$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer File: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer (raw, json) Hash identifier: cfwIK44hEs8E7vhJaXnHX29K8gkm4LV2nw/qIL9+tDc= Subject key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39A46A4C8F472F4CD47EE78F4F49EF8C3BAD88C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft caRepository: rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 09:10:06 +0000 Certificate not after: Fri 09 Apr 2027 09:15:06 +0000 Subordinate resources: AS: 265231 IP: 168.0.92.0/22 IP: 2804:2ca0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 20:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a4:6a:4c:8f:47:2f:4c:d4:7e:e7:8f:4f:49:ef:8c:3b:ad:88:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 09:10:06 2026 GMT Not After : Apr 9 09:15:06 2027 GMT Subject: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:95:85:b5:09:46:aa:b2:c5:4f:1d:44:cf: 74:6a:ff:03:b6:95:c7:f4:20:56:75:d0:a1:95:64: ff:b8:05:a0:1d:f6:38:2a:87:85:b7:c2:7a:f7:2d: 5d:02:e1:6c:ca:98:b1:14:0e:e5:fa:81:05:9d:a5: 5e:39:81:96:6a:74:b1:bc:a2:01:5b:a4:8f:67:a9: 5e:99:2d:d8:93:eb:46:3c:99:6c:1b:86:3b:b3:f7: 5a:06:87:d8:93:de:fc:b3:47:af:46:34:74:66:a1: 75:79:d8:36:ef:37:dd:2a:88:f4:46:c6:49:b8:40: c1:d6:aa:95:43:cf:e4:6a:8f:35:b8:05:ec:3f:37: de:ba:60:22:ba:92:00:a0:79:1c:8c:a9:59:1b:f9: 1e:fe:66:41:a7:59:25:8a:0f:87:e9:4b:49:4f:0c: 1f:cc:02:13:32:0a:63:b4:0b:13:f3:49:90:79:01: f5:03:f9:37:fd:5c:35:1c:71:c3:ef:7d:a7:46:69: ef:b2:12:dc:80:a7:b9:4c:8b:15:b7:fc:fb:c8:af: d1:c9:de:0e:1b:11:8e:91:f1:c3:c0:bf:23:7f:94: d4:7f:4a:98:d8:91:63:5b:bc:da:29:8a:66:4d:24: 69:87:03:ea:76:35:56:7d:de:5a:66:99:3c:25:1c: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.92.0/22 IPv6: 2804:2ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265231 Signature Algorithm: sha256WithRSAEncryption d1:0a:dd:69:7b:50:70:b5:db:e3:8b:b5:d7:b3:20:30:29:9c: e9:27:ec:05:41:07:b3:28:d1:39:e1:c6:93:cd:78:0b:78:44: 19:94:f3:fb:1a:79:ad:f6:a0:a3:39:a8:90:e9:54:5b:03:d9: 22:21:97:72:a7:d6:d6:22:9c:fd:7e:27:1d:23:62:93:e2:f4: 52:bc:6c:4d:c2:c6:bb:20:76:54:a0:da:7f:39:22:e2:ef:da: 23:47:d7:b5:3f:89:47:09:d9:94:2b:7a:a2:f5:29:31:ce:7b: e4:88:91:a1:d4:27:ad:9d:f4:bf:ba:0c:37:54:a2:f8:f7:a6: f9:a1:ad:d5:1a:d8:5a:75:94:1c:c9:1a:10:f0:b4:0a:15:3c: c8:aa:2b:ba:65:78:e2:64:33:9c:b4:7f:41:fb:84:08:81:10: 71:86:91:e6:b9:70:db:ad:95:93:cd:b1:60:eb:7a:cf:03:f9: 91:ae:7e:25:47:72:c3:62:6e:42:2d:24:2f:b4:c5:28:7c:53: bb:d0:88:80:2c:27:af:eb:e7:2d:f4:12:37:a5:cb:39:65:45: a1:06:27:e2:d0:13:02:0d:d1:d9:97:34:96:22:f2:df:6b:8c: df:83:3e:6a:0d:d4:8b:1c:6c:ce:38:1b:45:e1:51:e1:df:52: 41:06:5a:b3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOaRqTI9HL0zUfuePT0nvjDutiMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTAwOTEwMDZaFw0yNzA0MDkwOTE1MDZaMDMxMTAvBgNV BAMTKDlCNjhBRjZERTQ1RENFMEMyMTEyMDg0MzU2ODRDMEJDRkQ1NUNDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsC5WFtQlGqrLFTx1Ez3Rq/wO2 lcf0IFZ10KGVZP+4BaAd9jgqh4W3wnr3LV0C4WzKmLEUDuX6gQWdpV45gZZqdLG8 ogFbpI9nqV6ZLdiT60Y8mWwbhjuz91oGh9iT3vyzR69GNHRmoXV52DbvN90qiPRG xkm4QMHWqpVDz+RqjzW4Bew/N966YCK6kgCgeRyMqVkb+R7+ZkGnWSWKD4fpS0lP DB/MAhMyCmO0CxPzSZB5AfUD+Tf9XDUcccPvfadGae+yEtyAp7lMixW3/PvIr9HJ 3g4bEY6R8cPAvyN/lNR/SpjYkWNbvNopimZNJGmHA+p2NVZ93lpmmTwlHJOdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbaK9t5F3ODCES CENWhMC8/VXMmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUpE WXlEcjVjZTZKTHFqM2F1cWZDMTNRNmpNS25jR3gxVm53N3VzcTNqZlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VK RFl5RHI1Y2U2SkxxajNhdXFmQzEzUTZqTUtuY0d4MVZudzd1c3EzamZXLzAvOUI2 OEFGNkRFNDVEQ0UwQzIxMTIwODQzNTY4NEMwQkNGRDU1Q0M5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqABcMA0EAgACMAcDBQAoBCygMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMDzANBgkqhkiG9w0BAQsFAAOCAQEA0QrdaXtQcLXb44u1 17MgMCmc6SfsBUEHsyjROeHGk814C3hEGZTz+xp5rfagozmokOlUWwPZIiGXcqfW 1iKc/X4nHSNik+L0UrxsTcLGuyB2VKDafzki4u/aI0fXtT+JRwnZlCt6ovUpMc57 5IiRodQnrZ30v7oMN1Si+Pem+aGt1RrYWnWUHMkaEPC0ChU8yKorumV44mQznLR/ QfuECIEQcYaR5rlw262Vk82xYOt6zwP5ka5+JUdyw2JuQi0kL7TFKHxTu9CIgCwn r+vnLfQSN6XLOWVFoQYn4tATAg3R2Zc0liLy32uM34M+ag3UixxszjgbReFR4d9S QQZasw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:37:24 2026 by rpki-client