$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer File: 0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer (raw, json) Hash identifier: zc6HcZBI6CvdGXPVPxXFtxATrIIKSRA6DDRsfi2xs6k= Subject key identifier: 0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B0EF586143A6D12B4B3768E0B51476E4373AE53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft caRepository: rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 19:11:00 +0000 Certificate not after: Mon 05 Apr 2027 19:16:00 +0000 Subordinate resources: AS: 61945 IP: 2804:18a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0e:f5:86:14:3a:6d:12:b4:b3:76:8e:0b:51:47:6e:43:73:ae:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 6 19:11:00 2026 GMT Not After : Apr 5 19:16:00 2027 GMT Subject: CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:de:37:cc:8d:63:be:9d:33:23:54:e9:5f: 53:cd:c0:38:3d:7d:f4:1a:c5:ff:8e:11:24:06:d4: 69:a6:ea:3c:36:66:a8:64:54:24:dd:fc:57:d5:83: 57:cb:71:c5:65:8c:5f:cb:9f:3e:1b:55:06:e4:21: 6c:d5:75:66:fb:03:51:b0:ac:14:53:c6:bb:a8:19: 65:d6:8c:6d:a6:a4:cc:22:79:24:be:a5:ca:c2:fd: 92:7d:28:bf:91:74:1d:cd:7e:bc:0c:33:3f:bb:07: 9d:9b:fc:23:b6:6b:b5:bf:53:f1:fb:00:82:e8:d3: 5a:24:ff:17:88:a6:35:7d:d0:6f:45:40:96:d2:d8: 1c:38:58:11:5b:c2:77:37:14:b7:2e:5c:7c:6e:d5: b2:a6:f7:87:07:c1:4d:0b:f7:86:39:e5:1c:b2:8f: 23:8d:e4:37:f3:d4:3a:95:85:8a:78:c0:a1:73:17: c2:b3:25:8d:f7:ac:c7:7f:8d:aa:4e:c8:72:c3:08: 3b:99:3e:21:1c:8d:9a:0c:b8:c2:9d:11:2e:a2:9b: 5f:51:72:e7:b5:3f:3a:f3:29:8e:09:4b:d9:07:ff: f3:10:5e:ab:2b:26:a3:a0:df:33:d1:b8:11:7c:e9: c8:22:12:70:ad:da:ac:fe:7c:54:5a:83:8f:a0:b4: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:18a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61945 Signature Algorithm: sha256WithRSAEncryption a1:71:75:0a:0d:0e:86:c2:00:d1:ae:50:ef:f3:fd:65:d3:d7: 93:bd:43:9a:37:e4:4a:02:2d:ae:33:c6:67:20:c8:7c:e5:c9: 4c:2c:93:4a:77:3b:58:af:7f:2c:c1:0d:f1:dc:f7:84:08:ab: bc:f0:6c:a3:74:24:e3:88:b3:6b:a0:05:61:9f:9a:a4:c7:40: 29:89:b3:05:33:40:b3:30:ff:38:fd:48:90:28:0e:9a:f0:9f: 05:f6:39:8a:9f:20:08:ac:b3:f8:bc:72:ba:33:f0:3c:82:13: 49:b8:09:ee:bb:42:7d:54:50:2d:d4:b3:cb:09:79:9a:11:01: 58:ab:63:a7:c0:c3:d3:43:0a:00:6f:d4:b7:cc:63:98:74:45: f2:63:29:e6:21:6a:c7:8f:f6:09:42:c3:1e:e8:ba:c6:a1:a1: a2:49:39:8b:5e:5c:97:2a:49:2f:5b:2b:fa:de:97:bf:84:b4: 65:ff:ba:c0:4d:0d:5a:3c:c1:5b:f7:3f:46:1c:7a:f9:c5:3a: 2c:5e:39:89:8c:b4:7e:d8:91:97:fd:36:9d:93:16:09:7b:28: 56:08:dc:6f:3a:45:fb:f3:d0:94:df:97:e4:36:d4:73:ad:e9: 4b:bc:c2:65:a8:97:44:78:ce:36:3f:45:b4:8e:0a:8f:f4:74: 4b:22:b0:6a -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUew71hhQ6bRK0s3aOC1FHbkNzrlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDYxOTExMDBaFw0yNzA0MDUxOTE2MDBaMDMxMTAvBgNV BAMTKDBDQTFGODZBNzA5NzY1QTdDRDE1MkY3MTNCQjNGNTVGMkVFMUI1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6d43zI1jvp0zI1TpX1PNwDg9 ffQaxf+OESQG1Gmm6jw2ZqhkVCTd/FfVg1fLccVljF/Lnz4bVQbkIWzVdWb7A1Gw rBRTxruoGWXWjG2mpMwieSS+pcrC/ZJ9KL+RdB3NfrwMMz+7B52b/CO2a7W/U/H7 AILo01ok/xeIpjV90G9FQJbS2Bw4WBFbwnc3FLcuXHxu1bKm94cHwU0L94Y55Ryy jyON5Dfz1DqVhYp4wKFzF8KzJY33rMd/japOyHLDCDuZPiEcjZoMuMKdES6im19R cue1PzrzKY4JS9kH//MQXqsrJqOg3zPRuBF86cgiEnCt2qz+fFRag4+gtNrlAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMofhqcJdlp80V L3E7s/VfLuG1VjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlBa S2JDblJ1cjRvdHZ2Mmtuek5weFdKcm5xTGczMnpZZjhOSEx6RHc2cFQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJQ WktiQ25SdXI0b3R2djJrbnpOcHhXSnJucUxnMzJ6WWY4TkhMekR3NnBULzAvMENB MUY4NkE3MDk3NjVBN0NEMTUyRjcxM0JCM0Y1NUYyRUUxQjU1Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQYpDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 8fkwDQYJKoZIhvcNAQELBQADggEBAKFxdQoNDobCANGuUO/z/WXT15O9Q5o35EoC La4zxmcgyHzlyUwsk0p3O1ivfyzBDfHc94QIq7zwbKN0JOOIs2ugBWGfmqTHQCmJ swUzQLMw/zj9SJAoDprwnwX2OYqfIAiss/i8croz8DyCE0m4Ce67Qn1UUC3Us8sJ eZoRAVirY6fAw9NDCgBv1LfMY5h0RfJjKeYhaseP9glCwx7ousahoaJJOYteXJcq SS9bK/rel7+EtGX/usBNDVo8wVv3P0YcevnFOixeOYmMtH7YkZf9Np2TFgl7KFYI 3G86Rfvz0JTfl+Q21HOt6Uu8wmWol0R4zjY/RbSOCo/0dEsisGo= -----END CERTIFICATE-----Generated at Thu Apr 9 11:07:35 2026 by rpki-client