$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer File: D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer (raw, json) Hash identifier: f9P/QZGJEvF1coINUtnd7vBG8fys1NPxHxeonsWNjdE= Subject key identifier: D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08917EF2C06E3E9F780ABDD5A59EC6EEBDDF1FFD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft caRepository: rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 27 Oct 2026 19:54:02 +0000 Certificate not after: Tue 26 Oct 2027 19:59:02 +0000 Subordinate resources: AS: 268103 IP: 45.169.80.0/22 IP: 2804:580c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 18:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:7e:f2:c0:6e:3e:9f:78:0a:bd:d5:a5:9e:c6:ee:bd:df:1f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 27 19:54:02 2026 GMT Not After : Oct 26 19:59:02 2027 GMT Subject: CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:3b:03:85:b1:cb:80:cf:a0:0e:80:51:f5: 8b:a6:e0:11:e6:68:a0:9a:86:98:2d:0b:58:5f:bd: 2c:bd:97:82:2d:ce:d2:0b:05:c5:fb:a4:24:b5:d2: c1:8f:19:77:e1:b1:40:84:bb:f8:50:0f:39:31:4c: 26:8e:9b:0e:8b:5f:73:db:21:ed:18:d7:97:7b:83: 08:fb:74:41:bd:d7:dc:82:6b:d6:04:cb:90:e7:68: c3:bd:1a:8b:01:cd:c9:4b:03:b1:1c:96:6d:93:8e: 0e:47:91:7b:cc:71:31:9c:39:af:46:d9:7d:e8:9c: ac:82:49:19:4c:f4:8e:58:55:9e:01:d2:f0:15:25: 58:3b:c0:7a:c2:d3:e6:4c:33:9e:8c:fb:a1:38:1c: b3:6f:d7:af:1e:80:5c:de:d1:c2:90:5a:5d:8f:a2: 40:27:51:ce:21:81:a1:7d:e8:b9:65:28:7f:64:f0: 70:46:3b:50:41:ea:cd:05:36:60:34:54:79:89:12: e0:a8:21:fb:e1:43:16:4d:2f:bf:6d:1e:40:71:f6: 47:cd:c5:e2:c0:32:66:2e:2f:70:77:9f:af:cd:d8: 8e:d6:7c:da:45:d3:6f:d9:39:ef:4c:7b:ca:8b:61: 32:c6:50:18:3d:63:3d:f7:b3:c9:cf:be:6d:e3:04: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.80.0/22 IPv6: 2804:580c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268103 Signature Algorithm: sha256WithRSAEncryption 46:d2:75:b2:17:9a:be:f2:7f:97:7e:07:90:9c:67:cf:11:89: b4:30:29:af:a2:8f:24:49:02:3b:37:00:29:35:6d:ac:d7:86: 4f:f7:3f:dd:73:84:03:70:6c:6c:a8:3e:d9:c0:42:be:d1:3e: 16:6f:47:b2:dd:11:5d:32:21:69:bf:71:15:4f:0f:e9:ad:14: 7d:59:c7:d7:b3:08:6e:36:e4:57:fb:71:da:5f:e9:45:b6:ca: b1:c2:d3:3d:4c:7c:00:dc:e8:bb:bc:c5:05:6a:44:ef:cd:da: bf:d8:b7:72:e1:36:59:c6:ff:dc:e1:2e:d9:af:1a:91:3e:6a: 58:5c:a7:ef:0a:d8:4e:b9:b6:4f:dd:d5:6a:26:06:16:e0:f6: ed:3b:31:97:43:f5:e3:f2:ef:81:d5:9a:f1:eb:11:41:9a:53: d1:78:9c:09:59:c4:d4:b4:fa:6c:16:c7:79:18:8e:20:bb:7a: d2:e6:ca:37:a8:a2:ea:be:27:65:aa:73:e2:06:dd:66:59:0a: e5:89:bb:12:fb:b2:01:49:6d:7f:ea:57:ec:72:03:fc:84:42: 65:c4:30:41:bf:b3:eb:4b:68:a2:94:f2:f4:a0:75:e9:8c:dd: 2b:ea:a9:d1:13:c3:42:74:84:5a:de:c2:df:61:04:d9:61:18: da:d6:d4:b3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCJF+8sBuPp94Cr3VpZ7G7r3fH/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMjcxOTU0MDJaFw0yNzEwMjYxOTU5MDJaMDMxMTAvBgNV BAMTKEQ5QUFFOUQ5REEwNkJCMUYyQTY1MjcyRTE3NThCNDBGREU3RkQ5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/TsDhbHLgM+gDoBR9Yum4BHm aKCahpgtC1hfvSy9l4ItztILBcX7pCS10sGPGXfhsUCEu/hQDzkxTCaOmw6LX3Pb Ie0Y15d7gwj7dEG919yCa9YEy5DnaMO9GosBzclLA7Eclm2Tjg5HkXvMcTGcOa9G 2X3onKyCSRlM9I5YVZ4B0vAVJVg7wHrC0+ZMM56M+6E4HLNv168egFze0cKQWl2P okAnUc4hgaF96LllKH9k8HBGO1BB6s0FNmA0VHmJEuCoIfvhQxZNL79tHkBx9kfN xeLAMmYuL3B3n6/N2I7WfNpF02/ZOe9Me8qLYTLGUBg9Yz33s8nPvm3jBBanAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZqunZ2ga7Hypl Jy4XWLQP3n/Z+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVla MmJWbmFvYXJhTlVudGtaQnVmblRpZVBNRkR3Vmt6RG9MQ0hubWdGWUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVZ WjJiVm5hb2FyYU5VbnRrWkJ1Zm5UaWVQTUZEd1ZrekRvTENIbm1nRllCLzAvRDlB QUU5RDlEQTA2QkIxRjJBNjUyNzJFMTc1OEI0MEZERTdGRDlGQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLalQMA0EAgACMAcDBQAoBFgMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXRzANBgkqhkiG9w0BAQsFAAOCAQEARtJ1sheavvJ/l34H kJxnzxGJtDApr6KPJEkCOzcAKTVtrNeGT/c/3XOEA3BsbKg+2cBCvtE+Fm9Hst0R XTIhab9xFU8P6a0UfVnH17MIbjbkV/tx2l/pRbbKscLTPUx8ANzou7zFBWpE783a v9i3cuE2Wcb/3OEu2a8akT5qWFyn7wrYTrm2T93VaiYGFuD27Tsxl0P14/LvgdWa 8esRQZpT0XicCVnE1LT6bBbHeRiOILt60ubKN6ii6r4nZapz4gbdZlkK5Ym7Evuy AUltf+pX7HID/IRCZcQwQb+z60toopTy9KB16YzdK+qp0RPDQnSEWt7C32EE2WEY 2tbUsw== -----END CERTIFICATE-----Generated at Thu Oct 29 18:20:52 2026 by rpki-client