$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer File: 597A0EE976AA889BD891E5B5A82635E17925FB5A.cer (raw, json) Hash identifier: I4bl+PiSPmzen+CnehOWwJvFjX1fwPDSalEUImgLLwI= Subject key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58E3498C14AB113D29C1147CD7208A6FC0F6243A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft caRepository: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Mar 2026 13:00:27 +0000 Certificate not after: Thu 11 Mar 2027 13:05:27 +0000 Subordinate resources: AS: 270684 IP: 200.187.104.0/22 IP: 2804:6fc8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Mar 2026 09:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e3:49:8c:14:ab:11:3d:29:c1:14:7c:d7:20:8a:6f:c0:f6:24:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 12 13:00:27 2026 GMT Not After : Mar 11 13:05:27 2027 GMT Subject: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:76:7d:db:25:b0:b8:0e:1a:68:23:27:4e: ed:db:8f:38:30:d3:da:f4:1c:c4:61:80:27:9c:1a: 53:0f:ae:fd:43:07:4e:9e:7e:f4:fb:29:87:b7:0e: 1f:f7:e7:e1:78:bf:4c:5c:c5:60:1d:bf:05:dc:3a: d5:2c:15:93:24:d8:dd:93:2c:a4:51:dd:37:16:9c: e5:c3:7e:44:bd:bf:00:7b:64:4e:af:aa:df:8b:5b: 1c:bd:00:db:6b:1b:f3:da:62:cf:f7:29:b0:26:9c: 3b:4b:20:8b:0e:32:c3:94:48:c2:9e:59:f2:6f:41: d2:48:77:50:84:19:60:89:38:ed:53:d9:d9:70:b9: 04:86:41:b4:6d:82:93:5b:3f:91:bd:4a:ea:60:44: b8:90:18:83:c0:cf:4a:dc:30:e9:56:4d:6f:f7:79: 51:a0:0f:16:05:fb:b8:51:84:19:19:74:8d:54:b9: 5e:2b:f0:90:20:90:78:da:dd:92:46:30:1d:f7:0a: 22:cc:6b:f8:0c:ca:6f:22:97:8b:9b:08:12:6b:e2: 4a:64:93:61:93:2d:54:84:1b:e7:f8:bd:c3:3f:f2: 5c:61:c2:df:2a:2d:89:d6:98:44:08:8a:5c:31:0f: af:b6:4c:5a:2d:56:a6:74:68:c5:c9:ad:56:37:4f: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.187.104.0/22 IPv6: 2804:6fc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270684 Signature Algorithm: sha256WithRSAEncryption 34:c8:02:d6:ca:bd:cb:54:bd:d0:68:dd:17:cf:30:b4:c8:fc: b9:fb:f9:d9:86:a7:aa:a3:b6:43:2a:da:d1:cc:89:e1:4b:0f: ec:1b:80:ef:9e:8d:a5:29:93:bf:48:52:4a:7a:f1:61:67:fd: f5:a4:a3:d6:81:07:4b:b0:b3:17:73:e7:15:60:7e:7d:19:c3: 23:73:2f:c1:2f:be:10:36:1f:e4:0a:74:b8:85:ca:3e:db:3e: f5:8a:aa:16:52:66:d2:10:6e:4b:94:0e:22:9d:3e:f8:24:fe: 2b:ba:66:24:40:9b:53:12:93:48:67:cf:4a:8e:7c:61:8f:59: 3b:78:5c:d6:9a:6c:18:7c:94:c7:8b:0d:12:b5:92:c4:68:0a: 85:98:1b:bd:03:ae:ef:52:b7:4f:20:27:27:ad:8d:22:c4:28: f9:e4:16:65:6e:3f:4f:3e:03:fd:84:ad:0a:33:f3:39:e0:2e: be:6c:4e:5b:7a:e7:27:5f:1c:75:c0:e3:12:38:7a:1b:e2:68: 34:2a:2a:d7:3f:9c:26:92:86:0f:77:a3:bd:c5:43:c1:9f:64: 32:c6:5e:63:4c:4e:c0:79:13:c6:95:19:98:24:8a:40:b4:c2: 61:73:65:fb:22:c7:e1:0e:7f:92:a6:ee:a1:2a:fd:0a:e7:75: 2c:0d:dd:5f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWONJjBSrET0pwRR81yCKb8D2JDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTIxMzAwMjdaFw0yNzAzMTExMzA1MjdaMDMxMTAvBgNV BAMTKDU5N0EwRUU5NzZBQTg4OUJEODkxRTVCNUE4MjYzNUUxNzkyNUZCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUunZ92yWwuA4aaCMnTu3bjzgw 09r0HMRhgCecGlMPrv1DB06efvT7KYe3Dh/35+F4v0xcxWAdvwXcOtUsFZMk2N2T LKRR3TcWnOXDfkS9vwB7ZE6vqt+LWxy9ANtrG/PaYs/3KbAmnDtLIIsOMsOUSMKe WfJvQdJId1CEGWCJOO1T2dlwuQSGQbRtgpNbP5G9SupgRLiQGIPAz0rcMOlWTW/3 eVGgDxYF+7hRhBkZdI1UuV4r8JAgkHja3ZJGMB33CiLMa/gMym8il4ubCBJr4kpk k2GTLVSEG+f4vcM/8lxhwt8qLYnWmEQIilwxD6+2TFotVqZ0aMXJrVY3T+nFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZeg7pdqqIm9iR 5bWoJjXheSX7WjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1Nm d0pYMUtZeTEyVmdKWUVQTlI4ZFJZSmVaZzNya2I3VnRLNkxXWFppUVMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNT ZndKWDFLWXkxMlZnSllFUE5SOGRSWUplWmczcmtiN1Z0SzZMV1haaVFTLzAvNTk3 QTBFRTk3NkFBODg5QkQ4OTFFNUI1QTgyNjM1RTE3OTI1RkI1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyLtoMA0EAgACMAcDBQAoBG/IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhXDANBgkqhkiG9w0BAQsFAAOCAQEANMgC1sq9y1S90Gjd F88wtMj8ufv52YanqqO2Qyra0cyJ4UsP7BuA756NpSmTv0hSSnrxYWf99aSj1oEH S7CzF3PnFWB+fRnDI3MvwS++EDYf5Ap0uIXKPts+9YqqFlJm0hBuS5QOIp0++CT+ K7pmJECbUxKTSGfPSo58YY9ZO3hc1ppsGHyUx4sNErWSxGgKhZgbvQOu71K3TyAn J62NIsQo+eQWZW4/Tz4D/YStCjPzOeAuvmxOW3rnJ18cdcDjEjh6G+JoNCoq1z+c JpKGD3ejvcVDwZ9kMsZeY0xOwHkTxpUZmCSKQLTCYXNl+yLH4Q5/kqbuoSr9Cud1 LA3dXw== -----END CERTIFICATE-----Generated at Mon Mar 16 08:48:34 2026 by rpki-client