$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer File: F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.cer (raw, json) Hash identifier: /HhxdIH/C4EZ4j6dMcc4OI1NLMgNtyzXZVZ3LYfGgeA= Subject key identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A369E01C58F0C640ADC1C50E8C33263049B5308 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft caRepository: rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Oct 2026 10:14:41 +0000 Certificate not after: Thu 07 Oct 2027 10:19:41 +0000 Subordinate resources: AS: 262518 IP: 138.122.172.0/22 IP: 177.67.112.0/20 IP: 2804:580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Oct 2026 04:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:36:9e:01:c5:8f:0c:64:0a:dc:1c:50:e8:c3:32:63:04:9b:53:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 10:14:41 2026 GMT Not After : Oct 7 10:19:41 2027 GMT Subject: CN=F1413BC3D597601D5CCAE4A0048983DEDACEE5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:01:f5:e4:7e:fb:b6:3f:b8:99:2e:c9:ca: 67:85:1e:31:0e:83:9a:c2:14:2e:cb:6f:92:e2:98: dc:63:8d:d9:11:ec:96:f5:fc:70:b1:81:7e:9c:8c: 1e:f4:af:bd:67:85:ee:0d:4f:33:c0:51:c8:c3:bf: 3f:e2:95:88:23:c8:e5:84:c6:d5:0e:3b:83:a9:c4: ed:96:a9:26:2c:ed:81:42:92:90:a6:58:92:a9:5c: 47:60:68:95:8c:41:fb:42:c3:0c:59:7e:ea:c7:d3: 90:13:11:df:7c:22:f2:68:1d:07:9e:f9:a5:9f:a7: af:4d:4d:dd:0f:ee:c7:0d:04:0c:1d:cd:f0:09:25: 15:aa:6c:95:7f:33:4d:58:2f:c4:b2:d7:e1:61:f5: 2b:7c:43:95:1a:30:ab:55:22:1e:bd:dd:b1:5f:66: 61:01:63:27:6b:a2:bd:20:30:27:4f:d4:00:c9:82: 4d:1e:4b:6b:9c:c1:14:b5:3e:21:8c:42:47:70:05: 2f:8d:f2:7f:08:12:6e:f7:15:8c:65:2b:d0:6f:c9: b5:6a:d2:ad:0e:03:48:f5:e2:03:95:ce:42:f7:21: ca:9e:83:b1:30:e1:97:31:17:d0:36:f2:13:b4:53: 53:87:92:32:b3:57:86:ed:4a:c2:8f:be:ef:ea:81: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:41:3B:C3:D5:97:60:1D:5C:CA:E4:A0:04:89:83:DE:DA:CE:E5:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqiSrQea5dgF4A2usjBJVXm1wVzHoGvLnWpkkd3kbhia/0/F1413BC3D597601D5CCAE4A0048983DEDACEE5D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.172.0/22 177.67.112.0/20 IPv6: 2804:580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262518 Signature Algorithm: sha256WithRSAEncryption c1:99:41:14:3f:84:43:3f:ad:99:89:ac:c8:b1:23:b0:13:15: 1c:1f:dc:7a:b7:e3:1f:d0:6c:df:c0:e6:e2:be:8c:38:31:b5: 92:94:b5:c9:57:71:80:f3:de:15:73:7c:4b:c6:d2:e4:84:3c: 1e:1a:64:1c:05:a0:80:ab:1a:6c:a9:f1:cf:bf:ff:c3:7e:20: 98:77:0f:fa:1c:7a:7b:c2:d4:87:11:cf:63:d0:2c:ee:f4:59: 78:84:5b:b7:3f:c2:d2:6d:be:0e:c9:3a:e4:b7:f1:4b:ee:95: d4:7c:12:00:d7:c0:b0:e8:08:7b:b3:de:99:1e:0d:b8:06:20: 58:5a:31:84:b8:80:65:48:e6:70:83:69:91:1d:5a:fb:40:f1: 55:ee:a3:69:f0:68:0a:7e:9b:aa:1a:05:3f:fe:7c:4f:c1:ab: 97:e9:91:03:8b:80:48:39:79:de:0d:68:9f:7e:cf:0c:1c:61: 12:40:df:59:61:ff:d7:1e:c9:8d:e8:36:a0:60:82:45:e6:0f: ab:37:be:91:f8:2e:de:ec:e3:fd:a6:32:85:6d:f8:a9:ae:26: 0b:95:b2:1d:e9:a4:84:cc:40:81:1c:b7:a7:f1:ff:8e:b8:4a: a7:52:96:90:f3:48:af:42:ac:19:5d:8b:9d:f2:a5:ba:98:6f: d4:83:19:11 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUajaeAcWPDGQK3BxQ6MMyYwSbUwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDgxMDE0NDFaFw0yNzEwMDcxMDE5NDFaMDMxMTAvBgNV BAMTKEYxNDEzQkMzRDU5NzYwMUQ1Q0NBRTRBMDA0ODk4M0RFREFDRUU1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0gH15H77tj+4mS7JymeFHjEO g5rCFC7Lb5LimNxjjdkR7Jb1/HCxgX6cjB70r71nhe4NTzPAUcjDvz/ilYgjyOWE xtUOO4OpxO2WqSYs7YFCkpCmWJKpXEdgaJWMQftCwwxZfurH05ATEd98IvJoHQee +aWfp69NTd0P7scNBAwdzfAJJRWqbJV/M01YL8Sy1+Fh9St8Q5UaMKtVIh693bFf ZmEBYydror0gMCdP1ADJgk0eS2ucwRS1PiGMQkdwBS+N8n8IEm73FYxlK9BvybVq 0q0OA0j14gOVzkL3Icqeg7Ew4ZcxF9A28hO0U1OHkjKzV4btSsKPvu/qgaf1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxQTvD1ZdgHVzK 5KAEiYPe2s7l0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Fp U3JRZWE1ZGdGNEEydXNqQkpWWG0xd1Z6SG9HdkxuV3Bra2Qza2JoaWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nx aVNyUWVhNWRnRjRBMnVzakJKVlhtMXdWekhvR3ZMbldwa2tkM2tiaGlhLzAvRjE0 MTNCQzNENTk3NjAxRDVDQ0FFNEEwMDQ4OTgzREVEQUNFRTVEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinqsAwQEsUNwMA0EAgACMAcDBQAoBAWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBdjANBgkqhkiG9w0BAQsFAAOCAQEAwZlBFD+E Qz+tmYmsyLEjsBMVHB/cerfjH9Bs38Dm4r6MODG1kpS1yVdxgPPeFXN8S8bS5IQ8 HhpkHAWggKsabKnxz7//w34gmHcP+hx6e8LUhxHPY9As7vRZeIRbtz/C0m2+Dsk6 5LfxS+6V1HwSANfAsOgIe7PemR4NuAYgWFoxhLiAZUjmcINpkR1a+0DxVe6jafBo Cn6bqhoFP/58T8Grl+mRA4uASDl53g1on37PDBxhEkDfWWH/1x7Jjeg2oGCCReYP qze+kfgu3uzj/aYyhW34qa4mC5WyHemkhMxAgRy3p/H/jrhKp1KWkPNIr0KsGV2L nfKluphv1IMZEQ== -----END CERTIFICATE-----Generated at Fri Oct 9 05:16:10 2026 by rpki-client