$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer File: C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer (raw, json) Hash identifier: /RsOX0lScTLT5PDFkBFX1ogfZkXbDkb6x+Xq4wVSUuU= Subject key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 301D015981256F528525B00BD6851231B44F3DFE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft caRepository: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 14:13:25 +0000 Certificate not after: Tue 10 Aug 2027 14:18:25 +0000 Subordinate resources: AS: 264323 IP: 138.121.244.0/22 IP: 2804:2620::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 04:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1d:01:59:81:25:6f:52:85:25:b0:0b:d6:85:12:31:b4:4f:3d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 11 14:13:25 2026 GMT Not After : Aug 10 14:18:25 2027 GMT Subject: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:28:79:76:8a:a4:ee:cf:62:94:e8:5d:2c: a1:60:1b:08:6a:90:57:3c:ea:77:d3:17:f8:97:ae: 33:75:43:ff:33:1e:98:90:20:70:05:95:49:9a:27: 13:b9:f9:9e:54:6f:29:da:cf:d5:0b:3d:b2:f8:31: e4:72:1a:a1:9f:8d:59:16:90:6e:7c:a8:b1:09:58: 6d:79:25:7f:ff:c6:ef:0d:fb:d7:3d:03:7f:3c:16: ad:64:eb:77:90:58:54:d2:4c:f6:3c:c7:33:3f:99: ff:8a:18:b1:91:89:5a:70:08:a7:80:8e:55:66:36: fe:67:8d:44:85:70:26:7a:84:e5:11:b3:54:85:f4: 60:c8:c0:19:50:89:b8:3e:60:07:92:4b:b4:2b:6f: 5b:17:11:21:43:a5:94:14:a7:a0:89:fd:83:a5:51: 9e:d3:53:97:af:53:92:be:66:ce:d4:a3:f6:cb:3d: d0:8d:6c:a6:49:d0:5c:bc:51:3d:a8:fb:ae:bb:0a: fe:fd:0b:4b:d6:45:b5:28:b1:52:78:dc:f1:3b:62: 6f:7e:08:e1:55:65:78:fb:ba:d9:ca:f9:fe:28:c1: 0f:5a:c3:e1:d4:61:e4:69:6b:82:94:d4:dd:93:a4: a3:69:64:8b:99:82:3d:82:d0:d9:7d:21:e3:d1:df: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.244.0/22 IPv6: 2804:2620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264323 Signature Algorithm: sha256WithRSAEncryption 8f:a4:7e:73:44:1f:5b:26:a0:c6:f1:b5:9e:f4:e3:c4:58:27: 91:b6:00:e3:db:e5:55:03:6a:b7:b1:52:fb:64:07:a7:a7:89: 1e:b3:66:bb:cd:3b:94:94:81:28:2f:bf:cb:1a:f0:d4:5e:07: 2e:32:c4:c2:67:5f:c8:6e:a5:b6:63:88:f7:e1:f0:d5:d9:ff: 9f:2b:b7:2c:9c:4f:f4:1f:c5:15:63:f2:e7:63:73:bc:5c:5c: 79:71:c2:84:17:a6:8d:89:28:30:4d:19:a6:15:8c:b0:5f:80: 52:c5:4d:7a:8c:0d:b6:5b:a4:76:6a:fd:c6:2e:b2:92:f0:d7: 3f:e2:60:4d:18:a0:c9:74:8b:e7:23:3a:00:68:7f:53:07:9d: 89:72:cf:83:a2:68:b9:34:ce:0c:10:4b:1d:eb:a5:21:fb:d7: b3:e1:6f:4f:bc:f2:bf:ae:8c:b4:61:b7:e8:a8:4a:9e:3b:6a: fe:96:ff:78:30:9c:0f:ce:fc:73:9f:dc:fb:41:94:06:d5:1e: 7a:31:e2:22:2d:2e:64:8e:4c:6a:4c:a8:11:a0:93:c9:d0:df: 54:b4:be:93:d4:9a:cc:ed:02:c6:d3:a7:e0:7f:48:a1:5a:81: f3:2f:62:16:17:55:ef:63:72:a2:15:d3:7b:40:d8:66:d8:7d: ec:22:6d:76 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMB0BWYElb1KFJbAL1oUSMbRPPf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTExNDEzMjVaFw0yNzA4MTAxNDE4MjVaMDMxMTAvBgNV BAMTKEM0RjlGNzJFODZCNDZDM0ZDNTRDOTkzOUE5RkYwQzJDMjIwRkQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPjih5doqk7s9ilOhdLKFgGwhq kFc86nfTF/iXrjN1Q/8zHpiQIHAFlUmaJxO5+Z5Ubynaz9ULPbL4MeRyGqGfjVkW kG58qLEJWG15JX//xu8N+9c9A388Fq1k63eQWFTSTPY8xzM/mf+KGLGRiVpwCKeA jlVmNv5njUSFcCZ6hOURs1SF9GDIwBlQibg+YAeSS7Qrb1sXESFDpZQUp6CJ/YOl UZ7TU5evU5K+Zs7Uo/bLPdCNbKZJ0Fy8UT2o+667Cv79C0vWRbUosVJ43PE7Ym9+ COFVZXj7utnK+f4owQ9aw+HUYeRpa4KU1N2TpKNpZIuZgj2C0Nl9IePR33G/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTE+fcuhrRsP8VM mTmp/wwsIg/YETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVZL cVVNc3JlbU1qTFFZZURoS3JoU2pjOTJtM1lubmtmelhCbnprZ0F6Qk4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVW S3FVTXNyZW1NakxRWWVEaEtyaFNqYzkybTNZbm5rZnpYQm56a2dBekJOLzAvQzRG OUY3MkU4NkI0NkMzRkM1NEM5OTM5QTlGRjBDMkMyMjBGRDgxMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCinn0MA0EAgACMAcDBQAoBCYgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQIgzANBgkqhkiG9w0BAQsFAAOCAQEAj6R+c0QfWyagxvG1 nvTjxFgnkbYA49vlVQNqt7FS+2QHp6eJHrNmu807lJSBKC+/yxrw1F4HLjLEwmdf yG6ltmOI9+Hw1dn/nyu3LJxP9B/FFWPy52NzvFxceXHChBemjYkoME0ZphWMsF+A UsVNeowNtlukdmr9xi6ykvDXP+JgTRigyXSL5yM6AGh/UwediXLPg6JouTTODBBL HeulIfvXs+FvT7zyv66MtGG36KhKnjtq/pb/eDCcD878c5/c+0GUBtUeejHiIi0u ZI5MakyoEaCTydDfVLS+k9SazO0CxtOn4H9IoVqB8y9iFhdV72NyohXTe0DYZth9 7CJtdg== -----END CERTIFICATE-----Generated at Sun Aug 23 05:11:42 2026 by rpki-client