$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/CB96292C01F88A1A51DB7BC79F3932C738797BFD.cer File: CB96292C01F88A1A51DB7BC79F3932C738797BFD.cer (raw, json) Hash identifier: 3wuM4/yXl2dzTUvuK0A+7fS97qiPzl6zY+BZ5a05MUw= Subject key identifier: CB:96:29:2C:01:F8:8A:1A:51:DB:7B:C7:9F:39:32:C7:38:79:7B:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4EB15B353C97F132BDA3B189C1A0BFCC97736C61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/CB96292C01F88A1A51DB7BC79F3932C738797BFD.mft caRepository: rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 11:18:36 +0000 Certificate not after: Fri 03 Sep 2027 11:23:36 +0000 Subordinate resources: AS: 268741 IP: 45.171.232.0/22 IP: 2804:5a08::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 Oct 2026 17:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b1:5b:35:3c:97:f1:32:bd:a3:b1:89:c1:a0:bf:cc:97:73:6c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 11:18:36 2026 GMT Not After : Sep 3 11:23:36 2027 GMT Subject: CN=CB96292C01F88A1A51DB7BC79F3932C738797BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:93:d1:a8:26:40:0b:fd:19:a8:6a:9b:42: 99:48:d9:d9:cd:86:4d:79:33:f0:8f:d4:a2:02:88: 98:3f:b6:70:04:ec:12:4a:b0:1f:3b:3f:27:20:1b: ae:c7:48:2d:3b:46:19:e7:4c:70:28:d9:dc:4c:ad: 61:2a:49:00:e1:b3:94:4f:81:c9:34:3a:dc:93:a3: 0c:13:a1:51:00:b9:5f:2d:75:36:fb:07:11:03:86: 4b:47:f3:70:ae:36:f3:0f:48:f6:96:85:3c:c6:68: 64:f7:fc:fb:f9:e2:8e:89:b9:fb:f2:52:4b:e2:63: e3:f1:a8:6c:5c:eb:ba:1c:51:51:1c:40:35:f6:47: 12:28:ca:0e:d2:bb:23:21:7b:2e:cc:11:ce:cf:dc: 1f:87:61:e0:48:2d:60:ea:46:c6:27:4a:9f:ac:1e: be:b8:f9:bb:7a:8d:e8:0f:e9:c0:05:15:3a:c1:6e: 0b:c4:53:03:d6:e1:35:b7:89:f6:27:3b:53:79:28: e6:a6:9d:30:73:d2:c6:fd:42:af:73:86:f4:fd:ad: d2:cf:1c:e5:36:5c:31:15:a6:28:a4:99:32:16:43: 25:d0:04:99:ed:37:3c:66:9e:1b:d9:90:e1:6d:8d: 04:a5:2e:2a:49:25:20:dd:35:a0:6a:59:41:ca:54: ec:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:96:29:2C:01:F8:8A:1A:51:DB:7B:C7:9F:39:32:C7:38:79:7B:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/CB96292C01F88A1A51DB7BC79F3932C738797BFD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.232.0/22 IPv6: 2804:5a08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268741 Signature Algorithm: sha256WithRSAEncryption 69:0d:35:a9:f8:d7:b4:7a:d6:36:07:f1:53:89:05:c8:1d:70: 42:4a:d3:50:c0:55:d8:3a:3f:cf:f3:03:e1:ba:e8:d4:ea:9d: 57:7c:cc:b6:15:d0:02:0d:9c:57:a1:0d:a6:07:42:a9:1b:c5: 5c:01:35:20:f2:63:46:6e:ba:a5:c6:93:79:bc:e9:75:ea:e3: 8c:97:af:c6:2a:c7:de:b2:5f:e3:a9:17:f8:06:88:11:76:32: 90:57:e7:c1:46:19:68:10:3b:fb:51:54:ff:fb:7b:af:f9:23: 28:72:1e:fd:5b:cf:f2:57:93:15:1f:22:68:b1:e4:05:d2:30: 49:45:5a:0d:ca:8e:a4:b5:4f:2f:ed:74:4a:8d:05:09:c7:41: b3:53:59:7c:a0:f0:ab:02:d2:77:ea:7e:c9:4e:f7:1b:7f:a4: 1e:30:51:66:01:3b:d3:23:cc:1a:a4:a2:eb:0c:9e:5c:46:0e: 94:1b:12:23:35:6d:90:75:86:2c:f6:66:5b:1a:59:26:4b:58: 62:8a:5e:ba:58:99:be:c6:d5:b9:e0:30:4d:a3:af:46:ca:a1: c8:9d:55:49:4d:f2:dd:e6:e4:9b:c7:1f:ea:73:11:ab:b8:87: 61:58:44:3c:76:a8:c9:1c:55:69:bd:c8:b6:9d:be:65:91:c2: 78:e3:9e:3b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTrFbNTyX8TK9o7GJwaC/zJdzbGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDQxMTE4MzZaFw0yNzA5MDMxMTIzMzZaMDMxMTAvBgNV BAMTKENCOTYyOTJDMDFGODhBMUE1MURCN0JDNzlGMzkzMkM3Mzg3OTdCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUZPRqCZAC/0ZqGqbQplI2dnN hk15M/CP1KICiJg/tnAE7BJKsB87PycgG67HSC07RhnnTHAo2dxMrWEqSQDhs5RP gck0OtyTowwToVEAuV8tdTb7BxEDhktH83CuNvMPSPaWhTzGaGT3/Pv54o6Jufvy UkviY+PxqGxc67ocUVEcQDX2RxIoyg7SuyMhey7MEc7P3B+HYeBILWDqRsYnSp+s Hr64+bt6jegP6cAFFTrBbgvEUwPW4TW3ifYnO1N5KOamnTBz0sb9Qq9zhvT9rdLP HOU2XDEVpiikmTIWQyXQBJntNzxmnhvZkOFtjQSlLipJJSDdNaBqWUHKVOwJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLliksAfiKGlHb e8efOTLHOHl7/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjdt UTFkWFJKaGNrUmg4UkdVeHNxbXl4b3F1UjJIY0tQc1E3OVVMeXAxRzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI3 bVExZFhSSmhja1JoOFJHVXhzcW15eG9xdVIySGNLUHNRNzlVTHlwMUczLzAvQ0I5 NjI5MkMwMUY4OEExQTUxREI3QkM3OUYzOTMyQzczODc5N0JGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLavoMA0EAgACMAcDBQAoBFoIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZxTANBgkqhkiG9w0BAQsFAAOCAQEAaQ01qfjXtHrWNgfx U4kFyB1wQkrTUMBV2Do/z/MD4bro1OqdV3zMthXQAg2cV6ENpgdCqRvFXAE1IPJj Rm66pcaTebzpderjjJevxirH3rJf46kX+AaIEXYykFfnwUYZaBA7+1FU//t7r/kj KHIe/VvP8leTFR8iaLHkBdIwSUVaDcqOpLVPL+10So0FCcdBs1NZfKDwqwLSd+p+ yU73G3+kHjBRZgE70yPMGqSi6wyeXEYOlBsSIzVtkHWGLPZmWxpZJktYYopeuliZ vsbVueAwTaOvRsqhyJ1VSU3y3ebkm8cf6nMRq7iHYVhEPHaoyRxVab3Itp2+ZZHC eOOeOw== -----END CERTIFICATE-----Generated at Mon Oct 5 16:39:10 2026 by rpki-client