$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer (raw, json) Hash identifier: LUpFZW7q7/uwLWIscvpHw6LgbnqLNWlxumGbeYlXOWE= Subject key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 014B1B80A3ECE2F1BCA42385B7944B1F024CDC51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft caRepository: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Sep 2026 16:06:42 +0000 Certificate not after: Mon 27 Sep 2027 16:11:42 +0000 Subordinate resources: AS: 52527 IP: 177.152.80.0/21 IP: 200.150.252.0/22 IP: 2804:dec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Sep 2026 02:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4b:1b:80:a3:ec:e2:f1:bc:a4:23:85:b7:94:4b:1f:02:4c:dc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 28 16:06:42 2026 GMT Not After : Sep 27 16:11:42 2027 GMT Subject: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:78:44:76:34:e0:7d:9b:8b:97:ed:30:1c: 9c:c1:85:b5:93:db:5b:58:88:59:43:9b:5e:71:4b: c0:61:6b:db:a1:d0:fc:58:c9:67:a9:3b:3b:0c:46: 98:6b:1b:2e:16:eb:40:3e:cc:90:4b:dd:cc:ab:50: 80:1f:2b:a9:e1:92:19:d9:7c:00:81:da:e8:3c:b8: 6a:c2:4b:3a:4c:a7:ae:6f:bf:57:69:e2:85:e2:bf: f1:cf:6b:f5:d6:58:db:50:c4:e2:7c:8e:48:9a:7e: 58:6e:0a:ef:47:d0:0e:03:49:8a:e0:5f:b2:c2:20: 17:a8:17:c8:1d:86:fe:6b:64:6b:f9:22:65:f2:88: 70:70:0a:ce:fb:b6:3b:29:37:e9:de:0a:59:03:e1: bf:f8:51:97:ce:3e:3e:4d:cd:fd:b3:f7:38:7b:b2: bc:b0:eb:18:79:01:ad:be:11:c8:34:2f:bc:9b:8f: cd:e2:28:ea:0a:54:5f:de:1a:ff:ed:d2:9d:fc:f6: a2:8e:7c:94:93:5c:57:3b:7e:59:56:b3:d2:66:aa: ef:1d:32:6e:d1:bd:9a:79:1e:dc:56:b6:1a:1f:22: af:57:79:0e:3b:34:46:de:87:92:8d:67:e8:ca:bd: 2e:e1:6a:54:71:29:f2:21:27:86:67:3e:c6:c4:9c: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.152.80.0/21 200.150.252.0/22 IPv6: 2804:dec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52527 Signature Algorithm: sha256WithRSAEncryption 34:87:b7:d8:12:78:5c:a5:74:91:c6:ce:5b:8f:d2:64:94:65: 34:2d:73:10:4f:00:58:0a:da:90:c9:fe:99:c7:98:ee:c0:03: f5:3d:71:6a:d4:a0:14:06:84:95:a0:95:69:63:27:90:46:44: 98:e4:a8:bf:49:d3:45:ef:05:30:eb:ba:7a:a8:d5:c7:22:8d: 1a:d2:84:d7:5a:55:3c:a4:a8:45:3f:6e:08:60:74:01:2b:81: 22:d2:5f:35:ec:84:a8:f4:91:ef:3a:c8:c6:55:09:c2:2c:77: 01:08:0e:94:9b:67:ce:c2:eb:96:2b:f8:93:9f:3d:3a:0a:28: 5a:53:58:de:a2:71:70:10:4e:2d:f3:dd:10:92:70:39:32:03: f0:eb:8d:93:f2:fe:26:32:59:a9:09:ab:1d:08:d4:b9:ee:7d: ff:89:4f:65:d8:4d:6d:ec:87:09:4a:8c:f1:20:dd:20:45:7a: cf:5f:52:0a:01:38:26:71:95:62:79:d3:a5:e6:c2:ae:d0:5b: ac:6e:52:e0:69:4a:94:a8:5a:95:a6:d3:f2:a5:87:be:e2:5f: bf:b4:b1:51:3d:46:d0:ef:69:64:fb:b2:54:b6:1b:35:f9:fb: b8:2b:16:78:a5:32:0b:50:8c:7d:4d:68:de:65:8a:95:ac:75: a9:8f:ef:21 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAUsbgKPs4vG8pCOFt5RLHwJM3FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjgxNjA2NDJaFw0yNzA5MjcxNjExNDJaMDMxMTAvBgNV BAMTKDM1NTQ4RUI2QjNFNUIzQTI1NzA2ODBEQkJFREFFMDJENjUzRDA4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85XhEdjTgfZuLl+0wHJzBhbWT 21tYiFlDm15xS8Bha9uh0PxYyWepOzsMRphrGy4W60A+zJBL3cyrUIAfK6nhkhnZ fACB2ug8uGrCSzpMp65vv1dp4oXiv/HPa/XWWNtQxOJ8jkiaflhuCu9H0A4DSYrg X7LCIBeoF8gdhv5rZGv5ImXyiHBwCs77tjspN+neClkD4b/4UZfOPj5Nzf2z9zh7 sryw6xh5Aa2+Ecg0L7ybj83iKOoKVF/eGv/t0p389qKOfJSTXFc7fllWs9Jmqu8d Mm7RvZp5HtxWthofIq9XeQ47NEbeh5KNZ+jKvS7halRxKfIhJ4ZnPsbEnAKzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1VI62s+WzolcG gNu+2uAtZT0IqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExY WEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2daSkovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hM WFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAvMzU1 NDhFQjZCM0U1QjNBMjU3MDY4MERCQkVEQUUwMkQ2NTNEMDhBOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsZhQAwQCyJb8MA0EAgACMAcDBQAoBA3sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNLzANBgkqhkiG9w0BAQsFAAOCAQEANIe32BJ4 XKV0kcbOW4/SZJRlNC1zEE8AWArakMn+mceY7sAD9T1xatSgFAaElaCVaWMnkEZE mOSov0nTRe8FMOu6eqjVxyKNGtKE11pVPKSoRT9uCGB0ASuBItJfNeyEqPSR7zrI xlUJwix3AQgOlJtnzsLrliv4k589OgooWlNY3qJxcBBOLfPdEJJwOTID8OuNk/L+ JjJZqQmrHQjUue59/4lPZdhNbeyHCUqM8SDdIEV6z19SCgE4JnGVYnnTpebCrtBb rG5S4GlKlKhalabT8qWHvuJfv7SxUT1G0O9pZPuyVLYbNfn7uCsWeKUyC1CMfU1o 3mWKlax1qY/vIQ== -----END CERTIFICATE-----Generated at Tue Sep 29 02:41:42 2026 by rpki-client