$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer File: 2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer (raw, json) Hash identifier: qcrccHT6vosN1lT3iTtQF/ygmfxhLxND49hasoS+TqM= Subject key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10F76943E89D9750164B4B61CD5D52E0C5FCB077 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft caRepository: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Sep 2026 16:01:12 +0000 Certificate not after: Fri 24 Sep 2027 16:06:12 +0000 Subordinate resources: AS: 266020 IP: 168.228.189.0/24 IP: 170.245.236.0/22 IP: 200.187.96.0/22 IP: 2804:393c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 17:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f7:69:43:e8:9d:97:50:16:4b:4b:61:cd:5d:52:e0:c5:fc:b0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 25 16:01:12 2026 GMT Not After : Sep 24 16:06:12 2027 GMT Subject: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:64:37:f0:e9:75:3a:2f:21:9f:e5:61:8c: 62:0c:32:21:f2:30:bf:a4:00:c4:d8:d7:93:bf:b0: 14:f3:42:fe:0a:1a:8e:7c:9f:f9:04:34:9b:f2:b6: a5:07:7a:6f:15:6c:8c:56:4c:3d:75:aa:79:68:e1: f7:43:1a:35:8b:74:28:f0:0a:25:ac:20:9b:36:be: e6:bb:46:9c:5f:c7:cc:fe:b7:32:d7:f9:cb:61:33: bc:46:a1:d6:b1:51:8f:00:5c:69:83:3f:b0:b7:c3: c1:fd:0e:66:d2:1c:e3:1e:df:c9:1b:d1:56:8d:1a: 61:27:f5:39:5e:81:53:71:03:40:71:0e:73:a3:aa: de:b2:68:e7:8e:77:6b:72:1e:32:bb:5b:bc:c7:48: 68:32:eb:00:95:d3:0e:12:c1:4e:28:5f:5b:34:21: 35:47:01:2d:fe:85:05:0e:10:68:54:c1:c2:79:d8: 8f:90:f0:61:ff:ec:7b:ef:63:e0:ee:ba:1c:46:be: 4b:c6:9a:0f:8d:5a:40:f2:db:d7:2a:0f:dc:1d:e3: db:53:fc:3c:4e:69:9f:22:57:0f:9d:b9:99:24:db: a0:b2:00:5a:a7:41:9b:d2:9e:97:63:c3:52:6d:23: f0:dd:4b:aa:56:3b:aa:b7:bb:d7:f8:95:9a:01:c7: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.189.0/24 170.245.236.0/22 200.187.96.0/22 IPv6: 2804:393c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266020 Signature Algorithm: sha256WithRSAEncryption 45:a8:77:63:55:1f:48:0b:49:19:7c:c4:67:d7:79:e6:8c:4b: 52:f4:08:68:60:d9:39:45:8a:a9:7b:92:06:4e:01:ba:62:11: 70:97:4a:8b:f6:13:ea:e4:d6:14:6f:0d:d0:62:87:72:03:42: a0:f1:08:eb:30:ca:5e:01:53:85:04:36:66:68:c6:7d:57:81: 1f:81:73:8b:fc:a8:90:32:60:63:55:6d:37:ee:a4:0f:56:ba: a8:44:79:7a:c3:cd:f4:da:b2:c0:e7:f1:7e:7c:15:27:72:b8: a4:b6:8e:ce:03:9c:26:8d:1d:e7:0a:bb:27:6d:d4:51:63:a0: 3a:71:b2:22:f6:3f:e5:3a:05:c7:a1:59:62:77:68:b9:aa:4d: 7b:75:4c:dd:99:29:2b:83:d7:91:03:9b:19:47:72:7a:fa:70: 35:44:85:bf:96:80:81:a3:7d:42:15:c2:c1:d8:f6:13:cf:b5: 8a:b3:13:83:86:34:19:fa:d2:c9:6b:49:5e:71:55:6f:3c:84: 0d:1b:3f:d0:8b:c3:8c:12:9f:54:e8:94:59:91:bf:09:68:7c: 3a:ca:f7:7f:31:9d:19:7e:73:ae:26:1f:44:6d:7f:78:fa:80: 8e:6d:28:bc:5c:e4:2d:8f:1c:54:69:7d:94:28:8a:b1:13:ba: ed:65:50:de -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUEPdpQ+idl1AWS0thzV1S4MX8sHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjUxNjAxMTJaFw0yNzA5MjQxNjA2MTJaMDMxMTAvBgNV BAMTKDJCQjMxMkIzMDUxRjdFQzRFMzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGmQ38Ol1Oi8hn+VhjGIMMiHy ML+kAMTY15O/sBTzQv4KGo58n/kENJvytqUHem8VbIxWTD11qnlo4fdDGjWLdCjw CiWsIJs2vua7Rpxfx8z+tzLX+cthM7xGodaxUY8AXGmDP7C3w8H9DmbSHOMe38kb 0VaNGmEn9TlegVNxA0BxDnOjqt6yaOeOd2tyHjK7W7zHSGgy6wCV0w4SwU4oX1s0 ITVHAS3+hQUOEGhUwcJ52I+Q8GH/7HvvY+DuuhxGvkvGmg+NWkDy29cqD9wd49tT /DxOaZ8iVw+duZkk26CyAFqnQZvSnpdjw1JtI/DdS6pWO6q3u9f4lZoBx4hZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrsxKzBR9+xOMC HOIZVtCipQ927zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0FU eXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVBRU4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNB VHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAvMkJC MzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJBNTBGNzZFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQAqOS9AwQCqvXsAwQCyLtgMA0EAgACMAcDBQAoBDk8 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQPJDANBgkqhkiG9w0BAQsFAAOCAQEA Rah3Y1UfSAtJGXzEZ9d55oxLUvQIaGDZOUWKqXuSBk4BumIRcJdKi/YT6uTWFG8N 0GKHcgNCoPEI6zDKXgFThQQ2ZmjGfVeBH4Fzi/yokDJgY1VtN+6kD1a6qER5esPN 9NqywOfxfnwVJ3K4pLaOzgOcJo0d5wq7J23UUWOgOnGyIvY/5ToFx6FZYndouapN e3VM3ZkpK4PXkQObGUdyevpwNUSFv5aAgaN9QhXCwdj2E8+1irMTg4Y0GfrSyWtJ XnFVbzyEDRs/0IvDjBKfVOiUWZG/CWh8Osr3fzGdGX5zriYfRG1/ePqAjm0ovFzk LY8cVGl9lCiKsRO67WVQ3g== -----END CERTIFICATE-----Generated at Tue Oct 13 19:34:50 2026 by rpki-client