$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer File: 68DD457AFD87757729E657881786601BF56ED45F.cer (raw, json) Hash identifier: WIkc7c2iP8bYNnOLxQ6NL0MkkCFrna4gTe++dFcw4gY= Subject key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35897BC81D18C7940B4EAA7072B451037E02EF49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft caRepository: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 Oct 2026 06:16:25 +0000 Certificate not after: Wed 06 Oct 2027 06:21:25 +0000 Subordinate resources: AS: 270905 IP: 189.50.52.0/22 IP: 2804:7344::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 08:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:89:7b:c8:1d:18:c7:94:0b:4e:aa:70:72:b4:51:03:7e:02:ef:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 06:16:25 2026 GMT Not After : Oct 6 06:21:25 2027 GMT Subject: CN=68DD457AFD87757729E657881786601BF56ED45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:50:2a:9c:0d:72:c1:a2:8a:79:d7:ef:dc: 14:49:22:77:52:fa:fc:5d:56:35:3a:93:40:5e:46: 3a:2a:4e:53:c5:26:22:b9:40:6e:14:05:9d:93:5e: ac:ce:7e:90:b5:b5:cd:d6:d1:2b:88:a3:55:ae:67: 2e:8e:80:b5:1c:66:e4:75:16:63:dc:06:6d:10:99: f3:d9:fd:68:19:d7:fc:08:61:ac:f6:9e:7b:57:41: cb:14:7f:8a:c9:d2:99:87:8c:d1:29:9c:5c:e3:1b: 1a:24:81:7c:a2:f8:13:5e:ca:7c:c7:5f:01:fa:3e: 43:c5:50:b7:11:18:43:c1:d1:70:a3:e0:50:c3:b3: 10:b2:6f:3e:8d:23:73:01:c0:2f:90:02:c6:95:22: 5f:d4:d4:8d:84:41:07:7a:0c:8b:a3:c8:84:d6:a9: c6:c1:e9:53:83:e6:9a:c1:b1:78:ce:89:f7:0d:45: 26:7a:2d:ed:6c:5c:2c:82:3c:40:cb:df:aa:74:b7: b0:9c:84:5e:55:d3:df:31:71:66:77:63:54:a8:cd: 70:4d:49:c5:a1:c6:4c:aa:3f:0e:ff:3d:49:54:98: 68:39:a9:74:57:b1:86:a3:c8:73:36:51:68:9a:64: 1a:2b:5a:e1:a7:f2:12:da:1e:ef:1f:a4:f7:b2:b6: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.50.52.0/22 IPv6: 2804:7344::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270905 Signature Algorithm: sha256WithRSAEncryption 9f:37:d0:02:00:31:dd:b6:86:27:2d:62:6a:73:80:83:55:79: 05:5b:bc:c5:ba:ee:b3:61:74:b3:11:5d:ea:4c:69:e3:5a:8f: 5f:7f:43:a1:1c:cb:08:6a:ab:cb:b3:8e:3e:ac:a0:50:70:f4: 6c:af:f5:bf:de:80:9f:c5:4b:1c:35:c5:39:74:64:01:68:d5: 3f:2e:c1:e6:c4:98:a5:f6:40:5e:29:cd:91:61:bf:81:3d:ec: 98:65:4a:54:73:11:f7:0a:9a:41:ed:0f:e4:5a:d2:55:74:4b: 19:69:25:42:1b:09:10:0d:f2:f0:55:80:fb:80:b7:c2:c5:aa: e2:8b:a0:a9:16:77:d0:5e:94:22:a8:ed:fa:42:88:47:47:48: b4:58:e4:bc:63:4b:7c:45:ef:ad:8d:8d:83:97:d6:3c:7b:57: 1d:02:78:78:a3:35:15:fe:66:37:55:72:1e:d0:40:d9:2e:64: 27:83:7a:cf:41:1c:c9:ac:92:ae:2b:c1:15:70:9d:15:05:84: 7e:d7:5f:a2:65:5e:73:02:2b:38:3b:be:f3:a4:84:f7:86:b8: 94:ff:86:63:19:08:ef:0c:cf:54:9d:70:99:f3:ba:2f:27:3f: 81:a8:c6:94:d9:ac:f0:4d:d3:f2:2e:92:1e:01:51:d7:80:56: 9c:48:b9:9f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNYl7yB0Yx5QLTqpwcrRRA34C70kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMDcwNjE2MjVaFw0yNzEwMDYwNjIxMjVaMDMxMTAvBgNV BAMTKDY4REQ0NTdBRkQ4Nzc1NzcyOUU2NTc4ODE3ODY2MDFCRjU2RUQ0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAlAqnA1ywaKKedfv3BRJIndS +vxdVjU6k0BeRjoqTlPFJiK5QG4UBZ2TXqzOfpC1tc3W0SuIo1WuZy6OgLUcZuR1 FmPcBm0QmfPZ/WgZ1/wIYaz2nntXQcsUf4rJ0pmHjNEpnFzjGxokgXyi+BNeynzH XwH6PkPFULcRGEPB0XCj4FDDsxCybz6NI3MBwC+QAsaVIl/U1I2EQQd6DIujyITW qcbB6VOD5prBsXjOifcNRSZ6Le1sXCyCPEDL36p0t7CchF5V098xcWZ3Y1SozXBN ScWhxkyqPw7/PUlUmGg5qXRXsYajyHM2UWiaZBorWuGn8hLaHu8fpPeythXVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo3UV6/Yd1dynm V4gXhmAb9W7UXzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVlL UTRlcnZQbXlvcjZrbVN1TEtCUGs0amNyVlQ1ZkhZaTNncGV6aDRxaEYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlZ S1E0ZXJ2UG15b3I2a21TdUxLQlBrNGpjclZUNWZIWWkzZ3Blemg0cWhGLzAvNjhE RDQ1N0FGRDg3NzU3NzI5RTY1Nzg4MTc4NjYwMUJGNTZFRDQ1Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvTI0MA0EAgACMAcDBQAoBHNEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiOTANBgkqhkiG9w0BAQsFAAOCAQEAnzfQAgAx3baGJy1i anOAg1V5BVu8xbrus2F0sxFd6kxp41qPX39DoRzLCGqry7OOPqygUHD0bK/1v96A n8VLHDXFOXRkAWjVPy7B5sSYpfZAXinNkWG/gT3smGVKVHMR9wqaQe0P5FrSVXRL GWklQhsJEA3y8FWA+4C3wsWq4ougqRZ30F6UIqjt+kKIR0dItFjkvGNLfEXvrY2N g5fWPHtXHQJ4eKM1Ff5mN1VyHtBA2S5kJ4N6z0EcyaySrivBFXCdFQWEftdfomVe cwIrODu+86SE94a4lP+GYxkI7wzPVJ1wmfO6Lyc/gajGlNms8E3T8i6SHgFR14BW nEi5nw== -----END CERTIFICATE-----Generated at Thu Oct 8 09:08:57 2026 by rpki-client