$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer File: 2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer (raw, json) Hash identifier: +B59sySe+LP8qQ4v1MzERDNJRM58DFK87S3J/s8lWI0= Subject key identifier: 2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C30E23B09A73551BB9799EA89EDFD9CBD9CEDED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft caRepository: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Sep 2026 20:47:41 +0000 Certificate not after: Mon 13 Sep 2027 20:52:41 +0000 Subordinate resources: AS: 266187 IP: 160.20.88.0/22 IP: 2804:3c0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Sep 2026 04:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:e2:3b:09:a7:35:51:bb:97:99:ea:89:ed:fd:9c:bd:9c:ed:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 14 20:47:41 2026 GMT Not After : Sep 13 20:52:41 2027 GMT Subject: CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:25:dc:35:c4:83:f3:02:cf:2d:d2:f1:e1: 8f:b8:1c:3c:77:f4:42:4b:ce:7a:43:d3:53:90:8c: 65:9d:45:9f:12:04:59:40:e8:03:fd:38:f9:2e:47: d4:36:48:68:88:ce:fe:d0:70:f6:40:2b:98:f5:57: cb:8f:a8:ca:1f:1c:ac:dc:b8:da:b8:04:54:99:1c: 33:e8:13:be:14:9d:12:ad:2d:46:ee:0a:f4:bf:56: 4a:2e:60:32:a5:07:32:aa:42:2b:d6:0f:04:8e:12: e9:35:53:34:3a:03:c0:40:ef:2a:ca:bd:5f:65:59: e8:fd:f5:4e:fe:f2:cd:78:97:08:ea:b1:e9:47:75: 28:77:ae:83:e9:b8:b1:3c:5c:ed:47:4f:de:75:bd: 1c:06:7d:e1:a4:d6:d2:a6:c6:54:ab:82:d1:19:2c: ed:c1:a9:b6:f3:c2:40:bf:5d:fc:aa:fc:ba:66:07: 16:2c:bf:d3:90:3e:74:c1:e1:58:79:73:d6:ed:9a: 46:99:33:f8:e3:32:f8:46:ea:64:75:05:a9:59:20: b2:f9:95:bb:94:34:30:a1:81:60:2c:16:bd:27:94: ae:c0:6c:82:6d:b5:e2:a4:df:c0:40:e3:04:3d:cb: 04:e6:45:08:82:24:2d:ec:0c:71:ea:94:f4:98:b6: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.88.0/22 IPv6: 2804:3c0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266187 Signature Algorithm: sha256WithRSAEncryption 60:94:4f:d8:6a:9e:9a:fb:a9:5f:f7:d3:61:41:c6:d3:f9:8b: a9:7d:97:2e:e6:84:2c:bd:0f:c2:4c:42:7d:ec:32:ca:77:90: 65:db:28:3f:c5:e3:58:c5:c0:cb:46:5d:ae:7c:d4:47:d2:0a: c3:8b:07:58:d0:6d:99:75:3f:13:b2:cb:64:b1:4b:8d:e2:3d: d4:93:42:29:88:c4:08:80:4a:dd:7c:9e:97:b8:f1:9d:48:91: cb:7e:90:05:eb:58:82:af:4b:31:d7:51:cd:37:8c:c7:dd:7a: 39:59:29:0b:61:5f:bc:2c:b9:00:cb:4e:7f:ec:60:eb:e0:3b: 2b:ef:7a:23:59:36:e0:91:12:7b:c1:f7:8c:9d:c1:71:8c:d8: 0c:96:07:9f:2e:3c:5a:7b:0f:60:27:de:62:cc:3d:49:b3:2c: 6f:a4:d9:f4:45:25:ae:0a:2c:53:a5:c1:9c:79:48:8a:6b:97: 6a:a9:65:52:61:da:0e:f0:0e:91:78:c4:30:4d:9b:61:2c:ed: fa:34:1d:19:bb:95:80:62:82:78:b0:5d:fc:75:f8:59:52:16: 82:33:2a:fe:20:d0:16:07:9e:16:0b:d1:73:87:10:67:25:5b: c3:db:c0:3c:e4:19:eb:fd:13:94:c7:51:a6:1f:08:09:0b:3f: af:89:84:4c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULDDiOwmnNVG7l5nqie39nL2c7e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTQyMDQ3NDFaFw0yNzA5MTMyMDUyNDFaMDMxMTAvBgNV BAMTKDJEMUFDMDFDNEI3QkNFRUQ1MDU0RUYyMUY4RkFDQzMwQzgwRkU5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgiXcNcSD8wLPLdLx4Y+4HDx3 9EJLznpD01OQjGWdRZ8SBFlA6AP9OPkuR9Q2SGiIzv7QcPZAK5j1V8uPqMofHKzc uNq4BFSZHDPoE74UnRKtLUbuCvS/VkouYDKlBzKqQivWDwSOEuk1UzQ6A8BA7yrK vV9lWej99U7+8s14lwjqselHdSh3roPpuLE8XO1HT951vRwGfeGk1tKmxlSrgtEZ LO3BqbbzwkC/Xfyq/LpmBxYsv9OQPnTB4Vh5c9btmkaZM/jjMvhG6mR1BalZILL5 lbuUNDChgWAsFr0nlK7AbIJtteKk38BA4wQ9ywTmRQiCJC3sDHHqlPSYtjVRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtGsAcS3vO7VBU 7yH4+swwyA/pjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWFw ZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05MYkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVh cGc1TkdBWHlxVkdoRTEyWjkyQWoxQU1vbjJudXMxSGt1NjlhOUdOTGJMLzAvMkQx QUMwMUM0QjdCQ0VFRDUwNTRFRjIxRjhGQUNDMzBDODBGRTk4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoBRYMA0EAgACMAcDBQAoBDwMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPyzANBgkqhkiG9w0BAQsFAAOCAQEAYJRP2GqemvupX/fT YUHG0/mLqX2XLuaELL0PwkxCfewyyneQZdsoP8XjWMXAy0ZdrnzUR9IKw4sHWNBt mXU/E7LLZLFLjeI91JNCKYjECIBK3Xyel7jxnUiRy36QBetYgq9LMddRzTeMx916 OVkpC2FfvCy5AMtOf+xg6+A7K+96I1k24JESe8H3jJ3BcYzYDJYHny48WnsPYCfe Ysw9SbMsb6TZ9EUlrgosU6XBnHlIimuXaqllUmHaDvAOkXjEME2bYSzt+jQdGbuV gGKCeLBd/HX4WVIWgjMq/iDQFgeeFgvRc4cQZyVbw9vAPOQZ6/0TlMdRph8ICQs/ r4mETA== -----END CERTIFICATE-----Generated at Sun Sep 27 03:29:50 2026 by rpki-client