$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer File: F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer (raw, json) Hash identifier: V0oIsTyFquvDezp1Axsnd6/2MN1CQSVykXuBsTreA2E= Subject key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A6356BE4B7727109B1EFA04EF77382D9FA6A553 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft caRepository: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Oct 2026 22:17:51 +0000 Certificate not after: Fri 29 Oct 2027 22:22:51 +0000 Subordinate resources: AS: 262518 IP: 138.122.172.0/22 IP: 177.67.112.0/20 IP: 2804:580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 10:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:63:56:be:4b:77:27:10:9b:1e:fa:04:ef:77:38:2d:9f:a6:a5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 30 22:17:51 2026 GMT Not After : Oct 29 22:22:51 2027 GMT Subject: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:01:f5:e4:7e:fb:b6:3f:b8:99:2e:c9:ca: 67:85:1e:31:0e:83:9a:c2:14:2e:cb:6f:92:e2:98: dc:63:8d:d9:11:ec:96:f5:fc:70:b1:81:7e:9c:8c: 1e:f4:af:bd:67:85:ee:0d:4f:33:c0:51:c8:c3:bf: 3f:e2:95:88:23:c8:e5:84:c6:d5:0e:3b:83:a9:c4: ed:96:a9:26:2c:ed:81:42:92:90:a6:58:92:a9:5c: 47:60:68:95:8c:41:fb:42:c3:0c:59:7e:ea:c7:d3: 90:13:11:df:7c:22:f2:68:1d:07:9e:f9:a5:9f:a7: af:4d:4d:dd:0f:ee:c7:0d:04:0c:1d:cd:f0:09:25: 15:aa:6c:95:7f:33:4d:58:2f:c4:b2:d7:e1:61:f5: 2b:7c:43:95:1a:30:ab:55:22:1e:bd:dd:b1:5f:66: 61:01:63:27:6b:a2:bd:20:30:27:4f:d4:00:c9:82: 4d:1e:4b:6b:9c:c1:14:b5:3e:21:8c:42:47:70:05: 2f:8d:f2:7f:08:12:6e:f7:15:8c:65:2b:d0:6f:c9: b5:6a:d2:ad:0e:03:48:f5:e2:03:95:ce:42:f7:21: ca:9e:83:b1:30:e1:97:31:17:d0:36:f2:13:b4:53: 53:87:92:32:b3:57:86:ed:4a:c2:8f:be:ef:ea:81: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.172.0/22 177.67.112.0/20 IPv6: 2804:580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262518 Signature Algorithm: sha256WithRSAEncryption b9:ea:bc:2b:45:f5:a1:1d:24:7e:ef:f5:91:31:49:95:ee:f0: 5e:a9:e4:35:f7:f5:14:7b:d9:c0:5e:26:d0:c2:23:db:43:3c: 3f:65:4d:b7:27:a4:47:a2:e9:d1:61:cf:ab:79:48:d8:74:14: a0:8e:79:73:35:1b:c7:6f:05:d3:f7:16:e0:16:08:a1:9e:cd: a1:8d:f9:6f:95:78:64:c5:35:ea:bd:18:5a:d5:4c:44:8c:19: e6:9a:46:51:a6:aa:e4:b7:a3:81:8d:66:aa:a3:b3:6d:65:ba: 76:26:0b:18:ef:e4:96:a4:74:2c:6a:67:7a:c9:60:59:c5:bb: 34:80:e1:68:e2:37:c7:41:fc:62:75:15:b4:ab:38:19:6f:18: 7c:b8:6a:51:79:c4:e2:4c:86:0d:77:d6:f2:16:57:77:e9:18: 4c:69:eb:5b:25:da:c7:a7:bc:53:63:24:61:1e:a1:f8:1c:c5: e9:4a:e3:b7:a4:cf:b6:c7:16:ce:1f:08:70:4c:f5:29:28:62: 68:9b:5f:87:99:1d:bd:de:85:10:fb:bf:d3:01:4b:6f:23:7f: e8:16:3d:95:f6:4a:e3:34:af:81:0e:c3:4e:4a:8c:bd:ae:a9: 0c:f2:59:9d:3e:76:0a:8c:2b:16:e9:8f:b3:26:0a:70:96:a4: 31:dd:ec:74 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSmNWvkt3JxCbHvoE73c4LZ+mpVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMzAyMjE3NTFaFw0yNzEwMjkyMjIyNTFaMDMxMTAvBgNV BAMTKEYxNDEzQkMzRDU5NzYwMUQ1Q0NBRTRBMDA0ODk4M0RFREFDRUU1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0gH15H77tj+4mS7JymeFHjEO g5rCFC7Lb5LimNxjjdkR7Jb1/HCxgX6cjB70r71nhe4NTzPAUcjDvz/ilYgjyOWE xtUOO4OpxO2WqSYs7YFCkpCmWJKpXEdgaJWMQftCwwxZfurH05ATEd98IvJoHQee +aWfp69NTd0P7scNBAwdzfAJJRWqbJV/M01YL8Sy1+Fh9St8Q5UaMKtVIh693bFf ZmEBYydror0gMCdP1ADJgk0eS2ucwRS1PiGMQkdwBS+N8n8IEm73FYxlK9BvybVq 0q0OA0j14gOVzkL3Icqeg7Ew4ZcxF9A28hO0U1OHkjKzV4btSsKPvu/qgaf1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxQTvD1ZdgHVzK 5KAEiYPe2s7l0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Fp U3JRZWE1ZGdGNEEydXNqQkpWWG0xd1Z6SG9HdkxuV3Bra2Qza2JoaWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nx aVNyUWVhNWRnRjRBMnVzakJKVlhtMXdWekhvR3ZMbldwa2tkM2tiaGlhLzAvRjE0 MTNCQzNENTk3NjAxRDVDQ0FFNEEwMDQ4OTgzREVEQUNFRTVEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinqsAwQEsUNwMA0EAgACMAcDBQAoBAWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBdjANBgkqhkiG9w0BAQsFAAOCAQEAueq8K0X1 oR0kfu/1kTFJle7wXqnkNff1FHvZwF4m0MIj20M8P2VNtyekR6Lp0WHPq3lI2HQU oI55czUbx28F0/cW4BYIoZ7NoY35b5V4ZMU16r0YWtVMRIwZ5ppGUaaq5LejgY1m qqOzbWW6diYLGO/klqR0LGpneslgWcW7NIDhaOI3x0H8YnUVtKs4GW8YfLhqUXnE 4kyGDXfW8hZXd+kYTGnrWyXax6e8U2MkYR6h+BzF6Urjt6TPtscWzh8IcEz1KShi aJtfh5kdvd6FEPu/0wFLbyN/6BY9lfZK4zSvgQ7DTkqMva6pDPJZnT52CowrFumP syYKcJakMd3sdA== -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:46 2026 by rpki-client