$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer File: D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer (raw, json) Hash identifier: OWHH0DZkiUXEQvJeAPhy+c4PXtIMIhkfP5oaKJeH06Y= Subject key identifier: D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 295922B7AE6CD9BBB6F5668D5A8C03FD8CE099B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.mft caRepository: rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Aug 2026 16:30:47 +0000 Certificate not after: Mon 02 Aug 2027 16:35:47 +0000 Subordinate resources: AS: 28153 IP: 164.163.140.0/22 IP: 170.233.60.0/22 IP: 186.193.208.0/20 IP: 187.60.144.0/20 IP: 201.148.252.0/22 IP: 2804:1a14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 04:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:59:22:b7:ae:6c:d9:bb:b6:f5:66:8d:5a:8c:03:fd:8c:e0:99:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 3 16:30:47 2026 GMT Not After : Aug 2 16:35:47 2027 GMT Subject: CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:c4:0d:a0:3f:18:0f:56:ed:d9:d9:73:5a: 59:4b:2c:c2:e8:dd:8b:66:4c:35:ba:53:35:9d:c6: de:bd:22:fa:9f:a7:9f:1e:62:09:04:83:6c:9b:db: 8a:e0:05:40:23:77:3c:28:3a:c1:76:63:66:0d:ed: d7:33:2c:c6:68:05:a5:de:6f:b5:8f:57:8b:33:20: 06:49:6b:63:1a:66:00:91:bf:61:f6:a3:d6:38:a5: 7b:30:85:3f:e8:78:5c:f0:f5:29:ea:c7:03:24:8f: 3e:d3:01:e0:13:87:4c:1f:23:28:e3:ea:10:a3:e2: fa:39:2d:84:f9:f1:c5:97:77:6b:8a:79:1a:f7:fd: ab:01:c2:f7:26:f2:12:ea:5b:91:af:7e:94:a3:18: 7e:ba:89:fc:dc:ef:4e:35:a3:38:a3:c4:fb:4a:80: 88:31:4b:95:3f:5d:fa:fa:1a:2c:f0:d1:2a:4a:c0: 12:b5:16:1f:1e:d2:e5:95:e9:a7:2f:83:cb:2b:25: ce:4b:bf:9b:83:c8:20:eb:28:75:63:1b:56:52:42: 42:2a:ba:f6:b9:00:a1:47:4d:e9:8b:7a:4c:e9:14: a5:99:3b:97:bf:64:97:97:32:21:78:af:7c:57:de: c7:46:5e:a1:52:0f:42:9b:57:fa:99:30:54:41:42: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.140.0/22 170.233.60.0/22 186.193.208.0/20 187.60.144.0/20 201.148.252.0/22 IPv6: 2804:1a14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28153 Signature Algorithm: sha256WithRSAEncryption 60:4f:0e:1a:1f:35:6a:a0:88:13:66:8e:2a:7c:4f:df:7f:df: 8d:b3:79:23:7d:0c:34:c4:12:93:44:80:3b:1f:0d:c7:29:20: ab:6f:90:a8:7f:4a:8c:6d:65:ec:ff:e7:2a:06:e7:32:0e:67: 33:1d:c4:96:c3:13:38:e1:00:1c:00:ea:7e:d1:4a:2d:6a:85: 70:d7:7e:20:c4:55:eb:00:45:35:f7:40:f0:b7:d7:62:1c:50: 3d:0c:e0:6b:c8:9c:ff:97:ba:da:13:b3:d8:d5:20:bd:2e:97: 46:13:5f:0e:c0:e4:a1:07:3b:76:65:9f:60:5a:fc:a2:12:22: 73:99:16:64:bd:48:5b:f9:9c:82:fc:df:f0:7b:90:80:66:48: 4d:59:f9:0b:2f:6e:d0:7d:6a:50:f8:44:66:ac:26:dc:60:32: a6:1b:04:b8:12:75:ca:28:3c:6d:df:22:aa:2f:38:f1:4a:4f: e6:63:b9:4b:48:6c:81:ad:c2:43:fc:00:b2:73:4b:bb:4e:41: 00:7a:5d:7f:d2:43:f7:b7:82:fa:f0:0b:03:5e:63:10:76:93: bf:8c:c0:1b:b8:bf:60:a5:13:11:3a:f7:ab:78:2f:21:76:90: 27:75:3b:aa:54:cd:5c:66:88:51:99:27:08:00:83:7d:5b:ae: f5:53:95:45 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUKVkit65s2bu29WaNWowD/YzgmbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MDMxNjMwNDdaFw0yNzA4MDIxNjM1NDdaMDMxMTAvBgNV BAMTKEQ0QTYwREM0MTI5QUZCMjlEQkRDRjEwNTRBMDQ4QTRBMkE3MTI5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ncQNoD8YD1bt2dlzWllLLMLo 3YtmTDW6UzWdxt69Ivqfp58eYgkEg2yb24rgBUAjdzwoOsF2Y2YN7dczLMZoBaXe b7WPV4szIAZJa2MaZgCRv2H2o9Y4pXswhT/oeFzw9SnqxwMkjz7TAeATh0wfIyjj 6hCj4vo5LYT58cWXd2uKeRr3/asBwvcm8hLqW5GvfpSjGH66ifzc7041ozijxPtK gIgxS5U/Xfr6Gizw0SpKwBK1Fh8e0uWV6acvg8srJc5Lv5uDyCDrKHVjG1ZSQkIq uva5AKFHTemLekzpFKWZO5e/ZJeXMiF4r3xX3sdGXqFSD0KbV/qZMFRBQmfnAgMB AAGjggNRMIIDTTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUpg3EEpr7Kdvc 8QVKBIpKKnEpqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSERa alBraW4xMURyUW1TVml0dHBtM3RkWHZYazd0c1ZvclZldWFWZmU5UHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hE WmpQa2luMTFEclFtU1ZpdHRwbTN0ZFh2WGs3dHNWb3JWZXVhVmZlOVB4LzAvRDRB NjBEQzQxMjlBRkIyOURCRENGMTA1NEEwNDhBNEEyQTcxMjlBOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCpKOMAwQCquk8AwQEusHQAwQEuzyQAwQCyZT8MA0E AgACMAcDBQAoBBoUMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm35MA0GCSqGSIb3 DQEBCwUAA4IBAQBgTw4aHzVqoIgTZo4qfE/ff9+Ns3kjfQw0xBKTRIA7Hw3HKSCr b5Cof0qMbWXs/+cqBucyDmczHcSWwxM44QAcAOp+0UotaoVw134gxFXrAEU190Dw t9diHFA9DOBryJz/l7raE7PY1SC9LpdGE18OwOShBzt2ZZ9gWvyiEiJzmRZkvUhb +ZyC/N/we5CAZkhNWfkLL27QfWpQ+ERmrCbcYDKmGwS4EnXKKDxt3yKqLzjxSk/m Y7lLSGyBrcJD/ACyc0u7TkEAel1/0kP3t4L68AsDXmMQdpO/jMAbuL9gpRMROver eC8hdpAndTuqVM1cZohRmScIAIN9W671U5VF -----END CERTIFICATE-----Generated at Sun Aug 23 05:11:58 2026 by rpki-client