$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer File: 8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer (raw, json) Hash identifier: PHp2+QgIn/yNk02O5c+M6Eb/ilu4zUOEYws6hl7SLXI= Subject key identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 26B225D2CF31E88D97C658896E063A678F6FD62B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft caRepository: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 11:44:01 +0000 Certificate not after: Mon 05 Apr 2027 11:49:01 +0000 Subordinate resources: AS: 53209 AS: 267624 IP: 45.71.228.0/22 IP: 177.11.136.0/21 IP: 186.233.176.0/21 IP: 2804:295c::/32 IP: 2804:4450::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b2:25:d2:cf:31:e8:8d:97:c6:58:89:6e:06:3a:67:8f:6f:d6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 6 11:44:01 2026 GMT Not After : Apr 5 11:49:01 2027 GMT Subject: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:c3:7d:b5:46:d4:fd:1e:2b:db:2e:b0:ac: fb:be:53:c7:bb:a9:10:53:7d:9b:09:b2:eb:d9:e9: 2d:11:9b:e5:53:80:4e:fc:56:1e:aa:b3:93:33:92: fa:01:61:b8:61:44:fd:e8:05:de:86:c4:80:dd:d8: 7d:87:73:64:b7:e2:a1:c2:c5:17:fb:6a:f8:04:08: 5f:18:7a:1b:c9:42:e4:c5:d0:51:c4:c2:13:33:86: 81:7f:c6:37:53:ba:17:fd:28:18:5f:ab:ce:08:33: 81:f0:32:90:02:c1:32:58:51:f2:72:c6:87:c5:ec: ba:af:59:92:43:df:26:e7:98:7f:4f:c3:bf:75:e1: 2b:fa:c4:8e:9b:aa:3e:37:6a:41:0e:68:43:b2:f0: 3e:8f:b0:78:03:2f:15:1d:4b:ec:08:9c:89:35:d6: f2:90:79:1b:35:36:47:42:34:e2:4c:c5:f3:9f:f7: 1c:88:3a:5a:62:8a:9c:20:00:f4:aa:f3:28:33:80: f9:f5:93:2b:4e:50:07:73:2c:fd:7b:aa:cc:9e:02: 43:82:8d:c8:1e:63:16:ad:f7:ff:33:56:fe:a7:3f: ad:6e:c5:d6:66:e4:a7:7a:71:57:66:45:1b:30:a6: 7e:35:25:1f:99:1f:2d:97:e9:0c:bb:bd:c9:ad:04: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.228.0/22 177.11.136.0/21 186.233.176.0/21 IPv6: 2804:295c::/32 2804:4450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53209 267624 Signature Algorithm: sha256WithRSAEncryption 11:c4:9d:9d:5a:f3:20:70:95:e9:94:db:bb:4a:6f:db:5c:b5: 05:7c:61:46:8c:16:1c:2f:0c:a1:f6:4e:48:9a:d4:c5:65:bc: 4c:93:aa:c5:c1:b8:06:1e:22:0d:5f:c7:76:6c:19:bf:f7:99: 5a:32:65:be:ae:31:81:2d:ab:de:cf:7d:a0:91:d4:ab:a0:9b: 60:12:20:ad:90:c0:cf:8e:e7:77:43:83:01:d9:bc:79:14:2a: b4:b1:b1:95:5a:4e:22:bf:3d:d2:da:45:07:0a:c8:ad:16:3e: 00:54:ff:9a:e5:39:da:46:21:d0:39:ef:72:f9:3a:f1:28:31: 26:77:d7:13:c2:f0:92:a6:dd:9e:a8:b5:1a:30:fa:5b:9d:eb: 5b:15:d1:b8:7f:b5:5f:9e:b0:e0:0d:3e:80:ee:42:59:94:40: 28:71:f7:b9:94:51:3d:f0:00:2c:10:c7:d5:be:23:9d:4e:10: 1b:4c:6e:68:5b:bc:94:86:07:35:3d:a3:0c:12:f6:66:1d:75: 40:fc:37:f8:09:32:fd:9e:85:d2:14:26:f6:a0:2d:25:3e:50: 76:e0:7d:d7:75:83:ee:86:fc:5d:5d:31:2b:a3:b9:0f:56:93: d3:97:f9:7d:1b:41:41:6d:19:9c:fe:70:2c:79:88:23:33:d9: 32:89:92:af -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUJrIl0s8x6I2XxliJbgY6Z49v1iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDYxMTQ0MDFaFw0yNzA0MDUxMTQ5MDFaMDMxMTAvBgNV BAMTKDhCMkMxRUZBQTkzMDQwNTE3RUEzRDA5RDFDRjREREM1M0JFRUY5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxwsN9tUbU/R4r2y6wrPu+U8e7 qRBTfZsJsuvZ6S0Rm+VTgE78Vh6qs5MzkvoBYbhhRP3oBd6GxIDd2H2Hc2S34qHC xRf7avgECF8YehvJQuTF0FHEwhMzhoF/xjdTuhf9KBhfq84IM4HwMpACwTJYUfJy xofF7LqvWZJD3ybnmH9Pw7914Sv6xI6bqj43akEOaEOy8D6PsHgDLxUdS+wInIk1 1vKQeRs1NkdCNOJMxfOf9xyIOlpiipwgAPSq8ygzgPn1kytOUAdzLP17qsyeAkOC jcgeYxat9/8zVv6nP61uxdZm5Kd6cVdmRRswpn41JR+ZHy2X6Qy7vcmtBG0VAgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLLB76qTBAUX6j 0J0c9N3FO+75fzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ND ZWlFS1Jic2Z3VnZxMlBmNncyMWFmRFd1WDF5cmVISHU2ZFJWOTU0NWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nj Q2VpRUtSYnNmd1Z2cTJQZjZ3MjFhZkRXdVgxeXJlSEh1NmRSVjk1NDVkLzAvOEIy QzFFRkFBOTMwNDA1MTdFQTNEMDlEMUNGNEREQzUzQkVFRjk3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEH AQH/BDIwMDAYBAIAATASAwQCLUfkAwQDsQuIAwQDuumwMBQEAgACMA4DBQAoBClc AwUAKAREUDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAz9kCAwQVaDANBgkqhkiG 9w0BAQsFAAOCAQEAEcSdnVrzIHCV6ZTbu0pv21y1BXxhRowWHC8MofZOSJrUxWW8 TJOqxcG4Bh4iDV/HdmwZv/eZWjJlvq4xgS2r3s99oJHUq6CbYBIgrZDAz47nd0OD Adm8eRQqtLGxlVpOIr890tpFBwrIrRY+AFT/muU52kYh0Dnvcvk68SgxJnfXE8Lw kqbdnqi1GjD6W53rWxXRuH+1X56w4A0+gO5CWZRAKHH3uZRRPfAALBDH1b4jnU4Q G0xuaFu8lIYHNT2jDBL2Zh11QPw3+Aky/Z6F0hQm9qAtJT5QduB913WD7ob8XV0x K6O5D1aT05f5fRtBQW0ZnP5wLHmIIzPZMomSrw== -----END CERTIFICATE-----Generated at Wed Apr 8 11:37:05 2026 by rpki-client