$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer File: 088FBECC3D734875CDC23B55B9E5092EA27DF270.cer (raw, json) Hash identifier: RTbW+tfLmfvLHEdphdQ9a29yDMv3A+pseBYhZ49JqRw= Subject key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 20F6FCAB212610790A86C81BBAB0681D76CBA53F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft caRepository: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Sep 2026 13:16:25 +0000 Certificate not after: Tue 31 Aug 2027 13:21:25 +0000 Subordinate resources: AS: 52861 IP: 177.93.144.0/21 IP: 177.124.32.0/21 IP: 2804:7bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 12:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f6:fc:ab:21:26:10:79:0a:86:c8:1b:ba:b0:68:1d:76:cb:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 1 13:16:25 2026 GMT Not After : Aug 31 13:21:25 2027 GMT Subject: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:81:1a:af:9a:4f:c1:b1:7f:8a:65:62:f4: 41:9d:8d:8c:f6:a0:da:80:39:63:bd:77:12:6b:96: 06:ba:6d:f1:27:f8:98:4b:e9:08:6f:bd:3e:9e:5a: 49:f5:15:44:5a:b3:00:f4:17:62:e1:c8:be:af:cf: d8:a4:14:53:7b:05:be:05:44:c0:c3:64:90:45:11: 46:17:92:bc:bb:56:f6:86:f4:c0:8b:a2:8a:42:1c: 62:28:60:b9:1d:c1:6e:53:59:bd:88:db:39:ef:48: d9:1b:ad:96:00:28:c0:63:52:94:69:85:ae:ee:88: e9:b8:94:6d:9c:69:7d:fb:ef:42:fd:68:cd:79:c8: dd:74:e9:cd:bf:f1:13:c9:ec:d6:aa:fa:a2:dd:15: 37:ff:87:71:ea:a3:be:19:ae:e8:fa:f5:ca:42:8e: 36:5e:b3:88:b2:83:44:f6:16:ae:96:96:10:c8:3f: e5:cf:65:42:ec:27:bb:9f:1a:4c:9d:55:5d:0b:45: eb:18:00:32:85:e0:d0:8e:14:49:b9:26:c6:ba:ab: f8:c9:e5:09:88:60:20:4f:3c:80:46:1d:d5:1e:94: 18:29:46:2e:81:07:d2:cd:85:f3:34:45:4b:dc:80: 8f:3c:05:38:c8:1b:6f:c8:63:b4:02:27:c8:ba:de: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.93.144.0/21 177.124.32.0/21 IPv6: 2804:7bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52861 Signature Algorithm: sha256WithRSAEncryption 6c:b5:7d:8e:22:ed:42:db:9f:38:7f:67:8e:f0:32:98:9b:e6: bf:c6:45:11:c6:54:35:a7:3d:51:c4:60:14:d8:fb:2d:42:69: de:f0:52:bb:af:2d:b8:b1:c3:c6:fb:21:dc:a4:37:38:1a:be: 03:77:60:ec:1b:55:90:2d:09:83:20:97:78:f8:a6:d3:04:8f: e2:28:e8:f7:1b:8f:6c:d7:4c:a5:22:09:19:23:9e:a2:6e:78: dd:09:5a:46:71:c5:3c:3b:22:0c:db:87:24:63:dc:b9:7a:e9: d0:1f:6a:99:e2:cb:48:2d:7d:14:93:58:99:c5:94:83:a1:45: e8:98:fa:e6:2b:82:5f:42:d9:02:7f:68:32:ed:0c:51:d0:4d: f6:6b:c2:85:18:59:59:30:c4:07:62:7f:63:db:8c:79:c7:a9: c6:27:5a:cc:cf:a0:e2:eb:a0:9a:6f:4a:80:5f:12:06:8f:f2: 4c:3a:6a:44:d3:d6:d6:e1:44:80:04:ba:4d:9a:ac:91:90:38: 8f:cd:ba:61:95:41:5e:5e:86:28:3e:87:2d:8b:d1:09:8f:e7: ee:40:12:ef:53:8f:e1:26:f0:a9:80:ee:c8:92:32:68:2b:c1: 83:32:b3:65:7d:e3:e4:ae:44:06:11:04:86:36:c0:81:26:d5: 54:b9:55:d1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIPb8qyEmEHkKhsgburBoHXbLpT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDExMzE2MjVaFw0yNzA4MzExMzIxMjVaMDMxMTAvBgNV BAMTKDA4OEZCRUNDM0Q3MzQ4NzVDREMyM0I1NUI5RTUwOTJFQTI3REYyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhY4Ear5pPwbF/imVi9EGdjYz2 oNqAOWO9dxJrlga6bfEn+JhL6QhvvT6eWkn1FURaswD0F2LhyL6vz9ikFFN7Bb4F RMDDZJBFEUYXkry7VvaG9MCLoopCHGIoYLkdwW5TWb2I2znvSNkbrZYAKMBjUpRp ha7uiOm4lG2caX3770L9aM15yN106c2/8RPJ7Naq+qLdFTf/h3Hqo74Zruj69cpC jjZes4iyg0T2Fq6WlhDIP+XPZULsJ7ufGkydVV0LResYADKF4NCOFEm5Jsa6q/jJ 5QmIYCBPPIBGHdUelBgpRi6BB9LNhfM0RUvcgI88BTjIG2/IY7QCJ8i63uqvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIj77MPXNIdc3C O1W55Qkuon3ycDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjF1 VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhBS1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ix dVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAvMDg4 RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVBMjdERjI3MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsV2QAwQDsXwgMA0EAgACMAcDBQAoBAe8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOfTANBgkqhkiG9w0BAQsFAAOCAQEAbLV9jiLt QtufOH9njvAymJvmv8ZFEcZUNac9UcRgFNj7LUJp3vBSu68tuLHDxvsh3KQ3OBq+ A3dg7BtVkC0JgyCXePim0wSP4ijo9xuPbNdMpSIJGSOeom543QlaRnHFPDsiDNuH JGPcuXrp0B9qmeLLSC19FJNYmcWUg6FF6Jj65iuCX0LZAn9oMu0MUdBN9mvChRhZ WTDEB2J/Y9uMecepxidazM+g4uugmm9KgF8SBo/yTDpqRNPW1uFEgAS6TZqskZA4 j826YZVBXl6GKD6HLYvRCY/n7kAS71OP4SbwqYDuyJIyaCvBgzKzZX3j5K5EBhEE hjbAgSbVVLlV0Q== -----END CERTIFICATE-----Generated at Sat Oct 10 11:09:54 2026 by rpki-client