$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/7065DD43CCADC86120ED24D992F48940CE7C8D5F.cer File: 7065DD43CCADC86120ED24D992F48940CE7C8D5F.cer (raw, json) Hash identifier: Kg61SkQQik6ChuSS6xuZ20/e69Q01imxtV5JxBU/fvM= Subject key identifier: 70:65:DD:43:CC:AD:C8:61:20:ED:24:D9:92:F4:89:40:CE:7C:8D:5F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58A5756838DE6F618D4974E1C299EF0841E1A25E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/7065DD43CCADC86120ED24D992F48940CE7C8D5F.mft caRepository: rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 15 Oct 2026 12:21:02 +0000 Certificate not after: Thu 14 Oct 2027 12:26:02 +0000 Subordinate resources: AS: 271754 IP: 164.163.243.0/24 IP: 200.1.7.0/24 IP: 2804:8080::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 13:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a5:75:68:38:de:6f:61:8d:49:74:e1:c2:99:ef:08:41:e1:a2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 15 12:21:02 2026 GMT Not After : Oct 14 12:26:02 2027 GMT Subject: CN=7065DD43CCADC86120ED24D992F48940CE7C8D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:54:b0:ce:b2:a4:87:81:9f:53:fa:a4:eb: d9:e5:77:09:e2:18:49:34:42:2c:54:8a:25:9f:6f: 11:30:db:8f:0d:76:1e:0f:30:f4:7f:ed:17:7e:60: 2d:6b:95:a8:54:37:1a:42:31:e3:fb:85:d7:62:5b: 1d:1d:be:14:fc:b4:bc:5b:68:a3:45:6c:c8:02:c6: 4b:22:5d:8a:18:e8:3e:b5:8f:19:74:34:52:95:9f: ee:c2:d4:a1:01:e8:c1:13:f5:c1:bb:c0:4f:89:66: 44:08:45:0e:83:57:98:ce:30:92:10:7a:23:46:d7: 76:81:7b:2e:38:33:d1:7d:d0:e9:2a:b3:ac:39:e2: 65:bb:35:72:5f:64:1a:2c:e5:f9:e8:31:ea:75:c1: be:09:79:82:85:2b:85:9b:eb:e7:0b:2a:6f:82:d7: da:c1:f2:c6:31:da:e9:18:06:a9:50:30:d5:fe:e7: 82:51:c0:0c:a7:8a:3a:85:6d:70:f5:f6:4e:10:ea: c7:3e:90:d6:c0:1a:05:a5:e0:5e:79:05:91:46:d1: 75:11:a0:87:79:b6:8a:df:be:c6:b4:91:47:19:f2: 42:81:e7:cc:37:8b:6e:41:b4:a1:74:c1:c6:0a:22: 75:90:24:2f:b0:f8:ac:c2:82:65:e8:5c:11:82:09: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:65:DD:43:CC:AD:C8:61:20:ED:24:D9:92:F4:89:40:CE:7C:8D:5F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/7065DD43CCADC86120ED24D992F48940CE7C8D5F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.243.0/24 200.1.7.0/24 IPv6: 2804:8080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271754 Signature Algorithm: sha256WithRSAEncryption a1:c5:3b:39:e7:88:f4:b0:10:37:ff:ff:f1:af:d6:80:d9:d0: 13:ef:66:28:8d:5a:bd:38:60:78:f0:95:c4:09:be:2d:ce:c0: 98:72:2c:c3:40:e5:70:13:6a:e5:5b:5a:bd:2f:d3:8a:cc:cb: 11:4a:36:68:be:bc:89:ff:ed:da:ff:b8:77:02:1a:e1:7c:98: fc:17:ca:6f:09:82:11:30:38:58:bc:a7:6d:e5:be:a9:62:c8: 5d:9f:13:6a:50:f4:71:40:63:06:5f:c8:bc:34:9c:d5:a6:d7: 8b:1f:17:f1:d2:95:3d:af:dd:a5:af:31:0d:4c:45:1c:55:c2: 8e:11:6b:ac:d5:b3:4b:69:00:6e:49:dc:3c:a2:4f:2e:aa:13: 87:bb:ee:a1:81:43:f2:59:4f:3b:74:ff:a4:38:3b:0f:2a:ab: d5:3b:b7:f8:b4:c9:05:89:5a:09:83:de:ae:e2:c9:13:e6:3e: b3:ff:2d:c3:f7:8f:6d:f4:da:c0:10:3a:79:0d:71:00:7f:35: 2b:0a:a1:28:1d:85:5a:6a:de:0c:be:4b:b4:c9:2a:f1:d2:43: 84:be:ff:a8:94:69:4b:89:e4:f8:2e:21:ba:96:0d:9b:35:b3: b8:31:32:b6:d4:b9:c5:a9:dc:c1:39:1e:9f:59:b9:de:66:bb: e0:f6:48:65 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWKV1aDjeb2GNSXThwpnvCEHhol4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTUxMjIxMDJaFw0yNzEwMTQxMjI2MDJaMDMxMTAvBgNV BAMTKDcwNjVERDQzQ0NBREM4NjEyMEVEMjREOTkyRjQ4OTQwQ0U3QzhENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9VSwzrKkh4GfU/qk69nldwni GEk0QixUiiWfbxEw248Ndh4PMPR/7Rd+YC1rlahUNxpCMeP7hddiWx0dvhT8tLxb aKNFbMgCxksiXYoY6D61jxl0NFKVn+7C1KEB6MET9cG7wE+JZkQIRQ6DV5jOMJIQ eiNG13aBey44M9F90Okqs6w54mW7NXJfZBos5fnoMep1wb4JeYKFK4Wb6+cLKm+C 19rB8sYx2ukYBqlQMNX+54JRwAynijqFbXD19k4Q6sc+kNbAGgWl4F55BZFG0XUR oId5torfvsa0kUcZ8kKB58w3i25BtKF0wcYKInWQJC+w+KzCgmXoXBGCCQXbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwZd1DzK3IYSDt JNmS9IlAznyNXzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnFk NGt1a0ttZU5vZjlYR0QyQlNjaHNkcWRhQlVDdG0zeDMzclNwRkxjSDIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jx ZDRrdWtLbWVOb2Y5WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzAvNzA2 NURENDNDQ0FEQzg2MTIwRUQyNEQ5OTJGNDg5NDBDRTdDOEQ1Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQApKPzAwQAyAEHMA0EAgACMAcDBQAoBICAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQlijANBgkqhkiG9w0BAQsFAAOCAQEAocU7OeeI 9LAQN///8a/WgNnQE+9mKI1avThgePCVxAm+Lc7AmHIsw0DlcBNq5VtavS/TiszL EUo2aL68if/t2v+4dwIa4XyY/BfKbwmCETA4WLynbeW+qWLIXZ8TalD0cUBjBl/I vDSc1abXix8X8dKVPa/dpa8xDUxFHFXCjhFrrNWzS2kAbkncPKJPLqoTh7vuoYFD 8llPO3T/pDg7Dyqr1Tu3+LTJBYlaCYPeruLJE+Y+s/8tw/ePbfTawBA6eQ1xAH81 KwqhKB2FWmreDL5LtMkq8dJDhL7/qJRpS4nk+C4hupYNmzWzuDEyttS5xancwTke n1m53ma74PZIZQ== -----END CERTIFICATE-----Generated at Thu Oct 29 12:39:41 2026 by rpki-client