$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DE33246D72DCBFEE14D1C58A16F3FB2425226923.cer File: DE33246D72DCBFEE14D1C58A16F3FB2425226923.cer (raw, json) Hash identifier: 6kHEAbJ+MlFGV2HPqAVEaZfDZKkVCCPcuFaV9jEGgxI= Subject key identifier: DE:33:24:6D:72:DC:BF:EE:14:D1:C5:8A:16:F3:FB:24:25:22:69:23 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A969C6FB58E478E40175F338335847509C350A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft caRepository: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 15 Sep 2026 12:08:52 +0000 Certificate not after: Tue 14 Sep 2027 12:13:52 +0000 Subordinate resources: AS: 268665 IP: 45.165.0.0/22 IP: 2804:54b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 19:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:96:9c:6f:b5:8e:47:8e:40:17:5f:33:83:35:84:75:09:c3:50:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 12:08:52 2026 GMT Not After : Sep 14 12:13:52 2027 GMT Subject: CN=DE33246D72DCBFEE14D1C58A16F3FB2425226923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:04:94:2c:6b:54:4c:9d:71:50:e6:14:73: 10:88:51:01:14:ce:1a:1d:75:be:21:3b:b6:aa:f7: f8:13:e8:f3:e2:9f:bc:81:a5:0e:2d:53:09:a4:9f: 51:e9:11:9e:f1:c9:fd:ee:32:23:83:3d:c0:59:15: 7a:74:f3:99:0d:ee:77:57:15:82:9d:40:5c:63:58: ed:72:99:cf:8f:89:38:31:71:99:fc:52:64:3a:c8: c4:82:ef:61:51:af:5b:ec:48:eb:82:db:26:c0:60: 57:0c:5f:49:a1:32:db:0b:3b:ef:93:e1:3e:ce:89: 19:6e:ae:65:0f:ec:2b:5c:b0:b1:91:b9:db:5c:b1: ca:8c:d5:fa:c0:29:8d:fd:15:5f:b9:d4:41:2e:ce: 3c:25:7e:a5:b8:fd:22:1b:cf:4d:a5:91:da:07:25: 80:b9:cc:5f:a3:00:c4:a8:62:2f:3d:21:4a:fc:8d: d0:83:da:bf:7b:9c:74:50:db:f6:d1:21:b0:86:21: ed:77:ed:25:51:7d:57:36:02:8e:49:2d:41:42:e0: fc:46:12:a4:d2:be:ab:c3:d8:f6:48:65:df:5b:cc: 08:27:1c:54:d6:ee:ea:b3:91:4e:8d:d3:69:78:7b: 08:89:78:cb:f6:82:4d:44:5e:c8:1d:fb:8b:58:83: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:33:24:6D:72:DC:BF:EE:14:D1:C5:8A:16:F3:FB:24:25:22:69:23 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.0.0/22 IPv6: 2804:54b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268665 Signature Algorithm: sha256WithRSAEncryption 7d:69:86:24:9c:b1:9f:b3:42:bd:d8:e1:00:cc:14:ee:a1:55: 8f:b9:f8:29:b8:b4:3c:2d:b8:2f:33:1e:3c:cd:ce:c0:f8:bc: 7f:d2:ec:ef:3f:b7:7a:d5:e8:ca:21:5a:6f:34:48:d2:f5:9a: 08:64:83:c4:ea:ea:9b:05:fd:32:03:e8:55:a5:75:87:bb:36: de:5d:8f:5a:c5:d0:a2:6a:55:9a:3d:a7:24:a7:91:04:9d:86: f5:12:93:c4:62:22:b7:f5:42:ba:c5:1e:32:81:62:23:b6:1f: 8f:6f:4e:7d:c3:49:f1:7d:23:68:b5:35:59:8e:49:c8:16:6d: ce:97:91:70:ec:a7:f0:36:e0:f5:9b:68:c4:29:7f:97:97:eb: 9d:e4:18:4a:0a:d6:5b:95:47:b9:c1:8a:52:6e:b5:83:fb:8a: 8b:02:85:6f:cc:ce:82:67:7c:04:50:6c:9f:f6:e0:da:3d:ea: 06:e4:0a:3e:4e:33:46:c5:74:59:65:2e:c5:9e:f9:24:c7:57: ae:39:a7:0c:cc:65:37:d4:5b:dc:75:ca:95:03:e1:1b:17:41: 90:c3:ac:1a:9c:75:e4:c8:42:36:ac:1f:06:d3:e0:62:eb:ad: 91:0c:43:35:93:90:ad:cf:25:d7:6a:15:4b:79:33:51:40:36: cc:59:8b:fe -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKpacb7WOR45AF18zgzWEdQnDUKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTUxMjA4NTJaFw0yNzA5MTQxMjEzNTJaMDMxMTAvBgNV BAMTKERFMzMyNDZENzJEQ0JGRUUxNEQxQzU4QTE2RjNGQjI0MjUyMjY5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3gSULGtUTJ1xUOYUcxCIUQEU zhoddb4hO7aq9/gT6PPin7yBpQ4tUwmkn1HpEZ7xyf3uMiODPcBZFXp085kN7ndX FYKdQFxjWO1ymc+PiTgxcZn8UmQ6yMSC72FRr1vsSOuC2ybAYFcMX0mhMtsLO++T 4T7OiRlurmUP7CtcsLGRudtcscqM1frAKY39FV+51EEuzjwlfqW4/SIbz02lkdoH JYC5zF+jAMSoYi89IUr8jdCD2r97nHRQ2/bRIbCGIe137SVRfVc2Ao5JLUFC4PxG EqTSvqvD2PZIZd9bzAgnHFTW7uqzkU6N02l4ewiJeMv2gk1EXsgd+4tYg5ozAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeMyRtcty/7hTR xYoW8/skJSJpIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVT UkFyVmNockx4cnVCWEZMV3ZVWllwbWJyWnlYa21rVldnaDlBWjJWNFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzll U1JBclZjaHJMeHJ1QlhGTFd2VVpZcG1iclp5WGtta1ZXZ2g5QVoyVjRXLzAvREUz MzI0NkQ3MkRDQkZFRTE0RDFDNThBMTZGM0ZCMjQyNTIyNjkyMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaUAMA0EAgACMAcDBQAoBFSwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZeTANBgkqhkiG9w0BAQsFAAOCAQEAfWmGJJyxn7NCvdjh AMwU7qFVj7n4Kbi0PC24LzMePM3OwPi8f9Ls7z+3etXoyiFabzRI0vWaCGSDxOrq mwX9MgPoVaV1h7s23l2PWsXQompVmj2nJKeRBJ2G9RKTxGIit/VCusUeMoFiI7Yf j29OfcNJ8X0jaLU1WY5JyBZtzpeRcOyn8Dbg9ZtoxCl/l5frneQYSgrWW5VHucGK Um61g/uKiwKFb8zOgmd8BFBsn/bg2j3qBuQKPk4zRsV0WWUuxZ75JMdXrjmnDMxl N9Rb3HXKlQPhGxdBkMOsGpx15MhCNqwfBtPgYuutkQxDNZOQrc8l12oVS3kzUUA2 zFmL/g== -----END CERTIFICATE-----Generated at Tue Sep 22 21:24:26 2026 by rpki-client