$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer File: C4A0C992AC81775846EF3EACD736353F739F7D8D.cer (raw, json) Hash identifier: vUzMuGQLfsMo6OR7w+cd1PkmIaOWB2TkQHWtkJm/VMA= Subject key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 056936703178E611A1EE47E0436D9AFED4F4953A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft caRepository: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 Oct 2026 11:48:13 +0000 Certificate not after: Tue 05 Oct 2027 11:53:13 +0000 Subordinate resources: AS: 52545 IP: 131.72.48.0/22 IP: 168.121.168.0/22 IP: 170.82.168.0/22 IP: 179.107.80.0/22 IP: 2804:e1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 23:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:69:36:70:31:78:e6:11:a1:ee:47:e0:43:6d:9a:fe:d4:f4:95:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 6 11:48:13 2026 GMT Not After : Oct 5 11:53:13 2027 GMT Subject: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:8d:47:20:f5:91:e1:38:96:fa:72:bc:95: bd:b7:0d:15:fb:df:5b:e4:85:57:37:75:5e:5f:2d: 7c:f2:d1:ec:9f:8c:51:81:b5:f7:f1:7d:39:57:cb: 08:35:53:58:38:1c:df:7f:d5:73:57:c5:4a:97:22: ec:0e:2b:3b:8f:3e:ec:28:34:08:6d:fe:5d:3b:69: f6:32:3c:1c:54:ca:5a:01:67:d4:39:9a:00:21:06: ce:99:52:ee:d7:c1:57:50:7d:54:0e:71:f4:7a:27: 37:84:ad:15:a2:32:ed:12:50:61:b1:d5:fd:7d:4b: dc:a2:d4:a2:0d:d2:21:13:51:58:be:33:2d:3d:72: e8:c3:3b:6b:4d:79:5c:49:cc:7a:0d:d8:1f:04:6f: 9d:e3:ac:5d:dd:10:f8:6f:6a:e0:90:d4:97:5b:06: 45:f8:9d:8b:68:0a:e7:fd:32:b9:4e:bd:f9:b3:b5: b3:14:54:c3:4c:b5:75:ec:8c:e0:b4:b2:a0:9b:f9: 9b:fa:63:e1:bb:29:c2:68:52:60:1c:c0:66:49:c1: 1a:19:85:b6:f9:66:0d:1d:17:8f:51:5f:5a:94:dd: 23:38:8e:52:7a:41:f0:6b:43:f1:4c:25:6f:e9:b7: 63:50:70:5c:65:54:30:2a:bc:de:f2:26:25:d5:e7: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.48.0/22 168.121.168.0/22 170.82.168.0/22 179.107.80.0/22 IPv6: 2804:e1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52545 Signature Algorithm: sha256WithRSAEncryption d9:c0:b5:b8:6b:50:34:32:d0:13:cf:77:82:52:0c:ee:a4:77: 73:82:15:d0:bb:0a:8a:62:68:8b:96:6b:21:d6:12:c8:e1:59: 75:38:84:f5:62:88:5a:26:44:93:5b:54:98:9b:97:00:d6:8c: 6a:30:a5:e6:58:ce:b7:42:9d:48:56:ba:c0:8c:a6:2a:a0:5e: 66:d3:94:3b:23:a6:c8:78:d8:14:45:cd:0d:ad:d8:f3:59:07: ae:87:f9:d2:38:fc:84:82:23:7b:77:af:68:3c:ce:d9:bd:40: 15:80:e9:9d:3e:49:c7:57:2a:50:20:8f:54:30:e0:3c:80:f3: e0:22:86:30:b3:a3:46:68:06:a5:3a:37:3d:88:0f:62:59:af: d9:0c:de:49:03:d1:57:fb:17:5a:81:1f:ed:54:ab:b8:70:6a: 99:f6:f0:11:fe:c0:9d:eb:9b:4a:70:4a:ef:d8:c7:3c:c9:93: 18:2c:11:19:12:62:59:5e:83:fa:7a:13:0c:6a:c2:00:1a:e9: 78:9e:91:26:e1:2b:70:aa:42:a9:7c:e8:82:0d:94:ad:61:81: a7:62:b4:2b:34:d5:ca:5f:70:da:0f:86:e9:4d:72:16:d4:25: 36:60:41:e5:6a:0f:2f:95:49:0f:61:d8:c6:c2:13:10:28:a4: 99:13:ae:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUBWk2cDF45hGh7kfgQ22a/tT0lTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDYxMTQ4MTNaFw0yNzEwMDUxMTUzMTNaMDMxMTAvBgNV BAMTKEM0QTBDOTkyQUM4MTc3NTg0NkVGM0VBQ0Q3MzYzNTNGNzM5RjdEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGo1HIPWR4TiW+nK8lb23DRX7 31vkhVc3dV5fLXzy0eyfjFGBtffxfTlXywg1U1g4HN9/1XNXxUqXIuwOKzuPPuwo NAht/l07afYyPBxUyloBZ9Q5mgAhBs6ZUu7XwVdQfVQOcfR6JzeErRWiMu0SUGGx 1f19S9yi1KIN0iETUVi+My09cujDO2tNeVxJzHoN2B8Eb53jrF3dEPhvauCQ1Jdb BkX4nYtoCuf9MrlOvfmztbMUVMNMtXXsjOC0sqCb+Zv6Y+G7KcJoUmAcwGZJwRoZ hbb5Zg0dF49RX1qU3SM4jlJ6QfBrQ/FMJW/pt2NQcFxlVDAqvN7yJiXV5+8lAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEoMmSrIF3WEbv PqzXNjU/c599jTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0FM UTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dB TFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAvQzRB MEM5OTJBQzgxNzc1ODQ2RUYzRUFDRDczNjM1M0Y3MzlGN0Q4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCg0gwAwQCqHmoAwQCqlKoAwQCs2tQMA0EAgACMAcD BQAoBA4cMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNQTANBgkqhkiG9w0BAQsF AAOCAQEA2cC1uGtQNDLQE893glIM7qR3c4IV0LsKimJoi5ZrIdYSyOFZdTiE9WKI WiZEk1tUmJuXANaMajCl5ljOt0KdSFa6wIymKqBeZtOUOyOmyHjYFEXNDa3Y81kH rof50jj8hIIje3evaDzO2b1AFYDpnT5Jx1cqUCCPVDDgPIDz4CKGMLOjRmgGpTo3 PYgPYlmv2QzeSQPRV/sXWoEf7VSruHBqmfbwEf7AneubSnBK79jHPMmTGCwRGRJi WV6D+noTDGrCABrpeJ6RJuErcKpCqXzogg2UrWGBp2K0KzTVyl9w2g+G6U1yFtQl NmBB5WoPL5VJD2HYxsITECikmROubA== -----END CERTIFICATE-----Generated at Sun Oct 11 22:28:43 2026 by rpki-client