$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer File: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer (raw, json) Hash identifier: o1ouk8gAYQt6hu0ZcgQ88BfyUqF6jj1GbhJSp7gIGeU= Subject key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7234E5E19D110640965B65A4D2DF0132A73BF223 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft caRepository: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 21:41:01 +0000 Certificate not after: Fri 26 Mar 2027 21:46:01 +0000 Subordinate resources: AS: 264009 IP: 143.0.140.0/22 IP: 168.227.132.0/22 IP: 170.78.120.0/22 IP: 2804:2954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:e5:e1:9d:11:06:40:96:5b:65:a4:d2:df:01:32:a7:3b:f2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 21:41:01 2026 GMT Not After : Mar 26 21:46:01 2027 GMT Subject: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:45:38:76:20:bf:ba:c4:25:a0:bd:ed:5b: f5:2a:3f:27:39:a0:17:27:86:03:57:96:bc:cc:d6: 11:7b:f0:43:ad:b5:d0:7d:90:bc:44:87:e7:9e:9f: 77:d6:fa:90:cf:2c:c6:4a:c5:6c:4f:19:96:3b:6a: e7:21:84:7f:81:69:02:19:2d:18:79:65:9a:b2:0f: 63:27:7b:5c:e1:b2:ec:12:2c:de:e9:06:e4:7b:e2: b2:99:fa:b1:fb:ce:50:47:d2:d6:fe:91:ba:c9:fe: 35:a4:cf:4f:0d:bc:42:c7:43:8e:32:c9:1d:66:67: c6:6d:bc:6d:51:3d:77:1d:d1:ca:e4:98:a9:8a:6c: da:c3:a4:ae:36:14:4d:65:74:e1:10:50:09:05:38: b7:1c:fa:17:a2:01:2f:d0:31:ff:45:c4:b2:ee:96: b9:ec:9e:09:2d:3b:24:5e:24:0e:da:c3:7a:ca:a1: 0d:f5:d0:9d:c8:7d:67:51:59:db:a8:78:bc:83:dc: 18:ba:5c:15:e6:13:3f:df:c1:37:18:a7:da:2a:9b: aa:0e:5c:bc:f0:71:bf:fa:7e:86:92:e8:e8:34:d7: ca:c0:a4:cd:4b:39:aa:8f:bc:d6:1c:05:5c:3d:6b: 9c:d7:fc:d2:9f:0a:50:53:7e:48:15:07:c7:3c:4e: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.140.0/22 168.227.132.0/22 170.78.120.0/22 IPv6: 2804:2954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264009 Signature Algorithm: sha256WithRSAEncryption b4:40:bf:b8:21:60:fe:f5:e2:f7:60:cc:ab:d8:0b:58:d0:b9: 45:ee:66:5a:e1:ed:3f:54:f7:94:f5:49:f6:45:c1:0f:01:50: 88:fe:1c:1e:fd:d8:57:29:78:74:dc:86:53:73:09:3a:bc:9c: 33:5c:5d:e3:0d:84:7d:50:c7:9d:ed:6b:f3:7c:86:57:ff:4f: 8d:30:25:f1:06:88:06:ca:19:27:78:cc:ac:45:9c:0b:c7:53: a6:bb:ae:2e:1b:37:07:ee:40:c4:e6:b3:6f:01:f0:e8:9c:67: ab:8b:4c:d4:f3:de:99:9d:58:95:44:70:1a:9f:fe:e4:9a:9e: f4:a8:23:5a:e4:3f:25:10:ba:db:bb:91:4b:80:38:60:34:e3: 75:b5:63:15:9f:80:31:86:0f:ff:30:cc:a8:1a:8c:c0:c1:c0: 57:5b:86:08:5d:55:c4:8d:b0:aa:31:c4:aa:77:27:14:3f:91: 8d:48:65:63:88:ae:e2:0c:43:45:d4:cf:99:49:34:64:55:cd: 7f:25:27:0c:94:b3:30:28:40:0b:b0:ba:3a:42:1e:08:3e:86: c2:bd:78:3b:88:43:9b:47:11:3b:d1:5a:cd:77:13:2e:37:ca: d0:42:7f:b9:10:14:25:56:55:62:c4:8c:7a:a5:06:68:4f:cb: 30:58:f6:9c -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUcjTl4Z0RBkCWW2Wk0t8BMqc78iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjcyMTQxMDFaFw0yNzAzMjYyMTQ2MDFaMDMxMTAvBgNV BAMTKDFBRjdCRThGNEUyOUUxQ0VBMUExMEMwQkEwNDMwNTQyMTI2RkU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfckU4diC/usQloL3tW/UqPyc5 oBcnhgNXlrzM1hF78EOttdB9kLxEh+een3fW+pDPLMZKxWxPGZY7auchhH+BaQIZ LRh5ZZqyD2Mne1zhsuwSLN7pBuR74rKZ+rH7zlBH0tb+kbrJ/jWkz08NvELHQ44y yR1mZ8ZtvG1RPXcd0crkmKmKbNrDpK42FE1ldOEQUAkFOLcc+heiAS/QMf9FxLLu lrnsngktOyReJA7aw3rKoQ310J3IfWdRWduoeLyD3Bi6XBXmEz/fwTcYp9oqm6oO XLzwcb/6foaS6Og018rApM1LOaqPvNYcBVw9a5zX/NKfClBTfkgVB8c8TnWzAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQa976PTinhzqGh DAugQwVCEm/niTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjM0 ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3dzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzIz NGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAvMUFG N0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIxMjZGRTc4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCjwCMAwQCqOOEAwQCqk54MA0EAgACMAcDBQAoBClU MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHSTANBgkqhkiG9w0BAQsFAAOCAQEA tEC/uCFg/vXi92DMq9gLWNC5Re5mWuHtP1T3lPVJ9kXBDwFQiP4cHv3YVyl4dNyG U3MJOrycM1xd4w2EfVDHne1r83yGV/9PjTAl8QaIBsoZJ3jMrEWcC8dTpruuLhs3 B+5AxOazbwHw6Jxnq4tM1PPemZ1YlURwGp/+5Jqe9KgjWuQ/JRC627uRS4A4YDTj dbVjFZ+AMYYP/zDMqBqMwMHAV1uGCF1VxI2wqjHEqncnFD+RjUhlY4iu4gxDRdTP mUk0ZFXNfyUnDJSzMChAC7C6OkIeCD6Gwr14O4hDm0cRO9FazXcTLjfK0EJ/uRAU JVZVYsSMeqUGaE/LMFj2nA== -----END CERTIFICATE-----Generated at Wed Apr 8 10:03:54 2026 by rpki-client