$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer File: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer (raw, json) Hash identifier: KfEut8X4JDKdX0tBtI/EPMS/b40cJ6ob+U8qKYMrLDI= Subject key identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32173BB44131C1EA9FAB8F9F69E0AF3A7BE6B7FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft caRepository: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 31 Oct 2026 16:54:28 +0000 Certificate not after: Sat 30 Oct 2027 16:59:28 +0000 Subordinate resources: AS: 267443 IP: 192.141.52.0/22 IP: 2804:4198::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 19:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:17:3b:b4:41:31:c1:ea:9f:ab:8f:9f:69:e0:af:3a:7b:e6:b7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 16:54:28 2026 GMT Not After : Oct 30 16:59:28 2027 GMT Subject: CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:19:22:e2:2e:06:54:e3:d7:11:2e:ad:95: 1d:03:6e:93:fd:b3:c1:db:26:36:ee:66:a6:e9:e3: 95:ae:74:12:7c:65:df:cd:18:02:c5:cf:e0:f3:97: 29:20:16:d8:c4:e9:2a:fa:2a:85:3d:57:72:41:3d: 92:c1:e8:e0:8d:73:b0:01:76:71:ed:ef:7b:49:c5: 49:96:17:6b:00:28:91:8f:10:88:d7:a6:51:b4:bd: 85:8a:32:12:a0:dd:53:9d:70:a9:31:aa:63:cc:7c: 8f:6a:18:0f:75:6a:3f:a0:d0:a5:6e:43:c9:20:b9: 37:af:10:56:e9:83:86:a4:ea:a2:9f:db:9e:8d:53: f0:4a:a8:25:24:5a:e2:63:00:b1:37:71:48:18:fb: a6:a8:7a:38:c1:9b:18:c8:37:2b:e2:6e:e5:c6:0e: f9:03:50:ff:49:5d:cb:cc:28:fa:ec:b0:5f:94:41: 20:a6:f8:1e:92:f0:30:6d:b0:d5:3f:74:e7:b8:b3: 58:18:89:aa:9c:2e:38:a1:2b:e5:84:28:a4:45:54: 16:02:14:ea:f9:15:a6:2d:82:09:ac:75:37:37:5a: 76:f5:d6:29:58:95:ae:86:79:85:5b:19:83:7f:8d: 97:9c:f9:66:71:04:f3:d1:b2:18:bc:85:68:02:97: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.52.0/22 IPv6: 2804:4198::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267443 Signature Algorithm: sha256WithRSAEncryption 9f:f1:e5:cf:d3:bc:56:2a:d4:b0:f6:19:4a:15:c4:2e:0a:91: 7e:49:99:99:8e:bd:1c:4a:a2:ac:46:00:1d:1c:5f:74:4e:f8: 32:ef:5d:51:d3:02:d6:dd:9f:6e:83:31:c7:1f:76:16:7f:8b: 28:4f:fa:9d:3f:1c:a4:38:ab:1f:0f:0c:e7:90:21:d5:5b:2e: 2d:93:46:ab:76:76:53:32:83:00:66:63:ff:3e:c3:d0:5e:6b: 0e:36:32:92:8e:60:6c:e9:1e:5b:45:89:06:4d:68:56:1d:ec: 59:9a:39:29:4f:c9:9c:8c:fb:eb:9e:c7:b3:fb:de:cc:ac:5b: bb:91:e2:d7:1f:86:f9:ac:14:e5:82:e0:dc:ed:98:8c:f8:2e: 90:2d:90:e2:81:c8:35:cc:89:1f:40:96:9c:b6:c3:48:d9:3c: a5:30:af:0f:69:1b:87:12:70:45:95:d1:fb:79:c2:19:95:06: f9:4f:dd:5c:81:d2:52:64:84:56:2d:27:c1:14:ec:70:dc:b5: ee:d2:24:15:a5:6e:60:ea:23:3e:52:3d:b6:d6:5b:45:d6:33: 8e:12:45:a7:47:e8:28:dc:0e:5a:86:aa:ce:5e:1b:e0:3e:df: e9:c4:39:ab:ba:85:45:25:e7:b7:a8:99:4f:c1:44:3e:44:e6: 86:6b:77:5f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMhc7tEExweqfq4+faeCvOnvmt/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMzExNjU0MjhaFw0yNzEwMzAxNjU5MjhaMDMxMTAvBgNV BAMTKEM2M0E5RkYzNjA0NTYyQTgwQ0I1NUU5QkVBM0RGMDIwMDJGNUNBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1hki4i4GVOPXES6tlR0DbpP9 s8HbJjbuZqbp45WudBJ8Zd/NGALFz+DzlykgFtjE6Sr6KoU9V3JBPZLB6OCNc7AB dnHt73tJxUmWF2sAKJGPEIjXplG0vYWKMhKg3VOdcKkxqmPMfI9qGA91aj+g0KVu Q8kguTevEFbpg4ak6qKf256NU/BKqCUkWuJjALE3cUgY+6aoejjBmxjINyvibuXG DvkDUP9JXcvMKPrssF+UQSCm+B6S8DBtsNU/dOe4s1gYiaqcLjihK+WEKKRFVBYC FOr5FaYtggmsdTc3Wnb11ilYla6GeYVbGYN/jZec+WZxBPPRshi8hWgCl5rVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGOp/zYEViqAy1 XpvqPfAgAvXKSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDMy Q21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNqRlkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qz MkNtVTJwMXlwYWhZVmlBQ2VaMThWcGZUMkVlTXdjZ21UdkphenhjakZZLzAvQzYz QTlGRjM2MDQ1NjJBODBDQjU1RTlCRUEzREYwMjAwMkY1Q0E0QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI00MA0EAgACMAcDBQAoBEGYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUszANBgkqhkiG9w0BAQsFAAOCAQEAn/Hlz9O8VirUsPYZ ShXELgqRfkmZmY69HEqirEYAHRxfdE74Mu9dUdMC1t2fboMxxx92Fn+LKE/6nT8c pDirHw8M55Ah1VsuLZNGq3Z2UzKDAGZj/z7D0F5rDjYyko5gbOkeW0WJBk1oVh3s WZo5KU/JnIz7657Hs/vezKxbu5Hi1x+G+awU5YLg3O2YjPgukC2Q4oHINcyJH0CW nLbDSNk8pTCvD2kbhxJwRZXR+3nCGZUG+U/dXIHSUmSEVi0nwRTscNy17tIkFaVu YOojPlI9ttZbRdYzjhJFp0foKNwOWoaqzl4b4D7f6cQ5q7qFRSXnt6iZT8FEPkTm hmt3Xw== -----END CERTIFICATE-----Generated at Sun Nov 1 18:40:38 2026 by rpki-client