$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer File: D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer (raw, json) Hash identifier: nTAbgjMNMnOJAC+lWuFMnRTBMIBdoLxIO7kvyJ0m1BU= Subject key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E7668662C31A1D3290369A92E5EEC0CE5D39C36 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft caRepository: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 01 Nov 2026 02:55:50 +0000 Certificate not after: Sun 31 Oct 2027 03:00:50 +0000 Subordinate resources: AS: 271428 IP: 200.36.192.0/22 IP: 2804:7b60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 08:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:76:68:66:2c:31:a1:d3:29:03:69:a9:2e:5e:ec:0c:e5:d3:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 1 02:55:50 2026 GMT Not After : Oct 31 03:00:50 2027 GMT Subject: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:fd:d4:98:03:3a:20:16:bb:ac:93:77:54: 58:16:0b:d3:04:14:75:da:e4:ec:0b:15:77:a1:83: 88:1d:0b:19:0e:36:06:dc:1a:4a:06:57:e3:c8:e0: 89:b4:a0:a1:5b:d3:89:f6:52:9b:fc:a3:63:ba:7c: fe:7f:84:50:45:04:dc:8b:fb:62:b9:d2:b8:70:45: 68:e0:fa:b8:4f:a2:4a:96:d1:88:7a:75:cf:44:dd: b2:21:d2:4f:34:da:a1:47:46:fb:62:84:f2:1b:8b: 7b:00:1e:b6:ef:b6:ba:e6:5c:38:ac:5f:82:31:ac: 7f:0a:6a:6a:86:33:5a:a5:52:0e:2a:d1:31:51:50: b9:84:8f:3c:79:9e:a2:a7:68:bc:1b:f8:06:b5:67: 2c:0b:1b:07:f4:e9:5f:2a:df:b4:c8:70:01:95:4a: e3:2e:56:f4:50:f0:28:db:86:3b:ac:87:59:8c:c6: b4:c1:92:4d:5d:d0:25:4f:31:44:95:fa:e3:e2:75: b8:c1:c2:42:15:e6:21:dc:2e:22:91:93:12:e8:5c: 96:39:a9:2a:8b:17:fe:dc:2a:c3:f7:9f:5d:e9:fc: 8b:44:65:a0:f3:4e:d7:b2:18:c9:d1:da:4b:93:a1: c7:ea:35:de:9b:87:03:ab:9e:d8:ae:ee:26:88:15: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.192.0/22 IPv6: 2804:7b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271428 Signature Algorithm: sha256WithRSAEncryption 92:38:b0:ff:77:a4:6f:5a:96:58:1c:38:ac:a5:81:0d:8d:21: 5d:20:a9:6d:5a:af:34:e6:c1:8b:a7:44:21:fe:6b:ad:e7:9e: 49:36:5c:a2:29:3b:cd:b2:ca:00:a6:c3:d6:80:36:ad:46:fb: 55:49:fd:85:e3:a3:af:c7:f8:8f:c4:ea:bd:03:3d:cb:46:e5: 85:e9:f6:87:98:4a:0b:ba:a2:48:84:5a:1d:5d:61:46:34:e5: 82:f4:b0:81:ca:1d:59:85:95:3b:7a:51:d9:82:a6:28:c9:4b: 95:ba:f5:0d:44:0c:cc:12:1a:7b:af:a2:36:3e:b7:6f:41:92: cc:de:e6:23:cd:9f:90:7b:67:c0:2c:d4:ab:e3:ba:65:89:38: 84:f4:45:fe:7e:70:7d:26:2a:0a:1e:16:95:32:82:41:d4:00: 89:7f:a4:dc:6c:95:12:4d:06:ea:53:84:39:78:b7:b5:7f:62: c7:f6:b4:40:3b:46:1b:37:be:1e:89:76:10:57:68:19:04:9c: ec:82:f3:24:9c:8a:35:18:58:42:2a:03:39:b1:e7:8a:fc:bb: 34:70:e7:78:92:b5:f1:09:1f:be:ae:50:38:67:32:3f:cf:fc: 37:99:9a:bf:0d:9f:9a:ec:ba:d8:68:83:6a:5c:e8:11:27:86: 83:64:a2:1b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfnZoZiwxodMpA2mpLl7sDOXTnDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjExMDEwMjU1NTBaFw0yNzEwMzEwMzAwNTBaMDMxMTAvBgNV BAMTKEQ5OEEzODZCODkxOTM0MEFCQjBBRURCRTRBMThBNTA1NjBCNEUzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOv3UmAM6IBa7rJN3VFgWC9ME FHXa5OwLFXehg4gdCxkONgbcGkoGV+PI4Im0oKFb04n2Upv8o2O6fP5/hFBFBNyL +2K50rhwRWjg+rhPokqW0Yh6dc9E3bIh0k802qFHRvtihPIbi3sAHrbvtrrmXDis X4IxrH8KamqGM1qlUg4q0TFRULmEjzx5nqKnaLwb+Aa1ZywLGwf06V8q37TIcAGV SuMuVvRQ8Cjbhjush1mMxrTBkk1d0CVPMUSV+uPidbjBwkIV5iHcLiKRkxLoXJY5 qSqLF/7cKsP3n13p/ItEZaDzTteyGMnR2kuTocfqNd6bhwOrntiu7iaIFaevAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZijhriRk0CrsK 7b5KGKUFYLTj0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFdD RTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlxY1kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX Q0U1SHZBcVllMkN1b1l0RVV4M2NHWUgzakxMQ20xOVVzdlZrN0E5cWNZLzAvRDk4 QTM4NkI4OTE5MzQwQUJCMEFFREJFNEExOEE1MDU2MEI0RTNEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyCTAMA0EAgACMAcDBQAoBHtgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkRDANBgkqhkiG9w0BAQsFAAOCAQEAkjiw/3ekb1qWWBw4 rKWBDY0hXSCpbVqvNObBi6dEIf5rreeeSTZcoik7zbLKAKbD1oA2rUb7VUn9heOj r8f4j8TqvQM9y0blhen2h5hKC7qiSIRaHV1hRjTlgvSwgcodWYWVO3pR2YKmKMlL lbr1DUQMzBIae6+iNj63b0GSzN7mI82fkHtnwCzUq+O6ZYk4hPRF/n5wfSYqCh4W lTKCQdQAiX+k3GyVEk0G6lOEOXi3tX9ix/a0QDtGGze+Hol2EFdoGQSc7ILzJJyK NRhYQioDObHnivy7NHDneJK18Qkfvq5QOGcyP8/8N5mavw2fmuy62GiDalzoESeG g2SiGw== -----END CERTIFICATE-----Generated at Sun Nov 1 05:53:06 2026 by rpki-client