$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer File: 9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer (raw, json) Hash identifier: 32lrmDB8EbxQFlntDTsh6irBDiAMMFfDTxryjrJ9ExM= Subject key identifier: 9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7279AFC27A5C0C0B9E3B950E51E6B01EB6CC8DE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.mft caRepository: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Aug 2026 15:23:10 +0000 Certificate not after: Tue 24 Aug 2027 15:28:10 +0000 Subordinate resources: AS: 263614 IP: 168.232.220.0/22 IP: 177.23.108.0/22 IP: 2804:1004::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 05:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:79:af:c2:7a:5c:0c:0b:9e:3b:95:0e:51:e6:b0:1e:b6:cc:8d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 25 15:23:10 2026 GMT Not After : Aug 24 15:28:10 2027 GMT Subject: CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:2c:7d:c8:2a:49:69:7d:a6:4f:d4:df:47: b1:1a:8d:44:f3:dd:55:d9:b2:09:2e:c0:59:13:a0: 84:95:6d:23:aa:28:97:32:d5:e9:d6:52:71:ce:1c: fa:d1:65:66:e9:3a:6e:d5:8a:02:c7:f1:a7:2a:8d: a6:c4:04:99:d3:8d:ca:2e:79:63:d5:f0:60:12:64: cf:39:4b:63:47:5e:c0:50:f1:84:19:a5:8b:4f:dd: 00:47:3f:bd:cd:55:e0:88:c9:65:54:d5:01:69:7b: f5:95:02:fb:a3:ce:7d:2a:47:b0:2d:69:22:2b:9d: 03:bb:26:10:40:20:a1:86:01:26:bc:0b:b4:77:0b: 11:be:1f:24:7a:ed:0b:6b:79:fb:10:39:e5:ee:8f: 5a:ac:f7:2c:4d:15:17:25:dc:1b:71:bb:33:9d:9a: 8f:40:6c:26:eb:20:b2:49:d8:99:96:34:cc:29:c5: 07:dc:da:65:ff:7e:ed:95:33:b1:45:bf:0e:1b:0c: b4:a4:61:5d:6f:98:69:f2:15:1e:f3:92:87:0e:25: 56:2a:9c:54:71:79:f5:00:cb:83:58:03:5b:3f:25: 77:9f:b4:ff:68:60:f8:0d:68:5b:74:4e:04:69:14: 53:1d:54:23:e0:88:29:78:93:ee:dc:c4:b9:1e:e8: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.220.0/22 177.23.108.0/22 IPv6: 2804:1004::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263614 Signature Algorithm: sha256WithRSAEncryption 97:3b:ff:a6:15:80:17:84:93:ee:26:2f:25:9e:02:8d:03:b7: 4b:54:5f:3c:6e:0c:b3:c6:56:9c:10:a3:95:84:2a:59:2d:16: f6:54:8d:57:2d:27:7b:f2:8a:73:f0:f2:c7:e8:dd:93:ac:47: 2b:8b:c4:19:4a:f9:3d:12:92:d8:88:87:5f:e3:6e:20:e9:51: 15:f9:07:92:10:5a:1e:6d:c8:14:be:3a:90:3a:ce:8a:d7:e9: 13:28:31:fc:c5:68:2c:dc:7b:8d:46:37:cb:e7:5e:35:e3:e7: 34:d5:e2:4c:84:ab:ac:6a:c6:ec:67:28:4b:ac:56:d0:63:55: 73:7e:31:49:52:86:64:bd:94:48:3c:7e:e9:da:de:04:29:2b: 5b:b5:86:9c:81:96:c8:49:bd:19:8e:0a:72:40:4e:e7:cd:59: aa:00:16:7c:df:6c:10:4c:14:3b:52:6a:ed:6b:49:f0:6c:dc: 6b:72:ff:cf:d8:c2:8d:86:0f:3e:b5:e0:bf:87:b8:52:e4:19: 28:19:65:62:c3:6c:cb:27:6e:75:b7:72:d4:9d:80:52:7d:de: 2f:73:7a:35:6b:65:75:57:ba:97:b5:9d:3f:f1:9e:40:a3:9e: 5a:52:9c:03:9f:ce:37:b8:ec:61:b4:a7:79:2e:4f:c9:c3:53: 2b:5e:79:74 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcnmvwnpcDAueO5UOUeawHrbMjecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjUxNTIzMTBaFw0yNzA4MjQxNTI4MTBaMDMxMTAvBgNV BAMTKDlEMEZERUM5RjhFRTIzREU5QTFDQjFGMjQ3QzBERDlENjcwNTU2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpCx9yCpJaX2mT9TfR7EajUTz 3VXZsgkuwFkToISVbSOqKJcy1enWUnHOHPrRZWbpOm7VigLH8acqjabEBJnTjcou eWPV8GASZM85S2NHXsBQ8YQZpYtP3QBHP73NVeCIyWVU1QFpe/WVAvujzn0qR7At aSIrnQO7JhBAIKGGASa8C7R3CxG+HyR67QtrefsQOeXuj1qs9yxNFRcl3BtxuzOd mo9AbCbrILJJ2JmWNMwpxQfc2mX/fu2VM7FFvw4bDLSkYV1vmGnyFR7zkocOJVYq nFRxefUAy4NYA1s/JXeftP9oYPgNaFt0TgRpFFMdVCPgiCl4k+7cxLke6AUlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdD97J+O4j3poc sfJHwN2dZwVWZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlo0 UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpqOHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZa NFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAvOUQw RkRFQzlGOEVFMjNERTlBMUNCMUYyNDdDMEREOUQ2NzA1NTY2Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOjcAwQCsRdsMA0EAgACMAcDBQAoBBAEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFvjANBgkqhkiG9w0BAQsFAAOCAQEAlzv/phWA F4ST7iYvJZ4CjQO3S1RfPG4Ms8ZWnBCjlYQqWS0W9lSNVy0ne/KKc/Dyx+jdk6xH K4vEGUr5PRKS2IiHX+NuIOlRFfkHkhBaHm3IFL46kDrOitfpEygx/MVoLNx7jUY3 y+deNePnNNXiTISrrGrG7GcoS6xW0GNVc34xSVKGZL2USDx+6dreBCkrW7WGnIGW yEm9GY4KckBO581ZqgAWfN9sEEwUO1Jq7WtJ8Gzca3L/z9jCjYYPPrXgv4e4UuQZ KBllYsNsyydudbdy1J2AUn3eL3N6NWtldVe6l7WdP/GeQKOeWlKcA5/ON7jsYbSn eS5PycNTK155dA== -----END CERTIFICATE-----Generated at Mon Sep 28 06:19:48 2026 by rpki-client