$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer File: AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer (raw, json) Hash identifier: 639W/6vJ9mKdpcZ7fJWJn0CvZcU0xtSv5G6ksr79h0o= Subject key identifier: AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A2BD0739A024C2D347713250329E213B2A8A180 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft caRepository: rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Aug 2026 22:54:08 +0000 Certificate not after: Fri 27 Aug 2027 22:59:08 +0000 Subordinate resources: AS: 268627 IP: 45.164.164.0/22 IP: 2804:5414::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 20:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2b:d0:73:9a:02:4c:2d:34:77:13:25:03:29:e2:13:b2:a8:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 28 22:54:08 2026 GMT Not After : Aug 27 22:59:08 2027 GMT Subject: CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:3d:ee:78:db:d7:25:17:07:7e:0c:a9:ec: 11:88:05:47:b7:c1:e7:54:bb:95:f3:be:e2:3f:de: fd:33:86:c4:cb:71:d1:6f:56:97:ca:27:cf:82:a6: 9d:8b:f9:b1:5a:66:5b:39:69:7f:50:5e:60:08:f4: 52:42:e0:69:84:ca:85:11:41:0f:1b:24:41:33:29: 3e:9b:55:14:2a:35:ba:c0:60:82:10:77:7e:48:b9: 25:92:ea:74:0f:31:93:ac:fc:1d:97:fd:ee:0a:38: de:fd:7c:e4:84:e1:b1:96:4c:b9:69:53:46:25:26: 9e:e7:ad:3c:74:90:59:23:ea:d9:70:12:60:79:33: 3f:70:ad:ad:bb:3d:43:5c:74:df:46:31:db:63:bf: d7:c2:9f:c6:7e:97:5c:8c:a7:a0:3a:5d:e5:8a:72: 41:30:b3:e6:2f:f1:3a:52:cb:1c:b4:71:97:5f:82: a2:32:45:3c:7c:87:d6:cb:56:ee:e0:4b:ce:c2:18: 4e:3c:9a:61:f6:43:0c:70:ba:ee:47:6b:a6:8a:9c: 69:bf:2e:03:e7:a5:a2:ae:80:93:77:ee:6e:f1:03: 62:a6:43:a4:4e:14:c9:94:ab:fe:81:83:a1:ae:c9: 43:af:80:b2:de:f3:c4:75:5a:3e:dc:54:bf:dd:89: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.164.0/22 IPv6: 2804:5414::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268627 Signature Algorithm: sha256WithRSAEncryption b5:f6:b2:92:80:c4:0c:b0:b1:d6:e6:94:5d:a3:ec:47:e5:ca: d3:29:bd:bb:4c:e0:d4:8a:ce:2b:0c:74:77:f6:5a:79:2b:ec: 90:04:ea:4f:92:d3:00:3f:2d:a2:97:f2:9a:ea:38:91:61:b2: e7:65:88:b1:eb:5d:72:1c:63:fa:b5:a1:db:9c:0b:39:f4:98: 4f:ee:d8:1a:8c:96:b7:1b:62:ac:a8:68:04:02:c3:1d:41:dd: bc:54:41:bd:5e:d7:9b:47:1d:7c:6e:aa:a1:c2:c2:44:1c:29: 81:57:ba:f3:66:8d:af:4d:05:9d:c0:0c:f2:37:92:13:59:d4: 71:07:d5:57:98:e8:3d:60:14:1b:18:fb:87:63:94:c4:c0:7a: 18:7f:db:98:cf:a0:3b:46:1e:64:b4:f3:8d:44:55:93:b3:ef: c7:9b:fd:42:4d:0e:a0:b4:8d:31:3a:24:59:47:95:80:07:41: 29:3a:37:4d:32:e5:f7:80:ab:b2:c5:70:75:3c:80:55:63:f9: 48:06:78:33:eb:8a:62:81:41:d3:c5:52:8e:56:68:bd:f4:2a: cf:7b:a2:ef:51:2c:d3:44:2d:cf:93:65:a4:2c:28:3b:63:31: 32:df:72:72:30:c7:94:c6:84:2c:d4:96:a1:58:66:ff:c9:b2: 3a:27:c0:9e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOivQc5oCTC00dxMlAyniE7KooYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjgyMjU0MDhaFw0yNzA4MjcyMjU5MDhaMDMxMTAvBgNV BAMTKEFGRkRFQzIyNjEwOERGQkNDOUI4OEE1OEMwNTE0NDM2MEEzQjg0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5z3ueNvXJRcHfgyp7BGIBUe3 wedUu5XzvuI/3v0zhsTLcdFvVpfKJ8+Cpp2L+bFaZls5aX9QXmAI9FJC4GmEyoUR QQ8bJEEzKT6bVRQqNbrAYIIQd35IuSWS6nQPMZOs/B2X/e4KON79fOSE4bGWTLlp U0YlJp7nrTx0kFkj6tlwEmB5Mz9wra27PUNcdN9GMdtjv9fCn8Z+l1yMp6A6XeWK ckEws+Yv8TpSyxy0cZdfgqIyRTx8h9bLVu7gS87CGE48mmH2Qwxwuu5Ha6aKnGm/ LgPnpaKugJN37m7xA2KmQ6ROFMmUq/6Bg6GuyUOvgLLe88R1Wj7cVL/diQpNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv/ewiYQjfvMm4 iljAUUQ2CjuEdjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGZQ cHNRZENUSHBrYUFjcTE3cTl3dGRuczlndkoyaGJlTTRvZ3k5blJ3dUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRm UHBzUWRDVEhwa2FBY3ExN3E5d3RkbnM5Z3ZKMmhiZU00b2d5OW5Sd3VELzAvQUZG REVDMjI2MTA4REZCQ0M5Qjg4QTU4QzA1MTQ0MzYwQTNCODQ3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaSkMA0EAgACMAcDBQAoBFQUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZUzANBgkqhkiG9w0BAQsFAAOCAQEAtfaykoDEDLCx1uaU XaPsR+XK0ym9u0zg1IrOKwx0d/ZaeSvskATqT5LTAD8topfymuo4kWGy52WIsetd chxj+rWh25wLOfSYT+7YGoyWtxtirKhoBALDHUHdvFRBvV7Xm0cdfG6qocLCRBwp gVe682aNr00FncAM8jeSE1nUcQfVV5joPWAUGxj7h2OUxMB6GH/bmM+gO0YeZLTz jURVk7Pvx5v9Qk0OoLSNMTokWUeVgAdBKTo3TTLl94CrssVwdTyAVWP5SAZ4M+uK YoFB08VSjlZovfQqz3ui71Es00Qtz5NlpCwoO2MxMt9ycjDHlMaELNSWoVhm/8my OifAng== -----END CERTIFICATE-----Generated at Sun Oct 11 23:44:49 2026 by rpki-client