$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9CB29BFE2084CD41F0EC0E1D99EF1565A8ABA5BF.cer File: 9CB29BFE2084CD41F0EC0E1D99EF1565A8ABA5BF.cer (raw, json) Hash identifier: J9Zms20hrSCHfuaY6+cIbcGqp3LO2cEzrFfG55w2id4= Subject key identifier: 9C:B2:9B:FE:20:84:CD:41:F0:EC:0E:1D:99:EF:15:65:A8:AB:A5:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DB0CBF3252D60814864777EE45DA806A4FB02EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/9CB29BFE2084CD41F0EC0E1D99EF1565A8ABA5BF.mft caRepository: rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 29 Oct 2026 17:34:10 +0000 Certificate not after: Thu 28 Oct 2027 17:39:10 +0000 Subordinate resources: AS: 266310 IP: 170.79.196.0/22 IP: 2804:35d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 16:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b0:cb:f3:25:2d:60:81:48:64:77:7e:e4:5d:a8:06:a4:fb:02:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 29 17:34:10 2026 GMT Not After : Oct 28 17:39:10 2027 GMT Subject: CN=9CB29BFE2084CD41F0EC0E1D99EF1565A8ABA5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:3e:4d:11:da:29:ad:19:62:7e:57:8c:d1: 8a:2f:88:bc:ea:12:b4:02:32:85:30:8e:c0:84:39: 79:18:09:ea:fa:f2:fe:4e:65:7d:fd:45:98:c2:48: 96:e6:c8:b5:43:41:7c:01:27:87:15:3a:9f:28:02: 4b:7a:17:fc:e5:c8:ed:31:87:4e:fa:27:ce:71:66: 0e:54:39:ba:b0:a7:ee:9b:0e:13:71:f7:bd:62:8b: 9b:a8:66:2d:c8:7f:03:be:e9:9d:06:bc:7b:4e:e1: e7:5c:13:e6:ce:39:5a:d5:49:3d:dc:5a:84:25:2a: 43:ac:1f:6f:78:bc:39:3d:a9:e8:ec:d8:e5:12:41: b6:65:00:5b:5b:46:e9:56:7b:fc:45:79:66:2e:af: 3a:ae:06:da:e0:78:6c:37:b7:7e:0d:12:79:51:7f: 4b:20:27:f1:95:4a:36:1c:eb:b1:89:07:4e:51:0f: c4:4b:fe:33:ae:c9:e2:ce:ae:c9:6c:c0:5b:fe:76: 84:6e:ea:e1:53:45:99:c7:ba:fc:a3:07:85:7c:20: 00:87:8a:54:ff:6f:15:4c:03:c7:24:bf:50:18:68: e7:51:f1:46:d7:cc:6b:ed:b4:ab:b8:3d:07:ba:2e: d2:4b:be:9f:60:00:c2:1a:93:26:35:1b:67:2c:7a: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:B2:9B:FE:20:84:CD:41:F0:EC:0E:1D:99:EF:15:65:A8:AB:A5:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/9CB29BFE2084CD41F0EC0E1D99EF1565A8ABA5BF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.196.0/22 IPv6: 2804:35d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266310 Signature Algorithm: sha256WithRSAEncryption 11:a4:e5:b0:bd:a6:a1:63:b7:7b:c9:bf:0e:f0:08:d4:1e:4c: 5f:3e:e9:c3:22:d4:96:a0:b3:c2:3c:cd:7c:49:80:33:d6:24: c5:25:43:76:32:da:50:07:48:f4:37:50:1d:c3:0e:33:84:46: 38:37:fb:77:a4:63:a0:2c:73:50:6d:fc:30:c6:c0:ef:37:3f: 99:e9:93:62:95:4e:bd:1c:a3:6f:0f:f5:72:0d:f0:6d:59:0a: 09:8c:fe:8c:d4:d5:78:d8:9e:a6:de:c1:57:51:fa:72:a9:56: 47:80:5e:93:2e:75:7d:12:e1:63:7f:16:97:d5:48:15:8d:64: 19:1d:5d:81:6f:d4:24:27:e8:a1:33:8d:b5:94:58:cf:c0:f8: 26:18:d0:c5:8b:1d:ae:c2:49:ce:60:16:7d:93:ca:c0:de:28: 4f:7a:5c:21:fd:8c:b2:49:d5:42:ef:a3:a7:d3:be:dc:e1:db: 9f:23:07:08:64:a9:30:ee:a8:fe:df:84:aa:56:8b:97:29:29: 48:40:f3:02:0e:ae:c4:73:f3:a1:b4:49:1b:f1:08:84:fc:4e: ad:95:b6:7a:6a:38:7e:81:94:9b:58:49:e9:f5:2a:46:20:dd: 7a:33:b4:a5:3a:8d:94:53:cc:3d:ea:56:9c:82:ef:4b:72:e1: e4:07:5d:22 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUHbDL8yUtYIFIZHd+5F2oBqT7Au4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjkxNzM0MTBaFw0yNzEwMjgxNzM5MTBaMDMxMTAvBgNV BAMTKDlDQjI5QkZFMjA4NENENDFGMEVDMEUxRDk5RUYxNTY1QThBQkE1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDT5NEdoprRlifleM0YoviLzq ErQCMoUwjsCEOXkYCer68v5OZX39RZjCSJbmyLVDQXwBJ4cVOp8oAkt6F/zlyO0x h076J85xZg5UObqwp+6bDhNx971ii5uoZi3IfwO+6Z0GvHtO4edcE+bOOVrVST3c WoQlKkOsH294vDk9qejs2OUSQbZlAFtbRulWe/xFeWYurzquBtrgeGw3t34NEnlR f0sgJ/GVSjYc67GJB05RD8RL/jOuyeLOrslswFv+doRu6uFTRZnHuvyjB4V8IACH ilT/bxVMA8ckv1AYaOdR8UbXzGvttKu4PQe6LtJLvp9gAMIakyY1G2csetPnAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScspv+IITNQfDs Dh2Z7xVlqKulvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUlp2 WTJTcWpIbVhkYWVrZVR1VmJwcVFvWXB2TURGcllXQ1ByY1Bnc2pXRC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUlp2 WTJTcWpIbVhkYWVrZVR1VmJwcVFvWXB2TURGcllXQ1ByY1Bnc2pXRC8wLzlDQjI5 QkZFMjA4NENENDFGMEVDMEUxRDk5RUYxNTY1QThBQkE1QkYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqpPxDANBAIAAjAHAwUAKAQ12DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEEEYwDQYJKoZIhvcNAQELBQADggEBABGk5bC9pqFjt3vJvw7w CNQeTF8+6cMi1Jags8I8zXxJgDPWJMUlQ3Yy2lAHSPQ3UB3DDjOERjg3+3ekY6As c1Bt/DDGwO83P5npk2KVTr0co28P9XIN8G1ZCgmM/ozU1XjYnqbewVdR+nKpVkeA XpMudX0S4WN/FpfVSBWNZBkdXYFv1CQn6KEzjbWUWM/A+CYY0MWLHa7CSc5gFn2T ysDeKE96XCH9jLJJ1ULvo6fTvtzh258jBwhkqTDuqP7fhKpWi5cpKUhA8wIOrsRz 86G0SRvxCIT8Tq2VtnpqOH6BlJtYSen1KkYg3XoztKU6jZRTzD3qVpyC70ty4eQH XSI= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:55 2026 by rpki-client