$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer File: 07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer (raw, json) Hash identifier: XFPbv0i3DFvzoSI5PRCo1G2C7Gtp+9+dnj///UiNESc= Subject key identifier: 07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10729FDC8D7421666CABB258162B161D9C702DEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft caRepository: rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Sep 2026 00:20:43 +0000 Certificate not after: Tue 21 Sep 2027 00:25:43 +0000 Subordinate resources: AS: 264078 IP: 143.137.136.0/22 IP: 2804:2a8c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 13:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:72:9f:dc:8d:74:21:66:6c:ab:b2:58:16:2b:16:1d:9c:70:2d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 00:20:43 2026 GMT Not After : Sep 21 00:25:43 2027 GMT Subject: CN=07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:35:6b:d1:e4:05:10:67:b2:b3:a9:1e:85: f8:54:4b:86:4b:bd:9d:1b:0d:0f:35:fc:0f:b4:ec: 0d:85:c7:1f:3e:68:59:e6:ba:43:d2:f6:1d:df:12: 89:c1:fa:e0:5e:22:de:67:c8:8a:74:9a:e7:36:d6: e2:fc:00:99:24:b2:7f:bf:31:b4:e9:e5:21:b8:a7: 10:47:51:ee:09:c2:d0:a6:13:5f:fd:d6:b6:6b:99: a8:68:19:0c:d4:8c:27:39:5a:ec:91:39:43:dd:61: 8e:06:1b:0b:db:eb:2f:4d:93:95:44:71:a4:dd:59: 38:25:3f:b8:cb:8a:a5:de:92:ed:a8:c7:04:97:44: 66:fa:d5:db:87:03:7c:b3:17:7d:c8:ef:aa:72:62: 77:4a:9a:9f:73:b6:d6:84:a4:a5:83:ff:fc:b4:8d: cc:89:14:3c:04:2d:d7:b4:36:44:6e:18:8a:61:55: 82:37:ee:91:24:b9:1e:4c:c2:e5:59:f5:c2:9c:3a: f2:39:05:c7:2c:b4:14:a0:dc:0d:ed:1f:9b:0b:d7: 0b:40:43:2e:b1:ed:ad:31:e1:37:a3:b1:26:1e:ab: 3c:e4:b6:c6:05:8a:25:ad:9f:5d:82:84:c0:1d:34: 2f:19:3d:ed:95:1f:cc:c3:17:48:df:6d:08:01:f7: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.136.0/22 IPv6: 2804:2a8c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264078 Signature Algorithm: sha256WithRSAEncryption c8:b9:7f:1d:dd:5f:74:41:73:2e:bb:8f:3b:18:36:a3:af:ca: c1:35:d7:c4:c2:16:33:39:5a:02:62:35:9c:ed:34:a9:60:99: 1d:47:a1:4d:c0:d7:75:be:40:09:ac:29:03:5c:48:c2:67:84: d7:0e:32:43:a7:2d:8f:85:e5:44:86:fb:c3:f0:bf:28:b3:2b: 12:d4:6b:01:ce:66:05:94:d3:84:e6:fe:5e:ff:58:95:0a:a8: e9:0f:c0:2b:c4:28:0f:b4:41:64:30:72:d7:80:bc:35:79:a8: 73:a9:ac:6b:76:b5:c6:d5:04:62:0e:58:18:c4:8d:ed:84:cd: f7:01:08:bd:6c:da:b9:cd:d4:45:f3:e2:5e:c2:77:b0:89:7c: ca:c8:13:4d:47:4e:c8:b5:ae:f7:7a:e4:e2:2f:7e:5d:1b:fd: 83:29:96:5b:e0:20:43:68:0f:47:04:08:1f:ad:62:9f:32:bf: 3d:b2:eb:ec:af:e9:14:cb:1c:17:6b:80:a5:fb:09:04:d4:87: d6:b6:93:0a:c8:77:92:7b:be:b9:80:82:8d:33:cc:fd:c9:b6: cc:fa:7d:a0:7b:f7:34:b4:2a:cd:97:b9:25:0f:5d:e5:55:d4: ac:ca:5c:c8:1f:c4:d2:1e:01:9a:d3:b9:23:6c:a0:6f:74:5f: d1:43:ad:6f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEHKf3I10IWZsq7JYFisWHZxwLeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjIwMDIwNDNaFw0yNzA5MjEwMDI1NDNaMDMxMTAvBgNV BAMTKDA3QUI1QkY3MDNGQThDQ0IwRjY0NzVCNUM5MkNDRDA1RjkyQzg4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxTVr0eQFEGeys6kehfhUS4ZL vZ0bDQ81/A+07A2Fxx8+aFnmukPS9h3fEonB+uBeIt5nyIp0muc21uL8AJkksn+/ MbTp5SG4pxBHUe4JwtCmE1/91rZrmahoGQzUjCc5WuyROUPdYY4GGwvb6y9Nk5VE caTdWTglP7jLiqXeku2oxwSXRGb61duHA3yzF33I76pyYndKmp9zttaEpKWD//y0 jcyJFDwELde0NkRuGIphVYI37pEkuR5MwuVZ9cKcOvI5BccstBSg3A3tH5sL1wtA Qy6x7a0x4TejsSYeqzzktsYFiiWtn12ChMAdNC8ZPe2VH8zDF0jfbQgB9+h1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHq1v3A/qMyw9k dbXJLM0F+SyILTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2Fu cHRXdXdHcTU4WG5SNFpxWEVWb1NnRHpXbWtpa2pqVHJmSmdmTk52cE4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nh bnB0V3V3R3E1OFhuUjRacVhFVm9TZ0R6V21raWtqalRyZkpnZk5OdnBOLzAvMDdB QjVCRjcwM0ZBOENDQjBGNjQ3NUI1QzkyQ0NEMDVGOTJDODgyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj4mIMA0EAgACMAcDBQAoBCqMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHjjANBgkqhkiG9w0BAQsFAAOCAQEAyLl/Hd1fdEFzLruP Oxg2o6/KwTXXxMIWMzlaAmI1nO00qWCZHUehTcDXdb5ACawpA1xIwmeE1w4yQ6ct j4XlRIb7w/C/KLMrEtRrAc5mBZTThOb+Xv9YlQqo6Q/AK8QoD7RBZDBy14C8NXmo c6msa3a1xtUEYg5YGMSN7YTN9wEIvWzauc3URfPiXsJ3sIl8ysgTTUdOyLWu93rk 4i9+XRv9gymWW+AgQ2gPRwQIH61inzK/PbLr7K/pFMscF2uApfsJBNSH1raTCsh3 knu+uYCCjTPM/cm2zPp9oHv3NLQqzZe5JQ9d5VXUrMpcyB/E0h4BmtO5I2ygb3Rf 0UOtbw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:46:29 2026 by rpki-client