$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer (raw, json) Hash identifier: NJFLj5t5Pr9qeQFs+JSDrwou1kttmX4dJg/8vcmGRQg= Subject key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A89126BF4C61E70C91C44DCF90B62DB9F2421BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft caRepository: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Feb 2026 21:03:45 +0000 Certificate not after: Mon 22 Feb 2027 21:08:45 +0000 Subordinate resources: AS: 263919 IP: 138.185.236.0/22 IP: 170.0.208.0/22 IP: 2804:27bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 18:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:89:12:6b:f4:c6:1e:70:c9:1c:44:dc:f9:0b:62:db:9f:24:21:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 23 21:03:45 2026 GMT Not After : Feb 22 21:08:45 2027 GMT Subject: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:c8:85:ba:7e:47:78:bd:c3:9e:5a:d4:99: da:b9:4b:e8:a3:b8:7b:06:01:d4:92:05:70:fc:00: 7b:d5:23:43:98:4f:00:71:72:b8:fa:3a:f1:3b:62: 97:d7:48:ca:9d:80:65:42:3f:99:d3:4a:cc:28:8d: 57:1d:ae:e6:87:20:52:8b:b8:23:a2:95:bd:c6:69: 96:00:67:02:de:a9:75:83:08:1b:4f:dc:80:21:2b: cd:08:d0:a7:d6:3a:02:2b:84:27:db:6c:6e:ab:b2: 74:16:2a:1b:e7:31:fd:93:d8:c0:ad:7a:07:ef:ff: 91:96:8a:28:5f:40:f8:d4:86:03:84:8e:73:91:65: ac:09:c6:cc:f0:e0:8c:67:54:c9:2e:26:4d:46:dd: 6b:e5:ff:35:38:a0:43:4f:0b:50:5a:17:e0:dc:ed: 99:d5:ab:6f:2b:e2:cc:6b:ee:e3:84:e3:94:5e:e8: 06:49:0d:e1:3e:0a:41:8b:0c:b0:65:41:72:ac:88: 5c:a3:d4:5b:cb:51:12:f6:ba:90:03:2f:b3:ee:8c: c0:99:64:2f:54:1d:25:fc:7e:7f:49:65:99:f8:6b: ec:28:52:69:13:cc:7d:6d:90:36:41:31:37:cd:7f: 87:d5:ac:18:bf:79:34:42:d4:44:73:97:a7:77:d9: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.236.0/22 170.0.208.0/22 IPv6: 2804:27bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263919 Signature Algorithm: sha256WithRSAEncryption 9b:a3:4b:45:50:9a:37:ca:10:e0:0f:44:2f:39:2f:73:6b:43: 94:de:07:72:82:f7:d3:6f:b0:76:e2:34:49:dc:7d:25:fb:1d: 69:89:8e:f4:23:72:f6:d5:e6:ee:7d:02:fa:d6:a4:35:01:7f: 3a:16:cf:98:10:45:7a:c4:05:a3:a8:fd:9c:4c:33:80:65:6c: 36:65:3b:1e:3c:11:68:b6:de:eb:ec:6d:6f:cd:a2:8b:8c:88: 1b:c2:ce:fb:3c:67:e5:20:2d:0e:7c:44:7d:db:b3:4e:1a:4d: 07:2c:fd:ae:16:6d:7c:84:2d:fd:71:00:52:ad:3a:25:9b:12: 15:df:a8:37:01:78:44:5e:0e:b5:1c:c1:e7:e4:40:9c:c5:2b: 83:d3:1c:66:cb:98:7d:6b:8a:21:27:81:21:0e:e3:01:12:22: 93:73:28:0c:03:b2:69:7a:49:30:d9:3e:cc:3d:f9:33:a4:ca: d6:89:1d:6d:f0:37:e4:b4:19:68:cf:c4:f3:bc:aa:cd:09:b8: 29:2b:c0:e3:72:b7:a6:b9:40:57:28:f9:65:63:cf:2c:e3:44: 45:38:7c:da:7b:c4:ac:2b:fa:ee:db:22:11:a3:1e:5f:0a:e8: bb:db:bd:15:4f:d9:18:16:21:5f:d4:9b:39:02:c1:c9:51:80: 1d:45:5c:08 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaokSa/TGHnDJHETc+Qti258kIb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjMyMTAzNDVaFw0yNzAyMjIyMTA4NDVaMDMxMTAvBgNV BAMTKDhCQUU5QzkwRUJDNTA4MkY4MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fciFun5HeL3DnlrUmdq5S+ij uHsGAdSSBXD8AHvVI0OYTwBxcrj6OvE7YpfXSMqdgGVCP5nTSswojVcdruaHIFKL uCOilb3GaZYAZwLeqXWDCBtP3IAhK80I0KfWOgIrhCfbbG6rsnQWKhvnMf2T2MCt egfv/5GWiihfQPjUhgOEjnORZawJxszw4IxnVMkuJk1G3Wvl/zU4oENPC1BaF+Dc 7ZnVq28r4sxr7uOE45Re6AZJDeE+CkGLDLBlQXKsiFyj1FvLURL2upADL7PujMCZ ZC9UHSX8fn9JZZn4a+woUmkTzH1tkDZBMTfNf4fVrBi/eTRC1ERzl6d32bGFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLrpyQ68UIL4Ag Ve+qY2DGYb+FzjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGNH Mm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRj RzJvYkVVWWZNS2hXQVg0NTduRmd6b1RYWVN0aUxLNERhRTM0VkRTSzg1LzEvOEJB RTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2MUJGODVDRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirnsAwQCqgDQMA0EAgACMAcDBQAoBCe8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG7zANBgkqhkiG9w0BAQsFAAOCAQEAm6NLRVCa N8oQ4A9ELzkvc2tDlN4HcoL302+wduI0Sdx9JfsdaYmO9CNy9tXm7n0C+takNQF/ OhbPmBBFesQFo6j9nEwzgGVsNmU7HjwRaLbe6+xtb82ii4yIG8LO+zxn5SAtDnxE fduzThpNByz9rhZtfIQt/XEAUq06JZsSFd+oNwF4RF4OtRzB5+RAnMUrg9McZsuY fWuKISeBIQ7jARIik3MoDAOyaXpJMNk+zD35M6TK1okdbfA35LQZaM/E87yqzQm4 KSvA43K3prlAVyj5ZWPPLONERTh82nvErCv67tsiEaMeXwrou9u9FU/ZGBYhX9Sb OQLByVGAHUVcCA== -----END CERTIFICATE-----Generated at Sun Mar 1 19:25:23 2026 by rpki-client