$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer File: CA9298E26EC7D83F990DD29EFD395097A928590F.cer (raw, json) Hash identifier: GJvGDdP9kJv0db3HQ3VLEr7Hzy7yNCDyhl83TkUZkuk= Subject key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70437DC9971F2E73CE6AA61E170D39A988CEE3B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft caRepository: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jul 2026 23:03:27 +0000 Certificate not after: Wed 21 Jul 2027 23:08:27 +0000 Subordinate resources: AS: 61698 IP: 131.0.164.0/22 IP: 168.227.80.0/22 IP: 2804:1aec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 19:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:43:7d:c9:97:1f:2e:73:ce:6a:a6:1e:17:0d:39:a9:88:ce:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 23:03:27 2026 GMT Not After : Jul 21 23:08:27 2027 GMT Subject: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:9d:bf:58:54:53:90:14:8f:0a:ed:b4:80: a3:20:05:65:41:d1:95:ea:63:7d:41:ef:43:3b:d9: ed:14:09:b7:47:41:3d:9f:1c:9b:aa:2d:60:6a:05: 41:b6:22:02:91:53:c9:59:1e:71:40:fa:11:75:16: e8:63:03:f1:ab:a9:25:a6:e5:7e:73:32:a4:70:08: b7:76:d9:a2:c8:fa:ad:56:f5:6f:c5:26:90:fd:f0: 78:0f:f4:3f:95:76:72:d5:7f:10:7e:4e:ab:cb:30: 37:5c:06:da:0a:05:af:5a:cd:69:8b:37:fa:1c:c1: 3a:09:b5:9a:8b:d3:3e:7f:30:45:e0:3f:4f:e4:03: 23:73:b0:7c:28:2d:fc:ae:6c:8e:30:3e:f6:7e:b4: c6:4e:9b:03:c8:ad:6a:77:df:d7:86:f0:63:20:a6: b5:24:0b:d0:73:88:a1:ca:6c:63:84:1c:fe:c5:9c: a5:8e:6c:94:88:6d:7c:5e:8f:83:1e:83:87:d5:3e: 9d:97:fa:c5:6e:19:41:dd:4e:b1:1d:c7:96:d2:58: 02:ec:04:c9:71:44:e3:b5:61:7e:b4:70:3e:db:c0: 23:02:87:2c:70:51:a2:68:7c:29:1b:39:c6:93:31: 9d:19:bc:c5:e4:4d:61:0c:d5:9b:44:a8:b6:95:78: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.164.0/22 168.227.80.0/22 IPv6: 2804:1aec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61698 Signature Algorithm: sha256WithRSAEncryption c0:22:d3:45:c6:f7:bd:f1:3f:60:bb:70:8c:68:a6:80:58:b8: 2b:66:9b:c5:96:6c:42:e7:5e:4d:b8:1b:3f:04:db:8f:19:2d: d0:06:15:5e:ff:a2:65:eb:c1:1a:6d:dd:0f:28:48:67:d9:fa: de:76:ea:b3:5e:83:67:e7:f3:11:e4:0a:75:95:6c:6e:83:9f: 82:aa:3f:5d:a9:6f:d2:3e:91:9b:02:ee:ab:4e:2c:fb:2f:ca: 67:11:9c:1f:bb:64:dc:47:4b:87:3f:a9:81:91:d3:a3:e0:5d: 84:99:4c:df:25:65:b8:c3:7c:2e:e4:86:ce:db:48:87:0a:c5: ca:85:50:3f:5e:17:f5:9f:87:56:97:14:86:31:bc:1c:0f:86: 6d:41:bd:e9:79:aa:bf:a7:ff:a8:52:71:50:db:18:02:44:5d: f1:cf:48:c6:9e:b6:c6:ea:03:44:24:bf:04:9f:62:8d:0b:14: 13:7a:98:1d:fe:63:0f:42:73:0c:bb:52:13:83:bb:15:d5:b6: 4e:de:f8:73:be:19:32:fc:4b:42:61:ed:66:d9:b3:5e:68:52: d2:06:74:c3:1d:c7:52:66:65:b7:de:61:84:55:de:78:f1:39: 01:df:19:45:69:18:f2:21:a7:e1:76:44:23:4c:37:b9:04:41: 59:c2:8b:d7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcEN9yZcfLnPOaqYeFw05qYjO47MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjIyMzAzMjdaFw0yNzA3MjEyMzA4MjdaMDMxMTAvBgNV BAMTKENBOTI5OEUyNkVDN0Q4M0Y5OTBERDI5RUZEMzk1MDk3QTkyODU5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48p2/WFRTkBSPCu20gKMgBWVB 0ZXqY31B70M72e0UCbdHQT2fHJuqLWBqBUG2IgKRU8lZHnFA+hF1FuhjA/GrqSWm 5X5zMqRwCLd22aLI+q1W9W/FJpD98HgP9D+VdnLVfxB+TqvLMDdcBtoKBa9azWmL N/ocwToJtZqL0z5/MEXgP0/kAyNzsHwoLfyubI4wPvZ+tMZOmwPIrWp339eG8GMg prUkC9BziKHKbGOEHP7FnKWObJSIbXxej4Meg4fVPp2X+sVuGUHdTrEdx5bSWALs BMlxROO1YX60cD7bwCMChyxwUaJofCkbOcaTMZ0ZvMXkTWEM1ZtEqLaVeEfnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKkpjibsfYP5kN 0p79OVCXqShZDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmlo a2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jp aGtpRFIxekZkaTU1eG4xMmtHeVlTTnVzd3pNZ1ZjeXhTUXo5aWZGZnpqLzAvQ0E5 Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdBOTI4NTkwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCgwCkAwQCqONQMA0EAgACMAcDBQAoBBrsMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxAjANBgkqhkiG9w0BAQsFAAOCAQEAwCLTRcb3 vfE/YLtwjGimgFi4K2abxZZsQudeTbgbPwTbjxkt0AYVXv+iZevBGm3dDyhIZ9n6 3nbqs16DZ+fzEeQKdZVsboOfgqo/Xalv0j6RmwLuq04s+y/KZxGcH7tk3EdLhz+p gZHTo+BdhJlM3yVluMN8LuSGzttIhwrFyoVQP14X9Z+HVpcUhjG8HA+GbUG96Xmq v6f/qFJxUNsYAkRd8c9Ixp62xuoDRCS/BJ9ijQsUE3qYHf5jD0JzDLtSE4O7FdW2 Tt74c74ZMvxLQmHtZtmzXmhS0gZ0wx3HUmZlt95hhFXeePE5Ad8ZRWkY8iGn4XZE I0w3uQRBWcKL1w== -----END CERTIFICATE-----Generated at Thu Jul 23 20:31:34 2026 by rpki-client