$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer File: 71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer (raw, json) Hash identifier: 5u+GOwJDXpMWRtbgp/pi2Y5mj4g3/qUwYlOqin3glIc= Subject key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E9851ACB140B1AC24603B869076F66E4A1402D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft caRepository: rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 04 Apr 2026 11:20:49 +0000 Certificate not after: Sat 03 Apr 2027 11:25:49 +0000 Subordinate resources: AS: 268242 IP: 160.20.242.0/23 IP: 2804:4e24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:98:51:ac:b1:40:b1:ac:24:60:3b:86:90:76:f6:6e:4a:14:02:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:20:49 2026 GMT Not After : Apr 3 11:25:49 2027 GMT Subject: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c4:be:52:f6:b8:b2:f9:83:45:38:fb:12:89: 47:43:5e:a1:c8:3f:80:6e:a6:b4:1a:ee:bf:8d:ad: b4:96:a6:c6:bb:bc:98:ed:4b:c3:96:4c:0e:d7:e4: 85:bf:28:95:31:96:ba:e0:76:b3:99:a8:61:1b:a7: 58:98:65:8d:d3:5a:55:de:fb:0e:c5:53:12:23:9c: 1c:45:06:44:ed:47:1d:14:fc:17:9f:19:65:e6:c7: 1c:78:8a:2a:a1:37:47:a5:bd:0e:7b:97:dc:42:c6: 93:88:1a:f0:df:3e:c1:35:ca:29:d7:a8:c8:a2:9a: 1e:ba:b0:f3:6e:fe:b0:66:48:ef:2d:31:5d:f8:cb: d4:71:e6:83:a5:62:40:de:4a:3b:0b:46:df:f9:c8: 7d:96:b2:38:4f:7c:bf:b2:e2:ed:c8:a9:bf:6a:b8: 24:c6:c4:1b:47:9e:05:d5:7a:09:0a:96:eb:14:55: 41:40:2b:51:40:e6:5e:53:9c:b6:d2:8b:97:a6:c4: 2f:3f:f0:2f:18:d7:09:c6:1b:87:ac:d5:50:84:f7: f1:b6:2d:54:52:a3:af:a8:6c:a3:37:31:6e:19:4e: 05:bd:39:27:93:47:26:27:98:76:17:c6:68:01:78: 1b:b0:09:49:77:8d:60:77:2a:dd:fe:44:95:ce:60: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.242.0/23 IPv6: 2804:4e24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268242 Signature Algorithm: sha256WithRSAEncryption ad:5c:67:0e:72:0f:71:5b:92:ad:dc:31:59:a9:f5:fe:63:32: 21:b9:ad:87:72:d0:95:65:32:0d:28:ed:c8:3c:bf:b8:1e:a8: e9:8e:f6:73:81:ab:13:e0:d8:66:a4:df:b9:53:85:9f:9e:1b: c8:c4:d8:fb:54:a2:1f:4e:c3:df:57:b7:c2:e2:62:72:be:eb: d3:31:84:09:dd:74:70:a8:dc:61:ad:1b:ce:5c:38:57:91:59: bb:a2:ad:82:78:65:5f:12:a9:d7:3f:d0:2b:59:85:08:95:95: 47:b9:64:43:57:a9:c1:d2:46:1e:be:62:c5:b9:8d:4c:06:c5: 61:e3:6b:8d:ab:ee:21:c8:a7:35:ef:3c:3f:46:ac:d8:52:12: 34:04:34:6e:97:60:33:a3:e5:4c:25:b3:01:84:ca:de:6a:43: e7:0d:cb:97:bd:bd:29:b9:9c:e2:73:ea:cb:04:f0:9c:c9:77: 01:64:e4:59:75:30:19:4e:06:22:f3:05:a2:30:ed:d1:65:45: 5a:69:69:4d:3c:be:57:25:a8:05:a1:ac:29:05:11:48:a5:be: 18:8b:9e:70:d7:32:cf:73:31:09:d9:73:f5:14:c5:70:da:d5: 77:4f:36:b8:8e:92:1c:12:e6:3c:e6:69:42:be:1e:b5:56:6a: 87:23:39:ad -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfphRrLFAsawkYDuGkHb2bkoUAtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDQxMTIwNDlaFw0yNzA0MDMxMTI1NDlaMDMxMTAvBgNV BAMTKDcxRDYwMzJEQkVCMzU3NTJEMDIyM0RDMzkxQURFREFEMEFFM0JDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzxL5S9riy+YNFOPsSiUdDXqHI P4BuprQa7r+NrbSWpsa7vJjtS8OWTA7X5IW/KJUxlrrgdrOZqGEbp1iYZY3TWlXe +w7FUxIjnBxFBkTtRx0U/BefGWXmxxx4iiqhN0elvQ57l9xCxpOIGvDfPsE1yinX qMiimh66sPNu/rBmSO8tMV34y9Rx5oOlYkDeSjsLRt/5yH2WsjhPfL+y4u3Iqb9q uCTGxBtHngXVegkKlusUVUFAK1FA5l5TnLbSi5emxC8/8C8Y1wnGG4es1VCE9/G2 LVRSo6+obKM3MW4ZTgW9OSeTRyYnmHYXxmgBeBuwCUl3jWB3Kt3+RJXOYN7jAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRx1gMtvrNXUtAi PcORre2tCuO8XTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWQ0 azhKTVRTa1NOWHV5R1RzWTNIc21iZXhVdVZ0U0hqRVM1N29GaGNFV00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fk NGs4Sk1UU2tTTlh1eUdUc1kzSHNtYmV4VXVWdFNIakVTNTdvRmhjRVdNLzAvNzFE NjAzMkRCRUIzNTc1MkQwMjIzREMzOTFBREVEQUQwQUUzQkM1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBoBTyMA0EAgACMAcDBQAoBE4kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX0jANBgkqhkiG9w0BAQsFAAOCAQEArVxnDnIPcVuSrdwx Wan1/mMyIbmth3LQlWUyDSjtyDy/uB6o6Y72c4GrE+DYZqTfuVOFn54byMTY+1Si H07D31e3wuJicr7r0zGECd10cKjcYa0bzlw4V5FZu6KtgnhlXxKp1z/QK1mFCJWV R7lkQ1epwdJGHr5ixbmNTAbFYeNrjavuIcinNe88P0as2FISNAQ0bpdgM6PlTCWz AYTK3mpD5w3Ll729Kbmc4nPqywTwnMl3AWTkWXUwGU4GIvMFojDt0WVFWmlpTTy+ VyWoBaGsKQURSKW+GIuecNcyz3MxCdlz9RTFcNrVd082uI6SHBLmPOZpQr4etVZq hyM5rQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:57:11 2026 by rpki-client