$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer File: CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer (raw, json) Hash identifier: 9F58TyK6XpceQEP+CZck9SEZjYxOjjTalpavoTHEXlE= Subject key identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7156DE48C10C9ADFF5B1203B7026F14C60C71458 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft caRepository: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 Jul 2026 12:45:23 +0000 Certificate not after: Tue 27 Jul 2027 12:50:23 +0000 Subordinate resources: AS: 262437 IP: 170.82.8.0/22 IP: 177.52.40.0/22 IP: 191.37.192.0/22 IP: 201.175.48.0/22 IP: 2804:47c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 20:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:56:de:48:c1:0c:9a:df:f5:b1:20:3b:70:26:f1:4c:60:c7:14:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 28 12:45:23 2026 GMT Not After : Jul 27 12:50:23 2027 GMT Subject: CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:f3:53:89:27:1c:5f:ef:a0:4c:1b:49:46: 43:de:7d:6c:fa:aa:25:c5:19:ce:0d:1a:33:de:08: 9a:d4:33:88:db:63:17:bd:a4:08:09:f4:0d:38:fd: 8c:9a:31:8f:9a:44:02:a5:d0:60:47:e7:94:58:15: 73:47:04:9a:7c:8c:86:ee:cd:81:2b:44:75:9b:e3: 57:93:0d:37:8e:dd:1f:81:4f:39:69:1e:84:74:4d: 03:d4:b9:bf:f3:1c:36:f5:8b:d4:8c:d0:4a:3f:d9: f7:8a:23:a8:db:03:32:8e:4d:5a:ff:27:e6:3d:4c: 2c:30:2c:63:ab:65:dc:47:d7:d0:ca:ef:a7:a2:bd: f8:75:e5:25:20:34:10:1d:67:89:e2:06:28:46:f4: db:3b:38:6d:67:b4:1a:26:81:17:17:a9:9e:1e:fc: 0c:cd:7e:ae:59:65:ad:c6:d9:dd:25:45:0c:a7:e6: 78:1c:2f:25:1f:cc:6b:2b:78:29:20:e0:8f:2f:d0: e3:5f:18:b1:79:56:00:5f:37:8e:6f:a2:0b:cb:76: ed:20:80:0c:9d:f1:e7:7d:09:12:14:2a:91:29:e2: 4c:5d:33:4c:e3:e1:9b:42:78:32:bc:a5:f7:2f:16: 73:30:67:db:ac:65:18:fc:50:24:92:38:2d:0a:ab: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.8.0/22 177.52.40.0/22 191.37.192.0/22 201.175.48.0/22 IPv6: 2804:47c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262437 Signature Algorithm: sha256WithRSAEncryption 5f:d6:db:ea:d0:1a:16:62:d0:82:06:8e:d8:2a:2f:85:6e:b7: a8:4a:ab:b0:9b:9d:3a:0c:cc:da:20:15:90:6d:99:bb:27:d5: ee:ce:50:62:b0:c8:8d:a9:45:c3:c3:00:3c:ab:83:25:6d:6a: b4:23:1e:1e:cb:a0:7d:1c:98:e2:27:49:f2:4d:38:72:2b:11: 2c:05:9d:17:20:35:a4:34:82:cc:c8:72:c4:16:c0:bc:13:10: 3d:14:a6:26:b4:32:bc:de:a1:70:d2:27:c7:fb:c1:80:d1:8d: 11:be:0a:56:85:19:0c:29:7a:d3:a8:a7:95:5b:66:7b:b2:2b: 49:7c:44:5c:6b:1c:0d:fa:56:e9:6d:17:3c:00:e3:18:ea:3f: d7:97:b9:cb:6d:a2:6f:e8:b9:a9:b1:bd:01:82:9d:e2:a9:12: e6:fd:60:f9:71:c7:28:af:28:e7:c5:32:c9:77:59:c7:eb:53: 61:ff:0e:0b:eb:17:7c:09:c9:38:81:07:d8:4a:2f:6d:02:cc: 6b:5a:a8:49:5d:3b:cc:0d:02:52:a1:cb:83:6a:a5:8d:6c:5c: 1f:62:15:0f:0d:a4:fd:3b:5c:fd:92:dd:0f:5f:d8:a7:f6:52: 3d:2c:80:fe:3b:b8:d0:f5:e2:93:dc:6d:b6:c9:99:fb:c3:7c: 22:db:23:d7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUcVbeSMEMmt/1sSA7cCbxTGDHFFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjgxMjQ1MjNaFw0yNzA3MjcxMjUwMjNaMDMxMTAvBgNV BAMTKENBRkE1QjhBRDk3REU4OEZERDJGOTc2MkY1MTNCQjNFNkRGNjcxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFvNTiSccX++gTBtJRkPefWz6 qiXFGc4NGjPeCJrUM4jbYxe9pAgJ9A04/YyaMY+aRAKl0GBH55RYFXNHBJp8jIbu zYErRHWb41eTDTeO3R+BTzlpHoR0TQPUub/zHDb1i9SM0Eo/2feKI6jbAzKOTVr/ J+Y9TCwwLGOrZdxH19DK76eivfh15SUgNBAdZ4niBihG9Ns7OG1ntBomgRcXqZ4e /AzNfq5ZZa3G2d0lRQyn5ngcLyUfzGsreCkg4I8v0ONfGLF5VgBfN45vogvLdu0g gAyd8ed9CRIUKpEp4kxdM0zj4ZtCeDK8pfcvFnMwZ9usZRj8UCSSOC0Kq+6RAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK+luK2X3oj90v l2L1E7s+bfZxujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1V2 c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNV dnNDYkhHdzV2VWdzRXFMU1c3UGtEYjZ5OFFEdjFaQjZqdU5mQTl6dTVMLzAvQ0FG QTVCOEFEOTdERTg4RkREMkY5NzYyRjUxM0JCM0U2REY2NzFCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCqlIIAwQCsTQoAwQCvyXAAwQCya8wMA0EAgACMAcD BQAoBAR8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBJTANBgkqhkiG9w0BAQsF AAOCAQEAX9bb6tAaFmLQggaO2CovhW63qEqrsJudOgzM2iAVkG2ZuyfV7s5QYrDI jalFw8MAPKuDJW1qtCMeHsugfRyY4idJ8k04cisRLAWdFyA1pDSCzMhyxBbAvBMQ PRSmJrQyvN6hcNInx/vBgNGNEb4KVoUZDCl606inlVtme7IrSXxEXGscDfpW6W0X PADjGOo/15e5y22ib+i5qbG9AYKd4qkS5v1g+XHHKK8o58UyyXdZx+tTYf8OC+sX fAnJOIEH2EovbQLMa1qoSV07zA0CUqHLg2qljWxcH2IVDw2k/Ttc/ZLdD1/Yp/ZS PSyA/ju40PXik9xttsmZ+8N8Itsj1w== -----END CERTIFICATE-----Generated at Sun Aug 23 19:30:06 2026 by rpki-client