$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer File: 3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer (raw, json) Hash identifier: 0IREd5qbU4Pw9q60TWunC1EsAD/Dmz6XSrewt8ExuBs= Subject key identifier: 3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64B1C705BDAC61B4A876859CB4449E8F1C017AED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3D7F41D3B11458BBA134D22A2A7E6DD805142768.mft caRepository: rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 Oct 2026 20:14:54 +0000 Certificate not after: Wed 06 Oct 2027 20:19:54 +0000 Subordinate resources: AS: 266319 IP: 170.238.128.0/22 IP: 2804:35fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 16:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b1:c7:05:bd:ac:61:b4:a8:76:85:9c:b4:44:9e:8f:1c:01:7a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 20:14:54 2026 GMT Not After : Oct 6 20:19:54 2027 GMT Subject: CN=3D7F41D3B11458BBA134D22A2A7E6DD805142768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:2b:b6:60:b8:9f:d5:e6:6a:f3:65:aa:36: 00:0b:82:c9:96:ea:1b:8e:04:8a:a4:aa:3c:6a:03: ef:c9:29:2e:b7:99:1c:86:f4:b8:4d:e1:32:63:02: 13:eb:96:c2:8f:41:89:0f:c8:53:c6:55:2e:f0:be: 34:1a:c2:e3:e8:77:4f:05:1d:42:a8:ba:dc:81:f7: 9e:80:63:b3:30:8a:87:dc:3e:34:87:10:a1:be:01: e6:b0:46:c9:2b:e2:5a:c4:34:81:1e:ff:c5:94:ff: da:28:f6:f5:18:65:8f:1b:5d:87:87:60:cd:c5:10: 79:8f:ed:79:5d:f5:5d:91:4b:bb:c6:46:ad:e3:b1: 30:9f:cc:b7:12:dc:88:f4:28:59:a9:12:e9:ef:f5: 69:f2:ce:07:b3:d5:2a:08:96:7e:fc:7d:38:98:f4: f9:2f:85:9d:45:e5:b4:06:d6:b9:9f:65:bd:a9:b6: fd:ff:f0:2e:dd:fe:16:74:f1:90:c6:98:84:ac:ee: c8:27:78:fb:64:57:36:4a:2d:25:c2:e9:a4:91:b5: 81:32:5d:2b:04:d6:bc:be:e3:60:88:57:dd:a5:f7: b7:6c:00:44:dc:67:f0:0f:5e:a2:4d:54:bf:37:f6: 28:41:36:a6:e7:85:ce:2e:27:bb:1f:75:31:bb:49: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3D7F41D3B11458BBA134D22A2A7E6DD805142768.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.128.0/22 IPv6: 2804:35fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266319 Signature Algorithm: sha256WithRSAEncryption 79:c4:df:c3:02:87:eb:be:33:a9:26:dc:0e:78:7c:8d:a9:90: ef:bb:44:b4:83:6f:f6:24:41:37:3e:60:0c:7b:27:d1:7b:32: c2:32:25:78:72:d1:70:9a:5b:e9:24:9f:62:ca:87:bf:44:ab: cd:e1:61:04:c2:62:16:97:c2:66:35:94:27:b2:44:68:83:70: af:9c:89:d2:fc:26:e3:cd:86:7a:f4:f9:b2:39:2c:d8:f0:c8: ba:3e:53:31:0e:57:4c:b5:57:44:c5:25:92:32:d8:8b:e3:9a: ce:46:55:26:14:a4:40:d5:93:2a:fd:16:0b:a7:53:e2:a0:a2: 8b:3c:96:9d:47:77:48:c6:f5:a8:29:8d:d9:bb:c7:90:c1:89: d9:66:41:f1:97:6b:32:8f:40:ab:29:01:f4:85:b6:9a:92:88: a0:ab:b5:1b:a7:82:59:ea:95:d9:54:01:49:2c:42:30:3f:2e: 21:f3:d0:d0:c2:7a:1c:c7:14:dc:fd:de:36:61:cd:4b:01:35: a6:4b:6d:fa:a2:d4:47:03:e7:ec:07:7d:9c:89:96:57:2b:66: 50:a0:80:2e:e5:9e:b9:c6:3d:cb:af:97:aa:85:7c:46:b8:f3: ee:f3:61:c3:6a:ae:4a:d9:d3:8e:9f:19:0d:c6:be:91:8a:9a: 8b:fa:7e:94 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZLHHBb2sYbSodoWctESejxwBeu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDcyMDE0NTRaFw0yNzEwMDYyMDE5NTRaMDMxMTAvBgNV BAMTKDNEN0Y0MUQzQjExNDU4QkJBMTM0RDIyQTJBN0U2REQ4MDUxNDI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsSu2YLif1eZq82WqNgALgsmW 6huOBIqkqjxqA+/JKS63mRyG9LhN4TJjAhPrlsKPQYkPyFPGVS7wvjQawuPod08F HUKoutyB956AY7MwiofcPjSHEKG+AeawRskr4lrENIEe/8WU/9oo9vUYZY8bXYeH YM3FEHmP7Xld9V2RS7vGRq3jsTCfzLcS3Ij0KFmpEunv9Wnyzgez1SoIln78fTiY 9PkvhZ1F5bQG1rmfZb2ptv3/8C7d/hZ08ZDGmISs7sgnePtkVzZKLSXC6aSRtYEy XSsE1ry+42CIV92l97dsAETcZ/APXqJNVL839ihBNqbnhc4uJ7sfdTG7SYz9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9f0HTsRRYu6E0 0ioqfm3YBRQnaDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGJK RXFWRjVYb2F0VExlUGNzZ3BKMlpSbmRDNE1RS1RiY1ZLS1kyMnI3aE0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhi SkVxVkY1WG9hdFRMZVBjc2dwSjJaUm5kQzRNUUtUYmNWS0tZMjJyN2hNLzAvM0Q3 RjQxRDNCMTE0NThCQkExMzREMjJBMkE3RTZERDgwNTE0Mjc2OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu6AMA0EAgACMAcDBQAoBDX8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQTzANBgkqhkiG9w0BAQsFAAOCAQEAecTfwwKH674zqSbc Dnh8jamQ77tEtINv9iRBNz5gDHsn0XsywjIleHLRcJpb6SSfYsqHv0SrzeFhBMJi FpfCZjWUJ7JEaINwr5yJ0vwm482GevT5sjks2PDIuj5TMQ5XTLVXRMUlkjLYi+Oa zkZVJhSkQNWTKv0WC6dT4qCiizyWnUd3SMb1qCmN2bvHkMGJ2WZB8ZdrMo9AqykB 9IW2mpKIoKu1G6eCWeqV2VQBSSxCMD8uIfPQ0MJ6HMcU3P3eNmHNSwE1pktt+qLU RwPn7Ad9nImWVytmUKCALuWeucY9y6+XqoV8Rrjz7vNhw2quStnTjp8ZDca+kYqa i/p+lA== -----END CERTIFICATE-----Generated at Mon Oct 12 15:26:36 2026 by rpki-client