$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer (raw, json) Hash identifier: z5L7w1qqdXrdshpXnqnrV11apgt4BrXCpL4q7F9yffo= Subject key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 535EF94CE263D6F9CF49904BBEBBF385B70A3077 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft caRepository: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 16 Sep 2026 06:36:23 +0000 Certificate not after: Wed 15 Sep 2027 06:41:23 +0000 Subordinate resources: AS: 265958 IP: 164.163.32.0/22 IP: 2804:406c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 20:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5e:f9:4c:e2:63:d6:f9:cf:49:90:4b:be:bb:f3:85:b7:0a:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 16 06:36:23 2026 GMT Not After : Sep 15 06:41:23 2027 GMT Subject: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:69:cf:7c:7d:cf:24:74:9c:b5:83:9c:0d: 89:7a:dc:e2:89:47:83:02:5f:dd:48:10:e8:8f:01: da:d7:d7:54:fe:ad:0b:57:3a:b0:fa:4d:b5:a2:64: b1:3d:fe:0c:e3:27:e5:d1:9e:f9:44:78:36:2c:2e: e4:dc:83:62:6d:52:6a:df:8b:2d:fc:7a:67:ba:21: 94:c4:1f:9d:e6:65:94:80:81:c6:23:0d:50:3f:08: 9d:54:c4:c3:1a:af:c9:c1:4e:06:07:30:b1:48:43: 9f:ce:65:13:5a:eb:58:f6:2b:3b:42:f3:70:9d:92: 50:4c:c5:26:0b:0a:fa:ae:5e:92:b5:db:58:7f:9a: 27:bf:7f:b4:61:d3:61:91:cf:57:66:8b:35:d0:f7: a3:93:c2:d5:f7:13:e9:06:fa:62:07:a6:5a:5b:15: 61:04:05:c9:76:57:37:32:19:e3:10:e1:89:89:55: 71:a5:f4:ea:1c:aa:7c:21:a5:21:ca:00:d9:83:83: 94:84:44:d2:da:34:5e:74:d4:5e:c3:01:0b:3b:27: bf:8e:eb:99:e2:bf:ae:06:82:64:fe:6c:8a:4e:6c: fe:9f:e2:e8:f9:54:57:a5:87:8a:4c:1b:8b:87:e6: 97:65:1f:86:a0:50:fb:06:4f:9c:ac:8f:57:89:c1: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.32.0/22 IPv6: 2804:406c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265958 Signature Algorithm: sha256WithRSAEncryption 30:19:6f:c0:c9:cc:a3:7e:ca:16:f8:57:20:92:a1:b3:3c:6f: f2:d4:de:39:25:86:d5:ec:82:30:cd:be:44:23:fa:1a:57:d1: 19:e4:c4:f2:f9:2e:cf:15:8f:31:45:79:a4:a6:bd:f1:d0:97: 8c:18:08:b2:46:f8:2b:1a:b3:57:89:cd:52:96:ec:3a:c5:a2: 38:65:0f:71:fe:ed:dc:ac:b6:0b:76:65:e9:f1:28:ac:a4:38: 70:d9:c0:82:9a:7c:49:be:c7:47:1b:d6:34:8b:ec:c6:72:39: 09:82:03:9d:62:3c:0d:15:0b:23:15:0d:04:9a:37:b6:3d:59: ef:67:90:08:09:c9:62:57:0c:8c:43:83:49:58:c7:5e:47:4c: 98:fc:95:49:f7:ea:39:69:b4:8d:ae:ed:57:16:16:09:d9:47: 16:ee:12:6c:46:6d:51:0c:b4:ed:22:b3:b7:14:40:da:0d:ef: 92:1c:59:6f:1a:57:27:cd:79:c5:78:e5:85:cb:e7:a7:8f:3b: 28:58:6b:99:97:45:b2:b8:de:4d:a3:99:c6:0e:35:96:c1:65: 32:d0:cd:d6:00:62:1f:9a:23:a4:86:a9:43:81:e5:37:60:8a: ac:5c:a0:8f:23:10:7c:3e:44:2d:b9:b8:e9:74:28:0b:bf:ce: e4:c3:77:63 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUU175TOJj1vnPSZBLvrvzhbcKMHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTYwNjM2MjNaFw0yNzA5MTUwNjQxMjNaMDMxMTAvBgNV BAMTKDY0M0ZCNEU4RUZCMjlGNzNCMDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLGnPfH3PJHSctYOcDYl63OKJ R4MCX91IEOiPAdrX11T+rQtXOrD6TbWiZLE9/gzjJ+XRnvlEeDYsLuTcg2JtUmrf iy38eme6IZTEH53mZZSAgcYjDVA/CJ1UxMMar8nBTgYHMLFIQ5/OZRNa61j2KztC 83CdklBMxSYLCvquXpK121h/mie/f7Rh02GRz1dmizXQ96OTwtX3E+kG+mIHplpb FWEEBcl2VzcyGeMQ4YmJVXGl9OocqnwhpSHKANmDg5SERNLaNF501F7DAQs7J7+O 65niv64GgmT+bIpObP6f4uj5VFelh4pMG4uH5pdlH4agUPsGT5ysj1eJwXU7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkP7To77Kfc7AX eg0a1cY2T0SyrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21v VG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt b1RuVVFVekhyQU14eDNLbUNRQWhGWnFvVkpLZThZRktURVJ5MVNDY3Q3LzAvNjQz RkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0RjQ0QjJBQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKMgMA0EAgACMAcDBQAoBEBsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO5jANBgkqhkiG9w0BAQsFAAOCAQEAMBlvwMnMo37KFvhX IJKhszxv8tTeOSWG1eyCMM2+RCP6GlfRGeTE8vkuzxWPMUV5pKa98dCXjBgIskb4 KxqzV4nNUpbsOsWiOGUPcf7t3Ky2C3Zl6fEorKQ4cNnAgpp8Sb7HRxvWNIvsxnI5 CYIDnWI8DRULIxUNBJo3tj1Z72eQCAnJYlcMjEODSVjHXkdMmPyVSffqOWm0ja7t VxYWCdlHFu4SbEZtUQy07SKztxRA2g3vkhxZbxpXJ815xXjlhcvnp487KFhrmZdF srjeTaOZxg41lsFlMtDN1gBiH5ojpIapQ4HlN2CKrFygjyMQfD5ELbm46XQoC7/O 5MN3Yw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:05:39 2026 by rpki-client