$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer File: D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer (raw, json) Hash identifier: XOGaeEdkVLrKAsBKGqAm0VQyZrfx1zdhUSq+sTGGSgM= Subject key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 44FC4349A9ACECDED3454969F490E482A9A891F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft caRepository: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 18 Oct 2026 05:57:19 +0000 Certificate not after: Sun 17 Oct 2027 06:02:19 +0000 Subordinate resources: AS: 271428 IP: 200.36.192.0/22 IP: 2804:7b60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 13:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fc:43:49:a9:ac:ec:de:d3:45:49:69:f4:90:e4:82:a9:a8:91:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 18 05:57:19 2026 GMT Not After : Oct 17 06:02:19 2027 GMT Subject: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:fd:d4:98:03:3a:20:16:bb:ac:93:77:54: 58:16:0b:d3:04:14:75:da:e4:ec:0b:15:77:a1:83: 88:1d:0b:19:0e:36:06:dc:1a:4a:06:57:e3:c8:e0: 89:b4:a0:a1:5b:d3:89:f6:52:9b:fc:a3:63:ba:7c: fe:7f:84:50:45:04:dc:8b:fb:62:b9:d2:b8:70:45: 68:e0:fa:b8:4f:a2:4a:96:d1:88:7a:75:cf:44:dd: b2:21:d2:4f:34:da:a1:47:46:fb:62:84:f2:1b:8b: 7b:00:1e:b6:ef:b6:ba:e6:5c:38:ac:5f:82:31:ac: 7f:0a:6a:6a:86:33:5a:a5:52:0e:2a:d1:31:51:50: b9:84:8f:3c:79:9e:a2:a7:68:bc:1b:f8:06:b5:67: 2c:0b:1b:07:f4:e9:5f:2a:df:b4:c8:70:01:95:4a: e3:2e:56:f4:50:f0:28:db:86:3b:ac:87:59:8c:c6: b4:c1:92:4d:5d:d0:25:4f:31:44:95:fa:e3:e2:75: b8:c1:c2:42:15:e6:21:dc:2e:22:91:93:12:e8:5c: 96:39:a9:2a:8b:17:fe:dc:2a:c3:f7:9f:5d:e9:fc: 8b:44:65:a0:f3:4e:d7:b2:18:c9:d1:da:4b:93:a1: c7:ea:35:de:9b:87:03:ab:9e:d8:ae:ee:26:88:15: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.192.0/22 IPv6: 2804:7b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271428 Signature Algorithm: sha256WithRSAEncryption 75:5f:68:b6:89:ce:18:ac:88:bf:df:83:4c:07:ff:d3:9e:80: 38:97:e3:e2:87:0a:e4:cd:5a:d4:f7:b4:20:eb:35:ac:c0:fc: 3c:2a:71:b5:69:28:97:c9:db:9a:cd:65:66:9f:76:8e:0f:3c: a5:0d:d0:5d:f0:6a:8a:ac:13:0c:04:ed:6f:7d:cd:2f:5a:24: c0:a4:d3:1e:10:4b:a8:39:21:8a:50:21:15:a9:70:4d:46:ed: 8d:94:67:3b:e5:ba:e6:9f:2a:47:ba:ab:d5:36:fa:2d:6d:19: 9e:59:4d:57:08:8c:06:fa:8b:17:a3:37:18:2e:33:50:21:3a: f2:30:e3:21:83:6a:f6:5e:13:7e:61:df:2f:44:e6:6b:9e:71: a0:37:13:47:e2:58:ab:11:5d:2b:65:14:05:f1:c6:36:4a:1c: 3b:5e:f6:a9:c2:3c:1d:57:c5:fc:29:cd:94:a6:5a:24:82:18: 30:1d:7f:51:63:c6:61:ad:e1:53:2b:42:44:d1:4d:6c:4e:57: 86:f5:7e:85:7a:3a:c5:1f:35:f7:70:55:4a:23:87:a3:8b:e9: 70:d7:70:11:9d:ec:f1:5a:96:65:d0:02:d5:7d:db:c8:b9:e7: 69:83:5a:b6:aa:76:dd:6b:86:dd:8f:46:78:a0:28:b0:f1:19: 54:47:60:03 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURPxDSams7N7TRUlp9JDkgqmokfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTgwNTU3MTlaFw0yNzEwMTcwNjAyMTlaMDMxMTAvBgNV BAMTKEQ5OEEzODZCODkxOTM0MEFCQjBBRURCRTRBMThBNTA1NjBCNEUzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOv3UmAM6IBa7rJN3VFgWC9ME FHXa5OwLFXehg4gdCxkONgbcGkoGV+PI4Im0oKFb04n2Upv8o2O6fP5/hFBFBNyL +2K50rhwRWjg+rhPokqW0Yh6dc9E3bIh0k802qFHRvtihPIbi3sAHrbvtrrmXDis X4IxrH8KamqGM1qlUg4q0TFRULmEjzx5nqKnaLwb+Aa1ZywLGwf06V8q37TIcAGV SuMuVvRQ8Cjbhjush1mMxrTBkk1d0CVPMUSV+uPidbjBwkIV5iHcLiKRkxLoXJY5 qSqLF/7cKsP3n13p/ItEZaDzTteyGMnR2kuTocfqNd6bhwOrntiu7iaIFaevAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZijhriRk0CrsK 7b5KGKUFYLTj0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFdD RTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlxY1kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX Q0U1SHZBcVllMkN1b1l0RVV4M2NHWUgzakxMQ20xOVVzdlZrN0E5cWNZLzAvRDk4 QTM4NkI4OTE5MzQwQUJCMEFFREJFNEExOEE1MDU2MEI0RTNEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyCTAMA0EAgACMAcDBQAoBHtgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkRDANBgkqhkiG9w0BAQsFAAOCAQEAdV9otonOGKyIv9+D TAf/056AOJfj4ocK5M1a1Pe0IOs1rMD8PCpxtWkol8nbms1lZp92jg88pQ3QXfBq iqwTDATtb33NL1okwKTTHhBLqDkhilAhFalwTUbtjZRnO+W65p8qR7qr1Tb6LW0Z nllNVwiMBvqLF6M3GC4zUCE68jDjIYNq9l4TfmHfL0Tma55xoDcTR+JYqxFdK2UU BfHGNkocO172qcI8HVfF/CnNlKZaJIIYMB1/UWPGYa3hUytCRNFNbE5XhvV+hXo6 xR8193BVSiOHo4vpcNdwEZ3s8VqWZdAC1X3byLnnaYNatqp23WuG3Y9GeKAosPEZ VEdgAw== -----END CERTIFICATE-----Generated at Sun Oct 18 13:13:35 2026 by rpki-client