$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json) Hash identifier: kXK0pNw9mrD0sNX6Nu2jjYLJeA9WACHcSyNTls4a5J0= Subject key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4926B22AA23A6CD349683254F18C08C1B1ED7777 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 11:45:02 +0000 Certificate not after: Fri 03 Sep 2027 11:50:02 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Sep 2026 21:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:26:b2:2a:a2:3a:6c:d3:49:68:32:54:f1:8c:08:c1:b1:ed:77:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 11:45:02 2026 GMT Not After : Sep 3 11:50:02 2027 GMT Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61: 04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e: a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9: ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96: 14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7: 10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68: 98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80: 92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e: d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2: 9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65: 00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74: c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69: ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e: 34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c: 63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f: e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87: b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption 3f:0e:cf:a0:f0:40:95:e3:4d:65:f6:11:8a:af:d7:63:22:67: 41:b5:7a:01:3f:3b:3a:32:54:15:e8:f8:c6:ff:48:f5:4d:7f: d7:fd:3e:ed:7d:3a:49:63:ec:96:82:63:b7:30:a3:2d:31:18: 73:7b:15:8e:30:da:6c:92:b1:9b:d4:f3:c0:8c:5a:6a:15:9b: 0e:81:36:01:a0:15:e1:3c:5b:6c:8d:a1:a6:b3:cb:b6:34:c7: 37:91:70:0e:df:39:85:c5:14:8e:94:1d:18:48:8d:54:4e:6f: aa:5a:f6:70:a1:d3:3d:e8:b7:6e:44:4f:30:4e:cd:c7:b3:60: f6:0f:32:ef:66:b0:08:9d:bf:98:b8:2f:f7:72:1d:53:03:53: df:26:69:c1:53:38:c3:c7:f8:1e:69:ba:fe:0e:0b:ae:7a:5d: 79:9d:93:af:d5:38:4f:7d:75:de:84:b4:d2:a0:f4:06:18:b8: bd:52:b0:b4:2a:08:60:26:53:9d:60:ab:8f:57:db:f4:67:a9: bf:ff:62:ed:7b:d4:8a:11:8f:75:37:ab:68:c8:3e:78:9b:f0: 14:b8:35:11:ff:1e:e9:5e:62:fc:df:a0:fb:76:3d:54:cd:61: 19:f5:3c:12:e0:57:9f:a8:b9:7a:75:55:76:41:e6:af:cf:9e: c0:c0:6d:ec -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUSSayKqI6bNNJaDJU8YwIwbHtd3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDQxMTQ1MDJaFw0yNzA5MDMxMTUwMDJaMDMxMTAvBgNV BAMTKDJGRThBNjU5REI0QkVEQTFFMEI5Q0Y2MzFDRDJCQTgwMkE3N0M2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdMLdZpRpwrQsQr0YQQ52N8L oE6Jp5Ab6UdtDqCAcpBnym2j3I3iBWXr6cpT7z9BN3JKRiwqJy4+lhQHHHohh5bf 6ozYlKTPxxCPJYXHuYutugXXXy0waJi+pPL8rGu2zBguCDndgJI3QGbag+TAtD91 4fH8jthcz63rUozixoOYaHJX4p2XU8lclsQ/6fDDdnU7ZQD5tqjQ9npQ6edBasSi dMF7jKaGuaXGgeGpJ7Kraez90hS3ocTMVdOCCCcGHjTZJtgsyYdXXT2QhQsUXGMO TzJi1dpk0e74Yupbj+fKi4deJl0DhF9xk20fh7Pomlgqa+9pMGUcJeMOAnbDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv6KZZ20vtoeC5 z2Mc0rqAKnfGVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZF OEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQA/Ds+g8ECV401l 9hGKr9djImdBtXoBPzs6MlQV6PjG/0j1TX/X/T7tfTpJY+yWgmO3MKMtMRhzexWO MNpskrGb1PPAjFpqFZsOgTYBoBXhPFtsjaGms8u2NMc3kXAO3zmFxRSOlB0YSI1U Tm+qWvZwodM96LduRE8wTs3Hs2D2DzLvZrAInb+YuC/3ch1TA1PfJmnBUzjDx/ge abr+Dguuel15nZOv1ThPfXXehLTSoPQGGLi9UrC0KghgJlOdYKuPV9v0Z6m//2Lt e9SKEY91N6toyD54m/AUuDUR/x7pXmL836D7dj1UzWEZ9TwS4FefqLl6dVV2Qeav z57AwG3s -----END CERTIFICATE-----Generated at Fri Sep 25 22:55:20 2026 by rpki-client