$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer File: 7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer (raw, json) Hash identifier: q+J1NOfOADZcKtimX7LRLBj0PZKUUZdNz/eH9P/XCZ8= Subject key identifier: 7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 420FD5DB51CA8D8CE3B7775A21E22FC317FD8FB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.mft caRepository: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 13:26:46 +0000 Certificate not after: Wed 07 Apr 2027 13:31:46 +0000 Subordinate resources: AS: 61851 IP: 177.75.224.0/20 IP: 201.149.124.0/22 IP: 2804:1a4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0f:d5:db:51:ca:8d:8c:e3:b7:77:5a:21:e2:2f:c3:17:fd:8f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 13:26:46 2026 GMT Not After : Apr 7 13:31:46 2027 GMT Subject: CN=7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:15:06:ca:6d:6e:ed:27:81:e9:9f:6d:57: 46:b3:10:2a:f2:44:74:3a:62:62:e6:ea:da:07:4b: a4:fe:7c:33:38:41:1d:eb:18:2f:53:e5:f0:b6:c2: 67:0f:d4:74:d8:52:83:99:53:4a:19:e2:84:bc:8a: b6:d2:67:06:02:bf:06:d0:d1:94:a5:c8:bf:f6:2c: 9a:c2:e4:9d:56:33:7f:21:40:c8:0e:a8:78:24:31: b7:34:97:d1:6f:1a:9d:ea:88:31:42:d7:f5:f9:ab: 78:e1:a5:e9:87:3e:1a:a5:75:a8:2c:a4:b1:91:5d: 92:4a:0a:b6:29:f5:9f:85:48:16:2e:f8:e0:8a:70: 70:df:35:d4:f5:c2:41:b4:e6:84:93:1a:11:b4:31: 31:7c:7c:28:2e:52:15:ff:c6:97:d3:ac:c3:e0:8f: 1a:db:ad:b5:59:3e:9c:88:e5:2c:84:5d:ae:aa:69: 70:97:b3:96:41:14:f5:e7:b0:89:2c:24:83:67:0b: 2d:fa:be:e0:e0:14:51:41:22:e2:3a:f7:7d:c2:ee: 0c:9f:43:16:7f:3b:bb:44:b0:37:1d:d2:4b:a4:67: 20:2f:b6:ee:8c:65:d5:bc:14:28:de:a9:6d:6b:01: 35:94:18:bb:a3:de:21:f5:55:4d:a9:c2:cf:3c:37: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.75.224.0/20 201.149.124.0/22 IPv6: 2804:1a4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61851 Signature Algorithm: sha256WithRSAEncryption 97:80:36:af:17:9d:c5:e6:23:59:46:f7:9b:a8:04:20:5e:ed: eb:29:92:2b:3c:78:e0:32:a3:a9:a7:19:6c:96:08:a4:7f:bf: 6c:a6:19:08:f2:39:6b:d6:a0:50:d9:14:ad:7c:88:f0:a6:ce: 14:5b:b7:92:8b:9d:5f:f2:ee:c2:61:9d:cc:a1:4f:e7:3a:66: b2:a3:69:d5:b6:7a:74:f9:73:ba:71:84:eb:a8:6e:35:15:cd: 43:b6:6a:f8:21:c0:e2:e2:60:c1:13:18:9c:ba:aa:cb:22:e0: 17:90:e4:04:c2:82:75:f9:29:a4:93:7d:c7:da:02:1f:d7:a9: 07:0f:0d:85:dc:92:43:f7:a0:06:ec:42:f2:c7:61:e7:89:7e: 49:9b:7f:2d:b4:67:3d:c0:cc:40:b5:f8:8e:44:c7:a8:fb:1b: 07:e0:50:83:4d:6c:91:be:d5:39:20:3c:16:4e:06:a2:a3:1d: 5d:ed:f3:ff:19:48:f9:df:94:f9:8e:2e:02:b1:9e:e6:46:92: d5:57:02:a9:9e:64:59:1c:8e:b9:1e:62:7d:d6:af:4f:6f:8a: 42:6b:60:18:61:71:0a:7c:7e:13:51:e2:4d:7d:08:4b:8b:6d: 93:8f:3e:3f:51:1e:4b:4b:ba:e5:0a:7c:b3:7c:ea:d9:09:6c: d2:0b:c5:23 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQg/V21HKjYzjt3daIeIvwxf9j7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDgxMzI2NDZaFw0yNzA0MDcxMzMxNDZaMDMxMTAvBgNV BAMTKDdBRkZDQ0M1MjAyRkRCQjFDOUMyNDBFNzBGRDU0Q0NBMzdCRDlFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHxUGym1u7SeB6Z9tV0azECry RHQ6YmLm6toHS6T+fDM4QR3rGC9T5fC2wmcP1HTYUoOZU0oZ4oS8irbSZwYCvwbQ 0ZSlyL/2LJrC5J1WM38hQMgOqHgkMbc0l9FvGp3qiDFC1/X5q3jhpemHPhqldags pLGRXZJKCrYp9Z+FSBYu+OCKcHDfNdT1wkG05oSTGhG0MTF8fCguUhX/xpfTrMPg jxrbrbVZPpyI5SyEXa6qaXCXs5ZBFPXnsIksJINnCy36vuDgFFFBIuI6933C7gyf QxZ/O7tEsDcd0kukZyAvtu6MZdW8FCjeqW1rATWUGLuj3iH1VU2pws88N9iRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6/8zFIC/bscnC QOcP1UzKN72eUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU1l NzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpRQjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN ZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAvN0FG RkNDQzUyMDJGREJCMUM5QzI0MEU3MEZENTRDQ0EzN0JEOUU1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUvgAwQCyZV8MA0EAgACMAcDBQAoBBpMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxmzANBgkqhkiG9w0BAQsFAAOCAQEAl4A2rxed xeYjWUb3m6gEIF7t6ymSKzx44DKjqacZbJYIpH+/bKYZCPI5a9agUNkUrXyI8KbO FFu3koudX/LuwmGdzKFP5zpmsqNp1bZ6dPlzunGE66huNRXNQ7Zq+CHA4uJgwRMY nLqqyyLgF5DkBMKCdfkppJN9x9oCH9epBw8NhdySQ/egBuxC8sdh54l+SZt/LbRn PcDMQLX4jkTHqPsbB+BQg01skb7VOSA8Fk4GoqMdXe3z/xlI+d+U+Y4uArGe5kaS 1VcCqZ5kWRyOuR5ifdavT2+KQmtgGGFxCnx+E1HiTX0IS4ttk48+P1EeS0u65Qp8 s3zq2Qls0gvFIw== -----END CERTIFICATE-----Generated at Thu Apr 9 12:39:38 2026 by rpki-client