$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.cer File: 1868D2CD2F78C791ADA7475822735FBFE8F64B8B.cer (raw, json) Hash identifier: bADfMNmo5sSuaUHuc8tf6S/MxswMPnDmclp+0ZoTTIw= Subject key identifier: 18:68:D2:CD:2F:78:C7:91:AD:A7:47:58:22:73:5F:BF:E8:F6:4B:8B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F6DB40F1EC2CCA328E1E4AD6BD1EF1D7E6C873B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.mft caRepository: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 16 Jul 2026 14:00:29 +0000 Certificate not after: Thu 15 Jul 2027 14:05:29 +0000 Subordinate resources: AS: 268297 IP: 45.237.248.0/22 IP: 2804:4f00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6d:b4:0f:1e:c2:cc:a3:28:e1:e4:ad:6b:d1:ef:1d:7e:6c:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 16 14:00:29 2026 GMT Not After : Jul 15 14:05:29 2027 GMT Subject: CN=1868D2CD2F78C791ADA7475822735FBFE8F64B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:05:cd:dd:e4:d2:48:57:8a:3f:96:54:df: 7f:d2:59:36:4b:b8:8f:91:29:7a:e8:5b:fa:63:69: b1:b2:c6:f8:7c:5b:08:4f:d9:75:e5:dd:50:ab:b9: ba:b2:e1:91:83:bd:41:1a:7f:35:84:b1:c3:4a:ee: 18:74:47:f3:4f:52:8d:3e:b6:fb:67:a9:01:eb:97: d8:62:c4:56:ed:29:1a:5f:15:f8:c4:28:6e:64:26: 1e:d9:b7:f8:93:ed:66:e5:b6:b9:c4:62:07:01:ab: c9:35:59:33:5a:f1:36:d0:49:99:df:70:f8:6a:3a: ef:a7:ad:34:3b:d7:56:89:1f:4d:f7:74:59:0b:f6: da:8f:59:61:67:4a:77:33:e6:7a:6f:19:36:07:c7: 15:5a:02:3c:2c:aa:8c:7f:75:b3:d5:2f:da:da:37: 8f:e5:7f:e8:35:3b:af:07:ba:8c:36:e2:ba:5d:bd: b7:f8:23:02:cc:ce:50:30:fc:22:73:d5:83:04:7d: 98:80:16:17:03:99:7a:24:86:9f:5e:41:fa:31:31: fb:1f:d7:a1:2a:73:06:00:81:75:57:02:d6:33:8a: 66:06:65:cd:b6:3d:e9:00:f3:97:42:a1:ab:e7:5c: 60:a9:2f:42:35:66:cb:a3:ae:cb:e0:23:d4:2e:2a: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:68:D2:CD:2F:78:C7:91:AD:A7:47:58:22:73:5F:BF:E8:F6:4B:8B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.248.0/22 IPv6: 2804:4f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268297 Signature Algorithm: sha256WithRSAEncryption 96:3c:7f:bf:9c:fe:cb:a3:c0:8e:90:40:81:3c:6f:d5:f4:ca: 54:d6:2f:f0:8a:7d:36:09:04:7c:b4:17:10:f3:49:a1:c4:76: 47:85:40:36:8f:bc:ab:19:4d:1a:be:33:e3:d8:ec:bb:7a:1e: 24:37:2c:3b:4e:a2:32:9f:b1:f5:ea:36:40:3b:19:36:f4:1a: 73:62:cc:32:17:b2:d0:06:18:23:b9:35:39:90:07:09:da:0a: 94:49:6c:e5:2a:d2:46:36:cf:0d:fb:f9:bf:9f:a0:9a:de:e2: 7b:cc:6d:7e:96:73:3a:15:6c:a3:3d:b4:93:4c:bc:c6:7f:4a: 97:e1:83:eb:4a:50:59:59:b6:4a:ff:f1:f6:34:5f:9d:0e:16: 7c:30:ee:43:1e:66:ea:4b:70:9c:6b:5d:2e:b1:44:e4:b2:1d: 40:6c:85:ad:a8:65:3c:1c:ce:10:52:30:ad:5e:bd:7e:b7:73: 78:37:b7:99:49:f3:01:ef:15:9f:f8:5a:b7:a4:03:ad:6e:77: 61:79:a7:0c:ae:1b:62:07:a5:7f:52:88:69:b2:c0:eb:c9:00: ae:d0:b1:9d:82:6e:f8:7a:2a:c1:56:e9:f9:14:f0:d6:cd:c5: e3:29:67:4b:30:9e:e1:41:85:3a:45:82:86:22:8b:cb:24:9b: e7:6c:37:1e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUH220Dx7CzKMo4eSta9HvHX5shzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTYxNDAwMjlaFw0yNzA3MTUxNDA1MjlaMDMxMTAvBgNV BAMTKDE4NjhEMkNEMkY3OEM3OTFBREE3NDc1ODIyNzM1RkJGRThGNjRCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXAXN3eTSSFeKP5ZU33/SWTZL uI+RKXroW/pjabGyxvh8WwhP2XXl3VCrubqy4ZGDvUEafzWEscNK7hh0R/NPUo0+ tvtnqQHrl9hixFbtKRpfFfjEKG5kJh7Zt/iT7WbltrnEYgcBq8k1WTNa8TbQSZnf cPhqOu+nrTQ711aJH033dFkL9tqPWWFnSncz5npvGTYHxxVaAjwsqox/dbPVL9ra N4/lf+g1O68Huow24rpdvbf4IwLMzlAw/CJz1YMEfZiAFhcDmXokhp9eQfoxMfsf 16EqcwYAgXVXAtYzimYGZc22PekA85dCoavnXGCpL0I1ZsujrsvgI9QuKkfrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYaNLNL3jHka2n R1gic1+/6PZLizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDN0 dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2dFYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qz dHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzAvMTg2 OEQyQ0QyRjc4Qzc5MUFEQTc0NzU4MjI3MzVGQkZFOEY2NEI4Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe34MA0EAgACMAcDBQAoBE8AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYCTANBgkqhkiG9w0BAQsFAAOCAQEAljx/v5z+y6PAjpBA gTxv1fTKVNYv8Ip9NgkEfLQXEPNJocR2R4VANo+8qxlNGr4z49jsu3oeJDcsO06i Mp+x9eo2QDsZNvQac2LMMhey0AYYI7k1OZAHCdoKlEls5SrSRjbPDfv5v5+gmt7i e8xtfpZzOhVsoz20k0y8xn9Kl+GD60pQWVm2Sv/x9jRfnQ4WfDDuQx5m6ktwnGtd LrFE5LIdQGyFrahlPBzOEFIwrV69frdzeDe3mUnzAe8Vn/hat6QDrW53YXmnDK4b Ygelf1KIabLA68kArtCxnYJu+HoqwVbp+RTw1s3F4ylnSzCe4UGFOkWChiKLyySb 52w3Hg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:50:19 2026 by rpki-client