$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer File: 9920657508D9060C3C6E939427883A471F4DA34F.cer (raw, json) Hash identifier: E8yHVeh0wdzmniLDpA3BcCcqacZryL9PJNGbJqCAtsQ= Subject key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 40D17831C798A214F1CB55D7A0BF24CBFE5D94B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft caRepository: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Aug 2026 17:42:16 +0000 Certificate not after: Mon 16 Aug 2027 17:47:16 +0000 Subordinate resources: AS: 14868 AS: 262756 IP: 45.4.236.0/22 IP: 45.160.108.0/22 IP: 131.196.88.0/22 IP: 131.255.236.0/22 IP: 138.36.32.0/22 IP: 138.59.68.0/22 IP: 138.59.104.0/22 IP: 138.99.192.0/22 IP: 138.204.24.0/22 IP: 143.255.160.0/22 IP: 167.249.72.0/22 IP: 168.181.48.0/22 IP: 168.194.160.0/22 IP: 170.80.216.0/22 IP: 177.21.224.0/19 IP: 177.38.232.0/21 IP: 177.39.48.0/21 IP: 177.66.72.0/22 IP: 177.86.240.0/22 IP: 177.92.0.0/18 IP: 177.124.56.0/21 IP: 177.220.128.0/18 IP: 179.107.16.0/20 IP: 186.224.32.0/20 IP: 187.16.32.0/19 IP: 187.95.96.0/19 IP: 187.95.132.0 -- 187.95.159.255 IP: 189.85.16.0/20 IP: 191.242.240.0/22 IP: 200.23.68.0/22 IP: 200.124.188.0/22 IP: 200.150.64.0/18 IP: 200.169.72.0/21 IP: 200.192.208.0/21 IP: 200.192.248.0/21 IP: 200.195.128.0 -- 200.195.223.255 IP: 200.219.150.0 -- 200.219.153.255 IP: 200.237.160.0/19 IP: 201.20.176.0/20 IP: 2001:1284::/32 IP: 2804:a0::/32 IP: 2804:15c::/32 IP: 2804:c5c::/32 IP: 2804:182c::/32 IP: 2804:2250::/32 IP: 2804:39e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 01:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d1:78:31:c7:98:a2:14:f1:cb:55:d7:a0:bf:24:cb:fe:5d:94:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 17 17:42:16 2026 GMT Not After : Aug 16 17:47:16 2027 GMT Subject: CN=9920657508D9060C3C6E939427883A471F4DA34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:6b:6b:3a:93:67:cd:35:77:e4:c1:72:4e: 5f:bc:4d:b9:8b:2b:e5:d8:ae:85:80:57:4e:1a:1e: d4:b3:ef:14:fc:59:0e:b9:90:8c:7c:21:ad:05:ed: 30:ea:ec:4f:54:3c:8f:75:b4:6b:b0:4f:c2:26:24: 49:79:80:26:72:f5:39:6d:f1:d1:bb:17:ba:42:9d: 42:3d:89:83:ff:af:f1:ae:e5:c7:ca:61:df:84:8c: a6:de:56:f6:74:61:c8:6d:bf:72:5c:04:c2:2d:b6: af:7a:d6:a2:c8:2a:b1:0d:10:fa:0f:69:15:f9:da: f4:b4:bb:04:90:11:95:87:5e:9f:be:84:23:79:2b: cc:b3:67:89:56:ed:9e:07:8e:a1:a7:cc:ee:c5:f7: bd:05:ca:34:7f:3e:b5:89:66:61:f5:36:4b:39:0b: 3f:02:96:8f:91:a0:b6:ee:e1:52:10:e0:c8:38:3d: 1a:ea:5b:63:ec:f9:d0:6e:35:93:32:54:93:e2:cb: bf:51:c4:d2:aa:c8:06:5b:0f:06:c8:0f:ea:46:fd: f4:86:30:46:85:d4:04:80:09:f4:a3:af:9f:75:fa: 3c:6c:21:96:3c:ce:fd:94:c3:63:75:53:37:9c:91: 7d:9c:64:d0:a0:df:45:0f:f9:1c:fa:a6:c3:20:eb: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.236.0/22 45.160.108.0/22 131.196.88.0/22 131.255.236.0/22 138.36.32.0/22 138.59.68.0/22 138.59.104.0/22 138.99.192.0/22 138.204.24.0/22 143.255.160.0/22 167.249.72.0/22 168.181.48.0/22 168.194.160.0/22 170.80.216.0/22 177.21.224.0/19 177.38.232.0/21 177.39.48.0/21 177.66.72.0/22 177.86.240.0/22 177.92.0.0/18 177.124.56.0/21 177.220.128.0/18 179.107.16.0/20 186.224.32.0/20 187.16.32.0/19 187.95.96.0/19 187.95.132.0-187.95.159.255 189.85.16.0/20 191.242.240.0/22 200.23.68.0/22 200.124.188.0/22 200.150.64.0/18 200.169.72.0/21 200.192.208.0/21 200.192.248.0/21 200.195.128.0-200.195.223.255 200.219.150.0-200.219.153.255 200.237.160.0/19 201.20.176.0/20 IPv6: 2001:1284::/32 2804:a0::/32 2804:15c::/32 2804:c5c::/32 2804:182c::/32 2804:2250::/32 2804:39e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14868 262756 Signature Algorithm: sha256WithRSAEncryption 54:09:32:00:3a:66:4c:53:50:f0:ec:0f:29:4e:42:57:f6:69: a5:53:bc:37:52:f4:79:7c:32:2b:7a:f3:ff:d1:54:34:66:52: 7d:a5:3b:cc:bc:28:10:51:9c:a0:53:4e:a8:ce:f6:16:40:50: b1:a8:80:91:10:03:e3:40:71:69:26:a3:88:ca:43:dc:e9:42: ba:77:cf:b4:d5:09:7c:4f:8f:2b:07:ef:c1:e4:a1:25:50:52: d7:83:c5:b2:43:7e:41:1b:bd:35:77:84:cc:cd:02:76:ef:d6: 9b:60:80:e6:b3:86:dd:08:6b:a3:7c:88:af:5d:b1:ae:5e:53: 1e:50:c3:9a:5d:2d:11:4b:84:1f:5a:ff:4e:65:db:3c:c9:40: e5:91:7b:7f:f9:dc:51:8c:ed:1c:0e:e4:85:7f:ee:4e:cd:af: 5b:95:38:ec:d4:ee:e7:19:3d:33:ab:51:f5:f5:91:06:be:2d: 60:09:a3:7e:8e:03:ca:61:b2:ef:8c:45:f0:4c:ca:34:a2:93: 8a:86:c4:69:be:c5:82:1c:69:a5:1c:01:4b:6a:6f:18:b1:6d: a0:66:05:dd:51:5b:04:7e:30:b9:87:de:c6:86:f9:50:0d:6a: 2e:06:20:3b:9a:bb:05:e6:d2:25:16:7d:c7:9d:93:43:e7:cf: 50:b5:21:d2 -----BEGIN CERTIFICATE----- MIIHZDCCBkygAwIBAgIUQNF4MceYohTxy1XXoL8ky/5dlLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTcxNzQyMTZaFw0yNzA4MTYxNzQ3MTZaMDMxMTAvBgNV BAMTKDk5MjA2NTc1MDhEOTA2MEMzQzZFOTM5NDI3ODgzQTQ3MUY0REEzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT5GtrOpNnzTV35MFyTl+8TbmL K+XYroWAV04aHtSz7xT8WQ65kIx8Ia0F7TDq7E9UPI91tGuwT8ImJEl5gCZy9Tlt 8dG7F7pCnUI9iYP/r/Gu5cfKYd+EjKbeVvZ0Ychtv3JcBMIttq961qLIKrENEPoP aRX52vS0uwSQEZWHXp++hCN5K8yzZ4lW7Z4HjqGnzO7F970FyjR/PrWJZmH1Nks5 Cz8Clo+RoLbu4VIQ4Mg4PRrqW2Ps+dBuNZMyVJPiy79RxNKqyAZbDwbID+pG/fSG MEaF1ASACfSjr591+jxsIZY8zv2Uw2N1UzeckX2cZNCg30UP+Rz6psMg66A7AgMB AAGjggRuMIIEajAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZIGV1CNkGDDxu k5QniDpHH02jTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGtm TExzaE5BOEtCVjFtaUpNZ2p2OTV2Z2ZrdmE4V3pndktVNEFvaGM3WWovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRr ZkxMc2hOQThLQlYxbWlKTWdqdjk1dmdma3ZhOFd6Z3ZLVTRBb2hjN1lqLzIvOTky MDY1NzUwOEQ5MDYwQzNDNkU5Mzk0Mjc4ODNBNDcxRjREQTM0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBXAYIKwYBBQUH AQcBAf8EggFLMIIBRzCCAQoEAgABMIIBAgMEAi0E7AMEAi2gbAMEAoPEWAMEAoP/ 7AMEAookIAMEAoo7RAMEAoo7aAMEAopjwAMEAorMGAMEAo//oAMEAqf5SAMEAqi1 MAMEAqjCoAMEAqpQ2AMEBbEV4AMEA7Em6AMEA7EnMAMEArFCSAMEArFW8AMEBrFc AAMEA7F8OAMEBrHcgAMEBLNrEAMEBLrgIAMEBbsQIAMEBbtfYDAMAwQCu1+EAwQF u1+AAwQEvVUQAwQCv/LwAwQCyBdEAwQCyHy8AwQGyJZAAwQDyKlIAwQDyMDQAwQD yMD4MAwDBAfIw4ADBAXIw8AwDAMEAcjblgMEAcjbmAMEBcjtoAMEBMkUsDA3BAIA AjAxAwUAIAEShAMFACgEAKADBQAoBAFcAwUAKAQMXAMFACgEGCwDBQAoBCJQAwUA KAQ56DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgI6FAIDBAJkMA0GCSqGSIb3DQEB CwUAA4IBAQBUCTIAOmZMU1Dw7A8pTkJX9mmlU7w3UvR5fDIrevP/0VQ0ZlJ9pTvM vCgQUZygU06ozvYWQFCxqICREAPjQHFpJqOIykPc6UK6d8+01Ql8T48rB+/B5KEl UFLXg8WyQ35BG701d4TMzQJ279abYIDms4bdCGujfIivXbGuXlMeUMOaXS0RS4Qf Wv9OZds8yUDlkXt/+dxRjO0cDuSFf+5Oza9blTjs1O7nGT0zq1H19ZEGvi1gCaN+ jgPKYbLvjEXwTMo0opOKhsRpvsWCHGmlHAFLam8YsW2gZgXdUVsEfjC5h97GhvlQ DWouBiA7mrsF5tIlFn3HnZND589QtSHS -----END CERTIFICATE-----Generated at Sun Aug 23 00:30:31 2026 by rpki-client