$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.cer File: D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.cer (raw, json) Hash identifier: IMomjZGCLc/m7QX8PmnSTwNT44VW/5vTVZIb91xpojI= Subject key identifier: D2:67:88:22:F7:7D:5B:42:77:AC:FA:3B:EB:B8:31:6A:4A:7A:09:94 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 564BB6A0BF4D5132D4543C1EBAE39A7FC7F0B3B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.mft caRepository: rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 20:47:01 +0000 Certificate not after: Wed 01 Sep 2027 20:52:01 +0000 Subordinate resources: AS: 265450 IP: 200.33.174.0/24 IP: 2801:80:1a50::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 20:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4b:b6:a0:bf:4d:51:32:d4:54:3c:1e:ba:e3:9a:7f:c7:f0:b3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 20:47:01 2026 GMT Not After : Sep 1 20:52:01 2027 GMT Subject: CN=D2678822F77D5B4277ACFA3BEBB8316A4A7A0994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:4e:c4:99:fb:22:ea:d5:39:4d:4d:7d:ce: 26:47:26:89:8a:04:d6:69:46:db:79:74:b4:f9:06: 2c:19:cf:d4:d7:42:f5:42:4d:2d:fc:90:d7:a9:91: c9:b1:04:79:be:c7:d1:27:d6:56:9d:56:db:4f:ac: 62:eb:01:b9:fc:03:f7:83:fe:1d:b0:5c:1e:7d:fa: c4:11:90:d6:3c:d3:0c:8c:e2:11:90:7a:03:b9:fd: 91:6b:0f:a2:97:57:5f:10:a0:56:57:68:e1:eb:6c: 34:1a:ac:be:51:78:87:71:de:c1:cf:95:0a:9f:a4: d0:43:90:24:26:2a:7d:cc:fd:3b:32:71:1c:00:b4: f9:db:d5:9d:45:82:f9:86:a3:b5:e0:3e:92:e6:84: 0a:50:b9:a0:6b:df:1b:4b:bb:93:d1:15:80:d4:68: b8:85:97:f1:5c:59:56:54:d6:a2:87:7d:d5:93:ce: 07:f0:40:a9:48:0f:13:cf:ad:1a:95:07:9f:2d:1d: 32:10:0f:12:e6:28:3a:04:62:24:86:35:ab:d3:9f: f7:cd:37:58:77:48:84:2a:4b:30:e8:9a:72:e0:d0: 77:a1:2b:5a:c9:88:68:96:08:6f:d3:34:ee:4e:4b: 28:1e:f4:3b:4a:4e:7e:7b:38:f9:7d:d7:ef:34:34: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:67:88:22:F7:7D:5B:42:77:AC:FA:3B:EB:B8:31:6A:4A:7A:09:94 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.174.0/24 IPv6: 2801:80:1a50::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265450 Signature Algorithm: sha256WithRSAEncryption 75:8b:cb:55:80:a4:be:7f:64:4b:7e:27:0c:50:97:1e:3d:dd: be:09:ee:65:4f:95:b3:2d:8e:74:16:2a:32:2c:5e:79:0b:bb: af:28:31:e4:4c:2f:8d:25:6a:06:63:d9:a0:6f:34:00:22:f8: 06:1c:61:58:26:b9:c9:21:c0:2f:a3:15:5d:47:36:27:f7:5f: ac:82:6d:b7:9d:3d:19:1e:e9:c3:ec:9e:0b:7e:d7:08:6e:d8: 4d:ec:33:1f:a2:35:5f:64:dc:f5:b7:35:7b:dd:45:ea:dd:54: a2:9e:50:3f:0c:3c:bf:f2:43:4a:9c:a5:38:f4:a4:c0:44:7e: cb:13:b4:2b:c1:a9:34:51:16:4d:55:b9:bc:d8:37:8d:2d:5c: 1d:c9:3f:bf:3e:e7:02:99:5d:3a:52:1b:5b:55:93:3c:4b:57: 7a:3b:32:2d:f5:8d:05:58:54:34:81:a5:d2:49:c1:5a:8c:87: 88:1e:e1:39:81:db:8e:47:2b:ce:8f:65:55:f9:ae:c7:2d:59: 6b:38:3f:42:09:91:9d:8e:76:5e:ee:87:a0:f1:fe:a3:c8:70: 78:9c:dd:8e:ae:23:3d:1c:d9:a0:b6:da:8b:b9:22:74:5f:f3: 76:3b:48:e0:95:c5:36:39:bc:4c:b7:c0:fe:97:a4:55:9c:4e: ac:29:ee:bc -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUVku2oL9NUTLUVDweuuOaf8fws7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDIyMDQ3MDFaFw0yNzA5MDEyMDUyMDFaMDMxMTAvBgNV BAMTKEQyNjc4ODIyRjc3RDVCNDI3N0FDRkEzQkVCQjgzMTZBNEE3QTA5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOE7Emfsi6tU5TU19ziZHJomK BNZpRtt5dLT5BiwZz9TXQvVCTS38kNepkcmxBHm+x9En1ladVttPrGLrAbn8A/eD /h2wXB59+sQRkNY80wyM4hGQegO5/ZFrD6KXV18QoFZXaOHrbDQarL5ReIdx3sHP lQqfpNBDkCQmKn3M/TsycRwAtPnb1Z1FgvmGo7XgPpLmhApQuaBr3xtLu5PRFYDU aLiFl/FcWVZU1qKHfdWTzgfwQKlIDxPPrRqVB58tHTIQDxLmKDoEYiSGNavTn/fN N1h3SIQqSzDomnLg0HehK1rJiGiWCG/TNO5OSyge9DtKTn57OPl91+80NBENAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSZ4gi931bQnes +jvruDFqSnoJlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3JD TXpzSjZMUnZCd0p3OGhydG9Rc1RiMkNwc1p0aFpyRHM4TVQ1UHg0ZGkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNy Q016c0o2TFJ2QndKdzhocnRvUXNUYjJDcHNadGhackRzOE1UNVB4NGRpLzAvRDI2 Nzg4MjJGNzdENUI0Mjc3QUNGQTNCRUJCODMxNkE0QTdBMDk5NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAyCGuMA8EAgACMAkDBwAoAQCAGlAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBAzqMA0GCSqGSIb3DQEBCwUAA4IBAQB1i8tVgKS+f2RL ficMUJcePd2+Ce5lT5WzLY50FioyLF55C7uvKDHkTC+NJWoGY9mgbzQAIvgGHGFY JrnJIcAvoxVdRzYn91+sgm23nT0ZHunD7J4LftcIbthN7DMfojVfZNz1tzV73UXq 3VSinlA/DDy/8kNKnKU49KTARH7LE7Qrwak0URZNVbm82DeNLVwdyT+/PucCmV06 UhtbVZM8S1d6OzIt9Y0FWFQ0gaXSScFajIeIHuE5gduORyvOj2VV+a7HLVlrOD9C CZGdjnZe7oeg8f6jyHB4nN2OriM9HNmgttqLuSJ0X/N2O0jglcU2ObxMt8D+l6RV nE6sKe68 -----END CERTIFICATE-----Generated at Sun Oct 11 22:43:27 2026 by rpki-client