$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/67A618D61465438A34604C11EF9D76522AA9B43F.cer File: 67A618D61465438A34604C11EF9D76522AA9B43F.cer (raw, json) Hash identifier: L2qZXj///10gk8vlm1IxxHBy6vrmLPFYyEPipf+E8n4= Subject key identifier: 67:A6:18:D6:14:65:43:8A:34:60:4C:11:EF:9D:76:52:2A:A9:B4:3F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 469E6339D462DC14F7E41613C22967A1896EED1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4a8zXFrUKmr3vnxKG82eytysL4gNb1FMZrRQHGJuPqFc/0/67A618D61465438A34604C11EF9D76522AA9B43F.mft caRepository: rsync://rpki-repo.registro.br/repo/4a8zXFrUKmr3vnxKG82eytysL4gNb1FMZrRQHGJuPqFc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 21 Sep 2026 13:20:26 +0000 Certificate not after: Mon 20 Sep 2027 13:25:26 +0000 Subordinate resources: AS: 271727 IP: 189.124.13.0 -- 189.124.15.255 IP: 2804:8010::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9e:63:39:d4:62:dc:14:f7:e4:16:13:c2:29:67:a1:89:6e:ed:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 21 13:20:26 2026 GMT Not After : Sep 20 13:25:26 2027 GMT Subject: CN=67A618D61465438A34604C11EF9D76522AA9B43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:7d:ef:02:67:8e:56:cc:14:b3:bf:e3:ce: 57:15:5e:3e:ed:08:f2:83:71:ba:88:a8:f8:f5:47: b3:12:85:08:34:b7:76:19:c6:a0:c0:86:24:9c:dc: 10:42:48:20:66:05:3c:ce:75:62:ff:35:58:b5:f0: 6d:cc:96:c0:d3:69:3c:8a:4a:6d:6d:c1:b1:8e:c6: fc:3f:f4:50:93:c0:d7:91:a9:8a:74:d1:82:5d:d2: 7d:70:a4:2c:3d:ad:95:50:ca:c9:dd:53:29:2a:e1: b9:1e:7c:d8:87:8a:6e:e0:76:cb:cc:a0:78:7a:04: 6f:d4:76:05:a6:6d:39:fe:75:98:e5:26:a4:57:48: 51:2c:64:d9:05:eb:3d:4b:b7:e4:ae:4b:70:ff:a7: 7d:b5:1a:55:bb:e0:fd:6f:97:09:aa:0d:2b:df:b1: d4:cb:60:a5:57:97:13:67:91:7a:ec:0e:c8:b5:7f: 33:5a:f8:55:1d:76:17:92:78:af:9c:a9:74:17:90: 32:57:fe:aa:f6:98:f6:79:d1:5a:f5:d9:39:b4:f1: ae:24:e0:22:b4:0c:10:86:80:a1:e0:5a:77:e8:e2: c2:d7:94:d4:15:92:83:1e:7a:05:f7:04:83:c3:fa: d4:0f:7f:e4:46:dc:48:8b:05:10:b8:a2:a9:28:00: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:A6:18:D6:14:65:43:8A:34:60:4C:11:EF:9D:76:52:2A:A9:B4:3F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4a8zXFrUKmr3vnxKG82eytysL4gNb1FMZrRQHGJuPqFc/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4a8zXFrUKmr3vnxKG82eytysL4gNb1FMZrRQHGJuPqFc/0/67A618D61465438A34604C11EF9D76522AA9B43F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.124.13.0-189.124.15.255 IPv6: 2804:8010::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271727 Signature Algorithm: sha256WithRSAEncryption b1:2d:45:0c:95:f6:57:cb:b3:41:ef:c6:7e:78:12:ab:f8:8e: f6:2f:de:27:51:34:57:38:ae:0a:f5:4c:e4:d5:3b:69:3a:a5: 0d:03:58:82:9c:cb:7f:80:17:d6:82:d6:85:c1:86:16:a8:cd: cd:42:3e:b6:35:18:bc:81:98:20:a4:e7:71:52:bb:f5:a2:64: cf:2d:f1:5e:77:fb:2b:37:a0:fa:e9:68:04:06:63:bc:c9:6c: 96:59:fd:6d:6b:49:61:67:f8:0b:05:4a:50:79:46:38:fa:b2: d8:99:a2:5e:76:3b:ee:8f:ae:7c:06:0b:fd:8b:0a:36:8c:46: 85:60:8d:42:f6:ab:7c:ef:48:76:0f:8e:77:dd:24:c7:fa:be: 4d:fa:ec:5a:3c:c2:f9:82:94:75:15:11:83:bb:83:0f:89:e5: 39:fc:35:4a:ac:82:5a:72:b1:1f:b9:1f:e2:de:8f:e1:cb:29: 35:f9:a2:da:49:06:77:90:fc:bf:83:13:cc:a7:ba:cb:1f:64: 33:30:f5:fa:3c:20:32:28:77:ef:d2:2f:4c:93:41:fb:f9:0e: 9b:77:45:f3:84:e3:09:43:30:90:f6:f1:1a:53:2b:23:90:21: 44:62:7f:2b:79:21:86:b0:00:5a:2e:13:cf:58:19:52:40:6a: 74:6e:a9:22 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIURp5jOdRi3BT35BYTwilnoYlu7R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjExMzIwMjZaFw0yNzA5MjAxMzI1MjZaMDMxMTAvBgNV BAMTKDY3QTYxOEQ2MTQ2NTQzOEEzNDYwNEMxMUVGOUQ3NjUyMkFBOUI0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRe33vAmeOVswUs7/jzlcVXj7t CPKDcbqIqPj1R7MShQg0t3YZxqDAhiSc3BBCSCBmBTzOdWL/NVi18G3MlsDTaTyK Sm1twbGOxvw/9FCTwNeRqYp00YJd0n1wpCw9rZVQysndUykq4bkefNiHim7gdsvM oHh6BG/UdgWmbTn+dZjlJqRXSFEsZNkF6z1Lt+SuS3D/p321GlW74P1vlwmqDSvf sdTLYKVXlxNnkXrsDsi1fzNa+FUddheSeK+cqXQXkDJX/qr2mPZ50Vr12Tm08a4k 4CK0DBCGgKHgWnfo4sLXlNQVkoMeegX3BIPD+tQPf+RG3EiLBRC4oqkoAJcTAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnphjWFGVDijRg TBHvnXZSKqm0PzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGE4 elhGclVLbXIzdm54S0c4MmV5dHlzTDRnTmIxRk1aclJRSEdKdVBxRmMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRh OHpYRnJVS21yM3ZueEtHODJleXR5c0w0Z05iMUZNWnJSUUhHSnVQcUZjLzAvNjdB NjE4RDYxNDY1NDM4QTM0NjA0QzExRUY5RDc2NTIyQUE5QjQzRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAC9fA0DBAS9fAAwDQQCAAIwBwMFACgEgBAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBCVvMA0GCSqGSIb3DQEBCwUAA4IBAQCxLUUM lfZXy7NB78Z+eBKr+I72L94nUTRXOK4K9Uzk1TtpOqUNA1iCnMt/gBfWgtaFwYYW qM3NQj62NRi8gZggpOdxUrv1omTPLfFed/srN6D66WgEBmO8yWyWWf1ta0lhZ/gL BUpQeUY4+rLYmaJedjvuj658Bgv9iwo2jEaFYI1C9qt870h2D4533STH+r5N+uxa PML5gpR1FRGDu4MPieU5/DVKrIJacrEfuR/i3o/hyyk1+aLaSQZ3kPy/gxPMp7rL H2QzMPX6PCAyKHfv0i9Mk0H7+Q6bd0XzhOMJQzCQ9vEaUysjkCFEYn8reSGGsABa LhPPWBlSQGp0bqki -----END CERTIFICATE-----Generated at Sun Oct 11 08:28:21 2026 by rpki-client