$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer File: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer (raw, json) Hash identifier: nPOuZqi4Iud0HrT1z8BJAMEJP70TdBf8gA+LvqfCgGQ= Subject key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D2136EA1565F60E323947367818E197D1632214 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft caRepository: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 Oct 2026 16:49:26 +0000 Certificate not after: Sat 09 Oct 2027 16:54:26 +0000 Subordinate resources: AS: 267471 IP: 192.141.76.0/22 IP: 2804:4200::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:36:ea:15:65:f6:0e:32:39:47:36:78:18:e1:97:d1:63:22:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 16:49:26 2026 GMT Not After : Oct 9 16:54:26 2027 GMT Subject: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:c5:04:3c:8d:8e:2d:61:f9:25:aa:c9:35: 1d:bf:44:6e:f3:1c:c2:c9:e8:80:5e:6a:00:21:96: 7f:1c:c8:4c:cb:e2:04:9d:18:bf:c9:03:a5:bd:b5: 94:49:35:44:67:32:fa:b0:f2:6f:8e:b1:58:80:23: 8e:47:73:6b:2f:1f:83:d4:50:db:24:aa:2f:50:1a: 6b:62:ef:a4:57:77:1e:7c:1a:6d:32:23:10:b7:33: 18:ac:f8:ab:06:7f:ca:48:f9:17:87:30:b1:e4:ba: 99:68:db:01:79:bf:5e:06:b2:d5:7c:b2:df:e9:f0: e8:e8:cf:93:d5:50:7f:cb:05:6a:e9:ae:37:a1:1e: 91:66:71:3a:a9:24:41:55:c2:29:84:6c:f3:cd:ba: 6d:95:e7:6b:37:19:96:45:a2:5c:50:96:2d:88:bd: b1:8b:5a:62:9f:a6:d5:d1:0f:37:3e:45:47:fc:f7: 55:2b:be:86:6e:9b:7d:cd:06:8b:44:47:1a:3d:26: db:e4:3b:bb:ff:45:d4:05:84:67:88:ef:30:d7:f0: 11:fe:e1:4f:b1:10:7f:6e:fe:6e:b7:d7:8f:31:8b: cc:38:00:d2:6b:da:50:13:7c:d1:54:06:bb:c2:87: 45:f1:fd:08:6a:05:1f:91:89:8a:b4:bc:1b:f7:54: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.76.0/22 IPv6: 2804:4200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267471 Signature Algorithm: sha256WithRSAEncryption 17:e0:71:34:5f:2d:0b:9d:a5:e9:4a:a8:7f:73:be:94:4f:b3: c7:ad:c9:20:07:48:33:92:8c:a2:76:f4:64:10:5a:a7:34:e5: 4c:7c:bc:b4:97:f7:5d:65:d2:c2:6d:6b:29:7e:70:55:3a:23: 57:c5:72:9d:c0:a0:94:80:4e:31:c3:91:86:c3:fe:df:9e:d1: 23:a6:b3:9e:78:57:f9:cf:9a:0b:4b:ea:9c:a9:2c:f5:19:7f: 51:b5:b6:84:11:fa:55:5a:25:f2:85:b0:c2:e6:5b:c8:88:83: 5f:0b:9f:a5:81:ae:cb:ca:2d:5b:0c:52:b5:cd:6f:d6:f9:4d: 77:bc:cd:bb:08:98:09:b9:63:9a:02:b9:72:4c:b4:ce:8f:a5: 20:06:01:4a:65:3d:fb:52:0a:5a:26:d8:e5:03:ce:16:7a:b7: 71:77:01:46:58:ed:78:c4:32:94:ed:de:0b:24:c9:c8:b7:8e: fb:cd:cb:44:e7:12:b1:7e:db:93:39:e2:f2:c6:f8:8a:b5:10: c8:ef:44:e1:f3:01:96:8a:a7:70:fa:79:16:63:ed:b7:c2:bb: 33:d4:bc:f2:74:1d:6f:f3:e3:ce:96:50:75:3e:f7:05:9c:68: 4e:a1:a1:3e:84:55:07:a6:79:af:95:6f:9a:f5:37:c2:96:5c: eb:5a:38:88 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULSE26hVl9g4yOUc2eBjhl9FjIhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTAxNjQ5MjZaFw0yNzEwMDkxNjU0MjZaMDMxMTAvBgNV BAMTKEQ0NUQ0M0YxQjYwQURGRDJGRTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs68UEPI2OLWH5JarJNR2/RG7z HMLJ6IBeagAhln8cyEzL4gSdGL/JA6W9tZRJNURnMvqw8m+OsViAI45Hc2svH4PU UNskqi9QGmti76RXdx58Gm0yIxC3Mxis+KsGf8pI+ReHMLHkuplo2wF5v14GstV8 st/p8Ojoz5PVUH/LBWrprjehHpFmcTqpJEFVwimEbPPNum2V52s3GZZFolxQli2I vbGLWmKfptXRDzc+RUf891UrvoZum33NBotERxo9JtvkO7v/RdQFhGeI7zDX8BH+ 4U+xEH9u/m63148xi8w4ANJr2lATfNFUBrvCh0Xx/QhqBR+RiYq0vBv3VHDbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUXUPxtgrf0v4z mWqQu7Yu9VodAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1lT YmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdZ U2JkZzJkZlU5ektxZm5zeFNwaWM4bkRweUZiQTd0ejdlVUQ4ZlM1eERwLzAvRDQ1 RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVGNTVBMUQwMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI1MMA0EAgACMAcDBQAoBEIAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUzzANBgkqhkiG9w0BAQsFAAOCAQEAF+BxNF8tC52l6Uqo f3O+lE+zx63JIAdIM5KMonb0ZBBapzTlTHy8tJf3XWXSwm1rKX5wVTojV8VyncCg lIBOMcORhsP+357RI6aznnhX+c+aC0vqnKks9Rl/UbW2hBH6VVol8oWwwuZbyIiD XwufpYGuy8otWwxStc1v1vlNd7zNuwiYCbljmgK5cky0zo+lIAYBSmU9+1IKWibY 5QPOFnq3cXcBRljteMQylO3eCyTJyLeO+83LROcSsX7bkzni8sb4irUQyO9E4fMB loqncPp5FmPtt8K7M9S88nQdb/PjzpZQdT73BZxoTqGhPoRVB6Z5r5VvmvU3wpZc 61o4iA== -----END CERTIFICATE-----Generated at Sun Oct 11 08:39:47 2026 by rpki-client