$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer File: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer (raw, json) Hash identifier: FuTlJr8s94Sprqqc1xMkjaxT/a51ZCg+0cdg7JrtazM= Subject key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 266BDFED1C4BA011F30C4AE9A0146EBEEB45B9C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft caRepository: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 21 Sep 2026 13:26:26 +0000 Certificate not after: Mon 20 Sep 2027 13:31:26 +0000 Subordinate resources: AS: 270240 IP: 45.191.240.0/22 IP: 2804:68f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 12:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6b:df:ed:1c:4b:a0:11:f3:0c:4a:e9:a0:14:6e:be:eb:45:b9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 21 13:26:26 2026 GMT Not After : Sep 20 13:31:26 2027 GMT Subject: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:bd:d2:8a:9f:d4:8a:d1:78:e2:18:f7:fc: 21:f6:e9:ad:9d:1a:dd:ce:19:c9:55:21:14:c2:05: cd:1c:61:0e:24:2b:6e:1d:f3:b4:cd:8a:c4:8e:56: dd:d7:d7:80:4c:ef:ea:98:2b:c5:8a:df:0a:07:79: e8:5c:d3:91:78:0a:d2:e0:30:bc:5d:26:89:52:0f: 7d:9b:4f:be:99:a7:ca:a3:9e:df:2a:3f:89:e1:61: 06:64:c1:4d:74:fa:33:1b:20:1c:cc:d2:65:a1:7b: bc:87:a0:d6:0d:af:69:fe:23:58:dd:10:6f:bf:46: 07:b3:41:f1:34:f3:02:7a:93:14:f0:c2:0c:56:e1: 60:0d:cb:79:ea:aa:d3:30:6e:9a:43:31:8e:c6:cc: 5a:ac:6e:b4:a6:67:d7:cf:24:72:27:5a:be:8d:17: 4c:8a:af:58:8c:3f:a6:3b:10:8f:fa:26:d6:b4:ac: 31:42:48:2b:d3:64:3f:03:a9:41:20:d8:47:7d:6f: d3:9a:f3:c4:91:51:1d:1d:06:f6:a0:1b:84:a4:7c: 73:0a:f4:e3:fc:94:83:83:76:a7:01:ac:78:d7:f6: dd:9d:cd:cc:af:8c:d3:51:ab:9c:06:d3:a0:5c:07: 88:5c:8a:09:59:c5:45:4b:f7:ab:3f:9c:bb:af:1d: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.240.0/22 IPv6: 2804:68f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270240 Signature Algorithm: sha256WithRSAEncryption 02:6f:7b:9b:8d:b4:ad:d0:17:e7:a0:a0:46:6c:14:f0:c6:bd: 83:c7:46:18:c3:d9:4d:31:6a:5d:86:43:8f:63:bc:bf:cb:6a: 0e:37:b5:d6:81:4a:46:3a:86:18:ff:99:2b:d7:8b:c1:e8:d2: 45:e1:2f:38:7b:e5:e0:9b:92:87:bb:9a:e0:10:af:87:4c:dd: f8:bf:34:52:20:cb:57:f7:99:af:9a:3d:10:9b:7e:cb:cb:b9: 60:37:4b:cd:ba:d0:fd:cd:8b:06:2b:28:f2:78:c2:13:23:f2: ff:47:c7:df:f5:ae:b4:05:37:b8:aa:da:96:10:51:db:9e:63: d1:72:3e:98:1a:a3:60:37:4c:fb:c2:c9:3d:3e:4c:85:d7:2b: fe:44:33:26:9a:03:06:ee:cb:73:b1:ac:1a:de:16:0c:a2:06: 58:53:a5:e8:cf:6c:1d:89:9a:97:ba:0b:8f:36:76:1c:72:15: f5:c1:a0:5b:1e:a2:72:77:c3:65:d9:40:26:0f:da:e1:8d:7d: ae:c8:16:e7:a4:52:98:3a:d3:57:33:47:a8:b9:d9:69:cb:95: c1:ea:c9:a1:e5:25:d5:1a:49:09:b6:ce:8c:30:df:bc:8f:c9: d7:b3:91:b3:0c:94:73:db:3c:99:d1:5c:b1:b1:35:24:5b:a7: 95:a3:33:ac -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUJmvf7RxLoBHzDErpoBRuvutFucYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MjExMzI2MjZaFw0yNzA5MjAxMzMxMjZaMDMxMTAvBgNV BAMTKDNEQkVDNzcxRjVCM0IxRTE5NTA5MzQ2MjNBRUVDNTUxOUNFNzFBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQb3Sip/UitF44hj3/CH26a2d Gt3OGclVIRTCBc0cYQ4kK24d87TNisSOVt3X14BM7+qYK8WK3woHeehc05F4CtLg MLxdJolSD32bT76Zp8qjnt8qP4nhYQZkwU10+jMbIBzM0mWhe7yHoNYNr2n+I1jd EG+/RgezQfE08wJ6kxTwwgxW4WANy3nqqtMwbppDMY7GzFqsbrSmZ9fPJHInWr6N F0yKr1iMP6Y7EI/6Jta0rDFCSCvTZD8DqUEg2Ed9b9Oa88SRUR0dBvagG4SkfHMK 9OP8lIODdqcBrHjX9t2dzcyvjNNRq5wG06BcB4hciglZxUVL96s/nLuvHQeHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9vsdx9bOx4ZUJ NGI67sVRnOcaBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcTZn VU5tcUgxY2hxdlRKYmRSQ0xVQlR3UWMzSno2cExtSDZGbm9lTURCby8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcTZn VU5tcUgxY2hxdlRKYmRSQ0xVQlR3UWMzSno2cExtSDZGbm9lTURCby8xLzNEQkVD NzcxRjVCM0IxRTE5NTA5MzQ2MjNBRUVDNTUxOUNFNzFBMDUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2/8DANBAIAAjAHAwUAKARo+DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEH6AwDQYJKoZIhvcNAQELBQADggEBAAJve5uNtK3QF+egoEZs FPDGvYPHRhjD2U0xal2GQ49jvL/Lag43tdaBSkY6hhj/mSvXi8Ho0kXhLzh75eCb koe7muAQr4dM3fi/NFIgy1f3ma+aPRCbfsvLuWA3S8260P3NiwYrKPJ4whMj8v9H x9/1rrQFN7iq2pYQUdueY9FyPpgao2A3TPvCyT0+TIXXK/5EMyaaAwbuy3OxrBre FgyiBlhTpejPbB2Jmpe6C482dhxyFfXBoFseonJ3w2XZQCYP2uGNfa7IFuekUpg6 01czR6i52WnLlcHqyaHlJdUaSQm2zoww37yPydezkbMMlHPbPJnRXLGxNSRbp5Wj M6w= -----END CERTIFICATE-----Generated at Tue Sep 22 11:44:34 2026 by rpki-client