$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/A960C53655301FFD4C5766FAACD2ABA1E43125C0.cer File: A960C53655301FFD4C5766FAACD2ABA1E43125C0.cer (raw, json) Hash identifier: yn/ghYDsn3rd+LvViYwPQIL0LVEYEPASJMd82vq4mrE= Subject key identifier: A9:60:C5:36:55:30:1F:FD:4C:57:66:FA:AC:D2:AB:A1:E4:31:25:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22B8B4592AA2A96CD91C529B79EE714AC48EBE76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/A960C53655301FFD4C5766FAACD2ABA1E43125C0.mft caRepository: rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 18:16:05 +0000 Certificate not after: Wed 01 Sep 2027 18:21:05 +0000 Subordinate resources: AS: 265246 IP: 167.250.128.0/22 IP: 2804:2cd4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 09:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b8:b4:59:2a:a2:a9:6c:d9:1c:52:9b:79:ee:71:4a:c4:8e:be:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 18:16:05 2026 GMT Not After : Sep 1 18:21:05 2027 GMT Subject: CN=A960C53655301FFD4C5766FAACD2ABA1E43125C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:57:c7:8b:91:a6:92:88:36:8c:10:fc:24: 83:f9:46:cb:18:eb:72:90:72:8d:60:e3:b2:ac:1c: cb:46:89:fe:f3:ee:7b:06:57:d5:ed:29:26:72:62: 42:2e:4f:31:aa:b6:a0:a4:a9:3d:07:1c:76:25:78: 49:36:0a:ae:1e:47:e5:02:2b:a9:f5:5e:24:be:a8: f0:49:70:92:86:a6:7d:24:26:e3:86:a5:83:f8:08: 79:e1:5f:d3:49:72:0a:46:59:34:bc:91:e8:7e:2d: 29:b5:8d:e6:27:c9:e1:06:ae:1e:ac:d4:6d:05:cf: 63:0b:f8:c5:06:f0:4b:74:8b:99:bf:dc:48:c3:f0: f9:45:45:28:ec:9e:af:94:56:50:82:66:8c:b9:73: c0:fa:61:53:e0:5d:cb:a7:b9:0a:1c:77:c5:47:27: 23:bb:76:0c:e2:8c:7d:0f:48:54:ce:73:d5:e8:58: 8d:8f:e0:35:52:17:02:b1:b0:88:cc:d8:e3:54:b0: 61:46:13:c4:f4:99:4a:7c:fe:21:0d:6d:31:54:d2: 0f:ca:e4:4d:61:ba:f8:ee:94:78:88:60:ac:01:da: b1:06:18:da:3a:97:ba:d6:a5:f9:c2:0a:84:83:ea: 79:62:53:ba:2c:62:98:77:67:50:59:b6:66:17:5b: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:60:C5:36:55:30:1F:FD:4C:57:66:FA:AC:D2:AB:A1:E4:31:25:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/A960C53655301FFD4C5766FAACD2ABA1E43125C0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.128.0/22 IPv6: 2804:2cd4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265246 Signature Algorithm: sha256WithRSAEncryption 73:40:76:ae:35:3d:34:3b:59:35:b7:70:65:ba:f4:b2:db:f8: fd:41:37:69:45:a1:f2:5e:7e:0f:81:b2:21:9e:21:f9:6c:00: 21:99:25:7e:fd:de:c9:a1:12:02:00:0f:10:7d:b1:2e:f1:bb: b3:6b:d0:8f:06:5c:26:74:da:b3:f8:ce:5c:0b:8d:9e:70:67: 11:ad:35:13:dd:09:cd:2c:e0:75:0d:d9:5f:77:16:39:b9:c1: ad:ee:f4:f3:b9:3d:72:2f:5f:9e:81:31:26:89:03:34:d3:ef: ea:6d:89:71:ef:47:90:2c:6c:0e:4e:ca:0d:fd:ad:e6:85:64: 16:7b:40:6f:7e:f2:f7:d0:59:52:5d:9a:40:6e:1d:72:85:da: c9:ea:5a:f6:1d:38:87:41:1e:8b:0c:c2:49:ea:4c:59:4c:ba: 22:49:a0:dd:38:fa:a5:17:81:a0:4b:58:59:45:69:90:62:0c: 74:8e:83:d6:57:11:7c:48:75:74:fd:85:9f:1c:90:fb:37:41: 7f:dc:f9:39:9c:70:f0:a9:fc:cd:f9:45:ed:5b:04:6e:c3:52: db:ce:32:a1:cf:0f:bb:43:3b:57:6a:34:ef:4f:f8:10:1b:00: a9:29:31:73:3b:f2:fd:81:33:1a:c0:34:b5:fb:ca:5a:5a:55: 9f:11:8b:19 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIri0WSqiqWzZHFKbee5xSsSOvnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDIxODE2MDVaFw0yNzA5MDExODIxMDVaMDMxMTAvBgNV BAMTKEE5NjBDNTM2NTUzMDFGRkQ0QzU3NjZGQUFDRDJBQkExRTQzMTI1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnVfHi5Gmkog2jBD8JIP5RssY 63KQco1g47KsHMtGif7z7nsGV9XtKSZyYkIuTzGqtqCkqT0HHHYleEk2Cq4eR+UC K6n1XiS+qPBJcJKGpn0kJuOGpYP4CHnhX9NJcgpGWTS8keh+LSm1jeYnyeEGrh6s 1G0Fz2ML+MUG8Et0i5m/3EjD8PlFRSjsnq+UVlCCZoy5c8D6YVPgXcunuQocd8VH JyO7dgzijH0PSFTOc9XoWI2P4DVSFwKxsIjM2ONUsGFGE8T0mUp8/iENbTFU0g/K 5E1huvjulHiIYKwB2rEGGNo6l7rWpfnCCoSD6nliU7osYph3Z1BZtmYXW6lVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpYMU2VTAf/UxX Zvqs0quh5DElwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1hx VVMyRW56M0ZDaDlUM2ZKVEw2VmRvdlVxWGRXelBxMndITDNZZHJpUFQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dY cVVTMkVuejNGQ2g5VDNmSlRMNlZkb3ZVcVhkV3pQcTJ3SEwzWWRyaVBULzAvQTk2 MEM1MzY1NTMwMUZGRDRDNTc2NkZBQUNEMkFCQTFFNDMxMjVDMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCp/qAMA0EAgACMAcDBQAoBCzUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMHjANBgkqhkiG9w0BAQsFAAOCAQEAc0B2rjU9NDtZNbdw Zbr0stv4/UE3aUWh8l5+D4GyIZ4h+WwAIZklfv3eyaESAgAPEH2xLvG7s2vQjwZc JnTas/jOXAuNnnBnEa01E90JzSzgdQ3ZX3cWObnBre7087k9ci9fnoExJokDNNPv 6m2Jce9HkCxsDk7KDf2t5oVkFntAb37y99BZUl2aQG4dcoXayepa9h04h0EeiwzC SepMWUy6Ikmg3Tj6pReBoEtYWUVpkGIMdI6D1lcRfEh1dP2FnxyQ+zdBf9z5OZxw 8Kn8zflF7VsEbsNS284yoc8Pu0M7V2o070/4EBsAqSkxczvy/YEzGsA0tfvKWlpV nxGLGQ== -----END CERTIFICATE-----Generated at Sun Sep 20 10:55:41 2026 by rpki-client