4:10:b9: 95:ea:43:d7:61:45:16:d3:ef:bc:7c:e1:fc:ba:38:31:d1:a4: 1d:84:0b:2c:9b:4c:9c:98:61:8a:2c:46:80:26:f9:1e:1f:67: 31:71:cb:2d:f1:c9:0a:cc:ca:f1:76:31:54:f2:21:db:2a:7e: ba:70:cc:93 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUTpFa4Bmef3c03Mw2waZbENFaV1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMzAxNTQyMThaFw0yNzAxMjkxNTQ3MThaMDMxMTAvBgNV BAMTKDhFNTk2RjMxRjZDRkU1NzA3OEIxMzAzRTY4RkVCREVFRUFGOTZEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaHmA1FT6Ci245oCQ1tAO7kTY n93nDQBiCe1B639BFG13duIRVuuh/AZ7rqFA8XADyQ9rMr1dyAfRIY70D5UGuzBZ K6liLBhICiJwjou2jTDE5K6jP50cNnN0bj0zcNNC9rPJaTt7ZfrQUB8qDIxoG1of 6wxS8mOUiNh3l8XKYJNVrBMvrCwHnkeug8EOGOP2dua5c9M08MuPKbvu6GEJ09ci T9XFxBnUd3yihz5DR129m8K6Oul2SO1ur2OvTZNNrIToH6eeoTqlq3dfJrflzuSs b/YtI+2D/KfF6LRcgglqA5L1McNM4ZrXdibpD0vL1yD/Y/qdAzzyEj8oBf6vAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOWW8x9s/lcHix MD5o/r3u6vlt3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTQ4 aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQzdGkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0 OGlEMmg4WHZ3a2lCTkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAvOEU1 OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVFQUY5NkRERS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCsUl4AwQEyAMQAwQCyAlYAwQDyL0IMA0EAgACMAcD BQAoBAxMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDN0TANBgkqhkiG9w0BAQsF AAOCAQEAvyHxq2lfaLfsRxtPWulDvhR1wGcENGz7c0ta2Vsqknbxh4M0FLtcWfjy EGjqn4jsD/famHFGOKHrTPwnsBjojuBv+yJVLbVHifGYCOfr8e2w9kjlzKQy2H2W IYwCplI/YGIAQ4abCt8XgNtmPufIQm3v6bu3p2aqE4qcsl0Bju3CDpAAl+We3YyC UF//ptYWcJMUymikcNmUflfdA3Fgq3dYnR0QwDUwcxqBzXs5rpi42DsaI/GJ7X3c U2vvtTOxX8OE5BC5lepD12FFFtPvvHzh/Lo4MdGkHYQLLJtMnJhhiixGgCb5Hh9n MXHLLfHJCszK8XYxVPIh2yp+unDMkw== -----END CERTIFICATE-----Generated at Mon Feb 23 00:21:22 2026 by rpki-client