$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer (raw, json) Hash identifier: LgDcZDg3hZZ5LSvORCyUnFTlyP6qJMn3fxp863oCU7M= Subject key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 161DF343D01A8938953F906ED395C439252F4BC4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft caRepository: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 23:18:16 +0000 Certificate not after: Tue 06 Apr 2027 23:23:16 +0000 Subordinate resources: AS: 265018 IP: 160.238.200.0/22 IP: 170.84.196.0/22 IP: 2804:317c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 14:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1d:f3:43:d0:1a:89:38:95:3f:90:6e:d3:95:c4:39:25:2f:4b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 23:18:16 2026 GMT Not After : Apr 6 23:23:16 2027 GMT Subject: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:b0:a5:4e:2e:2a:0b:0d:17:25:cd:f3:09: 88:e8:e4:2e:de:5a:65:df:ff:cf:48:84:e6:b0:cb: ff:d1:63:25:1b:f5:43:01:5e:56:c1:e9:53:7c:dc: 18:4d:82:ed:c2:84:4d:90:97:59:44:ab:8a:2a:35: 82:be:6e:09:4b:d0:3d:bf:7b:66:c9:b1:1b:4b:ea: 2b:92:0c:31:4f:40:ac:e5:53:39:e3:04:52:85:c2: 9c:01:b4:8f:4d:f5:dc:68:2f:38:fc:ca:75:4e:24: c4:5e:5e:87:3a:6d:d4:27:ab:d8:06:66:c4:42:68: c3:16:19:39:99:e3:2f:02:c7:13:39:24:ea:50:2c: e4:4a:71:30:94:99:46:28:5c:6b:b9:2b:f6:db:e3: 44:f8:9c:36:0e:c5:c3:31:99:ec:46:92:46:6f:8e: 08:ab:c7:8b:1c:a8:24:4e:3e:1f:50:b3:cc:c7:b7: 8a:cb:1a:ec:f0:64:06:73:70:76:ec:44:af:6e:d8: 5b:08:1c:e1:0b:38:bc:c9:15:1f:81:f0:80:32:d1: 64:da:95:20:ce:58:9c:b7:92:63:9a:25:bf:8d:7b: 24:28:85:6d:8f:9a:f1:fc:fb:56:71:83:26:1e:40: 5f:76:24:a5:27:c7:78:d3:02:8b:48:ca:46:01:4e: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.200.0/22 170.84.196.0/22 IPv6: 2804:317c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265018 Signature Algorithm: sha256WithRSAEncryption 97:25:40:49:54:4a:d0:9a:6c:da:2b:0f:f0:99:25:34:69:64: be:90:ae:05:30:c2:58:ab:2a:64:18:73:3e:1a:a0:9f:3e:e9: fc:8b:21:39:f0:c8:76:b9:f5:d0:fc:ac:fc:21:35:1f:49:d3: 0c:8d:32:68:92:a9:a4:70:15:a7:1c:fd:94:24:77:98:d6:cf: fd:19:85:80:ee:61:0e:f1:e4:47:43:29:6f:9e:53:01:1d:2a: ac:34:35:f1:8f:6a:9f:51:4b:b2:f9:3f:94:28:20:0a:f9:0d: 45:d4:2f:b7:cb:01:2f:36:6b:c4:1f:5a:49:5d:c7:fb:39:26: 7d:89:4b:dc:6d:7b:b7:27:d9:ec:8a:31:20:1d:a5:5e:98:c6: 37:73:46:02:a0:9c:5e:78:4d:b5:74:a1:c2:99:06:4a:2a:c1: c5:25:63:94:07:dc:68:14:7a:3d:6f:44:e1:51:79:f0:d9:5a: a1:2b:8c:ab:87:a2:75:cb:bc:42:3d:24:c0:52:d0:63:83:b9: 4a:a9:5f:74:de:17:0a:e2:f8:14:34:22:7d:ef:32:39:41:82: b4:11:18:3e:c6:6b:e6:cd:e8:41:b8:21:18:a0:9d:e1:7d:7d: 3e:b4:a6:a2:f6:1b:f7:24:9e:79:2b:c6:3c:ae:30:ab:e7:42: d5:d9:0c:47 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFh3zQ9AaiTiVP5Bu05XEOSUvS8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcyMzE4MTZaFw0yNzA0MDYyMzIzMTZaMDMxMTAvBgNV BAMTKDFFNjBGQTc2OTA1MTlBOTNERjY5REI4RUFDQzlFREIwMzgwQjJCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMebClTi4qCw0XJc3zCYjo5C7e WmXf/89IhOawy//RYyUb9UMBXlbB6VN83BhNgu3ChE2Ql1lEq4oqNYK+bglL0D2/ e2bJsRtL6iuSDDFPQKzlUznjBFKFwpwBtI9N9dxoLzj8ynVOJMReXoc6bdQnq9gG ZsRCaMMWGTmZ4y8CxxM5JOpQLORKcTCUmUYoXGu5K/bb40T4nDYOxcMxmexGkkZv jgirx4scqCROPh9Qs8zHt4rLGuzwZAZzcHbsRK9u2FsIHOELOLzJFR+B8IAy0WTa lSDOWJy3kmOaJb+NeyQohW2PmvH8+1ZxgyYeQF92JKUnx3jTAotIykYBTqElAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeYPp2kFGak99p 246sye2wOAsrFDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2p2 WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNq dllBcThZTTdyaVJ0eG1iellZczVUNjM2NWlFZzlBaWVFRDZkVUE0R2taLzAvMUU2 MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAzODBCMkIxNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCoO7IAwQCqlTEMA0EAgACMAcDBQAoBDF8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLOjANBgkqhkiG9w0BAQsFAAOCAQEAlyVASVRK 0Jps2isP8JklNGlkvpCuBTDCWKsqZBhzPhqgnz7p/IshOfDIdrn10Pys/CE1H0nT DI0yaJKppHAVpxz9lCR3mNbP/RmFgO5hDvHkR0Mpb55TAR0qrDQ18Y9qn1FLsvk/ lCggCvkNRdQvt8sBLzZrxB9aSV3H+zkmfYlL3G17tyfZ7IoxIB2lXpjGN3NGAqCc XnhNtXShwpkGSirBxSVjlAfcaBR6PW9E4VF58NlaoSuMq4eidcu8Qj0kwFLQY4O5 SqlfdN4XCuL4FDQife8yOUGCtBEYPsZr5s3oQbghGKCd4X19PrSmovYb9ySeeSvG PK4wq+dC1dkMRw== -----END CERTIFICATE-----Generated at Wed Apr 8 15:01:42 2026 by rpki-client