$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer File: F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer (raw, json) Hash identifier: cupszNcFHplxQuC4DKvk0EDLdOWiR196u3WXn3NnbRc= Subject key identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60E9F79413B4B24D8DB7139D4F932A80C107BBCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft caRepository: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Oct 2026 08:05:33 +0000 Certificate not after: Mon 11 Oct 2027 08:10:33 +0000 Subordinate resources: AS: 28233 IP: 186.194.32.0/20 IP: 189.127.48.0/20 IP: 2804:2e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 18:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e9:f7:94:13:b4:b2:4d:8d:b7:13:9d:4f:93:2a:80:c1:07:bb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 12 08:05:33 2026 GMT Not After : Oct 11 08:10:33 2027 GMT Subject: CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:83:a3:f4:3e:7f:86:e8:02:ed:72:62:32: 43:85:52:cf:5c:e7:94:16:af:2e:46:4d:66:80:23: 09:87:7b:ca:d9:fb:2a:a8:03:5d:2c:d6:7a:5b:1f: 04:de:fb:ed:93:c1:2d:60:b7:ed:98:8e:be:2f:8c: cb:a8:1a:06:d1:89:d0:26:b8:94:3b:e2:6f:72:df: 7d:8f:d1:f8:1f:16:04:a9:d2:29:8a:92:c6:c4:af: 5a:74:b7:86:70:00:72:90:db:ab:d5:3b:e1:1b:f7: 15:e3:c6:7f:cd:08:b1:2e:9b:15:d5:d6:06:79:11: 9d:bd:3e:73:f5:71:d1:e8:05:8c:b2:7f:6e:79:41: bd:26:52:ee:0d:fa:e4:51:c7:31:60:ba:38:1e:b4: 86:9f:aa:b6:50:88:42:08:2e:e8:bd:01:a5:9f:a6: 4b:35:cf:72:f6:b7:24:97:a4:a2:c6:a5:99:c8:84: 35:93:fa:a3:17:11:3b:c5:21:4d:45:ef:64:24:c0: e9:64:ec:9a:8b:62:03:9a:4c:4c:dc:21:ac:53:22: ba:75:6e:87:73:0a:31:df:23:f5:b3:47:03:46:fe: 81:b4:f9:70:29:dd:60:74:77:fe:23:1b:3d:b7:52: 3b:56:db:9c:4f:e5:47:3b:ac:a0:c1:7e:6d:f9:10: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.194.32.0/20 189.127.48.0/20 IPv6: 2804:2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28233 Signature Algorithm: sha256WithRSAEncryption 8f:25:8c:bd:6e:1b:86:0c:1d:6c:a5:7d:90:8e:d2:98:39:9f: 8b:4d:fb:72:8a:06:3d:2d:6d:40:f2:11:1b:a0:33:90:79:14: 24:02:48:91:69:b9:1f:b4:20:cb:bf:c1:4b:4d:e5:8a:86:66: 2f:46:d2:86:d4:70:a2:db:a7:79:5f:3c:67:76:2e:05:1c:53: 81:d4:57:3c:b1:34:fb:70:f3:65:ba:40:4e:98:98:f2:66:e7: b0:f8:27:2b:27:f6:f6:e4:f0:4a:8e:7c:4a:94:d3:5e:ad:31: 39:c4:1c:81:cc:d4:d1:0c:07:3d:3d:68:f1:18:3a:c9:5f:5e: e7:cb:3a:20:98:74:47:db:32:8e:8e:b8:a6:0f:e9:04:c4:33: d4:47:99:70:f0:a1:99:b4:e7:6f:e6:ab:38:14:3e:d7:72:89: 0a:34:03:75:e9:9b:5a:2c:06:58:ae:a7:32:b3:59:d7:32:05: 37:62:c3:14:8e:3a:31:eb:03:12:cd:15:20:c6:f9:f9:46:b0: 03:d7:2f:9f:60:06:a0:57:c8:24:5f:51:3d:a8:9a:80:4a:93: 15:b4:86:7c:36:d0:e4:c4:26:7e:9c:6c:79:29:6a:93:c7:6f: a9:3d:4c:b1:71:6f:21:c3:ae:84:e9:97:5d:8a:a4:08:7d:d7: cf:c7:57:af -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUYOn3lBO0sk2NtxOdT5MqgMEHu8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTIwODA1MzNaFw0yNzEwMTEwODEwMzNaMDMxMTAvBgNV BAMTKEY1OUYwOTE3REMyNzg0ODg5NjE2Q0E2RTVGODg1RDI1RDBFMEQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAYOj9D5/hugC7XJiMkOFUs9c 55QWry5GTWaAIwmHe8rZ+yqoA10s1npbHwTe++2TwS1gt+2Yjr4vjMuoGgbRidAm uJQ74m9y332P0fgfFgSp0imKksbEr1p0t4ZwAHKQ26vVO+Eb9xXjxn/NCLEumxXV 1gZ5EZ29PnP1cdHoBYyyf255Qb0mUu4N+uRRxzFgujgetIafqrZQiEIILui9AaWf pks1z3L2tySXpKLGpZnIhDWT+qMXETvFIU1F72QkwOlk7JqLYgOaTEzcIaxTIrp1 bodzCjHfI/WzRwNG/oG0+XAp3WB0d/4jGz23UjtW25xP5Uc7rKDBfm35EL1vAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1nwkX3CeEiJYW ym5fiF0l0ODR5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0gy eXAzUkpDVDl0R1RHNHhVblRON0JXMlI2ek1tczlkTnlHang1WFhzRnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI MnlwM1JKQ1Q5dEdURzR4VW5UTjdCVzJSNnpNbXM5ZE55R2p4NVhYc0Z0LzAvRjU5 RjA5MTdEQzI3ODQ4ODk2MTZDQTZFNUY4ODVEMjVEMEUwRDFFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusIgAwQEvX8wMA0EAgACMAcDBQAoBALgMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm5JMA0GCSqGSIb3DQEBCwUAA4IBAQCPJYy9bhuG DB1spX2QjtKYOZ+LTftyigY9LW1A8hEboDOQeRQkAkiRabkftCDLv8FLTeWKhmYv RtKG1HCi26d5Xzxndi4FHFOB1Fc8sTT7cPNlukBOmJjyZuew+CcrJ/b25PBKjnxK lNNerTE5xByBzNTRDAc9PWjxGDrJX17nyzogmHRH2zKOjrimD+kExDPUR5lw8KGZ tOdv5qs4FD7XcokKNAN16ZtaLAZYrqcys1nXMgU3YsMUjjox6wMSzRUgxvn5RrAD 1y+fYAagV8gkX1E9qJqASpMVtIZ8NtDkxCZ+nGx5KWqTx2+pPUyxcW8hw66E6Zdd iqQIfdfPx1ev -----END CERTIFICATE-----Generated at Mon Oct 12 18:59:12 2026 by rpki-client