$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer File: ACEF8FA1F536657A209246B168B346C65044943D.cer (raw, json) Hash identifier: MIPGGYhFgQx7uQ+u5+VcgAiXjX8VkdthL8QSh2oQk/k= Subject key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C61A088F1D2577CAD16025B0DD1291BA7A935A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft caRepository: rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 24 Oct 2026 08:29:38 +0000 Certificate not after: Sat 23 Oct 2027 08:34:38 +0000 Subordinate resources: AS: 266534 IP: 160.238.144.0/22 IP: 2804:3d7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 07:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:61:a0:88:f1:d2:57:7c:ad:16:02:5b:0d:d1:29:1b:a7:a9:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 08:29:38 2026 GMT Not After : Oct 23 08:34:38 2027 GMT Subject: CN=ACEF8FA1F536657A209246B168B346C65044943D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:40:c7:7b:82:5b:3f:f3:5b:4d:72:e3:f0: cc:45:03:d6:24:37:40:ce:cb:9a:0c:87:aa:cb:c1: 09:f5:f8:2c:b0:8c:61:0e:7a:42:f4:5d:6d:c5:c8: 67:7d:76:0f:ed:2f:60:04:d9:6d:7e:b1:8b:a5:85: 6d:ce:07:f8:d2:81:47:66:04:37:cb:a8:04:ec:bf: 33:a4:99:cf:f5:4a:39:f6:10:20:83:bf:7e:43:2b: b8:e4:cc:a2:73:c9:8c:5c:a7:64:e2:04:46:d5:bc: 99:2c:96:d0:6b:cc:54:dc:22:23:c1:36:e4:7c:39: 8b:92:ef:f6:88:6a:79:f1:39:b3:b0:19:ff:09:3f: 67:3a:c8:40:7b:43:7c:a2:7e:a4:6e:27:99:36:bb: e1:a3:aa:e3:7a:35:8d:41:f7:e8:36:47:a9:39:09: 19:77:1d:9e:dd:32:c1:94:4a:b2:1b:02:e2:6e:94: c5:ff:5b:1f:23:0a:19:e2:cb:44:9f:54:df:2f:67: c3:76:4b:3e:28:f8:37:2b:b5:93:aa:14:ad:cf:0e: 97:eb:ad:36:10:e0:22:67:f4:f2:07:1e:8b:f3:24: bb:ef:3c:a8:12:8a:45:ec:6e:95:62:89:16:f4:61: 99:7d:6f:de:bd:24:d8:c5:f8:b2:73:96:eb:33:dc: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.144.0/22 IPv6: 2804:3d7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266534 Signature Algorithm: sha256WithRSAEncryption bd:28:f6:af:57:b0:18:99:5a:fc:9b:94:e2:85:41:dd:04:41: 49:99:73:d6:3a:00:56:11:99:86:18:8c:93:49:90:b1:83:d2: 91:6f:59:4c:f1:99:c4:a7:89:bf:7c:56:ec:2e:53:b7:44:94: 2f:77:c3:ec:6a:80:84:ba:5b:a1:05:25:85:5a:8a:ea:5c:63: 80:e9:19:18:91:ca:22:77:ce:db:f4:88:73:18:79:be:0a:16: f3:ca:e8:dd:bf:eb:1f:db:8f:bb:e7:e4:5b:2a:24:11:2b:d6: 17:25:71:42:3a:95:c1:c5:7d:d8:47:d0:9c:ec:b1:2b:b5:ff: a9:7e:3a:4e:cd:3a:bc:ea:56:73:42:6e:26:8c:43:aa:da:63: 2b:80:e9:3e:e7:47:d7:0d:6a:07:76:f2:96:e6:6e:f1:ce:1c: ed:f4:07:ae:14:bd:7b:f9:48:f6:94:07:fe:7d:2d:fb:d4:c4: 40:cd:7b:4c:94:88:ca:5e:d4:69:72:3a:bb:17:01:fc:3c:f0: be:29:1a:72:d8:9e:34:a5:ce:cd:d3:ac:ec:af:2d:89:e1:d8: 61:36:11:ff:5a:a4:eb:11:ae:45:e7:b5:65:44:f0:81:97:ff: 2a:42:eb:d6:0b:91:5a:3b:0b:fa:f9:f1:3c:c6:16:73:c1:eb: 58:10:f9:1d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPGGgiPHSV3ytFgJbDdEpG6epNaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjQwODI5MzhaFw0yNzEwMjMwODM0MzhaMDMxMTAvBgNV BAMTKEFDRUY4RkExRjUzNjY1N0EyMDkyNDZCMTY4QjM0NkM2NTA0NDk0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClp0DHe4JbP/NbTXLj8MxFA9Yk N0DOy5oMh6rLwQn1+CywjGEOekL0XW3FyGd9dg/tL2AE2W1+sYulhW3OB/jSgUdm BDfLqATsvzOkmc/1Sjn2ECCDv35DK7jkzKJzyYxcp2TiBEbVvJksltBrzFTcIiPB NuR8OYuS7/aIannxObOwGf8JP2c6yEB7Q3yifqRuJ5k2u+GjquN6NY1B9+g2R6k5 CRl3HZ7dMsGUSrIbAuJulMX/Wx8jChniy0SfVN8vZ8N2Sz4o+DcrtZOqFK3PDpfr rTYQ4CJn9PIHHovzJLvvPKgSikXsbpViiRb0YZl9b969JNjF+LJzlusz3NaLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs74+h9TZleiCS RrFos0bGUESUPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmpv TENlY0Q4UlhSOFRudzRZaHBHMWhHaFhza2Z3WGVycW5Kd2FjZ2tSOGEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zq b0xDZWNEOFJYUjhUbnc0WWhwRzFoR2hYc2tmd1hlcnFuSndhY2drUjhhLzAvQUNF RjhGQTFGNTM2NjU3QTIwOTI0NkIxNjhCMzQ2QzY1MDQ0OTQzRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoO6QMA0EAgACMAcDBQAoBD18MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRJjANBgkqhkiG9w0BAQsFAAOCAQEAvSj2r1ewGJla/JuU 4oVB3QRBSZlz1joAVhGZhhiMk0mQsYPSkW9ZTPGZxKeJv3xW7C5Tt0SUL3fD7GqA hLpboQUlhVqK6lxjgOkZGJHKInfO2/SIcxh5vgoW88ro3b/rH9uPu+fkWyokESvW FyVxQjqVwcV92EfQnOyxK7X/qX46Ts06vOpWc0JuJoxDqtpjK4DpPudH1w1qB3by luZu8c4c7fQHrhS9e/lI9pQH/n0t+9TEQM17TJSIyl7UaXI6uxcB/Dzwvikactie NKXOzdOs7K8tieHYYTYR/1qk6xGuRee1ZUTwgZf/KkLr1guRWjsL+vnxPMYWc8Hr WBD5HQ== -----END CERTIFICATE-----Generated at Wed Nov 4 06:00:09 2026 by rpki-client