$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3FDE2627C83BA16B0E5D687A38D668A4FB7A7D7B.cer File: 3FDE2627C83BA16B0E5D687A38D668A4FB7A7D7B.cer (raw, json) Hash identifier: DpRyJSLQMUjvjNaauEs7W6FwRYHN6caKRc3MANe7sJE= Subject key identifier: 3F:DE:26:27:C8:3B:A1:6B:0E:5D:68:7A:38:D6:68:A4:FB:7A:7D:7B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A8C1E34960F4A9635BDECB7A3D8FD88115D393C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/3FDE2627C83BA16B0E5D687A38D668A4FB7A7D7B.mft caRepository: rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Oct 2026 03:34:33 +0000 Certificate not after: Fri 29 Oct 2027 03:39:33 +0000 Subordinate resources: AS: 272509 IP: 2804:8244::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 13:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8c:1e:34:96:0f:4a:96:35:bd:ec:b7:a3:d8:fd:88:11:5d:39:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 30 03:34:33 2026 GMT Not After : Oct 29 03:39:33 2027 GMT Subject: CN=3FDE2627C83BA16B0E5D687A38D668A4FB7A7D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:6c:60:6d:aa:ea:42:a5:74:c1:06:d7:c2: 43:86:74:90:aa:f3:8e:1f:d0:6d:fe:67:14:75:be: 8c:2b:ab:7d:c8:56:8e:6d:82:d2:05:2a:ee:71:85: db:c0:73:70:0b:02:23:d6:8a:6b:79:d8:f0:c0:51: 86:15:ec:07:5a:77:9c:a7:82:c2:45:58:7f:96:be: 7d:c0:da:4f:ee:cd:4a:53:54:a2:a6:c9:1f:75:58: b5:df:0b:87:07:2a:5d:25:70:89:05:cd:47:4f:a8: 5d:ab:4d:3d:b4:8f:b1:2b:06:56:90:63:c5:1a:ce: f4:62:1b:e7:10:fb:14:92:fe:d8:0b:6a:ac:30:ca: 0d:b0:15:c2:c3:87:ca:6f:0f:8b:55:57:26:2c:81: 8b:3c:20:95:62:56:89:03:27:8e:1c:68:26:83:94: f6:68:64:c0:e8:af:b5:4a:87:54:d8:cf:af:78:e1: ab:81:9b:64:aa:5d:16:f8:eb:aa:b8:bc:06:da:2a: 7b:b7:c0:7f:b8:a3:fa:2f:75:41:20:e3:de:69:70: 32:36:f2:75:2e:f9:ac:2c:e1:de:4c:52:ee:69:37: 1b:ec:9d:cb:d7:60:4a:05:f6:ed:67:31:02:06:d7: 87:ff:f2:1a:d9:5f:86:fd:75:7b:b3:74:30:d1:32: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:DE:26:27:C8:3B:A1:6B:0E:5D:68:7A:38:D6:68:A4:FB:7A:7D:7B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/3FDE2627C83BA16B0E5D687A38D668A4FB7A7D7B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8244::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272509 Signature Algorithm: sha256WithRSAEncryption 83:37:1c:2e:71:42:bd:97:a2:78:b6:6d:09:1c:d9:70:cb:ac: 2a:cb:9b:a4:6a:10:ad:25:1c:a7:a8:92:24:10:da:aa:b0:3a: 99:41:04:c8:8a:38:66:c3:0e:06:56:0d:80:e4:87:f5:35:67: 13:96:c8:8f:39:f7:e3:de:e5:3f:27:89:d7:75:bc:34:7f:ca: 41:3d:55:ce:a0:ff:6f:8c:a3:d7:2f:63:d6:90:ff:4a:11:77: b9:60:1d:d9:d8:b2:3e:c3:ef:4d:00:d0:0d:11:ec:00:1f:a5: 06:12:4f:28:df:8e:3b:6d:39:38:e3:e7:49:cb:19:df:88:dc: 95:ca:25:ec:5e:fa:1f:92:36:55:1a:33:e2:3b:21:f5:c0:1b: a7:79:dc:64:23:f3:2a:b0:9e:31:5d:d8:4e:d4:f3:20:cb:9e: 33:6d:7f:10:5b:b9:9e:42:0f:af:1c:0c:b5:40:64:02:d8:ce: 91:da:ef:9b:5b:5d:9c:a8:ab:b3:47:e6:ed:f8:70:75:c3:92: 5d:2a:3a:0f:31:1f:bd:6d:90:68:f6:40:47:e6:ae:55:c8:54: c3:68:71:99:9b:68:de:7f:9f:8a:94:7f:6a:f4:ad:0a:14:38: 18:a6:d0:5a:56:f0:d8:8b:47:dd:bb:cf:2a:c8:25:15:82:6e: 66:c4:5b:87 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUSoweNJYPSpY1vey3o9j9iBFdOTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMzAwMzM0MzNaFw0yNzEwMjkwMzM5MzNaMDMxMTAvBgNV BAMTKDNGREUyNjI3QzgzQkExNkIwRTVENjg3QTM4RDY2OEE0RkI3QTdEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4mxgbarqQqV0wQbXwkOGdJCq 844f0G3+ZxR1vowrq33IVo5tgtIFKu5xhdvAc3ALAiPWimt52PDAUYYV7Adad5yn gsJFWH+Wvn3A2k/uzUpTVKKmyR91WLXfC4cHKl0lcIkFzUdPqF2rTT20j7ErBlaQ Y8UazvRiG+cQ+xSS/tgLaqwwyg2wFcLDh8pvD4tVVyYsgYs8IJViVokDJ44caCaD lPZoZMDor7VKh1TYz6944auBm2SqXRb466q4vAbaKnu3wH+4o/ovdUEg495pcDI2 8nUu+aws4d5MUu5pNxvsncvXYEoF9u1nMQIG14f/8hrZX4b9dXuzdDDRMoizAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/3iYnyDuhaw5d aHo41mik+3p9ezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW1i U0wyR0hHdnZuTnhFUFNVUzczRGdvaGZlNmlpUGZaQ0h3VDlwVHJKTlIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlt YlNMMkdIR3Z2bk54RVBTVVM3M0Rnb2hmZTZpaVBmWkNId1Q5cFRySk5SLzAvM0ZE RTI2MjdDODNCQTE2QjBFNUQ2ODdBMzhENjY4QTRGQjdBN0Q3Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASCRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KH0wDQYJKoZIhvcNAQELBQADggEBAIM3HC5xQr2Xoni2bQkc2XDLrCrLm6RqEK0l HKeokiQQ2qqwOplBBMiKOGbDDgZWDYDkh/U1ZxOWyI859+Pe5T8nidd1vDR/ykE9 Vc6g/2+Mo9cvY9aQ/0oRd7lgHdnYsj7D700A0A0R7AAfpQYSTyjfjjttOTjj50nL Gd+I3JXKJexe+h+SNlUaM+I7IfXAG6d53GQj8yqwnjFd2E7U8yDLnjNtfxBbuZ5C D68cDLVAZALYzpHa75tbXZyoq7NH5u34cHXDkl0qOg8xH71tkGj2QEfmrlXIVMNo cZmbaN5/n4qUf2r0rQoUOBim0FpW8NiLR927zyrIJRWCbmbEW4c= -----END CERTIFICATE-----Generated at Fri Oct 30 14:25:16 2026 by rpki-client