$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer File: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer (raw, json) Hash identifier: eGHZ3aPH061YWiZ7srFyTBVjIpaOb6J/7SNs5HrgM34= Subject key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75064E0F25D738BAEC2754D56E69E87424308BD7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft caRepository: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 01:50:20 +0000 Certificate not after: Tue 11 May 2027 01:55:20 +0000 Subordinate resources: AS: 266216 IP: 200.71.72.0/22 IP: 2804:3c80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:06:4e:0f:25:d7:38:ba:ec:27:54:d5:6e:69:e8:74:24:30:8b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 01:50:20 2026 GMT Not After : May 11 01:55:20 2027 GMT Subject: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:63:07:82:de:5d:58:ab:2a:28:8d:61:4a: 4b:83:4c:32:9b:b6:22:f6:35:5b:e7:53:e5:bb:31: 86:7c:c5:ba:e6:de:95:2a:d3:a4:95:48:c6:bd:90: 07:b5:da:99:be:30:8d:3d:ef:77:39:35:27:c2:4c: ad:8f:fb:02:c1:4e:24:9a:c3:5e:35:c9:a4:35:1b: c1:c1:38:ef:2c:80:10:f0:ed:a8:b3:86:ae:0e:4a: 7a:3a:d3:e2:c8:a9:c1:65:10:c2:e3:36:cb:db:87: 36:7c:38:13:ab:68:e5:76:5b:d2:4d:59:95:10:ca: 97:aa:b9:5e:13:e6:62:bb:c3:eb:e6:db:59:a0:af: 9a:4f:b3:ea:03:40:b5:1c:36:01:0a:e4:b4:b4:bd: 83:4e:4d:00:06:9e:21:1f:77:02:06:ce:ce:45:33: b0:66:3f:09:fd:cd:42:a2:ff:fa:c2:ec:a2:9b:66: a1:6d:e9:9c:13:9b:c8:fa:8c:e4:45:5f:ca:45:d1: c0:fd:07:77:6c:c2:8a:5b:f8:1a:cd:99:9c:bf:c6: dc:d0:52:0b:fc:9e:f3:8c:d4:27:2e:cf:24:bf:11: 0a:65:d3:bc:5e:97:b8:d4:22:3e:ca:9d:11:86:2a: ac:be:57:df:33:e6:9e:28:0b:ad:db:47:69:ce:91: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.71.72.0/22 IPv6: 2804:3c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266216 Signature Algorithm: sha256WithRSAEncryption 09:e0:61:15:fc:12:90:17:61:40:8d:2b:f9:5f:bc:63:d3:31: 27:98:89:e5:64:a1:49:7a:54:de:64:c7:cb:4d:e8:40:21:e7: 25:21:ba:54:2f:dc:3c:d4:a8:23:21:f5:12:5b:a7:9a:d2:f7: 18:a0:f7:7d:47:00:04:68:f8:46:74:15:c5:65:38:02:c2:c5: 48:da:54:0d:da:40:7f:d2:d2:5d:4e:dc:5f:4e:0f:1d:05:b5: 3b:db:45:cd:c0:3d:f9:21:32:c9:ce:4d:5b:6e:ee:16:50:ee: ad:e0:ca:7d:7c:b1:2c:f1:a8:9a:fb:ba:1d:69:1c:6d:1e:dd: e5:7e:e6:f2:34:01:28:e4:29:97:fb:9f:82:bc:72:8e:29:6d: 50:6b:82:41:a8:53:c9:96:a3:8b:ee:d6:8a:68:cf:51:8f:70: 54:a2:f6:ae:c0:a1:9f:ab:b4:d2:8f:2f:a1:9a:40:85:d4:32: 93:1e:74:d8:ed:e2:0c:89:36:02:19:b7:56:43:5f:70:7b:57: 90:0d:48:f8:4d:85:09:1b:5b:8a:69:ab:ac:86:07:2d:4c:a3: 94:5f:3d:6b:cc:3d:56:ae:f3:ee:44:9f:63:e6:a6:de:12:aa: fb:35:93:aa:b2:ee:e5:4f:e5:91:33:ef:35:11:1e:cf:20:60: de:35:d9:53 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdQZODyXXOLrsJ1TVbmnodCQwi9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTIwMTUwMjBaFw0yNzA1MTEwMTU1MjBaMDMxMTAvBgNV BAMTKDhERTFFQkY0RUUzMzQ0NUUzOThCRjU1QzdCRkJCMDU0RTg1NDZGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EWMHgt5dWKsqKI1hSkuDTDKb tiL2NVvnU+W7MYZ8xbrm3pUq06SVSMa9kAe12pm+MI0973c5NSfCTK2P+wLBTiSa w141yaQ1G8HBOO8sgBDw7aizhq4OSno60+LIqcFlEMLjNsvbhzZ8OBOraOV2W9JN WZUQypequV4T5mK7w+vm21mgr5pPs+oDQLUcNgEK5LS0vYNOTQAGniEfdwIGzs5F M7BmPwn9zUKi//rC7KKbZqFt6ZwTm8j6jORFX8pF0cD9B3dswopb+BrNmZy/xtzQ Ugv8nvOM1CcuzyS/EQpl07xel7jUIj7KnRGGKqy+V98z5p4oC63bR2nOkSb7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSN4ev07jNEXjmL 9Vx7+7BU6FRv/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5Y ZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2clYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu WGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAvOERF MUVCRjRFRTMzNDQ1RTM5OEJGNTVDN0JGQkIwNTRFODU0NkZGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyEdIMA0EAgACMAcDBQAoBDyAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQP6DANBgkqhkiG9w0BAQsFAAOCAQEACeBhFfwSkBdhQI0r +V+8Y9MxJ5iJ5WShSXpU3mTHy03oQCHnJSG6VC/cPNSoIyH1ElunmtL3GKD3fUcA BGj4RnQVxWU4AsLFSNpUDdpAf9LSXU7cX04PHQW1O9tFzcA9+SEyyc5NW27uFlDu reDKfXyxLPGomvu6HWkcbR7d5X7m8jQBKOQpl/ufgrxyjiltUGuCQahTyZaji+7W imjPUY9wVKL2rsChn6u00o8voZpAhdQykx502O3iDIk2Ahm3VkNfcHtXkA1I+E2F CRtbimmrrIYHLUyjlF89a8w9Vq7z7kSfY+am3hKq+zWTqrLu5U/lkTPvNREezyBg 3jXZUw== -----END CERTIFICATE-----Generated at Wed May 13 16:34:44 2026 by rpki-client