$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer File: 97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer (raw, json) Hash identifier: 2s13bd6lolLvc8G9EdKKqtGB27Og32zgpZyvPzIcPcM= Subject key identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29A53E590DAC93C68B670E838EB54A5D149F6BE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft caRepository: rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 11 Sep 2026 18:17:14 +0000 Certificate not after: Fri 10 Sep 2027 18:22:14 +0000 Subordinate resources: AS: 266361 IP: 170.239.144.0/22 IP: 2804:36a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Oct 2026 23:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a5:3e:59:0d:ac:93:c6:8b:67:0e:83:8e:b5:4a:5d:14:9f:6b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 11 18:17:14 2026 GMT Not After : Sep 10 18:22:14 2027 GMT Subject: CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:32:04:bb:34:a7:dd:5e:28:87:7c:6a:42: 75:93:f0:f1:ae:fb:b6:33:67:f3:09:f3:d3:4d:a5: 87:10:bf:ff:32:3a:0a:ae:5e:ce:e6:25:cb:09:ac: 21:02:4f:90:4e:da:0c:5a:3c:bc:df:de:5c:2c:e0: 01:87:59:c5:66:d2:e8:fe:44:5e:c2:7c:cc:5d:13: dd:2a:d3:a2:dd:63:33:94:12:82:d3:f3:aa:7d:1c: 5c:8d:bc:2f:77:19:46:84:8b:3c:0a:54:f6:a0:94: 93:44:d8:50:b0:37:34:88:17:79:b8:83:5c:55:ce: 29:18:f4:a6:8b:64:8f:9b:37:3b:86:c3:5d:45:e8: 97:32:87:30:dd:17:dd:0d:7a:46:b2:13:0a:a6:f3: 22:67:fa:05:d5:17:4b:a2:c5:8c:22:db:c0:98:03: 04:ec:49:d7:13:87:70:31:51:de:16:95:73:60:4c: 0c:fd:8e:ba:34:3f:3d:73:84:30:a5:b2:af:55:53: 4b:22:aa:5e:84:ef:9f:72:ec:3c:32:ca:04:15:24: 98:29:aa:c8:e4:b5:0b:e2:02:13:2e:86:71:f5:12: cd:7f:40:08:45:9e:ba:fb:60:a6:5d:55:7c:c7:05: 94:a7:b2:37:ad:52:a3:77:28:e5:2e:80:70:8b:0a: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.144.0/22 IPv6: 2804:36a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266361 Signature Algorithm: sha256WithRSAEncryption 1f:93:c8:fd:49:dd:b2:15:81:b0:15:07:6e:4c:8b:3a:a8:8c: 31:b3:2b:7f:71:b0:c7:96:ff:bf:d7:29:54:a4:b5:73:f2:a8: 13:fa:0e:39:b6:b7:f0:0c:9e:28:54:1d:01:9f:a6:d4:9f:2e: 82:a4:60:fc:55:8a:8f:6a:dd:9f:e8:4d:b9:45:66:2a:60:23: 7d:0b:a6:bb:50:eb:4d:8a:f7:a7:9a:c0:f4:29:bc:4d:fe:00: c6:5d:53:b0:f4:e0:12:05:ef:58:80:e2:89:56:b6:66:37:5f: 77:7d:78:26:74:52:7f:ff:5e:1c:99:1f:25:84:36:cf:59:86: 5c:b4:72:a1:d6:71:31:68:9c:8d:41:89:6d:c9:0f:3d:84:71: f6:31:7c:32:8a:57:12:0d:bf:1a:ac:b2:1c:6f:2b:cf:3e:d6: ea:97:10:ac:62:0e:4a:7b:1a:37:96:1e:40:bf:09:ed:30:ae: 15:d4:2a:f0:ad:d1:f1:61:81:5d:0b:ca:5c:88:6b:a1:c0:87: cc:81:87:a3:fb:c0:2e:b4:a6:3d:66:16:ea:7d:70:4a:cf:e3: 2e:c4:7c:31:95:0e:4c:a8:7b:d9:f5:db:b7:cf:2e:f6:5f:75: 7b:15:ed:90:50:6d:4a:f0:1d:61:9e:b9:1c:f5:86:e6:e5:c2: 61:6d:d7:37 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKaU+WQ2sk8aLZw6DjrVKXRSfa+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTExODE3MTRaFw0yNzA5MTAxODIyMTRaMDMxMTAvBgNV BAMTKDk3QjA1NDFDNTRGNzNFRTlFRjIxODJGN0UwNzkzQTA2QTY2NEQ2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPjIEuzSn3V4oh3xqQnWT8PGu +7YzZ/MJ89NNpYcQv/8yOgquXs7mJcsJrCECT5BO2gxaPLzf3lws4AGHWcVm0uj+ RF7CfMxdE90q06LdYzOUEoLT86p9HFyNvC93GUaEizwKVPaglJNE2FCwNzSIF3m4 g1xVzikY9KaLZI+bNzuGw11F6JcyhzDdF90NekayEwqm8yJn+gXVF0uixYwi28CY AwTsSdcTh3AxUd4WlXNgTAz9jro0Pz1zhDClsq9VU0siql6E759y7DwyygQVJJgp qsjktQviAhMuhnH1Es1/QAhFnrr7YKZdVXzHBZSnsjetUqN3KOUugHCLCs39AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXsFQcVPc+6e8h gvfgeToGpmTWvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzFx MXQxdlo4cndZYmZKQk5ZNlR6NGtyZXozWVdNQUYyYWlUV1pQVmJGcXcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMx cTF0MXZaOHJ3WWJmSkJOWTZUejRrcmV6M1lXTUFGMmFpVFdaUFZiRnF3LzAvOTdC MDU0MUM1NEY3M0VFOUVGMjE4MkY3RTA3OTNBMDZBNjY0RDZCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu+QMA0EAgACMAcDBQAoBDakMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQeTANBgkqhkiG9w0BAQsFAAOCAQEAH5PI/UndshWBsBUH bkyLOqiMMbMrf3Gwx5b/v9cpVKS1c/KoE/oOOba38AyeKFQdAZ+m1J8ugqRg/FWK j2rdn+hNuUVmKmAjfQumu1DrTYr3p5rA9Cm8Tf4Axl1TsPTgEgXvWIDiiVa2Zjdf d314JnRSf/9eHJkfJYQ2z1mGXLRyodZxMWicjUGJbckPPYRx9jF8MopXEg2/Gqyy HG8rzz7W6pcQrGIOSnsaN5YeQL8J7TCuFdQq8K3R8WGBXQvKXIhrocCHzIGHo/vA LrSmPWYW6n1wSs/jLsR8MZUOTKh72fXbt88u9l91exXtkFBtSvAdYZ65HPWG5uXC YW3XNw== -----END CERTIFICATE-----Generated at Tue Oct 6 23:20:50 2026 by rpki-client