$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer File: BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer (raw, json) Hash identifier: ZKv9DEPfkT4eWzmwriZTSfgICSyD9XyxO88CJuMDrto= Subject key identifier: BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A0DCDC1E059EA7663270465C238BD5A96B5019C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.mft caRepository: rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 20 Aug 2026 12:49:57 +0000 Certificate not after: Thu 19 Aug 2027 12:54:57 +0000 Subordinate resources: AS: 266196 IP: 45.6.160.0/22 IP: 191.6.164.0/22 IP: 2804:3c34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 23:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0d:cd:c1:e0:59:ea:76:63:27:04:65:c2:38:bd:5a:96:b5:01:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 20 12:49:57 2026 GMT Not After : Aug 19 12:54:57 2027 GMT Subject: CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:bd:77:32:8d:dd:47:18:9c:af:3e:03:55: 6a:eb:8a:63:5f:39:d9:53:b3:31:ee:4b:38:49:f9: a4:c1:8d:ca:a5:d1:74:94:a5:d7:28:58:09:50:f5: d6:8d:92:ad:4b:94:e9:65:99:9a:0b:79:0f:f2:01: a7:51:16:c8:ab:ce:29:58:42:f9:52:54:d0:f3:1d: f7:32:f2:f2:66:20:f4:66:18:97:61:64:77:6d:f1: 3c:44:0c:43:eb:b6:22:e7:d4:08:47:4d:83:ef:a2: 95:6e:c6:02:e7:da:d2:9c:4a:65:7a:ed:15:76:df: 26:60:70:9a:40:3f:29:27:40:b6:29:ff:b0:c2:ce: b8:03:67:e2:e3:fb:2d:19:ea:03:12:b9:b5:36:26: 8b:d6:5c:5c:99:ce:57:1e:ea:3a:08:6a:6c:6b:4b: 27:f5:08:a7:3b:81:af:c7:01:eb:8b:ec:fc:6d:3c: 4a:c2:cb:c4:61:01:a0:2e:53:12:bc:13:e6:d8:f7: 37:6c:08:51:fc:a5:1a:bb:a0:9d:e3:97:a1:b2:27: 35:39:84:b4:a7:13:64:16:71:df:fc:13:0f:7c:f5: 6e:1f:c9:a0:74:1f:fc:5f:b7:c8:a0:48:2d:84:06: d6:11:36:2a:be:b0:98:45:48:37:10:d5:ad:4b:6d: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.160.0/22 191.6.164.0/22 IPv6: 2804:3c34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266196 Signature Algorithm: sha256WithRSAEncryption 2a:34:41:0c:d2:4c:72:15:90:4a:2f:31:26:d1:e0:44:e5:ea: 0f:c8:bc:56:d2:b8:9d:47:53:d9:7d:41:4e:3e:96:bb:2b:b7: 68:41:1d:2b:99:d8:37:c8:56:56:95:79:da:aa:ba:e1:29:62: ac:d0:53:46:05:2a:3a:a7:a2:5d:a6:12:8e:8d:13:18:e8:d5: 8b:4d:fb:6f:d0:e7:a0:da:3a:2f:17:1e:5a:1a:b7:98:ae:2f: 84:e3:32:1a:1d:be:73:18:5f:27:44:8d:e6:b1:d4:c5:c4:63: 21:30:7f:e3:ad:6d:f0:a9:9d:8c:53:03:30:50:e2:b4:2d:21: 33:05:06:2f:59:44:b5:fe:c5:5d:92:3e:9f:31:63:67:3c:41: a9:5b:0c:1f:d0:59:53:6a:36:e5:55:4a:90:d1:41:a7:08:2f: 4c:2b:be:b5:cd:96:d0:fc:75:34:2d:9d:2d:6e:24:87:ea:62: e6:75:39:29:5d:9a:ed:f4:bb:35:d7:ac:73:2f:c0:10:df:b6: 95:89:16:fc:47:5a:8a:e7:a8:47:ae:9a:63:cb:d8:d7:59:97: 3a:6f:a9:89:5a:5b:19:b0:ab:dc:21:c4:13:a2:a8:81:60:9f: 5e:40:96:35:30:2b:bf:de:c5:f1:8c:e6:34:5d:51:71:2b:5a: 76:5c:0c:f7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOg3NweBZ6nZjJwRlwji9Wpa1AZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjAxMjQ5NTdaFw0yNzA4MTkxMjU0NTdaMDMxMTAvBgNV BAMTKEJEMjE5NjkxNzc5RTQzODE5MjdGNUE1REM4RkMyQjMyRUE5RjQyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpB713Mo3dRxicrz4DVWrrimNf OdlTszHuSzhJ+aTBjcql0XSUpdcoWAlQ9daNkq1LlOllmZoLeQ/yAadRFsirzilY QvlSVNDzHfcy8vJmIPRmGJdhZHdt8TxEDEPrtiLn1AhHTYPvopVuxgLn2tKcSmV6 7RV23yZgcJpAPyknQLYp/7DCzrgDZ+Lj+y0Z6gMSubU2JovWXFyZzlce6joIamxr Syf1CKc7ga/HAeuL7PxtPErCy8RhAaAuUxK8E+bY9zdsCFH8pRq7oJ3jl6GyJzU5 hLSnE2QWcd/8Ew989W4fyaB0H/xft8igSC2EBtYRNiq+sJhFSDcQ1a1LbU4ZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9IZaRd55DgZJ/ Wl3I/Csy6p9C7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0hV Q0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRBZFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dI VUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAvQkQy MTk2OTE3NzlFNDM4MTkyN0Y1QTVEQzhGQzJCMzJFQTlGNDJFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQagAwQCvwakMA0EAgACMAcDBQAoBDw0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQP1DANBgkqhkiG9w0BAQsFAAOCAQEAKjRBDNJM chWQSi8xJtHgROXqD8i8VtK4nUdT2X1BTj6Wuyu3aEEdK5nYN8hWVpV52qq64Sli rNBTRgUqOqeiXaYSjo0TGOjVi037b9DnoNo6LxceWhq3mK4vhOMyGh2+cxhfJ0SN 5rHUxcRjITB/461t8KmdjFMDMFDitC0hMwUGL1lEtf7FXZI+nzFjZzxBqVsMH9BZ U2o25VVKkNFBpwgvTCu+tc2W0Px1NC2dLW4kh+pi5nU5KV2a7fS7Ndescy/AEN+2 lYkW/EdaiueoR66aY8vY11mXOm+piVpbGbCr3CHEE6KogWCfXkCWNTArv97F8Yzm NF1RcStadlwM9w== -----END CERTIFICATE-----Generated at Sat Aug 22 22:44:46 2026 by rpki-client