$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer File: 5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer (raw, json) Hash identifier: v7plBuFk6ayKmW3qQTJM6qd4mQ0tHHluFV8FTG8hGW8= Subject key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 14CA7F627F43277608AB67E668161EFD601AAAC5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft caRepository: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Sep 2026 17:07:42 +0000 Certificate not after: Tue 21 Sep 2027 17:12:42 +0000 Subordinate resources: AS: 28273 IP: 201.33.0.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 11:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ca:7f:62:7f:43:27:76:08:ab:67:e6:68:16:1e:fd:60:1a:aa:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 17:07:42 2026 GMT Not After : Sep 21 17:12:42 2027 GMT Subject: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:89:99:a4:40:e6:a6:1c:41:d4:4d:cf:22: e6:0e:53:cf:f8:e2:88:20:70:19:8d:02:c9:99:84: 26:9b:4c:1e:77:2e:1a:15:5b:ce:55:06:67:17:83: 86:6e:6d:46:29:08:be:cc:3e:2d:d9:f7:df:74:52: 54:f3:8b:4a:51:b4:ed:6c:78:56:6b:7b:85:f8:9a: 7b:d2:70:dc:d6:3e:20:d3:4b:01:af:06:8d:82:7d: 16:c8:ee:29:71:5a:fc:c9:6a:45:d6:3f:42:54:f9: 03:55:9a:09:01:14:8b:dd:0f:6d:51:28:95:95:42: ce:a8:cf:10:bc:e3:b6:f4:bf:74:c0:9c:53:b0:9b: 41:0c:e0:4c:b0:d7:bd:62:df:9a:fc:a0:27:5e:f9: 50:5f:3c:76:59:ac:4f:cf:73:59:f0:31:86:61:19: 48:30:b3:a0:23:e7:0b:24:c5:16:21:05:be:69:a0: 57:df:1b:35:97:1c:ec:36:5d:b2:be:3e:de:ab:e4: c7:d6:73:72:0a:a2:54:6e:e2:9b:2d:e4:54:ce:4a: f5:34:e3:44:f9:78:e1:80:af:11:1a:ba:67:d5:84: c5:a9:34:e6:12:a1:a8:de:09:e1:e6:04:79:d8:c6: 72:5e:ac:1a:fb:63:33:9b:a2:38:f4:0a:50:d5:d5: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28273 Signature Algorithm: sha256WithRSAEncryption 7e:11:c3:1d:be:38:76:21:22:1c:42:64:d0:b2:38:1a:4c:0a: e0:d1:fc:bb:e9:0d:e7:3e:6b:09:55:9d:f2:25:c7:f2:09:28: 40:03:47:b5:12:3b:ac:c9:fe:d0:39:3d:cb:26:87:4d:e3:0a: 20:60:f5:a6:93:71:49:fb:a8:7d:56:e1:63:e2:e3:e5:00:41: dc:93:3e:33:42:a2:b9:b1:26:cf:05:e1:e5:a3:c7:ed:ff:86: d9:b9:cc:74:ce:c2:67:6a:15:3b:ca:db:7a:62:9f:38:15:2e: ff:bc:df:62:40:b7:7f:49:61:05:f8:f0:c4:34:ec:2b:cb:c7: 35:bf:be:72:91:0e:e3:57:b4:2d:6f:2b:64:65:ae:c5:2a:a5: cf:c8:2d:d4:68:35:65:8b:ed:53:ed:4d:fd:b3:60:54:7a:88: 47:d1:03:0d:57:7b:a1:29:66:2b:72:f5:ab:19:ce:01:0e:e1: 48:b4:8a:d3:d5:84:c7:0e:46:0a:09:2d:9c:1d:2e:49:50:ab: ee:ca:b6:48:52:f3:58:8b:9e:74:34:45:9d:3e:40:a0:b0:13: 7a:67:15:2f:ff:eb:5d:3d:38:bd:27:76:18:12:08:40:12:78: 74:a5:15:d0:6a:bc:75:5e:e2:25:b9:5e:46:44:50:91:3e:05: 99:98:a8:7b -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUFMp/Yn9DJ3YIq2fmaBYe/WAaqsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjIxNzA3NDJaFw0yNzA5MjExNzEyNDJaMDMxMTAvBgNV BAMTKDVBNjQ3NkRFQzA2NzdENEMzNjg1QURDOUFBQkJFOEZDMkEwNzlDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHomZpEDmphxB1E3PIuYOU8/4 4oggcBmNAsmZhCabTB53LhoVW85VBmcXg4ZubUYpCL7MPi3Z9990UlTzi0pRtO1s eFZre4X4mnvScNzWPiDTSwGvBo2CfRbI7ilxWvzJakXWP0JU+QNVmgkBFIvdD21R KJWVQs6ozxC847b0v3TAnFOwm0EM4Eyw171i35r8oCde+VBfPHZZrE/Pc1nwMYZh GUgws6Aj5wskxRYhBb5poFffGzWXHOw2XbK+Pt6r5MfWc3IKolRu4pst5FTOSvU0 40T5eOGArxEaumfVhMWpNOYSoajeCeHmBHnYxnJerBr7YzObojj0ClDV1cgRAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaZHbewGd9TDaF rcmqu+j8KgecpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3dh Nzc1TUZ0bjhlNEZMWXFSRHByS0RiYmpic0ZEOER2UjU5ZGdDQkVRb20vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N3 YTc3NU1GdG44ZTRGTFlxUkRwcktEYmJqYnNGRDhEdlI1OWRnQ0JFUW9tLzAvNUE2 NDc2REVDMDY3N0Q0QzM2ODVBREM5QUFCQkU4RkMyQTA3OUNBNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEySEAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm5x MA0GCSqGSIb3DQEBCwUAA4IBAQB+EcMdvjh2ISIcQmTQsjgaTArg0fy76Q3nPmsJ VZ3yJcfyCShAA0e1Ejusyf7QOT3LJodN4wogYPWmk3FJ+6h9VuFj4uPlAEHckz4z QqK5sSbPBeHlo8ft/4bZucx0zsJnahU7ytt6Yp84FS7/vN9iQLd/SWEF+PDENOwr y8c1v75ykQ7jV7QtbytkZa7FKqXPyC3UaDVli+1T7U39s2BUeohH0QMNV3uhKWYr cvWrGc4BDuFItIrT1YTHDkYKCS2cHS5JUKvuyrZIUvNYi550NEWdPkCgsBN6ZxUv /+tdPTi9J3YYEghAEnh0pRXQarx1XuIluV5GRFCRPgWZmKh7 -----END CERTIFICATE-----Generated at Sat Oct 10 12:54:43 2026 by rpki-client