$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer File: 98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer (raw, json) Hash identifier: 2kpiuPButvTTUdE0E4BSKjMH3+JStg2SdvQuFwVWcSo= Subject key identifier: 98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A67DF9DFC8C8FEE6B854D9357B9E5F6C69D14AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft caRepository: rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 29 Aug 2026 22:01:22 +0000 Certificate not after: Sat 28 Aug 2027 22:06:22 +0000 Subordinate resources: AS: 267256 IP: 45.232.48.0/22 IP: 2804:4aac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 05:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:67:df:9d:fc:8c:8f:ee:6b:85:4d:93:57:b9:e5:f6:c6:9d:14:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 29 22:01:22 2026 GMT Not After : Aug 28 22:06:22 2027 GMT Subject: CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:14:f0:fd:b7:b2:53:eb:83:b1:a0:c5:99: 98:62:8c:a7:35:d0:85:9b:2b:e8:ab:05:ef:1a:54: 5d:d4:5f:ba:71:9e:16:cc:97:8c:50:a4:27:17:1c: 86:00:03:58:c1:16:2d:13:cc:f5:32:5d:aa:fd:de: 68:ef:8c:46:d8:5b:f4:7d:ac:fc:4f:e5:48:02:88: 84:cf:60:18:8b:2f:9f:48:17:77:25:58:64:6c:a8: d2:b0:8c:3d:6c:90:54:d2:d5:12:e8:50:55:c5:7e: 24:72:13:c5:32:b3:12:d5:e2:1a:e7:95:e2:ae:09: f7:2d:62:9f:82:53:69:2f:b2:67:ca:90:5e:1f:5d: 75:ba:09:67:d9:ef:ea:ce:15:90:fa:4b:53:6b:31: 94:69:c4:b3:fa:e1:42:76:3d:33:f2:fe:bd:a5:d0: a4:38:89:ee:1d:26:55:8f:8f:c8:30:94:02:27:10: d5:64:4b:9d:62:e6:ce:52:29:d4:00:b2:23:b5:30: 0e:b3:71:20:9f:04:b8:32:0c:23:ae:45:95:3d:28: 06:0a:28:95:16:6d:d5:21:52:25:a2:04:69:30:0f: 82:ee:c3:fa:51:a5:8b:97:03:53:af:bb:03:0c:a8: 03:bf:7b:bb:40:85:fb:b7:ad:6a:4a:b9:70:ae:3a: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.48.0/22 IPv6: 2804:4aac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267256 Signature Algorithm: sha256WithRSAEncryption 80:e7:d0:ac:93:50:81:c4:16:ee:5d:6e:9f:dd:2f:c4:41:ac: 0c:26:cf:80:5a:45:a9:e0:74:b5:18:35:1e:66:b8:bc:70:50: 01:a7:b5:96:08:a2:87:02:8a:58:bc:29:8a:29:57:c2:df:c9: 16:66:4c:0c:b1:68:48:72:99:65:ea:e1:85:21:27:0d:b8:e9: 17:7a:2f:2c:cf:b7:3b:c7:8b:7b:62:38:00:fa:9a:b1:98:24: 0c:ce:7e:bc:bc:a4:e8:e3:87:7d:47:c9:73:d4:11:6a:92:8f: 7b:ba:58:f9:8f:c1:7d:53:96:be:39:8a:47:17:fc:11:77:88: 7a:eb:ef:70:fa:74:40:0b:77:f7:8a:4d:35:e6:a0:0c:0c:4d: ea:e9:05:a2:7d:c2:83:e4:da:97:f7:13:72:0b:a6:31:26:d9: ed:32:7a:62:e3:5e:fe:1d:ec:78:6a:5c:bc:a9:b2:6a:7d:b6: 94:86:9c:65:67:93:37:90:8c:d1:dc:31:f0:b8:20:30:0a:7d: 7a:5a:cb:e2:e6:02:1b:10:08:fc:b3:2b:16:f8:6b:39:24:25: ef:18:47:c3:e6:4a:f6:80:b6:0d:fc:02:63:17:17:42:6e:27: 5e:7b:50:f8:e8:f6:0a:5e:de:9f:76:1f:25:28:5c:2d:ba:31: 8e:c1:60:64 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUSmffnfyMj+5rhU2TV7nl9sadFK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjkyMjAxMjJaFw0yNzA4MjgyMjA2MjJaMDMxMTAvBgNV BAMTKDk4QzMyREEzNUEwMUE4NThDMzIwOEU2NDBFRUU2NEY5Rjg1REJDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ixTw/beyU+uDsaDFmZhijKc1 0IWbK+irBe8aVF3UX7pxnhbMl4xQpCcXHIYAA1jBFi0TzPUyXar93mjvjEbYW/R9 rPxP5UgCiITPYBiLL59IF3clWGRsqNKwjD1skFTS1RLoUFXFfiRyE8UysxLV4hrn leKuCfctYp+CU2kvsmfKkF4fXXW6CWfZ7+rOFZD6S1NrMZRpxLP64UJ2PTPy/r2l 0KQ4ie4dJlWPj8gwlAInENVkS51i5s5SKdQAsiO1MA6zcSCfBLgyDCOuRZU9KAYK KJUWbdUhUiWiBGkwD4Luw/pRpYuXA1OvuwMMqAO/e7tAhfu3rWpKuXCuOn8TAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYwy2jWgGoWMMg jmQO7mT5+F28TDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzVl SzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVprbmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM1 ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAvOThD MzJEQTM1QTAxQTg1OEMzMjA4RTY0MEVFRTY0RjlGODVEQkM0Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLegwMA0EAgACMAcDBQAoBEqsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQT+DANBgkqhkiG9w0BAQsFAAOCAQEAgOfQrJNQgcQW7l1u n90vxEGsDCbPgFpFqeB0tRg1Hma4vHBQAae1lgiihwKKWLwpiilXwt/JFmZMDLFo SHKZZerhhSEnDbjpF3ovLM+3O8eLe2I4APqasZgkDM5+vLyk6OOHfUfJc9QRapKP e7pY+Y/BfVOWvjmKRxf8EXeIeuvvcPp0QAt394pNNeagDAxN6ukFon3Cg+Tal/cT cgumMSbZ7TJ6YuNe/h3seGpcvKmyan22lIacZWeTN5CM0dwx8LggMAp9elrL4uYC GxAI/LMrFvhrOSQl7xhHw+ZK9oC2DfwCYxcXQm4nXntQ+Oj2Cl7en3YfJShcLbox jsFgZA== -----END CERTIFICATE-----Generated at Mon Sep 28 06:59:39 2026 by rpki-client