$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer File: 398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer (raw, json) Hash identifier: wo3vRtKeE0d4hzMiHEzl8p4Sgh5/ezrqlowZQzNv0Yg= Subject key identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C5B829DFA3451B6A3289C70EE10970830452172 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft caRepository: rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Sep 2026 16:20:01 +0000 Certificate not after: Thu 09 Sep 2027 16:25:01 +0000 Subordinate resources: AS: 269620 IP: 45.190.60.0/22 IP: 2804:6754::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 11:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5b:82:9d:fa:34:51:b6:a3:28:9c:70:ee:10:97:08:30:45:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 10 16:20:01 2026 GMT Not After : Sep 9 16:25:01 2027 GMT Subject: CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:99:f2:ae:ae:85:61:9f:42:9a:f5:58:4d: eb:43:90:f9:4b:37:85:97:23:8d:eb:af:c0:62:d4: fc:a5:d9:c1:fd:ac:fe:7c:32:89:e6:60:49:5d:87: af:47:00:5b:2e:86:27:e5:9e:53:fd:49:95:8b:6e: cf:b6:5c:b8:33:1c:41:0f:1c:c9:4a:7f:ff:43:72: cc:55:b4:5e:5e:be:5b:49:62:88:91:df:db:ba:d6: bb:cb:0b:2a:2d:ca:3f:33:17:d4:f0:a2:de:27:b9: 5d:40:44:ef:9a:19:9e:48:f6:fc:f8:28:20:60:25: 37:cf:4c:e7:67:c4:53:e2:a8:5b:47:f3:f1:49:64: de:6f:a0:7b:cd:37:e0:42:23:32:e9:9f:1c:56:23: ca:52:4c:d8:11:c6:d2:11:cd:45:d1:41:fb:29:bb: 84:b4:17:d2:83:b9:76:b2:0b:cf:f3:6a:7c:e6:e6: fc:1d:f6:72:e3:ec:4f:65:13:4e:e5:7d:6c:98:37: 4e:88:2e:41:46:e0:52:0c:ec:fc:c3:d7:80:41:80: c0:13:78:a2:58:d6:aa:6b:64:26:41:88:5f:16:e0: ef:c9:d0:47:e5:28:9d:58:a9:55:45:cd:86:9b:95: 22:3e:76:38:66:dc:2d:fa:8b:25:06:c2:90:6e:2e: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.60.0/22 IPv6: 2804:6754::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269620 Signature Algorithm: sha256WithRSAEncryption 66:36:a9:2b:f3:9d:e0:2e:2e:59:7a:38:b5:c2:c0:89:85:50: 6c:4d:ee:0d:9f:f7:3c:47:80:f7:1f:7f:e4:98:83:7c:dc:c0: e6:5f:3f:1b:9b:43:b1:90:a9:ce:91:bf:89:0f:d7:be:3f:08: a9:85:47:77:85:b0:bc:0b:c5:62:60:e8:18:5b:05:5f:1f:15: 6f:5a:be:0a:40:91:75:66:07:92:5a:f8:4a:ed:96:c8:0b:fe: 7b:57:0e:77:ec:d1:5a:a8:50:f2:52:11:c6:ce:9e:2c:10:a2: de:2c:56:74:66:2e:04:74:38:91:73:03:70:a9:07:0a:47:a3: 70:5a:9a:de:8b:07:8c:45:b3:9e:05:f9:2a:e3:91:82:b6:4f: bc:a2:1b:28:5c:1e:a4:e5:ea:00:60:41:a8:5e:ee:be:e1:be: bf:3e:58:42:ee:65:e8:73:54:08:42:41:01:48:2e:31:fa:99: ef:a4:0d:7f:f1:d9:14:f8:13:e9:42:6c:0a:ab:18:bb:04:7f: 61:c8:44:1b:e1:bc:38:0e:71:ff:70:f3:5f:46:03:41:08:8e: 21:75:94:1b:53:64:a4:58:6c:9a:d8:99:4e:04:a8:ae:c0:ca: 33:b5:7e:d6:49:cf:ba:ba:10:18:d6:62:d5:86:7a:40:4e:48: 0c:75:f0:02 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbFuCnfo0UbajKJxw7hCXCDBFIXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTAxNjIwMDFaFw0yNzA5MDkxNjI1MDFaMDMxMTAvBgNV BAMTKDM5ODczMTYwNkVCNEMwREQwREZBQzJCNDczRkMyRjcwRkZEQjlENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i5nyrq6FYZ9CmvVYTetDkPlL N4WXI43rr8Bi1Pyl2cH9rP58MonmYEldh69HAFsuhiflnlP9SZWLbs+2XLgzHEEP HMlKf/9DcsxVtF5evltJYoiR39u61rvLCyotyj8zF9Twot4nuV1ARO+aGZ5I9vz4 KCBgJTfPTOdnxFPiqFtH8/FJZN5voHvNN+BCIzLpnxxWI8pSTNgRxtIRzUXRQfsp u4S0F9KDuXayC8/zanzm5vwd9nLj7E9lE07lfWyYN06ILkFG4FIM7PzD14BBgMAT eKJY1qprZCZBiF8W4O/J0EflKJ1YqVVFzYablSI+djhm3C36iyUGwpBuLqD5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5hzFgbrTA3Q36 wrRz/C9w/9udRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWpV bVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdRaFIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVq VW1VMW44RFA4eTJHTE16b0dNYjlvbzRReE14TmNqSGlOSjljMkxXUWhSLzAvMzk4 NzMxNjA2RUI0QzBERDBERkFDMkI0NzNGQzJGNzBGRkRCOUQ0Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb48MA0EAgACMAcDBQAoBGdUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdNDANBgkqhkiG9w0BAQsFAAOCAQEAZjapK/Od4C4uWXo4 tcLAiYVQbE3uDZ/3PEeA9x9/5JiDfNzA5l8/G5tDsZCpzpG/iQ/Xvj8IqYVHd4Ww vAvFYmDoGFsFXx8Vb1q+CkCRdWYHklr4Su2WyAv+e1cOd+zRWqhQ8lIRxs6eLBCi 3ixWdGYuBHQ4kXMDcKkHCkejcFqa3osHjEWzngX5KuORgrZPvKIbKFwepOXqAGBB qF7uvuG+vz5YQu5l6HNUCEJBAUguMfqZ76QNf/HZFPgT6UJsCqsYuwR/YchEG+G8 OA5x/3DzX0YDQQiOIXWUG1NkpFhsmtiZTgSorsDKM7V+1knPuroQGNZi1YZ6QE5I DHXwAg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:48:48 2026 by rpki-client