$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer File: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer (raw, json) Hash identifier: c2qcQRTkef2FqscR9tXmDIzOVM7gscjOkP74GSLhwSM= Subject key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A91CC2CC2A5012C1827337DE165C496B398DC8B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft caRepository: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Oct 2026 22:31:15 +0000 Certificate not after: Mon 11 Oct 2027 22:36:15 +0000 Subordinate resources: AS: 265365 IP: 168.205.128.0/22 IP: 2804:2ec4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 18:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:91:cc:2c:c2:a5:01:2c:18:27:33:7d:e1:65:c4:96:b3:98:dc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 12 22:31:15 2026 GMT Not After : Oct 11 22:36:15 2027 GMT Subject: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:4f:a4:83:c9:d8:9c:e4:5b:63:f6:05:c9: 69:b4:4a:c1:a3:33:a8:58:92:5c:6f:d3:a8:3a:55: c6:66:2e:9d:58:17:a0:2e:9d:e1:31:bd:0c:20:ce: c8:26:72:cd:3c:bd:0f:2d:b8:5d:37:6a:4c:ca:a4: 18:5c:a6:6c:95:5a:09:b9:0d:57:60:ab:a8:9a:06: 0f:5f:5a:90:37:a1:b3:6e:58:77:bc:38:fb:ff:43: 48:70:be:63:d1:c1:3a:1f:d7:ac:b9:52:60:b3:26: 54:a1:4f:46:52:e4:b9:fe:78:43:28:7e:06:6b:ba: 7d:04:f3:89:9f:40:57:42:ba:27:99:39:62:32:78: e4:08:5d:3c:7c:2e:15:78:21:90:98:a4:12:90:e3: 3a:fd:c5:ca:0f:a3:f6:c5:63:dd:6f:ce:c9:de:dd: d7:5b:a6:c8:c4:42:30:b7:ed:26:af:98:64:33:38: 86:76:d3:f2:e4:f0:90:f9:80:58:27:b0:c3:a7:e3: 8d:21:73:2b:25:dc:38:91:8f:85:f1:32:09:42:aa: 0b:87:85:42:91:1e:37:85:45:78:18:eb:fa:75:dc: ba:95:89:e7:94:5f:c3:91:b6:c0:da:86:9b:a0:43: e7:42:c4:d2:94:73:d5:4a:dd:b0:7a:5a:5c:67:7c: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.128.0/22 IPv6: 2804:2ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265365 Signature Algorithm: sha256WithRSAEncryption 0c:3b:d7:93:64:40:55:50:aa:dd:0e:a6:89:2b:0a:bd:7f:ef: 33:81:bb:0b:e1:42:76:d7:a1:9c:a4:1f:ef:c5:0e:eb:ab:cb: 59:59:3b:da:86:98:ac:89:82:25:de:ea:b0:2e:91:3e:c7:73: 04:9e:3d:43:19:21:44:4c:b5:05:08:45:31:f8:62:34:44:ff: 1c:20:71:31:cb:45:54:6f:11:e0:a7:ce:2c:57:c3:ae:25:2f: 51:09:98:f4:46:5e:18:0e:ed:da:65:3d:5c:e2:9f:9c:a0:1c: 24:0d:78:cc:69:03:4e:2a:5d:df:9e:37:3b:89:25:95:53:ae: 8e:70:43:87:08:78:81:37:10:57:21:36:6b:be:50:04:34:c5: 9b:85:b4:60:a9:d2:26:86:6d:78:36:93:d0:ea:f9:44:8a:46: 38:59:69:50:66:1d:aa:41:c6:39:69:8e:03:c6:55:73:f7:aa: 86:d3:08:4d:b1:6a:d6:ec:f2:f9:a8:cc:2f:83:4a:a1:89:04: ad:cd:d3:c6:7d:25:08:b3:89:b3:c9:a3:bb:d9:51:6a:ce:f2: 38:17:93:67:09:2e:36:a2:67:6e:7c:4f:46:31:b1:af:01:6d: 85:1b:b8:77:aa:2d:8e:0d:e2:ab:63:ad:75:13:35:89:11:a1: ff:82:3f:38 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUapHMLMKlASwYJzN94WXElrOY3IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTIyMjMxMTVaFw0yNzEwMTEyMjM2MTVaMDMxMTAvBgNV BAMTKDk2NkRENzk3Qjg0RTU5Q0FFNjIyN0VENEZCMUQ0RDUyMDExRUJBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe0+kg8nYnORbY/YFyWm0SsGj M6hYklxv06g6VcZmLp1YF6AuneExvQwgzsgmcs08vQ8tuF03akzKpBhcpmyVWgm5 DVdgq6iaBg9fWpA3obNuWHe8OPv/Q0hwvmPRwTof16y5UmCzJlShT0ZS5Ln+eEMo fgZrun0E84mfQFdCuieZOWIyeOQIXTx8LhV4IZCYpBKQ4zr9xcoPo/bFY91vzsne 3ddbpsjEQjC37SavmGQzOIZ20/Lk8JD5gFgnsMOn440hcysl3DiRj4XxMglCqguH hUKRHjeFRXgY6/p13LqVieeUX8ORtsDahpugQ+dCxNKUc9VK3bB6WlxnfN7zAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWbdeXuE5ZyuYi ftT7HU1SAR66KTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2JW Q2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZWQVMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ni VkNkZEVnWFZxOXBoZnNiUEU5YWpROXFSdXdKQnNmOUtXVlRjbmY2VkFTLzAvOTY2 REQ3OTdCODRFNTlDQUU2MjI3RUQ0RkIxRDRENTIwMTFFQkEyOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqM2AMA0EAgACMAcDBQAoBC7EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMlTANBgkqhkiG9w0BAQsFAAOCAQEADDvXk2RAVVCq3Q6m iSsKvX/vM4G7C+FCdtehnKQf78UO66vLWVk72oaYrImCJd7qsC6RPsdzBJ49Qxkh REy1BQhFMfhiNET/HCBxMctFVG8R4KfOLFfDriUvUQmY9EZeGA7t2mU9XOKfnKAc JA14zGkDTipd3543O4kllVOujnBDhwh4gTcQVyE2a75QBDTFm4W0YKnSJoZteDaT 0Or5RIpGOFlpUGYdqkHGOWmOA8ZVc/eqhtMITbFq1uzy+ajML4NKoYkErc3Txn0l CLOJs8mju9lRas7yOBeTZwkuNqJnbnxPRjGxrwFthRu4d6otjg3iq2OtdRM1iRGh /4I/OA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:07:50 2026 by rpki-client