$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer File: E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer (raw, json) Hash identifier: t3/zMfOnbAE9lD1HPUa7poqvuXniye5R5wJMDvkz1iI= Subject key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02F5D166AFE371A8399058ACC28543336AD0A08D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft caRepository: rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 Oct 2026 08:56:18 +0000 Certificate not after: Sat 09 Oct 2027 09:01:18 +0000 Subordinate resources: AS: 53087 IP: 177.75.64.0/20 IP: 187.33.224.0/19 IP: 2804:298::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 13:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f5:d1:66:af:e3:71:a8:39:90:58:ac:c2:85:43:33:6a:d0:a0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 08:56:18 2026 GMT Not After : Oct 9 09:01:18 2027 GMT Subject: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:4f:ef:a6:25:05:c8:2c:33:07:4a:0d:c0: 0b:7f:65:65:6d:d9:e7:9a:78:3e:27:fd:06:b1:b3: 8e:8e:c5:77:e8:db:f5:c7:03:4a:14:87:23:32:5d: 91:6c:c5:3e:77:61:74:59:d5:45:fb:44:76:ff:b9: 78:0e:85:fc:58:59:fe:a7:a8:70:1a:57:d9:ab:fe: b5:74:32:5a:a5:0f:10:94:f1:53:09:cc:bb:4d:3d: 85:45:80:f7:36:33:cc:6c:da:2f:2a:18:62:44:10: 85:f3:6f:25:fc:f4:c8:59:0b:bc:c9:b6:7d:b1:8b: eb:19:b0:03:39:71:25:73:f5:b0:50:d5:55:6c:46: 74:9f:f4:49:16:4b:47:08:e4:0b:1a:34:fb:c1:98: 06:2e:f9:77:e8:bd:56:c8:76:96:a3:05:9a:63:21: 31:c5:31:98:67:14:9e:de:16:d9:d6:b0:65:4e:41: ab:ba:5a:58:92:f6:61:4a:fc:6d:b4:78:ee:6e:f8: b9:25:54:c6:29:39:fc:48:b4:3b:d6:27:71:68:00: 70:8a:14:07:1b:ee:1f:e7:37:e6:42:b9:27:6c:4f: b7:8a:e4:0a:88:1c:7a:5f:65:2e:a0:87:3c:97:e7: 9b:68:7b:54:88:20:75:38:1f:f1:77:89:d7:47:72: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.75.64.0/20 187.33.224.0/19 IPv6: 2804:298::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53087 Signature Algorithm: sha256WithRSAEncryption b8:d0:16:f7:4a:f9:b3:33:9f:46:5a:97:80:c2:9e:c5:b9:54: 85:2a:25:3b:b5:b0:39:1b:ce:b8:19:64:ed:ad:4e:b3:d1:a3: fc:c0:7f:4d:bd:b2:ef:a1:27:59:f3:82:66:f8:41:74:51:7a: 78:90:fc:24:ca:06:17:a2:ec:1a:17:f0:cf:b3:7c:d6:f9:f8: cb:83:aa:aa:2c:b3:16:4a:4a:c1:ec:fa:7d:2f:6f:0a:f4:d6: e0:e4:ca:cd:a6:bd:89:74:f8:5e:2b:17:ba:10:26:0a:86:05: b2:01:10:b7:fb:c2:b2:8b:ec:4b:68:10:7d:50:30:21:77:ce: 46:ef:79:cf:b1:b9:02:b6:f8:9c:c4:79:c4:aa:b5:a6:45:12: 63:98:20:cc:2b:32:7b:ba:31:64:85:33:df:a7:0f:39:98:86: de:bb:93:de:13:c4:f9:09:ba:8b:67:a1:18:94:d3:ad:15:45: a1:e4:5f:32:65:ce:2f:25:2c:c1:26:79:14:a6:a9:b2:fc:30: 15:da:5e:38:19:58:fb:b9:79:79:89:7d:12:dc:5c:e1:b1:85: 9a:16:6b:cd:3e:a0:fb:02:0f:62:22:29:e0:d3:e9:d3:a9:29: 4e:7b:73:d5:fa:c8:3f:75:56:b5:bf:11:6d:54:d4:c3:77:5a: 4f:e5:0b:49 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAvXRZq/jcag5kFiswoVDM2rQoI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTAwODU2MThaFw0yNzEwMDkwOTAxMThaMDMxMTAvBgNV BAMTKEU1RUQ0MTFFMkFDMUE5MUE4QTM1RDJCNUQxNDc2QjgwMDlERjZGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3E/vpiUFyCwzB0oNwAt/ZWVt 2eeaeD4n/Qaxs46OxXfo2/XHA0oUhyMyXZFsxT53YXRZ1UX7RHb/uXgOhfxYWf6n qHAaV9mr/rV0MlqlDxCU8VMJzLtNPYVFgPc2M8xs2i8qGGJEEIXzbyX89MhZC7zJ tn2xi+sZsAM5cSVz9bBQ1VVsRnSf9EkWS0cI5AsaNPvBmAYu+XfovVbIdpajBZpj ITHFMZhnFJ7eFtnWsGVOQau6WliS9mFK/G20eO5u+LklVMYpOfxItDvWJ3FoAHCK FAcb7h/nN+ZCuSdsT7eK5AqIHHpfZS6ghzyX55toe1SIIHU4H/F3iddHcvA/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTl7UEeKsGpGoo1 0rXRR2uACd9vTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRms3 a2ZqNlg2d3I1dnhYekN1OFlnUlRONlB3ejRVUWk3UWFROE5aQnJpN3QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zr N2tmajZYNndyNXZ4WHpDdThZZ1JUTjZQd3o0VVFpN1FhUThOWkJyaTd0LzAvRTVF RDQxMUUyQUMxQTkxQThBMzVEMkI1RDE0NzZCODAwOURGNkY0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUtAAwQFuyHgMA0EAgACMAcDBQAoBAKYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPXzANBgkqhkiG9w0BAQsFAAOCAQEAuNAW90r5 szOfRlqXgMKexblUhSolO7WwORvOuBlk7a1Os9Gj/MB/Tb2y76EnWfOCZvhBdFF6 eJD8JMoGF6LsGhfwz7N81vn4y4OqqiyzFkpKwez6fS9vCvTW4OTKzaa9iXT4XisX uhAmCoYFsgEQt/vCsovsS2gQfVAwIXfORu95z7G5Arb4nMR5xKq1pkUSY5ggzCsy e7oxZIUz36cPOZiG3ruT3hPE+Qm6i2ehGJTTrRVFoeRfMmXOLyUswSZ5FKapsvww FdpeOBlY+7l5eYl9Etxc4bGFmhZrzT6g+wIPYiIp4NPp06kpTntz1frIP3VWtb8R bVTUw3daT+ULSQ== -----END CERTIFICATE-----Generated at Sun Oct 11 13:49:49 2026 by rpki-client