$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/E187F0A5560DAFF02FFEFA0C3044B37FEDFF21F4.cer File: E187F0A5560DAFF02FFEFA0C3044B37FEDFF21F4.cer (raw, json) Hash identifier: Tvg9CdMKf9wCkoBuZD73L+VqalunwjrkvD9nemsXNZ4= Subject key identifier: E1:87:F0:A5:56:0D:AF:F0:2F:FE:FA:0C:30:44:B3:7F:ED:FF:21:F4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18ABB5F508D239A0FC6823C64FB74774E4E0F1BA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/E187F0A5560DAFF02FFEFA0C3044B37FEDFF21F4.mft caRepository: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Sep 2026 20:32:47 +0000 Certificate not after: Wed 29 Sep 2027 20:37:47 +0000 Subordinate resources: AS: 265269 IP: 45.170.148.0/22 IP: 168.90.88.0/22 IP: 2804:2d40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Oct 2026 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:b5:f5:08:d2:39:a0:fc:68:23:c6:4f:b7:47:74:e4:e0:f1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 30 20:32:47 2026 GMT Not After : Sep 29 20:37:47 2027 GMT Subject: CN=E187F0A5560DAFF02FFEFA0C3044B37FEDFF21F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:d4:a9:8f:a1:e6:0a:cd:82:22:d4:57:13: 4b:9f:86:fa:d5:e6:02:27:b8:22:04:dc:0b:f9:b8: cc:33:4c:a5:04:be:2c:14:74:1f:1a:31:0e:a4:6d: 0c:05:1a:d7:06:c1:12:d6:ef:fc:47:93:4c:81:29: 06:9c:5f:c9:a9:ea:44:cb:a5:71:66:94:5f:42:b2: be:43:c6:19:ef:76:69:64:3d:b3:bf:ae:53:c6:b6: 8e:27:1b:ed:9a:1f:95:0e:32:27:f0:15:a6:31:38: 52:ab:c1:e5:5b:16:d0:2c:42:15:11:cc:53:a5:7c: 5c:c7:4e:72:8b:1b:a1:c1:cf:4b:91:8a:1a:aa:3f: a4:97:95:62:78:c8:a3:f2:d1:ce:0e:d3:fe:36:3c: 2d:0e:94:3d:58:31:5d:16:30:ef:4f:f6:47:fc:df: 93:c7:b9:09:42:b0:f1:97:80:91:69:e5:09:e9:cf: ef:92:35:5a:0a:84:f3:c2:58:21:ae:60:07:a0:11: 2c:9d:ce:7c:68:e2:c3:6a:09:53:ce:37:fb:19:18: 0c:77:8f:15:b1:c8:8e:d4:cb:aa:3a:94:40:dd:9e: cb:dc:6c:4d:c2:3c:60:c4:80:98:1c:8c:8b:c5:86: 93:c1:87:f3:34:17:99:7a:d9:24:71:85:d4:c4:d1: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:87:F0:A5:56:0D:AF:F0:2F:FE:FA:0C:30:44:B3:7F:ED:FF:21:F4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/E187F0A5560DAFF02FFEFA0C3044B37FEDFF21F4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.148.0/22 168.90.88.0/22 IPv6: 2804:2d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265269 Signature Algorithm: sha256WithRSAEncryption b7:a5:66:76:ce:f6:c2:05:e5:85:fe:14:c4:e4:dc:e9:20:6f: 4f:bd:34:f1:6d:76:14:68:47:47:7e:84:92:5a:da:dc:0a:e3: e8:88:2b:f8:e6:58:0f:be:92:b9:01:3b:ad:c9:62:2d:ed:aa: d1:36:fc:43:5e:08:89:c6:50:aa:cb:36:6b:3c:e1:4d:9a:76: 33:63:2f:6b:93:72:ce:5d:62:bc:fd:7d:f5:60:c0:19:ac:cb: 2d:e6:63:c0:b8:e2:8d:05:26:73:b5:a8:39:c9:3a:4a:b6:45: 80:91:e8:1f:cf:1e:69:2d:ca:6b:ff:02:6f:43:0c:2c:23:22: 5a:92:bb:df:d4:5c:91:51:9e:02:ae:68:d0:bf:65:94:8b:9a: 08:be:06:bf:a3:ad:85:82:bc:8a:98:84:7f:e3:57:21:39:23: d2:bc:d3:60:8a:a0:18:53:0c:88:23:2b:c8:fd:60:2a:2a:58: d5:a3:8b:21:71:cb:18:f9:b0:71:5f:c2:77:13:2e:33:69:c4: 12:01:4b:f6:2b:67:0e:d9:2a:0a:50:9f:1f:5f:5f:ee:b8:7a: 94:84:69:6e:de:41:89:8c:d3:3d:85:2c:03:38:89:59:e1:df: 0b:bf:58:12:fa:1f:41:30:20:7c:39:7e:af:a6:4f:cf:a1:c8: 68:24:f4:12 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGKu19QjSOaD8aCPGT7dHdOTg8bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MzAyMDMyNDdaFw0yNzA5MjkyMDM3NDdaMDMxMTAvBgNV BAMTKEUxODdGMEE1NTYwREFGRjAyRkZFRkEwQzMwNDRCMzdGRURGRjIxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDog9Spj6HmCs2CItRXE0ufhvrV 5gInuCIE3Av5uMwzTKUEviwUdB8aMQ6kbQwFGtcGwRLW7/xHk0yBKQacX8mp6kTL pXFmlF9Csr5DxhnvdmlkPbO/rlPGto4nG+2aH5UOMifwFaYxOFKrweVbFtAsQhUR zFOlfFzHTnKLG6HBz0uRihqqP6SXlWJ4yKPy0c4O0/42PC0OlD1YMV0WMO9P9kf8 35PHuQlCsPGXgJFp5Qnpz++SNVoKhPPCWCGuYAegESydznxo4sNqCVPON/sZGAx3 jxWxyI7Uy6o6lEDdnsvcbE3CPGDEgJgcjIvFhpPBh/M0F5l62SRxhdTE0dzlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThh/ClVg2v8C/+ +gwwRLN/7f8h9DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Ju SHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11MlhvTHcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dy bkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAvRTE4 N0YwQTU1NjBEQUZGMDJGRkVGQTBDMzA0NEIzN0ZFREZGMjFGNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaqUAwQCqFpYMA0EAgACMAcDBQAoBC1AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMNTANBgkqhkiG9w0BAQsFAAOCAQEAt6Vmds72 wgXlhf4UxOTc6SBvT7008W12FGhHR36Eklra3Arj6Igr+OZYD76SuQE7rcliLe2q 0Tb8Q14IicZQqss2azzhTZp2M2Mva5Nyzl1ivP199WDAGazLLeZjwLjijQUmc7Wo Ock6SrZFgJHoH88eaS3Ka/8Cb0MMLCMiWpK739RckVGeAq5o0L9llIuaCL4Gv6Ot hYK8ipiEf+NXITkj0rzTYIqgGFMMiCMryP1gKipY1aOLIXHLGPmwcV/CdxMuM2nE EgFL9itnDtkqClCfH19f7rh6lIRpbt5BiYzTPYUsAziJWeHfC79YEvofQTAgfDl+ r6ZPz6HIaCT0Eg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:15:35 2026 by rpki-client