$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer File: C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer (raw, json) Hash identifier: MQHSp+en/KYyRhFzKbxnlgH9COPZwQSuFyxMT3gKlto= Subject key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 40ED7EA2BE0BD4E6A20089EC42256673B3B8F839 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft caRepository: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 09 Oct 2026 19:30:43 +0000 Certificate not after: Fri 08 Oct 2027 19:35:43 +0000 Subordinate resources: AS: 269704 IP: 45.189.160.0/22 IP: 45.191.104.0/22 IP: 2804:689c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 17:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ed:7e:a2:be:0b:d4:e6:a2:00:89:ec:42:25:66:73:b3:b8:f8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 9 19:30:43 2026 GMT Not After : Oct 8 19:35:43 2027 GMT Subject: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:bc:b8:8f:a9:b8:29:1e:1a:bb:ec:e8:fa: a9:aa:f3:5c:56:cb:01:11:65:85:3e:85:66:2b:d2: b5:ad:7b:33:2b:e1:82:dd:5d:03:ce:c8:48:42:87: b0:38:93:87:91:b1:8a:5c:9d:ff:e2:5a:52:da:0d: 77:b2:69:3d:55:bb:a4:79:9d:d2:2e:07:a3:5b:b0: d5:b9:9c:40:33:af:9f:39:09:a2:ac:c4:8f:36:9a: 9e:cb:ab:b5:15:9f:fa:e2:a3:3f:5a:b3:3a:e8:18: 61:66:b4:ab:ae:fa:90:6b:38:ec:8e:45:01:68:33: d8:a2:aa:81:1e:62:00:ba:3a:89:36:06:a6:ee:8f: f1:8a:76:89:be:0f:34:4a:75:0b:d3:1a:f5:67:7e: 94:83:0c:70:20:73:9c:3d:47:df:a1:5d:d1:2c:af: 92:43:ec:01:fe:21:88:db:a8:84:2b:a1:ca:13:a1: ed:16:88:8e:64:20:a9:9c:4e:35:f7:23:0d:2b:16: 77:83:be:5f:43:db:0a:62:2a:4d:0a:61:80:34:43: 2c:88:f0:cb:3f:91:19:8a:90:d2:ed:65:2a:e6:6b: a9:c5:66:f6:41:57:94:8c:fd:a1:ef:14:03:4e:5e: 52:8e:91:98:bd:9a:db:f1:a3:f2:3b:6f:88:c2:41: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.160.0/22 45.191.104.0/22 IPv6: 2804:689c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269704 Signature Algorithm: sha256WithRSAEncryption 30:88:95:f8:e1:48:7b:af:a5:14:98:ed:78:c5:b5:33:68:8a: 15:5f:88:86:a2:2a:ff:0b:ba:dc:ac:9e:7e:70:69:48:5f:0f: 32:36:9c:22:00:07:ac:6b:85:ef:71:e7:1e:9b:6b:6f:c5:9f: ab:49:26:00:44:f0:3b:97:4c:b1:08:04:41:55:ac:75:e6:7f: 09:1d:78:ee:f3:14:d2:06:4b:4c:09:aa:f3:07:9d:d9:a7:c3: f4:8f:0b:ec:94:19:d3:db:a3:c1:57:0a:77:3f:c2:e3:c5:d1: 50:fd:cc:70:f4:1a:9b:0c:11:71:7c:c5:bb:69:22:4a:dc:f3: 0b:d9:5e:0b:3d:5e:f0:ed:16:23:34:f9:09:52:17:61:3f:b7: bd:2c:66:39:d2:5c:99:ee:52:1d:1d:9e:e7:95:ca:0b:3d:8a: a9:d0:af:94:a3:d1:12:b4:a9:af:4a:8e:c3:f4:20:34:7d:79: a5:3f:b7:73:8e:95:d3:82:42:bd:41:77:28:12:6b:c6:b1:7e: 9f:4f:63:74:62:8a:12:06:46:9b:42:9f:2d:a8:51:92:0f:8e: 3c:59:08:09:eb:5d:4c:15:9f:ca:be:7c:e7:34:a7:fc:50:59: 84:5a:e8:37:23:82:73:f0:99:89:ba:a1:ee:30:b8:63:ab:82: b5:c4:87:0f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQO1+or4L1OaiAInsQiVmc7O4+DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDkxOTMwNDNaFw0yNzEwMDgxOTM1NDNaMDMxMTAvBgNV BAMTKEMyQzg2QzQ3RkMzOUU4MDhGOENGNUMwMEM2MkQ1N0Q4MDg1OEM3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVLy4j6m4KR4au+zo+qmq81xW ywERZYU+hWYr0rWtezMr4YLdXQPOyEhCh7A4k4eRsYpcnf/iWlLaDXeyaT1Vu6R5 ndIuB6NbsNW5nEAzr585CaKsxI82mp7Lq7UVn/rioz9aszroGGFmtKuu+pBrOOyO RQFoM9iiqoEeYgC6Ook2Bqbuj/GKdom+DzRKdQvTGvVnfpSDDHAgc5w9R9+hXdEs r5JD7AH+IYjbqIQrocoToe0WiI5kIKmcTjX3Iw0rFneDvl9D2wpiKk0KYYA0QyyI 8Ms/kRmKkNLtZSrma6nFZvZBV5SM/aHvFANOXlKOkZi9mtvxo/I7b4jCQdZjAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCyGxH/DnoCPjP XADGLVfYCFjHODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1py aWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZY0EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNa cmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzAvQzJD ODZDNDdGQzM5RTgwOEY4Q0Y1QzAwQzYyRDU3RDgwODU4QzczOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb2gAwQCLb9oMA0EAgACMAcDBQAoBGicMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQdiDANBgkqhkiG9w0BAQsFAAOCAQEAMIiV+OFI e6+lFJjteMW1M2iKFV+IhqIq/wu63KyefnBpSF8PMjacIgAHrGuF73HnHptrb8Wf q0kmAETwO5dMsQgEQVWsdeZ/CR147vMU0gZLTAmq8wed2afD9I8L7JQZ09ujwVcK dz/C48XRUP3McPQamwwRcXzFu2kiStzzC9leCz1e8O0WIzT5CVIXYT+3vSxmOdJc me5SHR2e55XKCz2KqdCvlKPRErSpr0qOw/QgNH15pT+3c46V04JCvUF3KBJrxrF+ n09jdGKKEgZGm0KfLahRkg+OPFkICetdTBWfyr585zSn/FBZhFroNyOCc/CZibqh 7jC4Y6uCtcSHDw== -----END CERTIFICATE-----Generated at Sat Oct 10 19:08:45 2026 by rpki-client