$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer File: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer (raw, json) Hash identifier: YIyCAzEjfkDTwJ0wf9P6JJajwFO2coQMB6hu8zN/eZ8= Subject key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08A96B62F69B690066C76315DB0286DF3571204A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft caRepository: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Jun 2026 11:35:03 +0000 Certificate not after: Thu 17 Jun 2027 11:40:03 +0000 Subordinate resources: AS: 265477 AS: 270936 IP: 168.197.104.0/22 IP: 190.103.152.0/22 IP: 2804:34c0::/32 IP: 2804:73c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:6b:62:f6:9b:69:00:66:c7:63:15:db:02:86:df:35:71:20:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 18 11:35:03 2026 GMT Not After : Jun 17 11:40:03 2027 GMT Subject: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:9e:42:0a:44:6b:0e:e9:6d:64:8b:5a:da: ec:36:ad:85:ff:34:1b:65:cb:2c:d1:3e:7d:3b:0d: c9:84:45:b4:3d:6f:4d:b0:df:54:b8:28:85:ee:8c: 55:ab:87:5e:3f:ac:f7:b8:c3:ab:5a:1b:24:1a:44: ab:1b:08:85:7a:c1:48:65:53:30:14:ba:2a:cd:06: e4:ef:99:f5:d8:1a:06:0e:63:41:a3:82:52:49:96: 18:b7:b1:82:2a:56:94:53:8e:fe:bb:b0:04:3e:99: f0:2d:fe:73:fd:e4:9a:16:cd:a6:8b:69:9a:a3:0f: 2f:fd:8e:0e:f3:f7:63:f1:7a:8f:02:1f:6b:7d:f2: c4:59:1b:ee:ef:2d:19:4c:fd:32:b5:1f:16:5b:0a: 1e:7b:03:68:78:22:a1:28:f4:54:67:35:6b:c7:bf: 5d:6e:47:89:0d:3c:93:49:f8:75:b3:2c:a5:4a:f2: 93:1d:4b:6f:95:17:b6:b6:d6:67:a1:7b:98:1a:da: 62:dc:57:d6:8a:d8:f2:2b:b3:a1:a4:4b:54:1c:aa: b4:a6:07:82:02:51:77:46:57:4a:e0:72:28:d7:df: 7e:dc:f4:72:cb:16:3f:7b:8c:bc:9c:48:8a:b8:c9: 6f:0a:ed:c1:6f:ea:ad:1a:ce:b5:8d:b2:f9:02:e9: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.104.0/22 190.103.152.0/22 IPv6: 2804:34c0::/32 2804:73c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265477 270936 Signature Algorithm: sha256WithRSAEncryption 7b:7f:7e:85:95:f5:2a:be:1a:8c:b6:41:12:48:ab:95:ba:8f: 9c:e2:f9:50:b0:f7:cc:f0:4a:92:4d:40:7d:cc:29:29:cc:08: 99:2e:d5:42:77:36:06:70:4c:d8:52:3c:79:25:3e:cb:af:20: be:43:5e:3c:8d:82:09:21:b6:a3:ea:f7:a9:2f:b8:41:32:10: df:42:79:10:15:46:94:ef:38:c0:2e:f0:1c:28:af:08:1e:1b: 1b:68:75:a5:0e:f3:fb:eb:84:58:8a:6a:02:19:d7:3c:72:53: b9:f3:a3:2e:11:b4:be:e4:21:77:c6:f3:42:63:17:3d:c9:61: 41:d5:7f:e7:22:13:10:4a:a3:44:f8:dd:75:07:dd:94:b5:c7: de:31:00:3e:4b:d6:0a:5c:82:39:1e:3f:81:7f:9e:55:58:6a: 34:48:d0:4d:c6:02:a5:96:a7:9d:d0:2f:7e:64:f3:f8:5f:71: 46:0d:d6:ff:f1:f3:da:4d:df:4c:87:a3:0b:15:f1:5a:62:c6: 55:37:4b:2f:85:de:59:80:2d:73:27:b1:53:36:ba:5c:ee:99: 00:86:8a:eb:6d:11:45:34:05:ad:94:b7:af:6f:1f:88:96:31: fc:b8:c6:c4:21:6b:cb:95:24:85:8e:59:ea:5c:b4:74:ec:32: a1:b1:57:0b -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUCKlrYvabaQBmx2MV2wKG3zVxIEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTgxMTM1MDNaFw0yNzA2MTcxMTQwMDNaMDMxMTAvBgNV BAMTKEFCOUVFN0Q1NjVDMDI3MDk3NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLZ5CCkRrDultZIta2uw2rYX/ NBtlyyzRPn07DcmERbQ9b02w31S4KIXujFWrh14/rPe4w6taGyQaRKsbCIV6wUhl UzAUuirNBuTvmfXYGgYOY0GjglJJlhi3sYIqVpRTjv67sAQ+mfAt/nP95JoWzaaL aZqjDy/9jg7z92Pxeo8CH2t98sRZG+7vLRlM/TK1HxZbCh57A2h4IqEo9FRnNWvH v11uR4kNPJNJ+HWzLKVK8pMdS2+VF7a21mehe5ga2mLcV9aK2PIrs6GkS1QcqrSm B4ICUXdGV0rgcijX337c9HLLFj97jLycSIq4yW8K7cFv6q0azrWNsvkC6c3DAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrnufVZcAnCXWF N6/re7g+xq0u0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlNh cHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNjdVkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlNh cHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNjdVkvMS9BQjlF RTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcB Af8ELDAqMBIEAgABMAwDBAKoxWgDBAK+Z5gwFAQCAAIwDgMFACgENMADBQAoBHPE MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQNBQIDBCJYMA0GCSqGSIb3DQEBCwUA A4IBAQB7f36FlfUqvhqMtkESSKuVuo+c4vlQsPfM8EqSTUB9zCkpzAiZLtVCdzYG cEzYUjx5JT7LryC+Q148jYIJIbaj6vepL7hBMhDfQnkQFUaU7zjALvAcKK8IHhsb aHWlDvP764RYimoCGdc8clO586MuEbS+5CF3xvNCYxc9yWFB1X/nIhMQSqNE+N11 B92UtcfeMQA+S9YKXII5Hj+Bf55VWGo0SNBNxgKllqed0C9+ZPP4X3FGDdb/8fPa Td9Mh6MLFfFaYsZVN0svhd5ZgC1zJ7FTNrpc7pkAhorrbRFFNAWtlLevbx+IljH8 uMbEIWvLlSSFjlnqXLR07DKhsVcL -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:18 2026 by rpki-client