$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer File: FB435E794D86CB9BAE800A6D289A88F771B5B583.cer (raw, json) Hash identifier: GV/Z75AV3vb4opmOqiB886UJdRdXl7wCfCRptd6jz10= Subject key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7160CDE599B456F1FAAC547A304FA3B3E0B451EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft caRepository: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 13 Oct 2026 19:06:50 +0000 Certificate not after: Tue 12 Oct 2027 19:11:50 +0000 Subordinate resources: AS: 264550 IP: 138.0.136.0/22 IP: 170.0.32.0/22 IP: 2804:215c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 16:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:60:cd:e5:99:b4:56:f1:fa:ac:54:7a:30:4f:a3:b3:e0:b4:51:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 13 19:06:50 2026 GMT Not After : Oct 12 19:11:50 2027 GMT Subject: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a7:5c:18:3e:14:21:52:8b:6a:ac:0a:86: fe:58:ae:cc:5a:8a:f8:3e:58:f4:90:e6:15:f5:e6: bb:03:98:24:49:0d:33:fa:80:37:75:49:6a:b0:56: 9b:d8:eb:d4:92:57:c5:63:ff:db:54:2d:be:8c:ff: 22:ae:6e:a8:e7:c3:97:ff:a9:17:fe:a0:99:bc:f5: bf:e5:93:d2:29:fd:8d:84:d4:53:3d:1c:66:78:29: f2:db:57:7b:c5:27:20:52:65:5c:80:94:f4:8b:38: 61:df:bc:b2:8b:e2:91:14:53:53:40:af:a8:69:15: c5:8f:e0:30:75:57:2d:cf:9a:5d:1a:ed:6b:03:f6: ef:cb:d9:3f:57:c6:b1:c1:4d:cb:cb:74:b6:50:1c: ab:42:83:3f:6f:16:f9:5a:34:c3:74:52:50:bb:42: e5:27:9f:30:c2:38:8c:78:fb:d4:57:57:e7:65:8a: 55:e1:35:c9:66:a5:ee:26:57:13:cf:16:46:74:8d: 80:4c:b6:cc:dc:4d:1b:af:84:29:04:4e:0b:94:03: cf:c0:d9:6f:30:b0:1f:6c:c0:c3:85:97:38:44:80: f4:6a:33:77:7e:78:f0:f0:f8:ed:83:1f:4c:2c:9d: 7f:ba:be:c8:1f:db:00:ed:9e:c3:c1:88:d0:c7:41: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.136.0/22 170.0.32.0/22 IPv6: 2804:215c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264550 Signature Algorithm: sha256WithRSAEncryption a4:43:82:26:58:f4:7c:cf:32:9b:4b:39:e9:1b:1f:22:89:e5: b7:41:16:49:95:57:31:52:d2:e6:cb:4b:6d:3d:57:a7:f2:a2: 0b:ec:c9:1f:42:95:8b:20:7e:19:ef:a4:bc:db:30:04:e6:e2: db:21:62:fd:7d:a2:ec:5f:69:c7:a5:a6:f7:f5:e4:50:e6:fc: f6:8b:12:68:b2:ed:ff:c4:01:68:80:72:b1:ab:08:47:16:38: 77:05:bc:a2:51:0e:47:62:a4:79:e7:97:9b:d7:3b:b1:6a:aa: 1d:12:78:f0:d7:90:8d:59:78:76:87:9a:16:16:7e:de:94:38: b0:54:f1:04:87:c7:18:04:1e:4f:1b:55:08:4b:32:c9:3c:05: d1:e3:39:89:39:0a:98:85:2c:dd:b2:ae:d2:b0:a9:fc:c9:95: 4a:91:06:bd:d0:69:ff:86:ee:95:4e:26:df:c4:14:cc:88:6c: e6:b6:e2:e7:b3:2e:9c:a6:e7:56:e0:3f:58:37:fe:51:00:a1: 80:24:e8:dc:48:41:db:99:de:47:e7:0c:92:5b:da:4a:ef:23: bb:9c:b7:52:11:e7:25:a9:ff:55:9c:3c:9e:f0:95:7d:88:61: 42:62:99:97:a9:e1:be:fa:b7:1d:34:f6:86:66:99:cf:65:f7: 88:34:5a:9f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcWDN5Zm0VvH6rFR6ME+js+C0UeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTMxOTA2NTBaFw0yNzEwMTIxOTExNTBaMDMxMTAvBgNV BAMTKEZCNDM1RTc5NEQ4NkNCOUJBRTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMKdcGD4UIVKLaqwKhv5Yrsxa ivg+WPSQ5hX15rsDmCRJDTP6gDd1SWqwVpvY69SSV8Vj/9tULb6M/yKubqjnw5f/ qRf+oJm89b/lk9Ip/Y2E1FM9HGZ4KfLbV3vFJyBSZVyAlPSLOGHfvLKL4pEUU1NA r6hpFcWP4DB1Vy3Pml0a7WsD9u/L2T9XxrHBTcvLdLZQHKtCgz9vFvlaNMN0UlC7 QuUnnzDCOIx4+9RXV+dlilXhNclmpe4mVxPPFkZ0jYBMtszcTRuvhCkETguUA8/A 2W8wsB9swMOFlzhEgPRqM3d+ePDw+O2DH0wsnX+6vsgf2wDtnsPBiNDHQYK7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7Q155TYbLm66A Cm0omoj3cbW1gzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlZ1 SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1VVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJW dUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAvRkI0 MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3MUI1QjU4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCigCIAwQCqgAgMA0EAgACMAcDBQAoBCFcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJZjANBgkqhkiG9w0BAQsFAAOCAQEApEOCJlj0 fM8ym0s56RsfIonlt0EWSZVXMVLS5stLbT1Xp/KiC+zJH0KViyB+Ge+kvNswBObi 2yFi/X2i7F9px6Wm9/XkUOb89osSaLLt/8QBaIBysasIRxY4dwW8olEOR2KkeeeX m9c7sWqqHRJ48NeQjVl4doeaFhZ+3pQ4sFTxBIfHGAQeTxtVCEsyyTwF0eM5iTkK mIUs3bKu0rCp/MmVSpEGvdBp/4bulU4m38QUzIhs5rbi57MunKbnVuA/WDf+UQCh gCTo3EhB25neR+cMklvaSu8ju5y3UhHnJan/VZw8nvCVfYhhQmKZl6nhvvq3HTT2 hmaZz2X3iDRanw== -----END CERTIFICATE-----Generated at Wed Oct 14 15:17:26 2026 by rpki-client