$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.cer File: F62A9E68B6C36D535EB5B57CF3B3846A6603F124.cer (raw, json) Hash identifier: Gvs0M9MAgYenE0al19q7wU0b8wPHwlFXZH7iom/XOX0= Subject key identifier: F6:2A:9E:68:B6:C3:6D:53:5E:B5:B5:7C:F3:B3:84:6A:66:03:F1:24 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 035A0DA906F730C0E967867B3FD6AC2D4F03862F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.mft caRepository: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Jun 2026 11:56:07 +0000 Certificate not after: Fri 25 Jun 2027 12:01:07 +0000 Subordinate resources: AS: 263608 IP: 170.244.28.0/22 IP: 177.136.96.0/21 IP: 2804:fdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 16:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5a:0d:a9:06:f7:30:c0:e9:67:86:7b:3f:d6:ac:2d:4f:03:86:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 26 11:56:07 2026 GMT Not After : Jun 25 12:01:07 2027 GMT Subject: CN=F62A9E68B6C36D535EB5B57CF3B3846A6603F124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:f8:5c:72:cd:99:a6:0c:95:61:6d:e1:6c: 90:ed:70:49:70:1d:97:c2:af:a3:4f:b7:be:c4:a2: 05:28:9d:84:d1:2f:6d:56:ff:4f:4d:16:b1:0a:61: 6c:93:ba:6e:73:70:ea:a8:67:39:81:d4:a4:59:76: 21:b7:db:0f:43:0c:c0:6f:68:f2:59:aa:ca:0d:38: 60:ce:fd:8e:68:1b:37:a8:c3:a5:c0:0b:c7:c5:b3: 33:80:e5:cf:d9:06:30:31:c1:67:86:26:7d:01:29: 51:0d:29:4d:5a:5a:7a:d7:ca:72:02:82:7e:32:b7: 24:1f:60:c9:31:56:1e:90:24:fc:b7:5c:4f:3f:a4: 3a:66:51:37:43:80:bc:64:52:f8:95:5e:0c:c3:52: b6:a9:8d:2d:50:35:91:e6:51:4d:c5:2e:9b:47:e7: a0:27:99:cd:33:f3:56:f1:82:36:77:29:62:27:52: 48:06:82:c7:5b:79:f8:39:a6:5b:35:e3:50:50:19: c2:38:d7:05:55:7b:da:86:c0:98:f8:a8:4c:d0:2b: d6:dd:8d:19:37:0d:4e:74:f3:66:8e:9f:8f:a2:57: 64:7a:d1:30:c6:4b:8c:41:a3:e2:fc:b4:2f:c8:24: f3:43:58:96:5a:b2:a7:f0:86:83:e6:75:86:14:1b: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:2A:9E:68:B6:C3:6D:53:5E:B5:B5:7C:F3:B3:84:6A:66:03:F1:24 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.28.0/22 177.136.96.0/21 IPv6: 2804:fdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263608 Signature Algorithm: sha256WithRSAEncryption 6c:b7:d0:23:df:0d:56:a7:00:35:14:dd:2d:2a:0a:84:46:1a: dd:58:da:df:47:a9:d0:9c:a3:91:13:d9:33:1b:52:01:71:c7: 54:8e:0f:42:83:bc:45:31:59:97:f1:20:50:2f:0a:54:bf:96: 24:88:4f:aa:23:00:72:7f:91:b3:8b:32:15:8a:48:3e:32:a2: aa:d9:78:b7:7d:4d:2d:a0:76:4b:b7:34:92:e7:eb:cc:ea:a4: 1c:88:36:ca:0a:d9:62:ce:0f:6e:a5:4c:98:e2:70:9e:65:16: 86:68:9d:a7:cb:8a:48:80:65:89:b5:ff:ec:12:71:a6:9e:60: 14:db:63:5a:5b:48:16:e6:23:28:93:f5:23:4a:49:b6:b5:5e: f6:d1:d2:9b:43:02:99:3d:54:70:83:34:f6:47:95:56:9b:28: c7:9b:06:3f:4d:48:e5:1e:1e:cd:18:9b:b0:8c:ce:5b:8a:c1: 98:11:e3:d1:39:70:d9:d9:be:e6:89:47:f6:eb:94:37:dc:9e: ab:6e:5e:be:c4:cb:1a:2c:dc:f3:bf:4e:f5:3e:24:d4:d7:7f: 37:ac:a4:43:28:67:46:1d:71:e2:a1:0a:29:d5:54:86:44:44: c8:17:1d:6b:7b:50:6b:0a:74:80:a1:14:1a:5e:5d:5f:e8:65: 29:c4:52:c5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUA1oNqQb3MMDpZ4Z7P9asLU8Dhi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjYxMTU2MDdaFw0yNzA2MjUxMjAxMDdaMDMxMTAvBgNV BAMTKEY2MkE5RTY4QjZDMzZENTM1RUI1QjU3Q0YzQjM4NDZBNjYwM0YxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4/hccs2ZpgyVYW3hbJDtcElw HZfCr6NPt77EogUonYTRL21W/09NFrEKYWyTum5zcOqoZzmB1KRZdiG32w9DDMBv aPJZqsoNOGDO/Y5oGzeow6XAC8fFszOA5c/ZBjAxwWeGJn0BKVENKU1aWnrXynIC gn4ytyQfYMkxVh6QJPy3XE8/pDpmUTdDgLxkUviVXgzDUrapjS1QNZHmUU3FLptH 56Anmc0z81bxgjZ3KWInUkgGgsdbefg5pls141BQGcI41wVVe9qGwJj4qEzQK9bd jRk3DU5082aOn4+iV2R60TDGS4xBo+L8tC/IJPNDWJZasqfwhoPmdYYUGzpnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2Kp5otsNtU161 tXzzs4RqZgPxJDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWJM R0FiRnl3TkZKNTZCU0VDREdZMURjczhwTDZTNm55UlJuQXZLbUpWTGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzli TEdBYkZ5d05GSjU2QlNFQ0RHWTFEY3M4cEw2UzZueVJSbkF2S21KVkxmLzAvRjYy QTlFNjhCNkMzNkQ1MzVFQjVCNTdDRjNCMzg0NkE2NjAzRjEyNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvQcAwQDsYhgMA0EAgACMAcDBQAoBA/cMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFuDANBgkqhkiG9w0BAQsFAAOCAQEAbLfQI98N VqcANRTdLSoKhEYa3Vja30ep0JyjkRPZMxtSAXHHVI4PQoO8RTFZl/EgUC8KVL+W JIhPqiMAcn+Rs4syFYpIPjKiqtl4t31NLaB2S7c0kufrzOqkHIg2ygrZYs4PbqVM mOJwnmUWhmidp8uKSIBlibX/7BJxpp5gFNtjWltIFuYjKJP1I0pJtrVe9tHSm0MC mT1UcIM09keVVpsox5sGP01I5R4ezRibsIzOW4rBmBHj0Tlw2dm+5olH9uuUN9ye q25evsTLGizc879O9T4k1Nd/N6ykQyhnRh1x4qEKKdVUhkREyBcda3tQawp0gKEU Gl5dX+hlKcRSxQ== -----END CERTIFICATE-----Generated at Wed Jul 8 15:18:39 2026 by rpki-client