$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer File: F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer (raw, json) Hash identifier: dgDFGHyJyneZS0GelmhASuKltGS4XaAA/m7wmYikaGM= Subject key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25D394F2DE7C580559EB68ADCE1B54054D21D44A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft caRepository: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Nov 2026 23:21:29 +0000 Certificate not after: Wed 03 Nov 2027 23:26:29 +0000 Subordinate resources: AS: 262518 IP: 138.122.172.0/22 IP: 177.67.112.0/20 IP: 2804:580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Nov 2026 04:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d3:94:f2:de:7c:58:05:59:eb:68:ad:ce:1b:54:05:4d:21:d4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 23:21:29 2026 GMT Not After : Nov 3 23:26:29 2027 GMT Subject: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:01:f5:e4:7e:fb:b6:3f:b8:99:2e:c9:ca: 67:85:1e:31:0e:83:9a:c2:14:2e:cb:6f:92:e2:98: dc:63:8d:d9:11:ec:96:f5:fc:70:b1:81:7e:9c:8c: 1e:f4:af:bd:67:85:ee:0d:4f:33:c0:51:c8:c3:bf: 3f:e2:95:88:23:c8:e5:84:c6:d5:0e:3b:83:a9:c4: ed:96:a9:26:2c:ed:81:42:92:90:a6:58:92:a9:5c: 47:60:68:95:8c:41:fb:42:c3:0c:59:7e:ea:c7:d3: 90:13:11:df:7c:22:f2:68:1d:07:9e:f9:a5:9f:a7: af:4d:4d:dd:0f:ee:c7:0d:04:0c:1d:cd:f0:09:25: 15:aa:6c:95:7f:33:4d:58:2f:c4:b2:d7:e1:61:f5: 2b:7c:43:95:1a:30:ab:55:22:1e:bd:dd:b1:5f:66: 61:01:63:27:6b:a2:bd:20:30:27:4f:d4:00:c9:82: 4d:1e:4b:6b:9c:c1:14:b5:3e:21:8c:42:47:70:05: 2f:8d:f2:7f:08:12:6e:f7:15:8c:65:2b:d0:6f:c9: b5:6a:d2:ad:0e:03:48:f5:e2:03:95:ce:42:f7:21: ca:9e:83:b1:30:e1:97:31:17:d0:36:f2:13:b4:53: 53:87:92:32:b3:57:86:ed:4a:c2:8f:be:ef:ea:81: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.172.0/22 177.67.112.0/20 IPv6: 2804:580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262518 Signature Algorithm: sha256WithRSAEncryption 42:82:e9:01:fa:66:90:ed:ca:10:b3:a5:b7:28:e7:37:b4:5d: b1:df:d3:4d:f4:50:12:1e:47:80:d0:97:34:be:c7:95:aa:65: 14:94:c6:23:00:09:62:93:25:00:c9:fc:2c:a3:3d:d9:a6:84: b8:96:2d:0e:e6:e5:2f:03:94:bb:03:5d:91:ad:24:c8:0e:bb: ff:dd:7a:05:d3:85:1f:86:d6:7b:d6:1a:2e:db:24:a1:92:28: 29:4b:f2:93:ea:e7:98:6a:54:cd:88:18:90:65:cc:a7:64:a7: bc:a8:67:f2:b4:33:92:16:d2:48:f0:aa:36:95:70:91:a0:75: e5:14:4f:c8:fd:23:60:70:7d:37:91:c9:3f:f5:92:4f:a5:01: 5d:2c:85:99:a2:f3:c1:f1:e6:22:bd:66:ab:ec:4f:7c:18:6a: 3a:c0:5e:00:c4:50:70:cc:ba:c3:ce:db:6b:f9:df:83:fc:02: e9:bc:a5:8e:78:c7:2b:86:33:8d:e0:88:4f:8f:7c:57:50:fe: 03:30:18:93:ee:03:7c:fd:bd:ce:5a:4b:c7:d1:14:9f:73:27: 80:87:bb:16:f1:dc:c5:67:17:ad:94:32:24:ba:33:ec:05:27: 96:bb:15:90:b2:e3:06:cf:37:2f:cc:4f:93:b5:52:d9:68:41: 69:b5:8d:0a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJdOU8t58WAVZ62itzhtUBU0h1EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjExMDQyMzIxMjlaFw0yNzExMDMyMzI2MjlaMDMxMTAvBgNV BAMTKEYxNDEzQkMzRDU5NzYwMUQ1Q0NBRTRBMDA0ODk4M0RFREFDRUU1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0gH15H77tj+4mS7JymeFHjEO g5rCFC7Lb5LimNxjjdkR7Jb1/HCxgX6cjB70r71nhe4NTzPAUcjDvz/ilYgjyOWE xtUOO4OpxO2WqSYs7YFCkpCmWJKpXEdgaJWMQftCwwxZfurH05ATEd98IvJoHQee +aWfp69NTd0P7scNBAwdzfAJJRWqbJV/M01YL8Sy1+Fh9St8Q5UaMKtVIh693bFf ZmEBYydror0gMCdP1ADJgk0eS2ucwRS1PiGMQkdwBS+N8n8IEm73FYxlK9BvybVq 0q0OA0j14gOVzkL3Icqeg7Ew4ZcxF9A28hO0U1OHkjKzV4btSsKPvu/qgaf1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxQTvD1ZdgHVzK 5KAEiYPe2s7l0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Fp U3JRZWE1ZGdGNEEydXNqQkpWWG0xd1Z6SG9HdkxuV3Bra2Qza2JoaWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nx aVNyUWVhNWRnRjRBMnVzakJKVlhtMXdWekhvR3ZMbldwa2tkM2tiaGlhLzAvRjE0 MTNCQzNENTk3NjAxRDVDQ0FFNEEwMDQ4OTgzREVEQUNFRTVEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinqsAwQEsUNwMA0EAgACMAcDBQAoBAWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBdjANBgkqhkiG9w0BAQsFAAOCAQEAQoLpAfpm kO3KELOltyjnN7Rdsd/TTfRQEh5HgNCXNL7HlaplFJTGIwAJYpMlAMn8LKM92aaE uJYtDublLwOUuwNdka0kyA67/916BdOFH4bWe9YaLtskoZIoKUvyk+rnmGpUzYgY kGXMp2SnvKhn8rQzkhbSSPCqNpVwkaB15RRPyP0jYHB9N5HJP/WST6UBXSyFmaLz wfHmIr1mq+xPfBhqOsBeAMRQcMy6w87ba/nfg/wC6byljnjHK4YzjeCIT498V1D+ AzAYk+4DfP29zlpLx9EUn3MngIe7FvHcxWcXrZQyJLoz7AUnlrsVkLLjBs83L8xP k7VS2WhBabWNCg== -----END CERTIFICATE-----Generated at Thu Nov 5 05:34:33 2026 by rpki-client