$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer File: 8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer (raw, json) Hash identifier: 1g2sRiJ5Z4tnYNHBNRmaHoRHMIH4m2uHG3/l0jCgwWc= Subject key identifier: 8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17B1A750A079A64968DEB8367F55F485E74CEC4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft caRepository: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 21:35:46 +0000 Certificate not after: Tue 06 Apr 2027 21:40:46 +0000 Subordinate resources: AS: 269446 IP: 45.186.184.0/22 IP: 2804:64c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b1:a7:50:a0:79:a6:49:68:de:b8:36:7f:55:f4:85:e7:4c:ec:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 21:35:46 2026 GMT Not After : Apr 6 21:40:46 2027 GMT Subject: CN=8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:a4:6b:da:55:8c:07:d1:fe:56:af:17:1b: 0d:60:c0:34:c4:88:d2:01:7a:cb:e9:87:eb:f7:cd: 44:4c:e8:a0:ad:1d:68:f4:a9:2e:a9:48:99:df:00: 95:07:68:84:1e:b3:51:0b:73:c8:f4:1f:26:94:62: 9f:0b:35:26:07:ae:e6:50:dc:2f:d8:12:8e:78:46: fe:20:a5:b9:98:0f:13:30:58:ef:9a:0c:a1:0d:5f: b5:9c:62:91:fe:5f:56:e8:c3:ee:6c:df:de:72:75: af:de:c5:cf:da:76:33:74:b6:69:97:d9:b9:a5:24: 4a:e3:21:e9:ec:99:91:53:b9:b4:44:80:fc:51:bf: 8a:4a:7d:56:d9:10:15:bd:c2:7d:6e:0c:66:a7:8c: 7f:7a:e8:6f:63:04:b8:ba:24:e3:a7:59:29:4b:b0: 09:ee:80:72:44:6f:4a:22:e1:6c:ad:af:a0:b2:94: 22:5b:15:c7:ef:07:7f:5e:14:bc:76:fd:ea:dc:10: 33:ea:35:ff:e3:28:00:9e:7b:12:aa:ce:c1:11:44: fa:f5:48:a3:27:50:7a:1f:57:97:24:f4:1c:be:4b: 17:9a:d6:af:5a:b0:4e:a5:9f:16:81:6d:10:9b:46: ac:30:e9:14:2e:62:c2:60:2b:b9:86:64:05:2e:89: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.184.0/22 IPv6: 2804:64c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269446 Signature Algorithm: sha256WithRSAEncryption c3:d9:0e:38:8d:9e:35:f4:a7:a8:1d:9d:df:a7:0d:75:05:82: 33:a8:1c:a6:ad:8b:a1:1a:93:90:91:ac:e8:c4:e0:ed:ea:41: 91:eb:05:30:d7:6b:85:21:88:f5:20:b0:75:4a:e6:33:60:91: be:97:a7:ba:40:bb:09:b0:ed:b9:79:23:d9:86:e8:cf:fb:8b: a1:fa:b1:74:6e:c3:3c:e6:4a:17:9d:7e:17:e7:d6:36:e3:f3: b4:52:73:37:42:de:7b:78:10:8f:8a:61:50:fa:14:c5:22:4b: 18:09:f8:9c:71:fb:eb:99:52:ce:a6:d9:e4:e6:90:8d:6b:10: 17:80:38:f4:2a:1a:7c:85:30:6c:44:92:96:8b:b2:47:8a:7b: 69:3d:3c:5b:34:25:2d:07:54:fe:62:a3:9b:ef:cb:15:ef:a4: e2:06:30:f8:cd:1f:41:2d:45:71:71:bf:19:b6:ec:e1:52:23: 0e:c8:1d:72:3f:e2:3a:22:c6:42:e9:32:a6:c2:cd:9a:65:9b: 72:6a:4b:e8:70:d0:2b:2a:dc:d9:90:bf:6d:0e:d3:d1:cb:c5: b6:16:c0:d7:f0:7f:b3:3e:d4:4c:ba:91:7f:db:4e:b3:77:5f: 09:1c:79:ec:52:d1:8d:3e:05:c4:aa:74:75:ee:f8:00:fa:21: 08:44:f8:cb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUF7GnUKB5pklo3rg2f1X0hedM7E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcyMTM1NDZaFw0yNzA0MDYyMTQwNDZaMDMxMTAvBgNV BAMTKDhBQTdGQzgwQ0VFOERCN0FBOUVGODUwRjg2RUFGQUIyMjJFQkIwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X6Rr2lWMB9H+Vq8XGw1gwDTE iNIBesvph+v3zURM6KCtHWj0qS6pSJnfAJUHaIQes1ELc8j0HyaUYp8LNSYHruZQ 3C/YEo54Rv4gpbmYDxMwWO+aDKENX7WcYpH+X1bow+5s395yda/exc/adjN0tmmX 2bmlJErjIensmZFTubREgPxRv4pKfVbZEBW9wn1uDGanjH966G9jBLi6JOOnWSlL sAnugHJEb0oi4Wytr6CylCJbFcfvB39eFLx2/ercEDPqNf/jKACeexKqzsERRPr1 SKMnUHofV5ck9By+Sxea1q9asE6lnxaBbRCbRqww6RQuYsJgK7mGZAUuiUZpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKp/yAzujbeqnv hQ+G6vqyIuuw+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmtL c1h6M0hndFpRQndTZ3I2N2hhc0R2NVlRd3BZdHlRWXRuUGpGUFdqcEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zr S3NYejNIZ3RaUUJ3U2dyNjdoYXNEdjVZUXdwWXR5UVl0blBqRlBXanBKLzAvOEFB N0ZDODBDRUU4REI3QUE5RUY4NTBGODZFQUZBQjIyMkVCQjBGOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbq4MA0EAgACMAcDBQAoBGTAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQchjANBgkqhkiG9w0BAQsFAAOCAQEAw9kOOI2eNfSnqB2d 36cNdQWCM6gcpq2LoRqTkJGs6MTg7epBkesFMNdrhSGI9SCwdUrmM2CRvpenukC7 CbDtuXkj2Yboz/uLofqxdG7DPOZKF51+F+fWNuPztFJzN0Lee3gQj4phUPoUxSJL GAn4nHH765lSzqbZ5OaQjWsQF4A49CoafIUwbESSlouyR4p7aT08WzQlLQdU/mKj m+/LFe+k4gYw+M0fQS1FcXG/Gbbs4VIjDsgdcj/iOiLGQukypsLNmmWbcmpL6HDQ Kyrc2ZC/bQ7T0cvFthbA1/B/sz7UTLqRf9tOs3dfCRx57FLRjT4FxKp0de74APoh CET4yw== -----END CERTIFICATE-----Generated at Thu Apr 9 12:40:43 2026 by rpki-client