$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer File: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer (raw, json) Hash identifier: 1kit6PxzaeV0xswYaO6Djwak+v57V1lzwAHzatSCwzs= Subject key identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21E69431043D487CCD126AE40C14359A19088D90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft caRepository: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Jul 2026 19:14:39 +0000 Certificate not after: Mon 12 Jul 2027 19:19:39 +0000 Subordinate resources: AS: 61853 IP: 201.140.244.0/22 IP: 2804:1a50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e6:94:31:04:3d:48:7c:cd:12:6a:e4:0c:14:35:9a:19:08:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 13 19:14:39 2026 GMT Not After : Jul 12 19:19:39 2027 GMT Subject: CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:3d:50:8f:07:f7:05:79:cb:b5:bf:e3:db: 84:c8:be:fd:7c:fd:f3:c9:6d:c4:b8:c9:4f:80:7c: 19:28:80:70:3d:1c:c2:ef:e6:a9:27:44:72:89:0f: c3:74:0a:54:4d:90:80:21:38:98:a4:c5:fa:77:e1: 26:f8:d6:c8:4b:65:f8:f6:5f:f5:ac:0d:47:bc:b0: 96:ef:e2:a8:cb:21:35:2f:48:83:1b:3a:c7:63:37: b1:b6:71:77:e4:43:b4:d9:e4:b6:82:14:30:dd:d8: 79:d4:4a:46:8d:37:60:2d:7a:9d:95:ab:c8:c6:e5: 84:3a:1a:e7:08:2b:15:df:9d:97:7e:fc:cb:bf:d7: 52:d7:ce:90:63:6b:fe:29:e4:ea:59:2c:37:cb:64: 88:ca:9d:29:2c:49:40:e2:c6:7e:0e:05:00:5f:b6: b0:ca:a7:5d:c2:6a:76:de:46:53:3c:cf:86:d2:88: 5a:16:8e:21:c1:ae:73:ca:15:c3:68:87:9e:7e:bc: ca:6f:13:97:68:b6:15:9d:95:89:a6:f1:1b:79:f8: 8c:31:1a:64:53:ae:41:21:b6:88:13:e4:5b:70:73: f9:21:e9:8e:47:a8:c5:57:39:10:02:1b:3e:47:5f: 03:22:d7:01:7e:76:1e:76:d3:e5:31:3c:a5:09:2d: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.140.244.0/22 IPv6: 2804:1a50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61853 Signature Algorithm: sha256WithRSAEncryption 31:0f:0a:9c:b0:ef:80:95:81:66:a4:60:e2:5b:23:7f:a2:13: 48:7f:b5:a9:47:97:ed:09:5f:55:57:0d:08:b5:09:ea:d6:64: ba:6d:8c:a5:e9:05:56:87:e1:f3:9a:97:fb:ec:b7:bf:83:07: eb:ba:bb:23:11:6c:fd:0a:2a:d6:22:31:ef:ef:e5:26:24:55: a5:18:c5:3b:a5:5f:ed:3c:82:5f:33:50:ac:aa:16:a3:f4:39: 6d:9f:8d:9c:8f:f1:94:9d:d7:ad:84:97:84:81:98:02:33:55: 31:d4:cf:e3:e1:8b:0b:58:46:7b:26:c9:cd:66:e5:c2:97:18: 74:f1:e4:a9:28:0d:70:b7:74:09:86:b4:88:35:86:d6:8b:56: 5d:fe:d1:db:21:9b:d6:24:f0:41:22:24:0d:a6:78:8a:14:09: 48:5f:7c:7a:e6:9b:9c:2d:ca:ad:a9:5c:dc:fb:fe:1a:4d:b7: af:2a:61:b8:a4:48:c1:69:a5:a8:5d:7f:b1:79:f1:94:7a:37: 81:a1:d7:50:75:0d:c1:90:3b:b1:16:2f:02:be:eb:b1:2b:3b: 0f:72:02:14:ad:64:82:34:49:4b:1c:f1:cf:5b:f0:af:0c:07: ee:d2:db:67:91:e8:9e:f0:7f:2d:67:4b:b1:e0:8c:a0:42:e2: 8c:8c:2c:59 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIeaUMQQ9SHzNEmrkDBQ1mhkIjZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTMxOTE0MzlaFw0yNzA3MTIxOTE5MzlaMDMxMTAvBgNV BAMTKEQ4QThCNzM1NkU4RTAyQjNEQUIyODA1RDAxMjM1MDA2NDJBMkNDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXz1Qjwf3BXnLtb/j24TIvv18 /fPJbcS4yU+AfBkogHA9HMLv5qknRHKJD8N0ClRNkIAhOJikxfp34Sb41shLZfj2 X/WsDUe8sJbv4qjLITUvSIMbOsdjN7G2cXfkQ7TZ5LaCFDDd2HnUSkaNN2Atep2V q8jG5YQ6GucIKxXfnZd+/Mu/11LXzpBja/4p5OpZLDfLZIjKnSksSUDixn4OBQBf trDKp13CanbeRlM8z4bSiFoWjiHBrnPKFcNoh55+vMpvE5dothWdlYmm8Rt5+Iwx GmRTrkEhtogT5Ftwc/kh6Y5HqMVXORACGz5HXwMi1wF+dh520+UxPKUJLSEDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYqLc1bo4Cs9qy gF0BI1AGQqLMADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1pp VkZrRHBDMk1UUVRGUnpRTUtuTE56cXVWdTNXZXJGUWVmM0JtYmRNWUsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Na aVZGa0RwQzJNVFFURlJ6UU1LbkxOenF1VnUzV2VyRlFlZjNCbWJkTVlLLzAvRDhB OEI3MzU2RThFMDJCM0RBQjI4MDVEMDEyMzUwMDY0MkEyQ0MwMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyYz0MA0EAgACMAcDBQAoBBpQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxnTANBgkqhkiG9w0BAQsFAAOCAQEAMQ8KnLDvgJWBZqRg 4lsjf6ITSH+1qUeX7QlfVVcNCLUJ6tZkum2MpekFVofh85qX++y3v4MH67q7IxFs /Qoq1iIx7+/lJiRVpRjFO6Vf7TyCXzNQrKoWo/Q5bZ+NnI/xlJ3XrYSXhIGYAjNV MdTP4+GLC1hGeybJzWblwpcYdPHkqSgNcLd0CYa0iDWG1otWXf7R2yGb1iTwQSIk DaZ4ihQJSF98euabnC3Kralc3Pv+Gk23ryphuKRIwWmlqF1/sXnxlHo3gaHXUHUN wZA7sRYvAr7rsSs7D3ICFK1kgjRJSxzxz1vwrwwH7tLbZ5HonvB/LWdLseCMoELi jIwsWQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:19:38 2026 by rpki-client