$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer File: D1F5C9A11A2575A29CEC01F3361C418408534072.cer (raw, json) Hash identifier: as/2Wm/1y6BzA6g0nea8cGFt7Mle+x0mtB7/hNx7SR0= Subject key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 77AF63E6869B180D55A1D04C06EB1914050B1F6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft caRepository: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 18 Oct 2026 03:02:25 +0000 Certificate not after: Sun 17 Oct 2027 03:07:25 +0000 Subordinate resources: AS: 22706 IP: 200.152.80.0/20 IP: 2804:9a10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:af:63:e6:86:9b:18:0d:55:a1:d0:4c:06:eb:19:14:05:0b:1f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 18 03:02:25 2026 GMT Not After : Oct 17 03:07:25 2027 GMT Subject: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:5d:c5:29:9e:48:34:ca:1f:20:52:78:5a: 4d:8e:73:7b:17:5f:4b:c6:1e:d8:5e:3d:55:0e:a8: ec:dc:70:27:53:35:e1:58:f3:57:e5:f3:b8:2a:90: de:0e:a4:9b:7d:24:f1:d2:99:be:19:12:e5:17:a0: 2d:9d:d6:e6:ea:a8:e8:4b:c3:73:df:c9:89:e8:0d: 76:68:89:e0:dd:33:14:2a:a9:88:c3:0c:38:f0:aa: 89:ce:c0:6f:11:49:85:8b:ea:26:a8:32:29:aa:18: 42:df:05:ef:05:1c:60:d2:e9:bd:e2:65:6c:e2:c0: 6c:c9:34:e4:65:af:95:a6:c2:85:b8:8d:34:8f:95: bb:23:d7:b5:f5:e2:16:57:9e:5e:eb:3d:ca:cf:0c: dd:8b:d2:df:52:cb:ae:59:7a:13:25:ce:16:7e:6b: ee:f7:31:af:47:05:16:52:21:08:d7:fe:95:1a:b7: 2f:a5:57:97:5d:af:df:e3:36:51:5a:1d:6f:d8:86: c6:8a:9d:85:6b:e9:8d:23:f1:31:55:22:b8:8d:2b: df:0f:56:5e:e8:a3:95:46:b1:0b:9e:7c:6a:b6:23: cd:1b:07:8f:15:dd:d0:b9:46:f5:06:12:7b:5e:37: ca:59:30:21:23:1d:a2:0e:6a:d9:a4:17:92:c2:24: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.80.0/20 IPv6: 2804:9a10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22706 Signature Algorithm: sha256WithRSAEncryption 52:f9:8b:b9:2f:c1:82:7c:0d:ea:67:8a:4a:aa:d4:8f:4b:9f: 75:41:19:0d:84:d4:2b:b1:9e:85:c7:55:33:ba:9f:1d:f7:74: a6:f1:a5:15:00:49:70:b6:3d:25:85:b1:43:c3:48:ca:5c:70: 44:a6:c3:82:a0:20:ba:59:71:c1:60:c9:55:b9:b7:5f:eb:4b: 7d:17:c9:bd:68:42:09:33:aa:03:d9:e1:91:52:fc:20:bb:fa: da:d2:c3:4b:e3:7e:cd:02:21:94:4f:8e:ac:da:dd:10:1d:7e: f1:8b:02:ba:6d:02:cc:d0:b9:df:7f:0b:34:2b:90:7c:3e:c2: f1:d8:0c:ed:cf:cf:77:8c:9f:14:76:2d:33:10:cd:02:e5:db: 1d:cf:10:c3:cb:3f:f6:40:07:ee:1c:3b:7a:db:b9:a9:fa:f7: d5:fb:de:70:14:6e:f0:4e:91:55:09:8a:18:13:04:39:83:0e: 53:e7:c2:22:8f:43:2a:35:db:d1:3d:1c:c8:32:ec:f0:14:69: ef:87:8a:52:6f:fc:a4:02:88:54:0a:ca:d2:c1:84:53:5b:9e: 36:3a:14:2c:d6:c1:b3:3f:51:cb:c6:a8:f7:46:f2:57:96:e9: 8b:2f:c7:61:89:4c:3e:9c:53:90:a6:65:5d:6a:f8:66:39:6f: 90:0b:b1:e5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUd69j5oabGA1VodBMBusZFAULH2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTgwMzAyMjVaFw0yNzEwMTcwMzA3MjVaMDMxMTAvBgNV BAMTKEQxRjVDOUExMUEyNTc1QTI5Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkr13FKZ5INMofIFJ4Wk2Oc3sX X0vGHthePVUOqOzccCdTNeFY81fl87gqkN4OpJt9JPHSmb4ZEuUXoC2d1ubqqOhL w3PfyYnoDXZoieDdMxQqqYjDDDjwqonOwG8RSYWL6iaoMimqGELfBe8FHGDS6b3i ZWziwGzJNORlr5WmwoW4jTSPlbsj17X14hZXnl7rPcrPDN2L0t9Sy65ZehMlzhZ+ a+73Ma9HBRZSIQjX/pUaty+lV5ddr9/jNlFaHW/YhsaKnYVr6Y0j8TFVIriNK98P Vl7oo5VGsQuefGq2I80bB48V3dC5RvUGEnteN8pZMCEjHaIOatmkF5LCJKQzAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR9cmhGiV1opzs AfM2HEGECFNAcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Ay a3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40bVkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nw Mmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAvRDFG NUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQwODUzNDA3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyJhQMA0EAgACMAcDBQAoBJoQMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAliyMA0GCSqGSIb3DQEBCwUAA4IBAQBS+Yu5L8GCfA3qZ4pK qtSPS591QRkNhNQrsZ6Fx1Uzup8d93Sm8aUVAElwtj0lhbFDw0jKXHBEpsOCoCC6 WXHBYMlVubdf60t9F8m9aEIJM6oD2eGRUvwgu/ra0sNL437NAiGUT46s2t0QHX7x iwK6bQLM0Lnffws0K5B8PsLx2Aztz893jJ8Udi0zEM0C5dsdzxDDyz/2QAfuHDt6 27mp+vfV+95wFG7wTpFVCYoYEwQ5gw5T58Iij0MqNdvRPRzIMuzwFGnvh4pSb/yk AohUCsrSwYRTW542OhQs1sGzP1HLxqj3RvJXlumLL8dhiUw+nFOQpmVdavhmOW+Q C7Hl -----END CERTIFICATE-----Generated at Sun Oct 18 09:22:47 2026 by rpki-client