$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.cer File: D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.cer (raw, json) Hash identifier: ZjtluJ0UEOHAbjQ9+f094ppg0wcL0cs0MCT2wXBKvX8= Subject key identifier: D0:C8:BE:70:33:D6:D0:57:8E:C7:14:D2:AB:0E:D4:E2:2C:85:A8:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55CB5019DB534FBD92BFEDDEFC7DE2C532C775EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.mft caRepository: rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Jul 2026 20:02:18 +0000 Certificate not after: Wed 07 Jul 2027 20:07:18 +0000 Subordinate resources: AS: 267030 IP: 45.227.204.0/23 IP: 45.227.207.0/24 IP: 2804:4714::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cb:50:19:db:53:4f:bd:92:bf:ed:de:fc:7d:e2:c5:32:c7:75:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 20:02:18 2026 GMT Not After : Jul 7 20:07:18 2027 GMT Subject: CN=D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:77:88:8f:81:4e:70:8e:1b:ae:3b:87:36: 20:da:1e:74:8b:6e:0a:e6:e8:d0:46:74:64:8a:99: 6c:43:2c:d8:bf:3b:bb:5d:de:33:0f:d5:13:b7:69: 3e:2a:5f:4f:fb:72:8a:76:6b:af:47:ee:16:88:f3: 77:b8:14:ff:78:af:ae:b7:2c:6b:5b:85:fe:ee:e9: da:70:f5:6a:86:b2:ec:63:d5:bb:43:cf:c7:79:68: 0f:95:cb:3a:14:10:7b:6d:23:cf:7e:64:22:ba:4b: 24:e8:6c:3a:6a:d7:21:a8:20:e7:66:e4:34:23:72: 4e:b9:d9:ab:3e:db:0d:45:3b:1d:c7:ce:48:b3:6b: 35:2e:b5:5e:70:e1:12:dd:cb:b3:51:5c:a4:48:69: 04:7e:8d:ea:25:24:27:50:05:14:32:7f:9e:91:65: af:7f:3f:d3:3f:8c:11:42:6a:f2:1d:e7:1d:5f:e0: 10:1d:4b:e7:67:4d:5b:be:d7:89:fc:ae:a6:cf:d6: 77:0e:2c:cb:34:b0:7d:0f:26:59:84:b5:48:2b:f0: 29:67:64:e1:9d:ef:e9:40:90:20:fc:4e:81:c7:d8: 3d:2c:ce:87:b4:fb:86:89:b7:f3:f1:ca:05:e0:55: e9:aa:49:83:86:57:18:e8:79:d3:58:aa:ca:09:a0: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:C8:BE:70:33:D6:D0:57:8E:C7:14:D2:AB:0E:D4:E2:2C:85:A8:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.204.0/23 45.227.207.0/24 IPv6: 2804:4714::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267030 Signature Algorithm: sha256WithRSAEncryption db:0e:0b:70:fc:f0:a4:e3:1c:6a:8f:40:69:02:86:1c:b5:e4: fe:5d:7e:f1:43:95:d8:b7:97:f6:f1:63:53:8d:d5:a0:0e:fe: 0b:87:eb:28:52:a2:67:46:58:7f:c1:72:7d:20:0b:ad:92:1e: 0c:20:44:d8:c6:e9:3e:d7:ac:5c:9a:65:d3:e1:61:18:d6:66: df:b4:6b:dd:8e:f9:b7:bf:09:64:89:3c:da:21:e2:d4:1a:a4: b9:6f:8b:7f:02:83:c5:04:3e:f6:9b:c3:4f:f7:ba:99:4a:31: b0:1d:53:87:2d:0f:54:8e:5e:71:01:1b:51:a4:23:1f:d0:3e: 7d:20:4b:6c:ea:46:f8:b0:4a:ad:b1:dc:3f:1b:52:30:8f:a0: e2:78:df:5a:06:49:7d:1d:25:fc:5a:d7:6c:32:8e:54:e0:d7: 01:31:cf:01:2d:a4:92:c5:44:b1:76:8a:8f:58:e4:e3:f1:d4: a0:8e:96:3d:18:3a:98:5f:6a:9e:c7:f7:95:d4:6e:80:9f:02: de:62:b7:1a:5e:c5:8a:28:1d:87:0c:38:a3:11:3b:38:ef:27: 3b:c4:65:2d:46:83:5d:76:c2:bd:3f:32:40:e2:d3:66:19:53: 8b:73:49:55:6f:67:93:bd:97:1d:32:9f:b8:fc:fa:90:15:ee: bf:fc:07:38 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVctQGdtTT72Sv+3e/H3ixTLHdewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDgyMDAyMThaFw0yNzA3MDcyMDA3MThaMDMxMTAvBgNV BAMTKEQwQzhCRTcwMzNENkQwNTc4RUM3MTREMkFCMEVENEUyMkM4NUE4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZneIj4FOcI4brjuHNiDaHnSL bgrm6NBGdGSKmWxDLNi/O7td3jMP1RO3aT4qX0/7cop2a69H7haI83e4FP94r663 LGtbhf7u6dpw9WqGsuxj1btDz8d5aA+VyzoUEHttI89+ZCK6SyTobDpq1yGoIOdm 5DQjck652as+2w1FOx3HzkizazUutV5w4RLdy7NRXKRIaQR+jeolJCdQBRQyf56R Za9/P9M/jBFCavId5x1f4BAdS+dnTVu+14n8rqbP1ncOLMs0sH0PJlmEtUgr8Cln ZOGd7+lAkCD8ToHH2D0szoe0+4aJt/PxygXgVemqSYOGVxjoedNYqsoJoE5rAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQyL5wM9bQV47H FNKrDtTiLIWopzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHVQ TTVoSkRCeW05V29vZVVRdzF4ZGpocGpDUDdKUTh2R1VhQ3RvcktTSHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh1 UE01aEpEQnltOVdvb2VVUXcxeGRqaHBqQ1A3SlE4dkdVYUN0b3JLU0h1LzAvRDBD OEJFNzAzM0Q2RDA1NzhFQzcxNEQyQUIwRUQ0RTIyQzg1QThBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQBLePMAwQALePPMA0EAgACMAcDBQAoBEcUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQTFjANBgkqhkiG9w0BAQsFAAOCAQEA2w4LcPzw pOMcao9AaQKGHLXk/l1+8UOV2LeX9vFjU43VoA7+C4frKFKiZ0ZYf8FyfSALrZIe DCBE2MbpPtesXJpl0+FhGNZm37Rr3Y75t78JZIk82iHi1BqkuW+LfwKDxQQ+9pvD T/e6mUoxsB1Thy0PVI5ecQEbUaQjH9A+fSBLbOpG+LBKrbHcPxtSMI+g4njfWgZJ fR0l/FrXbDKOVODXATHPAS2kksVEsXaKj1jk4/HUoI6WPRg6mF9qnsf3ldRugJ8C 3mK3Gl7Fiigdhww4oxE7OO8nO8RlLUaDXXbCvT8yQOLTZhlTi3NJVW9nk72XHTKf uPz6kBXuv/wHOA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:02:39 2026 by rpki-client