$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/F3088C8FF406C25A15A2E28C5A995783A180F6F1.cer File: F3088C8FF406C25A15A2E28C5A995783A180F6F1.cer (raw, json) Hash identifier: f8fGBsKthecHpKLt4mOYrXfqZpC1zgs3hmFVWhDykvA= Subject key identifier: F3:08:8C:8F:F4:06:C2:5A:15:A2:E2:8C:5A:99:57:83:A1:80:F6:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4EA60BA225539214E94D9CD3266C182922BC158F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/F3088C8FF406C25A15A2E28C5A995783A180F6F1.mft caRepository: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Sep 2026 18:00:47 +0000 Certificate not after: Mon 13 Sep 2027 18:05:47 +0000 Subordinate resources: AS: 268738 IP: 45.71.28.0/22 IP: 45.171.44.0/22 IP: 2804:59fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 13:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a6:0b:a2:25:53:92:14:e9:4d:9c:d3:26:6c:18:29:22:bc:15:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 14 18:00:47 2026 GMT Not After : Sep 13 18:05:47 2027 GMT Subject: CN=F3088C8FF406C25A15A2E28C5A995783A180F6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:4e:3f:70:61:9c:d3:b9:95:3b:01:58:aa: cb:36:ce:21:24:d5:ce:da:43:20:11:b1:d1:f3:e8: 5c:04:06:69:2b:03:fa:b7:d9:18:2b:4d:c2:48:30: 3b:ed:c9:60:06:e5:2d:86:4e:c9:ad:64:77:f3:2c: 50:13:cb:5b:d2:9b:06:9f:07:84:fe:8f:b5:12:df: 5a:c9:4c:28:2a:64:94:94:10:e9:f0:fc:7a:f4:47: c6:27:e8:6f:81:ad:57:4a:ff:64:8c:b6:02:b0:42: a1:74:20:c0:bd:3b:86:4d:e4:92:b7:1d:95:56:d9: 25:5d:d1:ce:20:06:79:05:92:be:4b:27:d6:85:15: ae:d4:5b:9c:1d:93:e5:c8:39:9c:99:de:51:ce:c7: 64:de:42:0d:76:ef:ea:a6:25:00:5d:7b:0a:e8:c7: 62:ba:cc:4c:dd:1f:9e:ca:2e:49:d8:98:60:87:c4: 21:7c:fc:c1:29:f7:96:f6:a0:dd:67:97:bc:54:03: ec:e4:b6:ff:6a:5a:95:f8:96:fb:4e:24:d3:a0:c9: 49:29:35:f9:8a:dd:e5:1d:66:cf:54:ef:4b:c7:26: 7e:c1:e8:23:cb:c3:2e:c7:72:90:16:d5:6e:ec:32: 87:8d:89:ca:59:7e:58:61:8a:f2:15:94:8d:c5:35: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:08:8C:8F:F4:06:C2:5A:15:A2:E2:8C:5A:99:57:83:A1:80:F6:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/F3088C8FF406C25A15A2E28C5A995783A180F6F1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.28.0/22 45.171.44.0/22 IPv6: 2804:59fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268738 Signature Algorithm: sha256WithRSAEncryption 7b:d3:32:d2:9c:ed:b8:70:63:e4:02:ab:87:b2:cf:3b:bd:48: 97:8f:f1:a7:c5:a7:05:91:fb:2c:5a:71:8a:1e:85:5c:a6:01: 8b:af:cc:8f:be:5e:04:cb:65:8f:ce:82:8e:24:1e:e7:1b:c4: 84:01:1a:d3:23:af:16:22:c7:25:10:6e:e3:56:74:65:4c:a0: 69:b6:62:6f:eb:05:00:bd:9e:9d:ec:d1:95:5f:8e:95:ae:cb: d3:b8:15:5c:b7:22:b2:97:bb:38:3c:e8:7b:8f:b0:8d:78:a7: c0:ce:ab:6a:ca:70:05:d9:b1:0a:92:7b:44:69:f4:a2:31:11: 16:f7:8a:20:f5:43:bb:82:e4:25:75:b4:bb:18:b3:af:61:ed: 91:33:29:eb:d9:c8:c3:67:d6:c6:d9:6e:b3:68:19:bb:aa:ef: b1:aa:db:07:96:d0:93:e0:d2:c3:8b:0c:5c:63:55:05:d6:dd: 38:d4:df:d5:9d:e3:9d:33:c7:58:66:30:84:1c:b0:17:30:a3: 4c:74:1f:cc:7c:3d:6c:f7:b3:77:d4:ac:29:4d:4e:71:b5:21: e9:61:5a:bf:06:6a:ef:c1:4d:49:79:56:c1:a0:ed:54:8b:db: 26:01:f6:f5:d6:18:60:d2:0f:7b:76:86:1a:89:26:1f:0f:4a: 18:62:30:a4 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUTqYLoiVTkhTpTZzTJmwYKSK8FY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTQxODAwNDdaFw0yNzA5MTMxODA1NDdaMDMxMTAvBgNV BAMTKEYzMDg4QzhGRjQwNkMyNUExNUEyRTI4QzVBOTk1NzgzQTE4MEY2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNU4/cGGc07mVOwFYqss2ziEk 1c7aQyARsdHz6FwEBmkrA/q32RgrTcJIMDvtyWAG5S2GTsmtZHfzLFATy1vSmwaf B4T+j7US31rJTCgqZJSUEOnw/Hr0R8Yn6G+BrVdK/2SMtgKwQqF0IMC9O4ZN5JK3 HZVW2SVd0c4gBnkFkr5LJ9aFFa7UW5wdk+XIOZyZ3lHOx2TeQg127+qmJQBdewro x2K6zEzdH57KLknYmGCHxCF8/MEp95b2oN1nl7xUA+zktv9qWpX4lvtOJNOgyUkp NfmK3eUdZs9U70vHJn7B6CPLwy7HcpAW1W7sMoeNicpZflhhivIVlI3FNYNDAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzCIyP9AbCWhWi 4oxamVeDoYD28TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wL0YzMDg4 QzhGRjQwNkMyNUExNUEyRTI4QzVBOTk1NzgzQTE4MEY2RjEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi1HHAMEAi2rLDANBAIAAjAHAwUAKARZ/DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEGcIwDQYJKoZIhvcNAQELBQADggEBAHvTMtKc7bhw Y+QCq4eyzzu9SJeP8afFpwWR+yxacYoehVymAYuvzI++XgTLZY/Ogo4kHucbxIQB GtMjrxYixyUQbuNWdGVMoGm2Ym/rBQC9np3s0ZVfjpWuy9O4FVy3IrKXuzg86HuP sI14p8DOq2rKcAXZsQqSe0Rp9KIxERb3iiD1Q7uC5CV1tLsYs69h7ZEzKevZyMNn 1sbZbrNoGbuq77Gq2weW0JPg0sOLDFxjVQXW3TjU39Wd450zx1hmMIQcsBcwo0x0 H8x8PWz3s3fUrClNTnG1IelhWr8Gau/BTUl5VsGg7VSL2yYB9vXWGGDSD3t2hhqJ Jh8PShhiMKQ= -----END CERTIFICATE-----Generated at Sat Oct 10 15:39:51 2026 by rpki-client