$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer File: 0673A8A85FD75BDF7374650633566E470F5D792A.cer (raw, json) Hash identifier: wrmYs6X0066R/HGYT50ENHoXoAxT0uJl2Oz6D3zjs0Y= Subject key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F8E99C7239A988632C116124626AF8904AF4FB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft caRepository: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 11 Oct 2026 11:05:32 +0000 Certificate not after: Sun 10 Oct 2027 11:10:32 +0000 Subordinate resources: AS: 263266 IP: 170.82.108.0/22 IP: 177.129.28.0/22 IP: 2804:1614::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 18:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8e:99:c7:23:9a:98:86:32:c1:16:12:46:26:af:89:04:af:4f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 11 11:05:32 2026 GMT Not After : Oct 10 11:10:32 2027 GMT Subject: CN=0673A8A85FD75BDF7374650633566E470F5D792A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:f2:89:e3:4c:ad:1c:c0:95:f0:8f:42:08: e9:45:2a:bd:b8:6e:17:73:41:14:71:fb:5b:72:93: bc:05:34:a5:3a:44:57:d2:b6:1d:c1:16:dd:0e:10: c0:0c:51:5f:a4:d4:17:39:e0:d9:94:aa:c5:0c:b7: ab:ae:c3:fb:03:2b:ae:82:74:71:4f:c6:2e:95:92: c2:29:e3:fc:50:eb:f6:47:d2:30:e4:0e:f3:ff:cb: 97:6b:54:af:ef:0e:eb:97:80:71:c3:2e:4e:f0:60: 23:46:d3:e3:97:8c:00:b0:9f:af:2d:af:5f:73:d7: 46:4a:7f:f5:10:88:fa:96:47:1f:58:11:0b:92:eb: 62:33:91:88:fa:62:3b:7a:22:c8:1f:c6:39:7e:28: 93:2b:3d:97:dd:2c:a2:df:d7:b1:60:8f:17:67:4d: 56:ab:cd:0a:c4:a8:db:95:49:39:67:77:4d:b9:4a: 05:1a:11:1a:02:88:3a:71:07:9f:72:99:81:5f:12: a1:eb:8d:77:30:b2:01:b1:0a:69:bd:0e:17:50:e1: 4d:80:cf:ea:ce:b1:56:5f:5e:24:4e:24:a8:89:ff: a5:5d:0f:4e:57:02:64:b6:ba:8f:28:ba:ca:b3:6e: d2:25:23:73:99:7b:d1:5b:34:c3:89:1b:de:1a:a0: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.108.0/22 177.129.28.0/22 IPv6: 2804:1614::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263266 Signature Algorithm: sha256WithRSAEncryption 87:8a:c4:eb:fa:ba:90:7f:1a:7c:2b:cb:35:8d:d3:f4:11:51: a7:51:b3:d8:dc:90:e7:df:9b:52:0f:26:81:30:e4:93:00:b1: 42:80:d4:5d:91:ca:d3:fb:14:e1:c8:3a:ea:b6:13:6e:59:b2: ec:c7:59:b1:83:a1:69:7a:b7:ed:1e:d3:c8:8a:7d:00:bf:3f: 93:8a:2b:01:88:74:f2:43:49:c8:7f:3d:59:04:0e:ae:41:82: cf:87:d9:f4:18:a1:d4:a1:90:a2:49:8c:1e:2b:5d:13:ea:5c: 5f:d1:12:fd:49:98:2c:25:f2:7d:54:7f:f3:d1:34:84:5f:86: 86:62:b5:d1:26:dd:e2:47:c1:b4:2c:3b:ac:ab:8f:1a:ce:af: 9a:c0:e9:5a:00:6e:fa:3f:1a:6f:e1:af:a0:05:0b:48:29:62: b1:d6:c0:27:bd:8e:73:77:24:44:0f:cd:7b:30:00:b8:97:61: 19:ce:e8:ea:f9:35:16:69:ce:c6:99:04:9a:9e:c7:e1:8b:08: a5:31:20:7e:b1:dc:67:67:0b:a6:49:72:62:ff:f3:ac:36:f9: 86:ab:fa:ea:00:2e:86:56:62:3a:fd:17:08:73:a4:56:af:98: 74:d5:41:eb:d3:47:0b:05:f6:de:d3:d0:09:17:59:ac:07:54: 16:55:53:f7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUP46ZxyOamIYywRYSRiaviQSvT7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTExMTA1MzJaFw0yNzEwMTAxMTEwMzJaMDMxMTAvBgNV BAMTKDA2NzNBOEE4NUZENzVCREY3Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppvKJ40ytHMCV8I9CCOlFKr24 bhdzQRRx+1tyk7wFNKU6RFfSth3BFt0OEMAMUV+k1Bc54NmUqsUMt6uuw/sDK66C dHFPxi6VksIp4/xQ6/ZH0jDkDvP/y5drVK/vDuuXgHHDLk7wYCNG0+OXjACwn68t r19z10ZKf/UQiPqWRx9YEQuS62IzkYj6Yjt6Isgfxjl+KJMrPZfdLKLf17Fgjxdn TVarzQrEqNuVSTlnd025SgUaERoCiDpxB59ymYFfEqHrjXcwsgGxCmm9DhdQ4U2A z+rOsVZfXiROJKiJ/6VdD05XAmS2uo8ousqzbtIlI3OZe9FbNMOJG94aoE8FAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGc6ioX9db33N0 ZQYzVm5HD115KjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlVX ajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJV V2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAvMDY3 M0E4QTg1RkQ3NUJERjczNzQ2NTA2MzM1NjZFNDcwRjVENzkyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlJsAwQCsYEcMA0EAgACMAcDBQAoBBYUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEYjANBgkqhkiG9w0BAQsFAAOCAQEAh4rE6/q6 kH8afCvLNY3T9BFRp1Gz2NyQ59+bUg8mgTDkkwCxQoDUXZHK0/sU4cg66rYTblmy 7MdZsYOhaXq37R7TyIp9AL8/k4orAYh08kNJyH89WQQOrkGCz4fZ9Bih1KGQokmM HitdE+pcX9ES/UmYLCXyfVR/89E0hF+GhmK10Sbd4kfBtCw7rKuPGs6vmsDpWgBu +j8ab+GvoAULSClisdbAJ72Oc3ckRA/NezAAuJdhGc7o6vk1FmnOxpkEmp7H4YsI pTEgfrHcZ2cLpklyYv/zrDb5hqv66gAuhlZiOv0XCHOkVq+YdNVB69NHCwX23tPQ CRdZrAdUFlVT9w== -----END CERTIFICATE-----Generated at Sun Oct 11 20:17:13 2026 by rpki-client