$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer (raw, json) Hash identifier: Jh+poEspNh8iUV8Rx3vUZujj9Yht7fCVLb/z4LpRl/g= Subject key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18838977EAEDE15CBB5475C944DE0CF83D57B4CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft caRepository: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 15:41:38 +0000 Certificate not after: Wed 25 Aug 2027 15:46:38 +0000 Subordinate resources: AS: 266003 IP: 45.173.64.0/22 IP: 181.191.96.0/22 IP: 2804:4118::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:83:89:77:ea:ed:e1:5c:bb:54:75:c9:44:de:0c:f8:3d:57:b4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 15:41:38 2026 GMT Not After : Aug 25 15:46:38 2027 GMT Subject: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:20:ff:51:cf:a9:e2:c9:75:24:10:3f:f3: 0b:a1:5c:30:80:11:03:88:fb:03:3d:4e:a7:c3:30: 97:84:b1:40:3d:67:b4:09:c6:78:a9:f7:75:d8:39: b9:02:2c:26:fe:9f:98:ba:db:dc:a1:28:10:b6:90: 9a:ad:b8:e7:2a:09:01:f9:3d:f1:85:d5:25:34:33: 8c:6b:87:c9:22:4a:dc:71:70:d2:54:f4:c6:f9:84: 01:5e:d1:82:e0:05:ce:59:9d:17:ed:0f:2d:ac:e9: c0:ca:71:58:dc:9c:9a:81:a3:5a:ce:55:47:df:6d: 6a:39:d1:6d:dd:13:2f:9c:13:76:be:83:5d:53:51: 37:15:31:a6:fa:ee:26:cb:43:8e:84:5b:08:cc:b7: bc:e1:5b:b2:21:54:f7:36:f8:2e:bd:8d:ce:d1:71: 10:56:b1:56:5f:25:49:d4:9e:6a:27:c1:7c:61:ec: 61:6c:70:e0:fb:ee:3c:90:9b:52:ed:06:8c:96:bb: 43:c2:c5:e4:5b:23:2d:e9:71:46:cb:f8:4b:28:cc: f4:1e:c7:52:f4:ca:27:8f:7e:2c:94:0e:fb:36:c3: eb:33:25:80:25:4f:a3:90:e0:4c:62:81:d0:66:f3: 90:fa:3b:8d:00:56:62:ca:89:4e:dd:62:5b:a2:72: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.64.0/22 181.191.96.0/22 IPv6: 2804:4118::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266003 Signature Algorithm: sha256WithRSAEncryption b1:f1:17:13:58:06:76:cc:7b:1f:51:b7:3a:bc:7b:91:b0:80: 6c:af:c2:fa:bf:91:5e:07:91:d5:21:8a:fb:3a:6a:62:0a:23: 7b:dc:c4:ef:7c:5e:22:89:10:fd:61:55:9f:47:0f:94:ad:dd: 9f:b3:65:d3:5b:90:1d:7d:80:c6:62:ec:5a:66:51:d0:c1:0e: 9c:69:bc:b5:b4:14:cb:27:47:a4:02:f1:b2:90:50:f9:9f:ac: 02:b7:42:35:91:21:a3:af:62:2a:39:96:e2:c3:36:8d:10:01: 8a:b9:13:70:7d:14:41:c7:aa:cb:7f:01:2a:96:55:5a:27:b9: b3:d0:0a:5c:14:a0:0b:93:9c:d0:60:ae:33:92:da:22:f0:82: 56:f7:f6:b4:fe:64:8a:13:4a:93:a1:32:aa:6f:13:54:fb:a9: 9b:5a:cd:3b:af:76:b6:7d:08:70:34:30:bb:1b:e7:70:d7:b4: 5c:02:de:76:0a:47:c8:d4:da:6f:df:0a:26:63:a6:19:86:79: 5c:d0:49:02:50:e8:73:ac:a8:92:47:cd:5b:4d:2f:be:db:b5: 8b:4a:cb:42:4a:a2:dd:14:89:66:04:56:24:ad:0c:c5:ad:c6: b1:a7:66:7e:d4:57:a5:a8:95:d8:8f:50:b0:24:38:c6:4c:ac: c3:d3:4a:9a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGIOJd+rt4Vy7VHXJRN4M+D1XtMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjYxNTQxMzhaFw0yNzA4MjUxNTQ2MzhaMDMxMTAvBgNV BAMTKEFBMDc4RThGNUVBNEVGRUY4RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIiD/Uc+p4sl1JBA/8wuhXDCA EQOI+wM9TqfDMJeEsUA9Z7QJxnip93XYObkCLCb+n5i629yhKBC2kJqtuOcqCQH5 PfGF1SU0M4xrh8kiStxxcNJU9Mb5hAFe0YLgBc5ZnRftDy2s6cDKcVjcnJqBo1rO VUffbWo50W3dEy+cE3a+g11TUTcVMab67ibLQ46EWwjMt7zhW7IhVPc2+C69jc7R cRBWsVZfJUnUnmonwXxh7GFscOD77jyQm1LtBoyWu0PCxeRbIy3pcUbL+EsozPQe x1L0yiePfiyUDvs2w+szJYAlT6OQ4ExigdBm85D6O40AVmLKiU7dYluicqbrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqB46PXqTv745w A+CpshFltauB1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFk dUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qx ZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAvQUEw NzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVCNUFCODFENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLa1AAwQCtb9gMA0EAgACMAcDBQAoBEEYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPEzANBgkqhkiG9w0BAQsFAAOCAQEAsfEXE1gG dsx7H1G3Orx7kbCAbK/C+r+RXgeR1SGK+zpqYgoje9zE73xeIokQ/WFVn0cPlK3d n7Nl01uQHX2AxmLsWmZR0MEOnGm8tbQUyydHpALxspBQ+Z+sArdCNZEho69iKjmW 4sM2jRABirkTcH0UQceqy38BKpZVWie5s9AKXBSgC5Oc0GCuM5LaIvCCVvf2tP5k ihNKk6Eyqm8TVPupm1rNO692tn0IcDQwuxvncNe0XALedgpHyNTab98KJmOmGYZ5 XNBJAlDoc6yokkfNW00vvtu1i0rLQkqi3RSJZgRWJK0Mxa3GsadmftRXpaiV2I9Q sCQ4xkysw9NKmg== -----END CERTIFICATE-----Generated at Sun Oct 11 09:35:44 2026 by rpki-client