$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer File: 2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer (raw, json) Hash identifier: YpDFxY0ODiwFzbwxNTE24W23rcb6shfyzXWDw5n7IIQ= Subject key identifier: 2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6EF20229D6413F149AD11A556A8D3CA3F2519712 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.mft caRepository: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 09 Sep 2026 16:27:17 +0000 Certificate not after: Wed 08 Sep 2027 16:32:17 +0000 Subordinate resources: AS: 262290 IP: 138.118.16.0/22 IP: 186.226.200.0/21 IP: 2804:24c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 02:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f2:02:29:d6:41:3f:14:9a:d1:1a:55:6a:8d:3c:a3:f2:51:97:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 16:27:17 2026 GMT Not After : Sep 8 16:32:17 2027 GMT Subject: CN=2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:27:2e:67:df:4c:b5:1d:29:b6:1e:ae:f4: e9:fd:fc:db:f1:a5:b0:df:de:6c:ef:44:1f:ef:b4: 31:da:a0:ae:1a:cb:2d:fa:df:2a:9e:e6:b3:a2:b6: b0:66:c5:2f:a0:fa:7c:a8:ac:5b:a3:04:1b:32:ec: 5c:a1:2a:72:b2:7c:07:20:6b:3e:08:4b:ce:c8:d6: a8:14:70:e4:bb:9f:dd:1e:c3:96:4a:7a:25:b2:61: cf:6f:8c:63:a8:63:4e:50:1b:59:f6:90:97:7e:88: 7a:47:6a:bd:32:f8:4a:40:9f:50:12:8a:cb:c3:2e: 3a:98:7b:b2:52:30:6f:65:d2:51:24:9b:da:6c:ec: 09:40:a7:69:7e:7c:11:f1:f7:28:03:21:6c:80:bf: a5:06:0e:66:f7:47:47:c2:19:d2:b9:5f:37:a6:6e: 43:28:d9:78:75:ea:ac:f3:a2:e8:00:df:46:b9:86: 3b:05:92:6b:9b:e4:ac:af:c2:ce:42:37:bc:3a:31: 49:a8:e8:74:55:2d:5a:10:61:b5:4c:6e:6e:63:ea: b9:be:a5:34:ce:bd:0d:5b:e5:1f:81:31:35:de:72: 76:b0:03:08:82:3a:de:f2:c4:4c:2a:88:99:a3:48: 9f:3d:16:9a:1a:bd:4d:b0:2f:cd:e5:74:ae:92:e3: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.16.0/22 186.226.200.0/21 IPv6: 2804:24c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262290 Signature Algorithm: sha256WithRSAEncryption 12:08:71:79:e0:a5:9d:be:f7:43:ec:64:7a:b5:34:f8:68:b2: a1:93:5f:93:0c:ea:7e:c6:8a:70:8f:dd:3f:44:9c:11:39:7d: fe:36:12:58:c1:c7:47:33:45:2f:5f:07:06:a3:93:c9:2a:ab: 1a:d1:30:c5:2b:f3:4e:43:06:8f:d9:8f:63:9a:c0:3d:f5:f1: e6:3e:27:3a:3e:fd:dc:18:db:e1:1f:19:b3:b0:11:1a:9d:69: 7e:5f:2e:ae:ae:3d:4d:d7:33:58:ae:46:57:c0:cc:2b:89:92: 28:3a:1c:a3:be:85:fb:07:ef:92:16:68:43:fb:d2:67:1b:ca: 0c:e5:d8:5f:40:a6:ae:55:08:fb:71:be:39:18:d2:3c:34:32: ed:97:50:c0:6e:fa:a7:2c:1e:c9:07:cc:37:d4:55:79:f1:e1: 32:0c:b6:c8:3d:2e:cf:34:33:a6:b6:25:ec:0e:77:99:8e:79: ae:48:05:e4:a6:f8:27:f2:13:1e:35:ee:da:fc:71:27:fa:9f: 13:39:f3:99:21:a1:9f:bb:fd:ac:81:93:2d:ac:5b:06:47:a7: 2b:db:11:5b:cf:94:72:04:b7:05:74:0e:b1:9d:b4:a4:d8:96: 52:28:83:d2:91:23:9c:dc:8d:c1:f9:3d:d8:81:e3:65:c9:c6: 9a:56:b5:1a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbvICKdZBPxSa0RpVao08o/JRlxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDkxNjI3MTdaFw0yNzA5MDgxNjMyMTdaMDMxMTAvBgNV BAMTKDJBMDJGQ0VCNjBFOTdCOURGNUFGMTdEQkU2RjI4REZCQkRCQjA0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWicuZ99MtR0pth6u9On9/Nvx pbDf3mzvRB/vtDHaoK4ayy363yqe5rOitrBmxS+g+nyorFujBBsy7FyhKnKyfAcg az4IS87I1qgUcOS7n90ew5ZKeiWyYc9vjGOoY05QG1n2kJd+iHpHar0y+EpAn1AS isvDLjqYe7JSMG9l0lEkm9ps7AlAp2l+fBHx9ygDIWyAv6UGDmb3R0fCGdK5Xzem bkMo2Xh16qzzougA30a5hjsFkmub5Kyvws5CN7w6MUmo6HRVLVoQYbVMbm5j6rm+ pTTOvQ1b5R+BMTXecnawAwiCOt7yxEwqiJmjSJ89FpoavU2wL83ldK6S4wfnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqAvzrYOl7nfWv F9vm8o37vbsEyTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR005 VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dN OVVQaldTUVJHTTgxTWFjYmY2dDhxVEZlVDhSR2lSUUhSdUhtcHFlYnBuLzAvMkEw MkZDRUI2MEU5N0I5REY1QUYxN0RCRTZGMjhERkJCREJCMDRDOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinYQAwQDuuLIMA0EAgACMAcDBQAoBCTAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAkjANBgkqhkiG9w0BAQsFAAOCAQEAEghxeeCl nb73Q+xkerU0+GiyoZNfkwzqfsaKcI/dP0ScETl9/jYSWMHHRzNFL18HBqOTySqr GtEwxSvzTkMGj9mPY5rAPfXx5j4nOj793Bjb4R8Zs7ARGp1pfl8urq49TdczWK5G V8DMK4mSKDoco76F+wfvkhZoQ/vSZxvKDOXYX0CmrlUI+3G+ORjSPDQy7ZdQwG76 pyweyQfMN9RVefHhMgy2yD0uzzQzprYl7A53mY55rkgF5Kb4J/ITHjXu2vxxJ/qf EznzmSGhn7v9rIGTLaxbBkenK9sRW8+UcgS3BXQOsZ20pNiWUiiD0pEjnNyNwfk9 2IHjZcnGmla1Gg== -----END CERTIFICATE-----Generated at Mon Sep 21 02:56:11 2026 by rpki-client