$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer File: 0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer (raw, json) Hash identifier: lao06Vv6xMaDv3zxgfliWekrl3q69Q7h3oD9hxRaGxc= Subject key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 039CCE688024A2C7100652B066DDBCD77FC12914 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft caRepository: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 17:59:09 +0000 Certificate not after: Wed 01 Sep 2027 18:04:09 +0000 Subordinate resources: AS: 275725 IP: 177.23.132.0/22 IP: 2804:989c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 15:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9c:ce:68:80:24:a2:c7:10:06:52:b0:66:dd:bc:d7:7f:c1:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 17:59:09 2026 GMT Not After : Sep 1 18:04:09 2027 GMT Subject: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:b5:f5:cf:0b:12:d3:a7:0b:62:a0:ce:66: 06:da:95:27:11:51:b5:61:f4:36:d2:da:82:84:dd: b0:9f:e7:5d:5c:a7:58:61:c4:9f:9d:9a:35:0a:b7: f1:96:1e:dd:c1:23:cb:8c:37:ce:18:9f:64:8c:f0: 3c:1e:79:20:c7:58:b5:d2:a1:c5:07:91:9e:b8:a5: a2:43:9e:2a:51:93:28:9c:10:b2:b0:2d:df:4a:c8: 42:69:b5:18:0b:f6:df:e7:02:7a:cf:38:b7:d9:70: c0:83:6d:c3:0e:4e:85:30:92:68:aa:c1:86:cd:a5: 49:eb:e8:5f:19:6c:f4:93:f5:4f:2f:f8:db:90:6f: 63:cc:3d:c4:f3:d7:c5:28:64:59:2a:f6:d1:d4:e9: 08:1f:a4:12:b6:98:08:f1:39:91:ff:32:33:8e:7a: 50:ea:e5:88:1e:21:c4:0f:84:d5:21:22:8c:d9:ef: 4e:02:48:fa:99:38:40:30:aa:bd:6e:1f:78:36:19: 5e:06:0d:c7:4b:46:f5:d9:7d:3b:e7:3c:77:d3:26: 30:bf:c4:7e:b3:df:30:52:ec:e3:d7:fc:44:40:3a: 3b:34:79:a8:6a:84:09:0a:4b:20:46:02:31:bc:11: 71:58:e8:ee:02:56:f1:96:e3:c2:5b:71:6c:cd:b1: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.23.132.0/22 IPv6: 2804:989c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275725 Signature Algorithm: sha256WithRSAEncryption 2c:eb:d7:3c:96:a6:5f:6d:a1:18:c0:77:d6:d3:35:dc:97:76: be:f3:17:7c:e0:d3:63:e9:ae:cb:6c:58:c9:92:7a:27:f3:64: 87:b0:13:9c:4d:47:8e:0c:56:d8:82:58:b2:cd:b9:2e:6e:a7: 33:6a:1a:9e:56:f4:6f:91:12:63:da:5b:e5:22:3f:23:f1:1d: 4b:73:06:17:18:7c:a0:c2:cd:bd:b4:b0:e6:78:66:10:85:8b: d0:81:b9:aa:a2:7c:ec:6c:1c:a7:f4:99:a7:ca:c2:c8:6b:09: e6:14:6b:f3:43:07:7d:75:0f:33:07:6b:da:75:b0:c7:4e:0a: 58:29:8e:77:e5:d5:54:4d:3f:f4:d0:69:b0:76:98:13:28:8c: 52:0d:a7:aa:14:6d:35:c2:37:3d:a2:b5:a1:c0:03:46:dc:21: c9:8a:9d:6e:3e:3f:38:54:71:d2:2a:b9:07:f7:a5:87:53:52: 97:b6:a2:64:16:94:ba:b8:d6:96:3a:98:76:27:de:db:dc:eb: ba:00:3b:56:ea:bc:1e:c5:1c:55:da:7f:12:27:37:07:cf:94: 0f:49:27:7a:69:04:3f:9b:94:71:ff:a5:f5:9c:48:ea:39:cb: c5:8e:7d:e1:87:20:c2:22:1d:c2:e8:a0:28:2e:75:4a:77:8e: a1:f1:f2:99 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUA5zOaIAkoscQBlKwZt2813/BKRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDIxNzU5MDlaFw0yNzA5MDExODA0MDlaMDMxMTAvBgNV BAMTKDBGRjhDOThEQTc3OEVGRjA4ODczODExMEM1RkRDNEMyOEVEQUQyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UbX1zwsS06cLYqDOZgbalScR UbVh9DbS2oKE3bCf511cp1hhxJ+dmjUKt/GWHt3BI8uMN84Yn2SM8DweeSDHWLXS ocUHkZ64paJDnipRkyicELKwLd9KyEJptRgL9t/nAnrPOLfZcMCDbcMOToUwkmiq wYbNpUnr6F8ZbPST9U8v+NuQb2PMPcTz18UoZFkq9tHU6QgfpBK2mAjxOZH/MjOO elDq5YgeIcQPhNUhIozZ704CSPqZOEAwqr1uH3g2GV4GDcdLRvXZfTvnPHfTJjC/ xH6z3zBS7OPX/ERAOjs0eahqhAkKSyBGAjG8EXFY6O4CVvGW48JbcWzNsePLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP+MmNp3jv8Ihz gRDF/cTCjtrSXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQThv SjNWQ3JOTG1mZndkUHg1MkthQktoNkZTTHZSa2o0bXFoSEU1c2VNVGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E4 b0ozVkNyTkxtZmZ3ZFB4NTJLYUJLaDZGU0x2UmtqNG1xaEhFNXNlTVRmLzAvMEZG OEM5OERBNzc4RUZGMDg4NzM4MTEwQzVGREM0QzI4RURBRDI1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsReEMA0EAgACMAcDBQAoBJicMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQ1DTANBgkqhkiG9w0BAQsFAAOCAQEALOvXPJamX22hGMB3 1tM13Jd2vvMXfODTY+muy2xYyZJ6J/Nkh7ATnE1HjgxW2IJYss25Lm6nM2oanlb0 b5ESY9pb5SI/I/EdS3MGFxh8oMLNvbSw5nhmEIWL0IG5qqJ87Gwcp/SZp8rCyGsJ 5hRr80MHfXUPMwdr2nWwx04KWCmOd+XVVE0/9NBpsHaYEyiMUg2nqhRtNcI3PaK1 ocADRtwhyYqdbj4/OFRx0iq5B/elh1NSl7aiZBaUurjWljqYdife29zrugA7Vuq8 HsUcVdp/Eic3B8+UD0knemkEP5uUcf+l9ZxI6jnLxY594YcgwiIdwuigKC51SneO ofHymQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:47:39 2026 by rpki-client