$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer (raw, json) Hash identifier: OV7vZfaUU0HUzcgENfShSfccnYIycB26byB0dHtDaG8= Subject key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C7D811BA611CEBCBFD9DB220603DE3A06DEEBA3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft caRepository: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Nov 2026 16:41:22 +0000 Certificate not after: Mon 01 Nov 2027 16:46:22 +0000 Subordinate resources: AS: 263139 IP: 177.44.220.0/22 IP: 2804:1758::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 04:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7d:81:1b:a6:11:ce:bc:bf:d9:db:22:06:03:de:3a:06:de:eb:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 2 16:41:22 2026 GMT Not After : Nov 1 16:46:22 2027 GMT Subject: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:78:3e:8a:60:a5:e8:40:49:92:1a:e8:d5: 1f:4e:d5:bf:54:09:b3:43:5c:c5:cc:cf:6f:39:c0: 9e:ca:9b:25:65:67:5a:33:cf:2c:70:d1:c7:bf:be: 5f:42:d1:a7:1e:69:95:c3:4e:6a:fd:21:47:4c:d9: eb:97:81:1e:e4:3f:1b:78:30:7a:6f:a2:c5:74:2e: c7:8c:af:28:25:e9:28:cf:83:4d:f8:67:7e:de:82: df:76:49:b6:1a:55:fc:35:12:08:0e:95:31:01:f3: 56:75:6c:88:7b:18:29:f2:bd:bf:26:7a:48:d6:b8: 30:98:d2:88:54:b5:66:1f:c0:ad:04:a9:c2:66:95: 87:5e:de:e8:a4:68:ac:af:a2:c0:08:45:d3:c0:d0: 75:d1:a8:d6:10:c4:6d:86:af:3e:8e:f4:4e:e7:1e: 8e:66:e8:24:5a:24:a3:a1:cc:a9:4f:7b:57:f2:b5: 61:4a:26:03:27:7b:77:25:8c:03:46:11:9f:26:7b: 49:b2:4f:cc:c0:09:f9:50:5f:8b:7a:c9:c6:86:73: d3:21:dd:7b:15:a5:48:14:ed:60:64:f8:33:ac:bc: 96:d5:80:d8:89:bb:34:94:82:10:23:da:fb:fa:b3: 40:65:dd:0c:63:56:71:c9:f4:f7:40:c1:8e:04:5c: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.44.220.0/22 IPv6: 2804:1758::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263139 Signature Algorithm: sha256WithRSAEncryption 3f:97:87:e4:7c:3a:fc:e0:f2:ea:4a:a3:dc:3d:47:7d:53:7b: d3:1d:76:cd:a6:5f:5d:81:ed:b8:76:32:94:f9:a6:a7:de:be: bf:8e:c9:a3:e3:77:dc:7c:a7:0d:98:b0:8b:c5:d1:fc:86:0a: c1:bf:75:b5:16:f2:c8:33:d5:cc:79:6d:b0:46:62:7c:b5:6d: 12:69:be:6c:77:3d:78:ae:20:bb:ee:25:d4:99:c9:a8:1c:eb: d6:50:76:63:d6:7f:e9:a6:24:be:22:2d:ba:72:6d:8f:5d:34: 76:84:17:76:c8:81:ba:48:41:40:dc:b6:ce:79:6e:38:e2:a0: b6:96:52:0c:80:c8:9c:95:6d:58:f3:c2:6c:47:54:f5:f4:0f: 6a:87:dd:d2:84:c9:89:b3:bc:e6:04:f2:9e:1b:ef:3d:9d:f6: 99:c0:d2:9c:c3:6f:37:83:a1:9c:ec:b3:10:19:15:ad:4b:45: d3:d4:0a:e1:c9:f5:9b:55:c7:46:02:67:60:f7:33:94:26:1b: 60:ff:6d:3c:d9:41:6c:49:91:8c:9c:e2:60:09:14:d0:64:e3: e6:89:37:03:9f:54:aa:15:b4:9f:74:aa:f2:90:53:42:2e:23: 7f:5b:d3:5a:dc:65:9f:82:5a:f0:e1:2a:6e:a0:11:66:d6:0e: ae:78:08:ad -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfH2BG6YRzry/2dsiBgPeOgbe66MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjExMDIxNjQxMjJaFw0yNzExMDExNjQ2MjJaMDMxMTAvBgNV BAMTKEJERTZFMENEQ0REN0MzMzdENjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KXg+imCl6EBJkhro1R9O1b9U CbNDXMXMz285wJ7KmyVlZ1ozzyxw0ce/vl9C0aceaZXDTmr9IUdM2euXgR7kPxt4 MHpvosV0LseMrygl6SjPg034Z37egt92SbYaVfw1EggOlTEB81Z1bIh7GCnyvb8m ekjWuDCY0ohUtWYfwK0EqcJmlYde3uikaKyvosAIRdPA0HXRqNYQxG2Grz6O9E7n Ho5m6CRaJKOhzKlPe1fytWFKJgMne3cljANGEZ8me0myT8zACflQX4t6ycaGc9Mh 3XsVpUgU7WBk+DOsvJbVgNiJuzSUghAj2vv6s0Bl3QxjVnHJ9PdAwY4EXBlFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS95uDNzdfDN9ZF GmvpSzIcIs8I6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFK Y0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qx SmNFQUd3VXZFQm04RGM0akF0WWRQY2JHRGV1TVpoR1BIdnhmUm40VG5TLzEvQkRF NkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMyMkNGMDhFQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsSzcMA0EAgACMAcDBQAoBBdYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQD4zANBgkqhkiG9w0BAQsFAAOCAQEAP5eH5Hw6/ODy6kqj 3D1HfVN70x12zaZfXYHtuHYylPmmp96+v47Jo+N33HynDZiwi8XR/IYKwb91tRby yDPVzHltsEZifLVtEmm+bHc9eK4gu+4l1JnJqBzr1lB2Y9Z/6aYkviItunJtj100 doQXdsiBukhBQNy2znluOOKgtpZSDIDInJVtWPPCbEdU9fQPaofd0oTJibO85gTy nhvvPZ32mcDSnMNvN4OhnOyzEBkVrUtF09QK4cn1m1XHRgJnYPczlCYbYP9tPNlB bEmRjJziYAkU0GTj5ok3A59UqhW0n3Sq8pBTQi4jf1vTWtxln4Ja8OEqbqARZtYO rngIrQ== -----END CERTIFICATE-----Generated at Tue Nov 3 03:38:36 2026 by rpki-client