$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer File: CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer (raw, json) Hash identifier: clG4zXZ2hxzOXFk6lzbndLVSfJXFcCXXl/W0x7NVqDM= Subject key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A493FE14108D0A06F64051453A2811D1DFD8D54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft caRepository: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Sep 2026 09:02:16 +0000 Certificate not after: Thu 09 Sep 2027 09:07:16 +0000 Subordinate resources: AS: 52877 IP: 138.99.56.0/22 IP: 186.232.72.0/22 IP: 2804:91c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Oct 2026 22:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:49:3f:e1:41:08:d0:a0:6f:64:05:14:53:a2:81:1d:1d:fd:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 10 09:02:16 2026 GMT Not After : Sep 9 09:07:16 2027 GMT Subject: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:c5:d7:b5:bd:5b:0c:23:3e:aa:f7:32:20: 71:c5:2d:71:be:e0:cd:9b:12:60:e8:77:96:ee:75: 44:66:76:65:08:a5:81:de:3b:d6:22:1d:eb:59:5d: 86:4a:dd:32:f7:85:9b:fa:8c:d5:c6:32:7e:d6:a2: d0:69:e3:8e:9b:97:05:6d:13:f0:f6:51:b7:86:5c: 5c:ab:a4:4a:16:7f:3d:a2:ce:be:bb:e9:95:7d:c4: 07:58:74:7d:78:69:bb:4b:a6:70:4d:c8:65:68:0b: c3:5a:b4:eb:64:2f:42:65:8e:7e:22:b3:ae:57:2f: 97:48:07:fa:a6:72:e3:b3:8d:15:c5:1e:24:17:e2: 86:6d:a3:85:6d:3e:7a:d3:ee:63:b1:9c:5c:39:db: c5:51:6b:b7:9b:88:e3:53:94:38:f3:fa:a7:8e:c1: e0:30:fd:5c:8f:71:c2:66:9e:62:cd:1e:43:92:c0: 10:1f:fc:73:98:e9:30:3e:ee:04:38:76:1b:ec:bc: 3b:ff:7e:43:2f:e9:d6:4b:a1:ea:a2:d0:a8:7f:e0: 67:86:ae:7f:c7:b7:93:c8:49:5a:6b:c0:67:79:36: b7:ea:18:01:fa:d4:74:91:c6:1d:f5:24:c4:e0:19: dc:98:d3:fc:09:54:27:2d:99:81:a3:ad:38:65:d1: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.56.0/22 186.232.72.0/22 IPv6: 2804:91c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52877 Signature Algorithm: sha256WithRSAEncryption 54:b7:ed:c9:0f:00:3e:ef:02:08:aa:e9:1c:a4:00:47:ff:51: b7:ec:7f:8d:a3:1b:d2:a3:16:34:66:e9:50:7b:14:c4:9a:ce: f4:b7:9b:11:4e:a2:a4:b8:1e:0d:c7:02:9e:89:41:29:cb:00: db:85:38:80:e2:07:9d:3a:b8:29:ad:fc:5e:8d:aa:10:b7:52: 38:fe:bb:0f:4c:64:6b:17:e7:64:bf:9f:1c:b9:8e:9f:7b:9d: 4a:f1:1d:bc:72:87:56:2b:79:fd:4f:9a:80:75:46:49:f2:7c: 05:97:34:39:df:2a:95:36:49:d4:16:32:42:f9:52:78:80:17: 3d:aa:0f:be:64:1b:fd:e2:ee:00:6e:74:76:89:b3:12:30:d3: 74:8c:51:06:3b:f7:97:26:93:cf:df:a5:0f:e8:ad:80:00:4f: b8:c4:24:ec:84:ba:93:e9:27:9d:15:f8:7d:e6:8c:d8:7a:56: 88:53:ac:55:67:de:63:b1:f9:c3:a8:35:e1:76:10:28:3a:60: 81:6b:cb:56:7b:a2:b5:45:3b:43:1b:2d:02:0e:1d:d9:a6:92: 15:4d:be:91:29:f7:a3:bf:34:eb:a1:76:9c:c8:62:ea:04:3c: 7d:ca:9e:d6:00:99:8f:7c:65:55:1c:59:fb:6d:ba:4d:1d:7b: cd:a9:e6:78 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCkk/4UEI0KBvZAUUU6KBHR39jVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTAwOTAyMTZaFw0yNzA5MDkwOTA3MTZaMDMxMTAvBgNV BAMTKENFMTk5Qjc2MUFCNDQ0RTgyREM0OTE4QjREMzg5MTdDMTZBRUM3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN08XXtb1bDCM+qvcyIHHFLXG+ 4M2bEmDod5budURmdmUIpYHeO9YiHetZXYZK3TL3hZv6jNXGMn7WotBp446blwVt E/D2UbeGXFyrpEoWfz2izr676ZV9xAdYdH14abtLpnBNyGVoC8NatOtkL0Jljn4i s65XL5dIB/qmcuOzjRXFHiQX4oZto4VtPnrT7mOxnFw528VRa7ebiONTlDjz+qeO weAw/VyPccJmnmLNHkOSwBAf/HOY6TA+7gQ4dhvsvDv/fkMv6dZLoeqi0Kh/4GeG rn/Ht5PISVprwGd5NrfqGAH61HSRxh31JMTgGdyY0/wJVCctmYGjrThl0YKTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOGZt2GrRE6C3E kYtNOJF8Fq7HuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHh0 YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlqR2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 dGFZejhaZGJnMk1qd3lHRDl4U1FnVFdjZ010Q3ZjVFJKSnNTckxpakdkLzAvQ0Ux OTlCNzYxQUI0NDRFODJEQzQ5MThCNEQzODkxN0MxNkFFQzdCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimM4AwQCuuhIMA0EAgACMAcDBQAoBAkcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOjTANBgkqhkiG9w0BAQsFAAOCAQEAVLftyQ8A Pu8CCKrpHKQAR/9Rt+x/jaMb0qMWNGbpUHsUxJrO9LebEU6ipLgeDccCnolBKcsA 24U4gOIHnTq4Ka38Xo2qELdSOP67D0xkaxfnZL+fHLmOn3udSvEdvHKHVit5/U+a gHVGSfJ8BZc0Od8qlTZJ1BYyQvlSeIAXPaoPvmQb/eLuAG50domzEjDTdIxRBjv3 lyaTz9+lD+itgABPuMQk7IS6k+knnRX4feaM2HpWiFOsVWfeY7H5w6g14XYQKDpg gWvLVnuitUU7QxstAg4d2aaSFU2+kSn3o78066F2nMhi6gQ8fcqe1gCZj3xlVRxZ +226TR17zanmeA== -----END CERTIFICATE-----Generated at Fri Oct 9 21:19:40 2026 by rpki-client