$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer File: E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer (raw, json) Hash identifier: G5hXFE/ZVaX0VFkdBlZr1CcF4m4lukYWR6tiNVASHbs= Subject key identifier: E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6751274B576E6E3F8974FB9C2A75C9E27B2377BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft caRepository: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Sep 2026 15:25:15 +0000 Certificate not after: Wed 22 Sep 2027 15:30:15 +0000 Subordinate resources: AS: 274350 IP: 2804:96a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:51:27:4b:57:6e:6e:3f:89:74:fb:9c:2a:75:c9:e2:7b:23:77:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 15:25:15 2026 GMT Not After : Sep 22 15:30:15 2027 GMT Subject: CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:e4:9d:da:f1:9f:29:59:9c:c9:3a:0d:ba: 8d:cc:c4:4e:81:3c:56:1a:17:51:42:87:ca:78:4a: 8c:88:cb:57:d0:10:b9:d4:3d:95:32:90:0b:4c:5f: fb:95:b6:2d:6b:1e:e9:48:35:ea:0d:24:67:7e:0b: f9:0e:bc:09:0a:80:ac:7c:cb:24:97:90:35:01:45: a3:d1:2c:aa:08:f4:ea:b2:f2:59:22:df:b2:53:ff: 19:5c:66:ee:ce:eb:e4:6c:9c:a0:c2:0a:60:c5:40: ec:71:92:c8:0d:5a:fd:cc:2f:b7:e6:73:ca:dd:96: 02:97:d4:8f:91:8a:d6:07:11:07:f1:fb:ae:5b:8f: 22:3f:12:f6:e0:f1:b6:11:1b:8c:5f:01:41:a5:6f: 35:c1:bc:d3:21:9e:6e:a2:ca:d4:75:50:63:a1:dd: d5:e1:45:7e:eb:59:2b:50:73:ad:f1:e8:b3:29:35: 03:8c:69:69:20:cc:cf:71:70:39:20:7f:e7:09:0a: 67:b7:9c:b7:fd:01:1d:ef:ee:cd:b9:2e:f2:49:40: 57:54:6d:6b:b4:ba:f4:10:ab:bb:bd:16:00:e8:03: 37:b3:89:fa:28:a8:cb:c2:fe:67:63:5a:c4:5c:6c: d8:e7:24:32:7a:fc:50:b1:00:f3:10:04:36:d6:95: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:96a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274350 Signature Algorithm: sha256WithRSAEncryption c4:e8:30:c3:28:1e:07:22:2b:ba:c0:89:97:ca:40:3a:7d:c9: 98:00:18:5a:10:2b:7a:e0:69:fb:3d:ce:11:a3:2f:f2:ea:d0: c4:3d:89:8a:f1:ef:78:26:3e:48:9e:ff:8c:b1:30:00:a1:60: 9d:f2:b7:d3:8a:1a:02:76:b6:4c:9c:76:a9:f6:25:ac:65:17: 71:50:0b:2c:85:6e:40:e2:a2:15:30:3b:45:09:42:73:a4:81: 0d:05:ac:33:e5:84:c5:d1:f1:d1:da:ce:cc:76:7e:5c:61:3e: 0f:32:59:ed:20:d4:0d:76:89:79:b1:cf:e0:3a:24:4b:2d:77: 4f:f1:21:43:cd:94:1b:1e:e3:75:97:49:77:5c:f5:7d:93:55: 4a:cf:d8:6a:24:2d:7e:97:7f:ca:59:51:42:7e:bd:e3:60:8e: 97:27:1f:00:a5:fd:55:fd:50:02:98:2e:24:4e:db:49:14:8c: 4b:3c:c9:00:ab:d8:c1:a2:a3:1f:f9:df:4c:78:6c:6d:eb:3a: 51:06:2a:7f:5b:97:81:9c:5c:f4:87:6c:1e:41:60:d4:00:da: da:ed:06:7b:66:2e:49:eb:d2:a7:ca:2b:f0:45:bd:aa:96:36: 48:44:96:4a:b6:71:9a:da:64:1d:78:1c:5f:63:7b:0a:db:e9: 47:05:34:bb -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUZ1EnS1dubj+JdPucKnXJ4nsjd70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjMxNTI1MTVaFw0yNzA5MjIxNTMwMTVaMDMxMTAvBgNV BAMTKEUyODIwRjVDMUEzMThCRDRCRTE3QTM5QkUwRjdFMjY3MUFGMjlDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNOSd2vGfKVmcyToNuo3MxE6B PFYaF1FCh8p4SoyIy1fQELnUPZUykAtMX/uVti1rHulINeoNJGd+C/kOvAkKgKx8 yySXkDUBRaPRLKoI9Oqy8lki37JT/xlcZu7O6+RsnKDCCmDFQOxxksgNWv3ML7fm c8rdlgKX1I+RitYHEQfx+65bjyI/Evbg8bYRG4xfAUGlbzXBvNMhnm6iytR1UGOh 3dXhRX7rWStQc63x6LMpNQOMaWkgzM9xcDkgf+cJCme3nLf9AR3v7s25LvJJQFdU bWu0uvQQq7u9FgDoAzezifooqMvC/mdjWsRcbNjnJDJ6/FCxAPMQBDbWlRWdAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTigg9cGjGL1L4X o5vg9+JnGvKcrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVNa OGNwZTZyUmtUZ0JQTjQzSlo1d2lCSDZBUlpFZUhiNWE5UlJUNkZKVmIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVT WjhjcGU2clJrVGdCUE40M0paNXdpQkg2QVJaRWVIYjVhOVJSVDZGSlZiLzAvRTI4 MjBGNUMxQTMxOEJENEJFMTdBMzlCRTBGN0UyNjcxQUYyOUNBRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASWqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME L64wDQYJKoZIhvcNAQELBQADggEBAMToMMMoHgciK7rAiZfKQDp9yZgAGFoQK3rg afs9zhGjL/Lq0MQ9iYrx73gmPkie/4yxMAChYJ3yt9OKGgJ2tkycdqn2JaxlF3FQ CyyFbkDiohUwO0UJQnOkgQ0FrDPlhMXR8dHazsx2flxhPg8yWe0g1A12iXmxz+A6 JEstd0/xIUPNlBse43WXSXdc9X2TVUrP2GokLX6Xf8pZUUJ+veNgjpcnHwCl/VX9 UAKYLiRO20kUjEs8yQCr2MGiox/530x4bG3rOlEGKn9bl4GcXPSHbB5BYNQA2trt BntmLknr0qfKK/BFvaqWNkhElkq2cZraZB14HF9jewrb6UcFNLs= -----END CERTIFICATE-----Generated at Thu Oct 8 16:20:48 2026 by rpki-client