$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer File: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer (raw, json) Hash identifier: Y1BnPN7XC0uDx7pIzGLldejHGHOpc1dBnvFW8GqaGTA= Subject key identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3781DEA2C001E24E4176B97A3D639C74ADE6368C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft caRepository: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Oct 2026 11:56:04 +0000 Certificate not after: Thu 07 Oct 2027 12:01:04 +0000 Subordinate resources: AS: 273517 IP: 45.161.72.0/22 IP: 168.0.192.0/22 IP: 2804:8fdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 14:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:81:de:a2:c0:01:e2:4e:41:76:b9:7a:3d:63:9c:74:ad:e6:36:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 11:56:04 2026 GMT Not After : Oct 7 12:01:04 2027 GMT Subject: CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:fe:f5:16:2c:4e:30:3d:20:17:e6:8a:4a: 8c:2f:09:6b:5c:ad:39:ab:6c:b1:e7:43:64:3b:1a: a6:11:4a:0f:13:4e:6f:c6:23:1c:33:b3:0c:3f:e1: c2:2a:67:68:1b:19:5d:bc:3d:ff:d7:95:81:8a:ca: 3f:98:52:fb:66:df:b4:e6:b3:b7:dd:b4:ee:3e:3e: 26:5c:41:cf:6b:2d:dd:46:c5:f2:e7:8f:04:71:c7: 9c:28:8b:84:ea:ac:83:37:70:da:58:89:43:77:9c: b8:e2:aa:fd:1d:84:58:00:41:4c:16:67:4c:01:d8: 5b:da:83:d1:cd:65:3a:66:b9:f0:6e:44:36:91:e6: c5:28:9d:08:d1:a0:71:bc:ea:ba:e2:9f:9b:24:22: 3e:c8:56:32:69:b8:d5:f2:15:71:16:bc:16:48:13: c5:b3:d4:1b:80:90:fe:90:c6:cb:a0:e0:43:2c:74: e3:a6:ab:b0:db:91:bc:51:fe:0f:f6:99:7e:6a:43: d4:b3:0f:ab:1a:1d:53:53:bd:59:4c:f3:24:c2:6d: aa:69:ba:a0:a5:b9:d9:f2:21:98:2d:c8:bc:bc:f1: ed:8f:49:db:d2:04:0e:fb:bd:69:68:12:72:1f:fd: 87:52:e9:c3:0f:70:33:b6:05:e8:ba:02:35:26:26: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.72.0/22 168.0.192.0/22 IPv6: 2804:8fdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273517 Signature Algorithm: sha256WithRSAEncryption 10:cd:78:ab:57:ca:71:9a:51:14:47:84:67:47:e0:53:76:7c: 60:35:8e:6b:75:83:d6:2f:45:10:a0:5c:b7:7c:5b:9e:f8:05: c8:02:93:6b:8a:2a:48:b5:73:92:77:61:f8:fb:c1:fe:e3:87: 0e:18:a6:af:65:76:47:31:81:21:4e:4c:44:28:9d:9b:73:44: 6e:8f:cf:90:b6:f4:5c:6b:35:85:73:c2:34:e1:ab:dc:e9:be: e4:9b:01:34:fb:03:0b:d6:f2:cf:1c:4b:75:ee:6c:de:b5:31: 8c:5d:60:ab:aa:66:25:f6:9b:c3:0e:ca:20:a2:63:fb:f4:8a: 1e:f3:fb:f4:b8:24:ec:1e:8e:59:8c:e8:c7:42:e7:0a:da:fa: d0:3a:8f:90:dd:4e:8b:35:a6:64:81:00:bf:51:e6:9c:ca:ed: 65:c1:89:d5:bd:20:5e:ab:18:35:3d:f5:08:95:a6:4e:81:6f: 75:ce:04:ac:75:aa:d5:31:7a:b4:aa:c6:47:9d:86:40:3b:e8: 1a:d0:56:c4:6f:a3:f4:85:84:77:91:e4:c3:d6:0c:61:f2:74: ba:d1:79:5d:68:9b:b2:e7:8d:27:1d:4d:f9:8e:a4:26:61:da: 2b:c1:b8:e5:06:fb:6e:38:54:f1:57:09:5e:c4:40:e4:10:05: 09:5e:ae:c9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUN4HeosAB4k5Bdrl6PWOcdK3mNowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDgxMTU2MDRaFw0yNzEwMDcxMjAxMDRaMDMxMTAvBgNV BAMTKDQzNkFFODE5MzlCMjNDMTI4MUU0OENBNUI1RThFMDQxRUFEMzRGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0v71FixOMD0gF+aKSowvCWtc rTmrbLHnQ2Q7GqYRSg8TTm/GIxwzsww/4cIqZ2gbGV28Pf/XlYGKyj+YUvtm37Tm s7fdtO4+PiZcQc9rLd1GxfLnjwRxx5woi4TqrIM3cNpYiUN3nLjiqv0dhFgAQUwW Z0wB2Fvag9HNZTpmufBuRDaR5sUonQjRoHG86rrin5skIj7IVjJpuNXyFXEWvBZI E8Wz1BuAkP6Qxsug4EMsdOOmq7DbkbxR/g/2mX5qQ9SzD6saHVNTvVlM8yTCbapp uqCludnyIZgtyLy88e2PSdvSBA77vWloEnIf/YdS6cMPcDO2Bei6AjUmJuL5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDaugZObI8EoHk jKW16OBB6tNP3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTg5 YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRrQlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E4 OWJTVkR3TnhpZVBONk04QlNKREhNVkgzVXBnWWpGeFJuU0ZaaUU0a0JYLzAvNDM2 QUU4MTkzOUIyM0MxMjgxRTQ4Q0E1QjVFOEUwNDFFQUQzNEZERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaFIAwQCqADAMA0EAgACMAcDBQAoBI/cMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQsbTANBgkqhkiG9w0BAQsFAAOCAQEAEM14q1fK cZpRFEeEZ0fgU3Z8YDWOa3WD1i9FEKBct3xbnvgFyAKTa4oqSLVzkndh+PvB/uOH Dhimr2V2RzGBIU5MRCidm3NEbo/PkLb0XGs1hXPCNOGr3Om+5JsBNPsDC9byzxxL de5s3rUxjF1gq6pmJfabww7KIKJj+/SKHvP79Lgk7B6OWYzox0LnCtr60DqPkN1O izWmZIEAv1HmnMrtZcGJ1b0gXqsYNT31CJWmToFvdc4ErHWq1TF6tKrGR52GQDvo GtBWxG+j9IWEd5Hkw9YMYfJ0utF5XWibsueNJx1N+Y6kJmHaK8G45Qb7bjhU8VcJ XsRA5BAFCV6uyQ== -----END CERTIFICATE-----Generated at Sat Oct 10 14:39:57 2026 by rpki-client