$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer (raw, json) Hash identifier: lp4U5sYibDcjtIGfNYWDOHW8rjKU9UkMYZQV4VZ0XYs= Subject key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1EAB2283C87273B011894913A659117D1C404201 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft caRepository: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 09 Oct 2026 15:30:42 +0000 Certificate not after: Fri 08 Oct 2027 15:35:42 +0000 Subordinate resources: AS: 269699 IP: 45.191.252.0/22 IP: 2804:6888::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 17:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ab:22:83:c8:72:73:b0:11:89:49:13:a6:59:11:7d:1c:40:42:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 9 15:30:42 2026 GMT Not After : Oct 8 15:35:42 2027 GMT Subject: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:28:dc:ed:63:e1:33:00:18:65:43:b6:be:2e: 49:b1:b4:0c:3d:50:72:f1:c2:11:7c:74:18:bf:3f: 1c:62:fb:cd:e5:77:30:dc:61:c1:5d:18:e5:44:80: e6:86:17:32:5d:22:a4:4f:23:8a:ad:71:b0:54:16: ee:c0:ac:f1:f5:e7:0a:04:4f:15:c8:68:0b:28:f4: d4:8c:30:da:de:2a:49:25:31:28:f8:e5:36:7f:24: fd:fd:b1:06:13:eb:45:21:f1:ed:2b:2d:07:cd:f0: ae:bf:50:c5:53:b0:a3:8a:93:04:20:28:83:1e:8f: 1f:0c:6d:08:25:cf:f3:02:0e:87:36:90:4d:3e:2b: 51:4d:43:2d:c7:2e:50:16:4b:ce:34:8c:9b:3e:db: 0d:63:1a:57:61:46:c0:33:39:24:ca:c8:59:87:a4: cc:c8:d5:98:85:60:75:7b:ca:a2:26:56:2a:51:d0: a0:c0:30:60:fd:56:f4:94:ff:fc:ae:a1:9b:bd:73: d7:8a:bd:ae:81:e6:71:de:95:64:94:4d:a4:ee:95: ad:2b:55:04:c8:b8:b2:60:d1:4b:af:18:d0:2a:ff: 71:15:58:f8:33:4b:20:98:a9:53:67:d7:8e:3f:24: 7d:65:45:87:70:44:de:0b:94:d8:6c:44:e8:77:d8: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.252.0/22 IPv6: 2804:6888::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269699 Signature Algorithm: sha256WithRSAEncryption 4f:5d:a9:bd:d5:87:18:8d:a1:65:8a:da:3f:c5:2f:35:ea:c7: 68:1c:0b:e0:ff:79:ff:d2:0a:b3:29:ce:55:90:a2:bc:54:cb: c9:80:6d:cc:64:ca:7a:f6:b8:06:87:aa:41:ef:85:d6:52:e8: cf:74:5a:77:46:17:98:c5:d2:06:c7:64:5c:ab:3f:4e:bc:a9: dd:21:24:83:02:fa:b6:b2:9d:61:9f:38:9c:f9:47:60:ce:c4: 13:7d:c4:da:72:a8:11:a8:93:cf:58:39:c9:fa:73:ab:d8:bf: b2:0c:2f:23:39:21:cd:fc:66:74:62:85:00:4d:4d:b0:d8:4d: f3:10:87:f1:a7:19:41:40:0c:5b:99:35:20:6d:64:46:11:7d: 0e:c1:ec:4b:8b:7b:c4:9f:6a:ce:fb:ce:29:74:bb:02:a4:36: cc:23:fd:4d:d7:40:be:d1:5d:a9:7c:db:28:c5:83:d3:c3:4d: 50:49:a1:17:7e:3b:e9:be:16:1d:f9:76:4a:93:0e:a6:7f:c7: 26:91:e2:79:92:55:c9:ad:ac:f8:08:e0:ef:3d:0d:5d:f1:2b: ea:83:b1:46:6b:26:3a:7d:8d:ad:86:2a:90:a8:5d:82:20:73: a2:78:79:1e:8c:34:e3:d1:22:5a:05:12:7d:7a:3a:4b:10:d9: f3:a3:89:c8 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUHqsig8hyc7ARiUkTplkRfRxAQgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDkxNTMwNDJaFw0yNzEwMDgxNTM1NDJaMDMxMTAvBgNV BAMTKDJERDgxQjM3MUU4QUFGOEMxNEUyMzg4OERGRkNBMjY0MkY4QkU2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6KNztY+EzABhlQ7a+LkmxtAw9 UHLxwhF8dBi/Pxxi+83ldzDcYcFdGOVEgOaGFzJdIqRPI4qtcbBUFu7ArPH15woE TxXIaAso9NSMMNreKkklMSj45TZ/JP39sQYT60Uh8e0rLQfN8K6/UMVTsKOKkwQg KIMejx8MbQglz/MCDoc2kE0+K1FNQy3HLlAWS840jJs+2w1jGldhRsAzOSTKyFmH pMzI1ZiFYHV7yqImVipR0KDAMGD9VvSU//yuoZu9c9eKva6B5nHelWSUTaTula0r VQTIuLJg0UuvGNAq/3EVWPgzSyCYqVNn144/JH1lRYdwRN4LlNhsROh32Ae7AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQt2Bs3HoqvjBTi OIjf/KJkL4vmozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGcz M21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGcz M21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8yREQ4 MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItv/wwDQQCAAIwBwMFACgEaIgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB2DMA0GCSqGSIb3DQEBCwUAA4IBAQBPXam91YcYjaFlito/ xS816sdoHAvg/3n/0gqzKc5VkKK8VMvJgG3MZMp69rgGh6pB74XWUujPdFp3RheY xdIGx2Rcqz9OvKndISSDAvq2sp1hnzic+UdgzsQTfcTacqgRqJPPWDnJ+nOr2L+y DC8jOSHN/GZ0YoUATU2w2E3zEIfxpxlBQAxbmTUgbWRGEX0OwexLi3vEn2rO+84p dLsCpDbMI/1N10C+0V2pfNsoxYPTw01QSaEXfjvpvhYd+XZKkw6mf8cmkeJ5klXJ raz4CODvPQ1d8Svqg7FGayY6fY2thiqQqF2CIHOieHkejDTj0SJaBRJ9ejpLENnz o4nI -----END CERTIFICATE-----Generated at Sat Oct 10 19:00:12 2026 by rpki-client