$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer File: D1FFDF44055E16082D529730642377D751467152.cer (raw, json) Hash identifier: bOaoXNDyVmcZhze9ZKjgO5e1y5gTRHUbo9+v5dimaCQ= Subject key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7BF8793B92110EAFB4E69A1A7982FFB6CCE9F3E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft caRepository: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 25 Oct 2026 17:40:54 +0000 Certificate not after: Sun 24 Oct 2027 17:45:54 +0000 Subordinate resources: AS: 268782 IP: 45.172.240.0/22 IP: 2804:5a94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 13:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f8:79:3b:92:11:0e:af:b4:e6:9a:1a:79:82:ff:b6:cc:e9:f3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 17:40:54 2026 GMT Not After : Oct 24 17:45:54 2027 GMT Subject: CN=D1FFDF44055E16082D529730642377D751467152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:15:dd:a7:57:43:f4:3a:06:e2:8b:91:23: 84:53:ee:02:63:d7:c9:cc:1e:ec:9d:84:97:c9:47: ae:b4:fb:27:a9:d9:e0:a6:d1:15:09:92:2d:9e:c6: d3:9f:c6:aa:af:47:c0:c5:4a:48:43:db:42:76:32: ea:89:96:ad:43:e9:ed:e4:ae:a4:3a:d1:6d:b1:05: 11:ad:2e:fe:f5:2a:03:cf:05:6a:1b:b1:7a:a2:e0: 08:4f:57:41:d5:96:88:fa:eb:55:4c:8b:c1:b6:05: d7:f5:cd:28:bc:4e:82:04:5c:3c:33:5c:72:a7:0f: 48:e2:e5:03:18:2e:5f:f6:bf:ac:c6:2b:fc:9f:03: 8f:a9:b7:97:f2:30:41:c4:ff:d5:90:70:97:99:b1: 46:e1:91:ea:5a:07:62:e9:31:a0:90:9f:74:26:f7: 41:6a:a3:5b:d7:3b:8c:06:29:db:eb:60:ee:27:06: 6c:78:1f:10:f8:94:74:23:4d:dc:8f:4a:11:56:cf: a2:19:a1:b9:82:68:8c:51:10:b1:eb:21:1b:7c:07: eb:ad:f5:d8:0a:d9:ee:5c:b3:7c:24:56:4f:96:3e: e9:1e:a6:03:97:de:e9:bb:37:e4:09:db:94:fe:45: 3c:84:24:64:be:21:b2:32:d3:7c:57:55:34:19:60: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.240.0/22 IPv6: 2804:5a94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268782 Signature Algorithm: sha256WithRSAEncryption 4d:25:1c:ab:06:8d:93:79:b7:d2:bf:31:11:ce:97:38:60:13: d9:9a:93:c5:78:c4:ad:21:e1:ff:60:58:c1:7c:63:3f:e6:7f: 89:74:0a:3c:83:ec:1a:62:4b:99:31:77:a0:5d:1d:3c:fa:31: e8:2a:4b:7a:00:9d:2d:34:95:1a:d3:a2:8d:0a:67:6a:3d:c0: 4f:56:38:19:5e:d5:50:35:9d:8f:51:e5:5c:72:53:ce:96:97: 0d:ad:c7:d0:92:3d:b4:8c:1c:c8:10:78:da:e8:7c:cc:36:73: 3b:f3:e2:94:40:cd:3b:e9:79:7f:c6:6b:f7:7a:a9:d1:67:8d: 73:f1:41:76:08:92:05:4e:6f:26:51:a3:a9:04:a6:fd:d5:a3: b5:26:1f:c3:67:20:db:83:3e:33:df:e4:37:2c:03:b5:49:75: d0:1b:81:bf:72:c0:82:0c:6f:1b:63:32:58:7f:e1:83:65:4f: 8e:77:04:ce:f9:a0:7e:93:75:30:64:1e:40:f7:47:13:6b:21: 4d:19:9a:83:40:d2:1e:db:25:8c:af:d4:28:77:06:49:20:01: c2:5d:84:0e:4a:25:1f:41:b0:56:74:bb:32:25:cb:6d:8e:26: e4:9c:e0:bb:5c:d6:85:08:d4:cd:41:ee:bc:1c:57:79:c5:10: f5:0b:a3:03 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUe/h5O5IRDq+05poaeYL/tszp8+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjUxNzQwNTRaFw0yNzEwMjQxNzQ1NTRaMDMxMTAvBgNV BAMTKEQxRkZERjQ0MDU1RTE2MDgyRDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKRXdp1dD9DoG4ouRI4RT7gJj 18nMHuydhJfJR660+yep2eCm0RUJki2extOfxqqvR8DFSkhD20J2MuqJlq1D6e3k rqQ60W2xBRGtLv71KgPPBWobsXqi4AhPV0HVloj661VMi8G2Bdf1zSi8ToIEXDwz XHKnD0ji5QMYLl/2v6zGK/yfA4+pt5fyMEHE/9WQcJeZsUbhkepaB2LpMaCQn3Qm 90Fqo1vXO4wGKdvrYO4nBmx4HxD4lHQjTdyPShFWz6IZobmCaIxRELHrIRt8B+ut 9dgK2e5cs3wkVk+WPukepgOX3um7N+QJ25T+RTyEJGS+IbIy03xXVTQZYIsNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR/99EBV4WCC1S lzBkI3fXUUZxUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHlS TmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlKWm4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh5 Uk5hU1RDS1o5YmtvYUZ3ZUZMalRzckdHNnlLYkFmeWRkNmpSNm1pSlpuLzAvRDFG RkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1MTQ2NzE1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLazwMA0EAgACMAcDBQAoBFqUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZ7jANBgkqhkiG9w0BAQsFAAOCAQEATSUcqwaNk3m30r8x Ec6XOGAT2ZqTxXjErSHh/2BYwXxjP+Z/iXQKPIPsGmJLmTF3oF0dPPox6CpLegCd LTSVGtOijQpnaj3AT1Y4GV7VUDWdj1HlXHJTzpaXDa3H0JI9tIwcyBB42uh8zDZz O/PilEDNO+l5f8Zr93qp0WeNc/FBdgiSBU5vJlGjqQSm/dWjtSYfw2cg24M+M9/k NywDtUl10BuBv3LAggxvG2MyWH/hg2VPjncEzvmgfpN1MGQeQPdHE2shTRmag0DS HtsljK/UKHcGSSABwl2EDkolH0GwVnS7MiXLbY4m5Jzgu1zWhQjUzUHuvBxXecUQ 9QujAw== -----END CERTIFICATE-----Generated at Thu Oct 29 15:21:58 2026 by rpki-client