$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer File: 0673A8A85FD75BDF7374650633566E470F5D792A.cer (raw, json) Hash identifier: B1QIZuIMBHAXjXnBhXybBVxhTI1Va/6mv9cohrdNqQc= Subject key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35E85A994D627BEC287A342DD92F306070FCA1F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft caRepository: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 13 Oct 2026 23:02:03 +0000 Certificate not after: Tue 12 Oct 2027 23:07:03 +0000 Subordinate resources: AS: 263266 IP: 170.82.108.0/22 IP: 177.129.28.0/22 IP: 2804:1614::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 08:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:5a:99:4d:62:7b:ec:28:7a:34:2d:d9:2f:30:60:70:fc:a1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 13 23:02:03 2026 GMT Not After : Oct 12 23:07:03 2027 GMT Subject: CN=0673A8A85FD75BDF7374650633566E470F5D792A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:f2:89:e3:4c:ad:1c:c0:95:f0:8f:42:08: e9:45:2a:bd:b8:6e:17:73:41:14:71:fb:5b:72:93: bc:05:34:a5:3a:44:57:d2:b6:1d:c1:16:dd:0e:10: c0:0c:51:5f:a4:d4:17:39:e0:d9:94:aa:c5:0c:b7: ab:ae:c3:fb:03:2b:ae:82:74:71:4f:c6:2e:95:92: c2:29:e3:fc:50:eb:f6:47:d2:30:e4:0e:f3:ff:cb: 97:6b:54:af:ef:0e:eb:97:80:71:c3:2e:4e:f0:60: 23:46:d3:e3:97:8c:00:b0:9f:af:2d:af:5f:73:d7: 46:4a:7f:f5:10:88:fa:96:47:1f:58:11:0b:92:eb: 62:33:91:88:fa:62:3b:7a:22:c8:1f:c6:39:7e:28: 93:2b:3d:97:dd:2c:a2:df:d7:b1:60:8f:17:67:4d: 56:ab:cd:0a:c4:a8:db:95:49:39:67:77:4d:b9:4a: 05:1a:11:1a:02:88:3a:71:07:9f:72:99:81:5f:12: a1:eb:8d:77:30:b2:01:b1:0a:69:bd:0e:17:50:e1: 4d:80:cf:ea:ce:b1:56:5f:5e:24:4e:24:a8:89:ff: a5:5d:0f:4e:57:02:64:b6:ba:8f:28:ba:ca:b3:6e: d2:25:23:73:99:7b:d1:5b:34:c3:89:1b:de:1a:a0: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.108.0/22 177.129.28.0/22 IPv6: 2804:1614::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263266 Signature Algorithm: sha256WithRSAEncryption 3e:cb:29:92:cc:60:ae:0c:1b:6e:92:04:1e:d4:32:c3:b5:ad: 09:44:fc:fd:7e:13:c4:71:39:cb:75:7a:94:ea:6e:8f:0b:56: 8d:1d:34:9c:ab:b0:99:03:0b:21:0b:5f:a9:60:b3:ca:54:8e: 9a:f7:3f:f4:aa:53:b6:33:44:ba:e5:a9:a7:9f:bd:32:a5:8e: 7e:7e:3d:ab:45:6c:5a:9e:82:94:df:aa:6a:39:43:8c:21:11: 77:cd:46:fc:e7:d2:8d:96:93:55:58:c6:5f:c2:9e:30:e3:5d: 0c:bf:e2:93:3d:79:37:e7:57:e2:b9:ff:7f:cb:46:1c:80:6c: 44:d6:75:e0:d5:86:dd:e7:13:c4:4b:32:2e:a9:e9:7b:86:0d: c1:de:63:04:32:12:96:49:1f:7a:8f:bc:ef:a8:ef:fb:da:a7: 9c:1d:88:cf:74:8b:50:dc:9e:2f:64:fc:3b:2f:3c:9b:45:e4: fb:1b:b4:c5:0e:d4:ff:45:64:7c:ce:08:51:2b:e5:80:7e:3b: 09:bc:8a:8e:1a:07:2e:b6:4b:84:82:79:7a:3b:ea:99:9f:65: 64:1d:6c:2b:0c:30:68:f4:57:e5:6b:20:68:2e:bb:d5:7a:ab: 0a:fa:47:cf:c0:84:32:07:5b:6f:61:18:ac:2f:44:fb:98:e3: 31:53:7e:9e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNehamU1ie+woejQt2S8wYHD8ofEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTMyMzAyMDNaFw0yNzEwMTIyMzA3MDNaMDMxMTAvBgNV BAMTKDA2NzNBOEE4NUZENzVCREY3Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppvKJ40ytHMCV8I9CCOlFKr24 bhdzQRRx+1tyk7wFNKU6RFfSth3BFt0OEMAMUV+k1Bc54NmUqsUMt6uuw/sDK66C dHFPxi6VksIp4/xQ6/ZH0jDkDvP/y5drVK/vDuuXgHHDLk7wYCNG0+OXjACwn68t r19z10ZKf/UQiPqWRx9YEQuS62IzkYj6Yjt6Isgfxjl+KJMrPZfdLKLf17Fgjxdn TVarzQrEqNuVSTlnd025SgUaERoCiDpxB59ymYFfEqHrjXcwsgGxCmm9DhdQ4U2A z+rOsVZfXiROJKiJ/6VdD05XAmS2uo8ousqzbtIlI3OZe9FbNMOJG94aoE8FAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGc6ioX9db33N0 ZQYzVm5HD115KjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlVX ajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJV V2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAvMDY3 M0E4QTg1RkQ3NUJERjczNzQ2NTA2MzM1NjZFNDcwRjVENzkyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlJsAwQCsYEcMA0EAgACMAcDBQAoBBYUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEYjANBgkqhkiG9w0BAQsFAAOCAQEAPsspksxg rgwbbpIEHtQyw7WtCUT8/X4TxHE5y3V6lOpujwtWjR00nKuwmQMLIQtfqWCzylSO mvc/9KpTtjNEuuWpp5+9MqWOfn49q0VsWp6ClN+qajlDjCERd81G/OfSjZaTVVjG X8KeMONdDL/ikz15N+dX4rn/f8tGHIBsRNZ14NWG3ecTxEsyLqnpe4YNwd5jBDIS lkkfeo+876jv+9qnnB2Iz3SLUNyeL2T8Oy88m0Xk+xu0xQ7U/0VkfM4IUSvlgH47 CbyKjhoHLrZLhIJ5ejvqmZ9lZB1sKwwwaPRX5WsgaC671XqrCvpHz8CEMgdbb2EY rC9E+5jjMVN+ng== -----END CERTIFICATE-----Generated at Wed Oct 14 10:32:22 2026 by rpki-client