$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer File: 2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer (raw, json) Hash identifier: 1m0hYJ1iRlUuSVK3WsQXThT8srJXqcrzmBi+KeN9UnA= Subject key identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0140653FEDC87560DE1DE6D6A6256EE8B0F68E67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Jul 2026 14:33:38 +0000 Certificate not after: Fri 09 Jul 2027 14:38:38 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:40:65:3f:ed:c8:75:60:de:1d:e6:d6:a6:25:6e:e8:b0:f6:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 10 14:33:38 2026 GMT Not After : Jul 9 14:38:38 2027 GMT Subject: CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:e7:4f:34:93:39:be:c4:ba:a3:be:9f:37: 2d:e9:e5:96:f2:88:46:4c:98:6c:85:7e:a8:33:ad: 0a:25:62:0c:51:63:15:64:2f:55:59:b1:19:30:91: 00:b5:74:f4:9c:7d:f4:cb:22:cf:09:ab:b9:27:82: f9:8c:a9:2b:fc:fe:4d:a3:85:89:e1:16:92:cb:69: 11:a5:ed:7d:63:d1:7b:f8:56:ec:b9:9e:8a:ba:9f: bc:d9:ff:2f:cd:b2:f7:84:a2:10:79:e1:9b:2e:1f: f1:e5:89:e2:f4:97:7a:05:d0:ae:ff:8b:66:7b:75: c6:29:09:e1:47:b8:c4:6c:47:8b:bf:48:eb:8c:96: 8c:b4:60:dd:01:2c:fd:8f:e1:8e:7a:fb:e7:03:5d: 7c:26:49:d2:92:f1:1c:52:98:bf:c5:d1:d8:da:70: 26:04:e1:52:ba:bb:e1:36:ab:7f:67:24:32:36:14: f5:ca:cf:11:48:33:f3:0e:19:dc:b7:33:f6:80:70: f7:e5:ef:80:1b:5e:36:4b:9f:ef:97:81:89:d4:43: 69:21:ee:11:0a:8f:56:c1:b2:bf:27:2a:69:83:62: f6:42:aa:7d:27:05:c1:51:1e:66:ca:50:0c:92:db: e3:89:c2:bb:12:9f:ae:e2:93:ea:32:73:d5:70:00: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption 8d:b5:ff:fb:0e:8c:8f:c8:32:85:a6:2f:ed:40:57:ca:27:56: 5e:46:47:d3:7e:57:ef:72:b8:53:56:68:11:89:7e:e0:f8:89: e8:2b:63:a6:d6:0f:7d:e4:c6:9e:c6:34:3e:01:d6:c4:f9:66: f9:48:5a:6b:c9:02:28:93:41:e2:34:89:91:ac:fb:f7:5c:24: d7:54:bd:ed:01:38:db:48:b6:d0:fa:c1:02:04:c3:35:ea:07: c6:a4:f6:7b:7e:69:8a:a8:f3:08:1b:7d:18:88:08:53:26:13: e6:84:ce:c8:3c:19:8c:64:bc:2e:ab:30:fa:6c:c3:1c:cd:f3: ee:a9:d7:38:62:bc:4a:0b:de:d8:b5:f5:39:7a:bc:d0:8f:83: 89:f2:c1:95:54:f7:4d:21:5b:7a:06:7f:fa:ff:1f:3b:4c:02: 12:19:f0:fb:4c:73:e1:d2:9c:16:69:ae:e0:71:b7:a3:f8:be: e4:e3:9e:91:d6:fe:f5:af:1c:c9:0d:13:35:21:7b:02:fc:1e: c4:75:05:44:ab:2a:be:9d:b0:34:b5:30:a3:d4:08:72:68:17: 5d:aa:8b:0e:21:96:f5:4d:ed:2e:b7:55:59:6e:80:97:fd:df: a4:6a:c9:f4:ad:52:c3:61:48:57:99:53:b2:94:a8:d6:fc:b3: cb:b9:e7:72 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAUBlP+3IdWDeHebWpiVu6LD2jmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTAxNDMzMzhaFw0yNzA3MDkxNDM4MzhaMDMxMTAvBgNV BAMTKDJBNTY4MDM4Q0NFRUJGQjhFRjA0Q0I0N0QzOTgzMUFDNkIxRjRFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECedPNJM5vsS6o76fNy3p5Zby iEZMmGyFfqgzrQolYgxRYxVkL1VZsRkwkQC1dPScffTLIs8Jq7kngvmMqSv8/k2j hYnhFpLLaRGl7X1j0Xv4Vuy5noq6n7zZ/y/NsveEohB54ZsuH/HlieL0l3oF0K7/ i2Z7dcYpCeFHuMRsR4u/SOuMloy0YN0BLP2P4Y56++cDXXwmSdKS8RxSmL/F0dja cCYE4VK6u+E2q39nJDI2FPXKzxFIM/MOGdy3M/aAcPfl74AbXjZLn++XgYnUQ2kh 7hEKj1bBsr8nKmmDYvZCqn0nBcFRHmbKUAyS2+OJwrsSn67ik+oyc9VwAHQhAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqVoA4zO6/uO8E y0fTmDGsax9OQjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvMkE1 NjgwMzhDQ0VFQkZCOEVGMDRDQjQ3RDM5ODMxQUM2QjFGNEU0Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEAjbX/+w6M j8gyhaYv7UBXyidWXkZH035X73K4U1ZoEYl+4PiJ6CtjptYPfeTGnsY0PgHWxPlm +Uhaa8kCKJNB4jSJkaz791wk11S97QE420i20PrBAgTDNeoHxqT2e35piqjzCBt9 GIgIUyYT5oTOyDwZjGS8Lqsw+mzDHM3z7qnXOGK8Sgve2LX1OXq80I+DifLBlVT3 TSFbegZ/+v8fO0wCEhnw+0xz4dKcFmmu4HG3o/i+5OOekdb+9a8cyQ0TNSF7Avwe xHUFRKsqvp2wNLUwo9QIcmgXXaqLDiGW9U3tLrdVWW6Al/3fpGrJ9K1Sw2FIV5lT spSo1vyzy7nncg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:14:58 2026 by rpki-client