$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/290CDBADCA91FA5A45A2DE79C4EF31056B438D9A.cer File: 290CDBADCA91FA5A45A2DE79C4EF31056B438D9A.cer (raw, json) Hash identifier: JjM+YYr34jJHg4ixws8lKEE3MfxfUq9Xaq/4+uRRhhg= Subject key identifier: 29:0C:DB:AD:CA:91:FA:5A:45:A2:DE:79:C4:EF:31:05:6B:43:8D:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B05FDA5124E95E142A8842AFA149A933E9BF2DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/1/290CDBADCA91FA5A45A2DE79C4EF31056B438D9A.mft caRepository: rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Sep 2026 11:20:08 +0000 Certificate not after: Tue 07 Sep 2027 11:25:08 +0000 Subordinate resources: AS: 264931 IP: 168.232.8.0/22 IP: 2804:3020::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:05:fd:a5:12:4e:95:e1:42:a8:84:2a:fa:14:9a:93:3e:9b:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 8 11:20:08 2026 GMT Not After : Sep 7 11:25:08 2027 GMT Subject: CN=290CDBADCA91FA5A45A2DE79C4EF31056B438D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:90:27:53:3f:8d:ea:dd:f5:a4:c3:cd:0e: 09:c0:d5:7c:5a:09:64:62:a3:97:c1:af:e7:ae:dc: b9:9d:0a:0f:df:22:11:4a:ac:81:bc:81:92:d7:86: c6:2f:94:9b:5b:c9:0f:1f:b8:92:17:9e:9d:52:95: e5:34:b0:6e:d9:11:84:2f:0b:8d:8e:19:f6:92:02: e1:1d:c9:02:ad:bf:7d:2d:4d:61:c7:41:e8:ac:65: 52:85:21:a6:bb:8c:bd:49:52:e3:8b:b4:a8:6c:ea: 83:8a:24:dd:61:71:41:02:bb:ee:3a:3a:d1:da:22: dd:81:ae:f1:b2:b8:8f:9f:9c:e2:ba:71:fa:57:79: e8:06:6f:cf:0a:b4:e9:5d:42:33:c0:26:d3:23:44: 4f:1a:50:09:18:d6:6d:b4:64:e5:8f:5e:ac:5e:49: 73:5f:9e:d1:2b:85:99:21:10:30:c8:87:b9:81:d3: 2d:bb:3f:89:dc:b1:70:f5:c1:9f:ec:85:2a:70:88: 5a:cc:cf:54:f9:fe:1e:74:44:d8:80:07:54:63:d1: 9b:f0:40:c1:75:c7:8c:62:49:f3:3c:e6:c7:6c:76: 43:20:8d:f6:2b:4f:dc:f2:e9:17:3a:26:64:41:92: 0f:25:f0:ae:2d:f7:2d:39:7b:20:f7:72:a2:49:3b: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:0C:DB:AD:CA:91:FA:5A:45:A2:DE:79:C4:EF:31:05:6B:43:8D:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/1/290CDBADCA91FA5A45A2DE79C4EF31056B438D9A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.8.0/22 IPv6: 2804:3020::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264931 Signature Algorithm: sha256WithRSAEncryption 7d:0a:22:db:3e:9c:1b:70:6a:68:d8:3c:65:b7:ce:c7:bd:cd: d3:99:be:cb:02:50:a7:cb:ae:c0:c1:4a:47:a6:6f:4c:bb:15: 97:00:a1:59:62:99:7d:39:c7:5e:ed:8f:63:e8:85:8f:77:d4: 44:fe:ee:54:d2:5a:dc:5a:dd:b8:88:90:3e:ac:22:0a:61:38: b5:67:08:c3:bd:f3:65:65:af:a4:00:f9:3f:0d:1c:14:2e:29: 23:2e:8f:2a:e8:6c:1b:c0:2c:ab:35:39:da:42:39:82:dc:38: 05:91:29:4e:71:26:a7:07:06:59:c1:67:e4:d1:7e:01:06:89: 09:4d:05:ee:54:b3:06:80:c9:a2:18:3d:c0:19:60:aa:d5:e6: cf:fa:37:d7:72:a8:48:fc:4f:02:58:98:1e:19:6a:09:8e:56: 2d:e1:26:3f:c5:08:42:e9:4d:5c:d7:db:3a:03:9a:2c:62:e6: c7:e6:5a:1d:cd:29:52:0d:7f:0e:7d:47:37:85:16:41:cf:fe: ff:9f:a3:da:28:9b:51:a4:b1:04:7d:03:0a:ac:5a:0f:47:13: 2d:27:24:52:83:02:5a:e3:d3:18:4f:3c:93:68:b8:e3:fb:c0: a6:49:ab:89:23:73:dd:31:9d:77:ea:ab:a5:34:93:a1:2d:61: bd:a8:38:2f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOwX9pRJOleFCqIQq+hSakz6b8t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDgxMTIwMDhaFw0yNzA5MDcxMTI1MDhaMDMxMTAvBgNV BAMTKDI5MENEQkFEQ0E5MUZBNUE0NUEyREU3OUM0RUYzMTA1NkI0MzhEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFpAnUz+N6t31pMPNDgnA1Xxa CWRio5fBr+eu3LmdCg/fIhFKrIG8gZLXhsYvlJtbyQ8fuJIXnp1SleU0sG7ZEYQv C42OGfaSAuEdyQKtv30tTWHHQeisZVKFIaa7jL1JUuOLtKhs6oOKJN1hcUECu+46 OtHaIt2BrvGyuI+fnOK6cfpXeegGb88KtOldQjPAJtMjRE8aUAkY1m20ZOWPXqxe SXNfntErhZkhEDDIh7mB0y27P4ncsXD1wZ/shSpwiFrMz1T5/h50RNiAB1Rj0Zvw QMF1x4xiSfM85sdsdkMgjfYrT9zy6Rc6JmRBkg8l8K4t9y05eyD3cqJJO4O7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpDNutypH6WkWi 3nnE7zEFa0ONmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHVW TUt0dHhnMVdQREI0eXhxZXB4TEV5Vk1CUHpacU1jUFlQdXFXSzd6TWUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1 Vk1LdHR4ZzFXUERCNHl4cWVweExFeVZNQlB6WnFNY1BZUHVxV0s3ek1lLzEvMjkw Q0RCQURDQTkxRkE1QTQ1QTJERTc5QzRFRjMxMDU2QjQzOEQ5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqOgIMA0EAgACMAcDBQAoBDAgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK4zANBgkqhkiG9w0BAQsFAAOCAQEAfQoi2z6cG3BqaNg8 ZbfOx73N05m+ywJQp8uuwMFKR6ZvTLsVlwChWWKZfTnHXu2PY+iFj3fURP7uVNJa 3FrduIiQPqwiCmE4tWcIw73zZWWvpAD5Pw0cFC4pIy6PKuhsG8AsqzU52kI5gtw4 BZEpTnEmpwcGWcFn5NF+AQaJCU0F7lSzBoDJohg9wBlgqtXmz/o313KoSPxPAliY HhlqCY5WLeEmP8UIQulNXNfbOgOaLGLmx+ZaHc0pUg1/Dn1HN4UWQc/+/5+j2iib UaSxBH0DCqxaD0cTLSckUoMCWuPTGE88k2i44/vApkmriSNz3TGdd+qrpTSToS1h vag4Lw== -----END CERTIFICATE-----Generated at Sun Oct 11 10:43:25 2026 by rpki-client