$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer File: 6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer (raw, json) Hash identifier: 0UjFQ8zmIZfJBH2fq9JKSpRX9zVSIPqB1P2Sah+aHY4= Subject key identifier: 6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 432053D0197C6434F8C6F913257F56FDA0AEA7AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.mft caRepository: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Sep 2026 17:30:26 +0000 Certificate not after: Thu 02 Sep 2027 17:35:26 +0000 Subordinate resources: AS: 61584 IP: 138.94.128.0/22 IP: 170.254.168.0/22 IP: 2804:23b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 17:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:20:53:d0:19:7c:64:34:f8:c6:f9:13:25:7f:56:fd:a0:ae:a7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 3 17:30:26 2026 GMT Not After : Sep 2 17:35:26 2027 GMT Subject: CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:46:67:e7:db:ea:3f:a6:4c:6c:5f:10:c9: 5e:bb:83:34:4a:85:d3:30:28:0d:0e:da:50:17:ca: e1:26:1a:90:04:27:71:15:ce:3b:aa:07:b4:92:f2: fa:6e:fc:c7:83:1c:7e:f6:8c:24:3c:69:e9:4c:5b: 10:a0:66:92:88:73:50:46:44:d2:8f:6f:47:c3:f6: aa:4b:28:82:6f:18:78:98:55:8d:81:11:3a:e1:7b: c0:98:58:ba:0b:03:7e:1c:19:f8:67:3c:bc:65:7c: b9:10:5f:a5:29:8b:8c:76:0c:be:54:01:f0:9c:fa: da:8b:da:30:1b:a3:1b:21:f9:6c:ad:4a:a3:5f:c3: 06:fd:64:a2:02:0b:bd:27:3d:01:26:7a:3d:c9:bf: 5e:bd:54:fe:99:1c:71:85:2d:9b:57:46:0c:3a:71: 5a:d7:b9:f4:10:9a:77:24:14:1d:45:05:bf:77:97: e2:89:a9:55:82:c5:a5:4b:92:20:32:20:7c:45:59: 06:44:ba:87:7a:7a:6b:b7:f5:0f:73:9a:b7:60:7f: d5:8d:cc:b6:ae:68:4d:ca:d2:12:d4:ff:db:78:67: e0:1c:e6:40:99:f1:e5:e7:db:7a:cb:b8:81:e5:04: 4f:5f:b1:ca:05:5d:ce:fe:c6:b2:44:9f:8c:0b:d9: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.128.0/22 170.254.168.0/22 IPv6: 2804:23b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61584 Signature Algorithm: sha256WithRSAEncryption 39:2a:1b:e4:6c:f2:6f:91:3d:83:02:6f:f5:19:72:67:32:a4: 75:e9:b6:2c:af:fe:dd:c3:9c:43:c6:f7:6e:34:93:97:49:9a: 4d:d8:4c:bd:d3:62:13:cd:62:81:57:a6:d1:47:64:8a:4a:e9: aa:1e:ba:64:cc:dd:f8:53:a6:e6:c8:65:ef:dc:5a:a7:76:65: 00:4e:f7:b6:4d:52:4c:ff:ed:aa:3f:43:e7:1c:5d:fe:f7:4e: 3c:2a:01:5f:1d:d0:1e:94:dc:c9:97:49:be:95:f2:44:b9:4a: 51:0b:91:53:99:81:b5:a8:b2:d9:5b:27:19:fe:f4:d1:de:c1: 7b:df:5c:2a:6b:27:cb:ed:5a:7b:85:2a:fa:a7:10:6e:18:12: a7:0f:9e:d7:b3:24:83:bb:fc:e3:d4:4c:63:e6:83:2d:f5:0a: e0:6f:d4:63:ec:ba:d5:b3:21:80:53:75:a2:72:02:53:2a:f1: a4:60:17:a1:39:4f:ab:45:c6:44:e6:b4:a4:b9:fd:6c:4e:f0: 99:58:ba:48:26:ef:0b:af:d3:67:b1:1e:d7:65:ef:f2:2d:ad: 41:f5:69:21:a4:dc:22:3a:a0:8f:32:9d:64:d2:b2:c5:14:59: 7a:ee:f2:96:22:e1:9b:cd:f6:17:cd:71:45:05:bc:2e:51:15: 58:2e:cf:e7 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUQyBT0Bl8ZDT4xvkTJX9W/aCup60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDMxNzMwMjZaFw0yNzA5MDIxNzM1MjZaMDMxMTAvBgNV BAMTKDZCMjQyQTg4MThDODlEMkREOUQyMjUxQTI2RkZBRUYwRjU5QzgwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51kZn59vqP6ZMbF8QyV67gzRK hdMwKA0O2lAXyuEmGpAEJ3EVzjuqB7SS8vpu/MeDHH72jCQ8aelMWxCgZpKIc1BG RNKPb0fD9qpLKIJvGHiYVY2BETrhe8CYWLoLA34cGfhnPLxlfLkQX6Upi4x2DL5U AfCc+tqL2jAboxsh+WytSqNfwwb9ZKICC70nPQEmej3Jv169VP6ZHHGFLZtXRgw6 cVrXufQQmnckFB1FBb93l+KJqVWCxaVLkiAyIHxFWQZEuod6emu39Q9zmrdgf9WN zLauaE3K0hLU/9t4Z+Ac5kCZ8eXn23rLuIHlBE9fscoFXc7+xrJEn4wL2SiLAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrJCqIGMidLdnS JRom/67w9ZyA/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZGpN WDNlcmlCbVFCbTZjRldycnVZaW1Zc1M3Y3lxNHpzeEFvOHRVQkVUdS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZGpN WDNlcmlCbVFCbTZjRldycnVZaW1Zc1M3Y3lxNHpzeEFvOHRVQkVUdS8wLzZCMjQy QTg4MThDODlEMkREOUQyMjUxQTI2RkZBRUYwRjU5QzgwRkYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAopegAMEAqr+qDANBAIAAjAHAwUAKAQjuDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA8JAwDQYJKoZIhvcNAQELBQADggEBADkqG+Rs8m+R PYMCb/UZcmcypHXptiyv/t3DnEPG9240k5dJmk3YTL3TYhPNYoFXptFHZIpK6aoe umTM3fhTpubIZe/cWqd2ZQBO97ZNUkz/7ao/Q+ccXf73TjwqAV8d0B6U3MmXSb6V 8kS5SlELkVOZgbWostlbJxn+9NHewXvfXCprJ8vtWnuFKvqnEG4YEqcPntezJIO7 /OPUTGPmgy31CuBv1GPsutWzIYBTdaJyAlMq8aRgF6E5T6tFxkTmtKS5/WxO8JlY ukgm7wuv02exHtdl7/ItrUH1aSGk3CI6oI8ynWTSssUUWXru8pYi4ZvN9hfNcUUF vC5RFVguz+c= -----END CERTIFICATE-----Generated at Tue Sep 22 17:48:22 2026 by rpki-client