$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer File: FB435E794D86CB9BAE800A6D289A88F771B5B583.cer (raw, json) Hash identifier: hTXfroguDCAbPZkzQsvZr0evbFtaS2jReeX9HAGdL3M= Subject key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55831F75419073BF3A6A628FE5AF27D659FB3F02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft caRepository: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Oct 2026 14:45:44 +0000 Certificate not after: Mon 11 Oct 2027 14:50:44 +0000 Subordinate resources: AS: 264550 IP: 138.0.136.0/22 IP: 170.0.32.0/22 IP: 2804:215c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 22:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:1f:75:41:90:73:bf:3a:6a:62:8f:e5:af:27:d6:59:fb:3f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 12 14:45:44 2026 GMT Not After : Oct 11 14:50:44 2027 GMT Subject: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a7:5c:18:3e:14:21:52:8b:6a:ac:0a:86: fe:58:ae:cc:5a:8a:f8:3e:58:f4:90:e6:15:f5:e6: bb:03:98:24:49:0d:33:fa:80:37:75:49:6a:b0:56: 9b:d8:eb:d4:92:57:c5:63:ff:db:54:2d:be:8c:ff: 22:ae:6e:a8:e7:c3:97:ff:a9:17:fe:a0:99:bc:f5: bf:e5:93:d2:29:fd:8d:84:d4:53:3d:1c:66:78:29: f2:db:57:7b:c5:27:20:52:65:5c:80:94:f4:8b:38: 61:df:bc:b2:8b:e2:91:14:53:53:40:af:a8:69:15: c5:8f:e0:30:75:57:2d:cf:9a:5d:1a:ed:6b:03:f6: ef:cb:d9:3f:57:c6:b1:c1:4d:cb:cb:74:b6:50:1c: ab:42:83:3f:6f:16:f9:5a:34:c3:74:52:50:bb:42: e5:27:9f:30:c2:38:8c:78:fb:d4:57:57:e7:65:8a: 55:e1:35:c9:66:a5:ee:26:57:13:cf:16:46:74:8d: 80:4c:b6:cc:dc:4d:1b:af:84:29:04:4e:0b:94:03: cf:c0:d9:6f:30:b0:1f:6c:c0:c3:85:97:38:44:80: f4:6a:33:77:7e:78:f0:f0:f8:ed:83:1f:4c:2c:9d: 7f:ba:be:c8:1f:db:00:ed:9e:c3:c1:88:d0:c7:41: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.136.0/22 170.0.32.0/22 IPv6: 2804:215c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264550 Signature Algorithm: sha256WithRSAEncryption d2:b7:58:0e:7c:f7:2c:38:d3:ef:70:28:a3:23:b1:0d:95:d7: a3:7d:1f:0e:cf:d1:a8:08:bc:c7:8f:86:c5:8a:0f:19:21:0e: f9:d9:e6:6e:c4:32:63:a8:a0:04:57:d1:f9:4b:07:55:df:5a: 32:d8:b4:b1:ab:28:b5:b0:0f:21:c5:33:fa:3e:f7:00:52:5a: 91:2d:91:f5:23:87:f2:08:09:fb:a3:36:6d:e7:a1:7a:1c:dd: 89:75:d0:80:45:21:96:66:9e:ba:1f:43:17:6f:d6:0e:48:5d: 6c:a8:a8:fe:b7:ae:5b:3a:6b:29:60:d8:b7:9e:fc:55:b8:44: 3e:f3:e2:af:fa:40:2e:77:dc:b5:1b:26:59:44:d6:a4:2f:2d: f4:04:e9:63:0d:6b:76:81:d3:fb:bb:60:51:d7:f3:4b:4c:55: 02:cb:a1:1d:d5:4b:b5:4e:7a:7f:4a:62:ff:99:7d:e2:f0:fe: 76:fd:bd:c2:f5:c6:07:44:92:0d:a2:c8:3c:38:2e:f1:36:45: 17:d4:6d:9a:bb:be:8e:dc:c9:ae:cc:91:59:bd:f6:70:3d:2c: 33:81:d6:53:0e:5d:9b:7a:78:a0:98:c1:94:6b:0e:a7:1f:14: 55:ad:82:a6:af:68:8a:cf:67:3d:2e:ac:f2:76:ba:b2:19:fb: 40:61:98:e0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVYMfdUGQc786amKP5a8n1ln7PwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTIxNDQ1NDRaFw0yNzEwMTExNDUwNDRaMDMxMTAvBgNV BAMTKEZCNDM1RTc5NEQ4NkNCOUJBRTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMKdcGD4UIVKLaqwKhv5Yrsxa ivg+WPSQ5hX15rsDmCRJDTP6gDd1SWqwVpvY69SSV8Vj/9tULb6M/yKubqjnw5f/ qRf+oJm89b/lk9Ip/Y2E1FM9HGZ4KfLbV3vFJyBSZVyAlPSLOGHfvLKL4pEUU1NA r6hpFcWP4DB1Vy3Pml0a7WsD9u/L2T9XxrHBTcvLdLZQHKtCgz9vFvlaNMN0UlC7 QuUnnzDCOIx4+9RXV+dlilXhNclmpe4mVxPPFkZ0jYBMtszcTRuvhCkETguUA8/A 2W8wsB9swMOFlzhEgPRqM3d+ePDw+O2DH0wsnX+6vsgf2wDtnsPBiNDHQYK7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7Q155TYbLm66A Cm0omoj3cbW1gzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlZ1 SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1VVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJW dUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAvRkI0 MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3MUI1QjU4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCigCIAwQCqgAgMA0EAgACMAcDBQAoBCFcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJZjANBgkqhkiG9w0BAQsFAAOCAQEA0rdYDnz3 LDjT73AooyOxDZXXo30fDs/RqAi8x4+GxYoPGSEO+dnmbsQyY6igBFfR+UsHVd9a Mti0sasotbAPIcUz+j73AFJakS2R9SOH8ggJ+6M2beehehzdiXXQgEUhlmaeuh9D F2/WDkhdbKio/reuWzprKWDYt578VbhEPvPir/pALnfctRsmWUTWpC8t9ATpYw1r doHT+7tgUdfzS0xVAsuhHdVLtU56f0pi/5l94vD+dv29wvXGB0SSDaLIPDgu8TZF F9Rtmru+jtzJrsyRWb32cD0sM4HWUw5dm3p4oJjBlGsOpx8UVa2Cpq9ois9nPS6s 8na6shn7QGGY4A== -----END CERTIFICATE-----Generated at Mon Oct 12 20:41:29 2026 by rpki-client