$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/A1F28F2D0FB0BAAFD86D77AD571099D832942A02.cer File: A1F28F2D0FB0BAAFD86D77AD571099D832942A02.cer (raw, json) Hash identifier: 13ztVkkcYG9ZV2AE2Sni2AJHpKMTaluj09roub0X5lw= Subject key identifier: A1:F2:8F:2D:0F:B0:BA:AF:D8:6D:77:AD:57:10:99:D8:32:94:2A:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DBFB27F5115F5FF6F749D74A5054DB64242CEE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/A1F28F2D0FB0BAAFD86D77AD571099D832942A02.mft caRepository: rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Aug 2026 01:08:51 +0000 Certificate not after: Thu 26 Aug 2027 01:13:51 +0000 Subordinate resources: AS: 267503 IP: 192.141.252.0/22 IP: 2804:427c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 17:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bf:b2:7f:51:15:f5:ff:6f:74:9d:74:a5:05:4d:b6:42:42:ce:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 27 01:08:51 2026 GMT Not After : Aug 26 01:13:51 2027 GMT Subject: CN=A1F28F2D0FB0BAAFD86D77AD571099D832942A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:68:76:87:af:36:a3:c8:0d:05:f9:cc:2d: 1f:de:30:14:b7:a7:6b:c1:d9:25:08:62:50:08:0b: a6:58:14:2d:d5:91:e9:e5:33:ab:15:2b:12:09:3f: c9:8e:21:4f:6e:83:4a:6e:18:86:39:33:f7:a8:f1: b4:79:53:91:5a:7b:86:4a:d4:68:9e:4f:9a:78:96: 21:9f:e5:85:1d:3e:a3:a9:f4:6c:34:4d:b4:ba:16: 79:a0:9f:d3:11:22:28:18:06:1a:01:20:3b:39:7f: 69:09:dd:cb:db:76:6f:8b:37:e3:e8:db:2b:0c:36: 03:9f:8f:65:a0:44:71:94:26:83:83:9c:66:13:32: 1f:10:7b:42:15:51:f5:7a:58:da:ce:db:6d:86:e7: f5:81:1f:68:2a:ec:65:22:b2:9e:34:50:c9:7a:59: bb:3c:62:47:38:38:a3:03:ce:7f:06:b4:14:51:a9: ea:bf:b8:a1:65:8d:a2:7f:7e:67:ff:02:d2:6a:0e: 68:bb:81:11:a4:46:6b:56:55:8d:98:4f:c5:dd:eb: 51:68:92:b7:96:c5:97:bf:d4:a1:9a:f1:6b:57:8f: 38:0b:db:28:6e:91:56:98:07:97:74:fb:22:07:e7: 99:25:f6:42:45:a7:59:44:75:93:18:2f:db:d5:37: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:F2:8F:2D:0F:B0:BA:AF:D8:6D:77:AD:57:10:99:D8:32:94:2A:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/A1F28F2D0FB0BAAFD86D77AD571099D832942A02.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.252.0/22 IPv6: 2804:427c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267503 Signature Algorithm: sha256WithRSAEncryption 1e:0a:4a:f8:24:75:10:f0:00:8c:67:7e:da:d2:d9:1e:b7:2e: 0b:fd:db:fc:62:50:63:61:1b:0c:a8:84:2f:d4:37:57:2e:0f: 53:88:7a:c6:2f:6f:28:ad:1a:34:ed:57:e6:74:10:df:2b:b8: 69:c0:7a:5b:98:eb:a7:4f:4e:df:41:6f:b5:2a:9c:ff:53:19: 6c:de:13:a9:15:e5:af:a3:d8:3d:76:8b:89:93:ee:34:66:c2: d7:20:fb:e4:59:7f:ee:37:81:41:86:2f:ec:39:22:9e:01:b9: a4:10:92:61:c5:5c:7b:f8:69:fb:6f:c5:73:02:84:c7:19:bd: 2f:c4:a8:12:ec:69:44:f8:38:ae:bb:d8:4c:6f:67:b5:0f:62: 66:26:e8:8a:5c:84:25:79:b6:e3:cf:d3:46:43:a8:17:44:18: 5b:3a:8f:e9:5e:3a:79:f8:b0:ec:8b:c1:d3:49:b6:d7:4c:e4: 48:44:17:07:db:0f:25:2e:70:0f:87:25:1a:1f:ad:c4:ac:91: 74:a5:71:c1:08:12:93:8d:a6:58:4e:bc:c8:7b:d4:ce:49:1a: 15:09:bc:a2:20:99:4f:5b:aa:7f:73:aa:4d:32:c8:04:44:c0: ab:d9:0f:d8:3f:55:d5:3b:0e:5e:42:74:3d:27:84:f6:75:65: d6:e5:db:a4 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUbb+yf1EV9f9vdJ10pQVNtkJCzuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjcwMTA4NTFaFw0yNzA4MjYwMTEzNTFaMDMxMTAvBgNV BAMTKEExRjI4RjJEMEZCMEJBQUZEODZENzdBRDU3MTA5OUQ4MzI5NDJBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCye2h2h682o8gNBfnMLR/eMBS3 p2vB2SUIYlAIC6ZYFC3VkenlM6sVKxIJP8mOIU9ug0puGIY5M/eo8bR5U5Fae4ZK 1GieT5p4liGf5YUdPqOp9Gw0TbS6Fnmgn9MRIigYBhoBIDs5f2kJ3cvbdm+LN+Po 2ysMNgOfj2WgRHGUJoODnGYTMh8Qe0IVUfV6WNrO222G5/WBH2gq7GUisp40UMl6 Wbs8Ykc4OKMDzn8GtBRRqeq/uKFljaJ/fmf/AtJqDmi7gRGkRmtWVY2YT8Xd61Fo kreWxZe/1KGa8WtXjzgL2yhukVaYB5d0+yIH55kl9kJFp1lEdZMYL9vVN33TAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh8o8tD7C6r9ht d61XEJnYMpQqAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veVhn WmhWTUVOUUJxN3c1aVFIRGRCR0xqdUVoYzlzcnV4RDRCelFHZzJaMS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veVhn WmhWTUVOUUJxN3c1aVFIRGRCR0xqdUVoYzlzcnV4RDRCelFHZzJaMS8wL0ExRjI4 RjJEMEZCMEJBQUZEODZENzdBRDU3MTA5OUQ4MzI5NDJBMDIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAsCN/DANBAIAAjAHAwUAKARCfDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEFO8wDQYJKoZIhvcNAQELBQADggEBAB4KSvgkdRDwAIxnftrS 2R63Lgv92/xiUGNhGwyohC/UN1cuD1OIesYvbyitGjTtV+Z0EN8ruGnAeluY66dP Tt9Bb7UqnP9TGWzeE6kV5a+j2D12i4mT7jRmwtcg++RZf+43gUGGL+w5Ip4BuaQQ kmHFXHv4aftvxXMChMcZvS/EqBLsaUT4OK672ExvZ7UPYmYm6IpchCV5tuPP00ZD qBdEGFs6j+leOnn4sOyLwdNJttdM5EhEFwfbDyUucA+HJRofrcSskXSlccEIEpON plhOvMh71M5JGhUJvKIgmU9bqn9zqk0yyAREwKvZD9g/VdU7Dl5CdD0nhPZ1Zdbl 26Q= -----END CERTIFICATE-----Generated at Tue Sep 22 18:55:41 2026 by rpki-client