$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1E84C1587DE72274D961A06C29C8E5F1200F85D.cer File: C1E84C1587DE72274D961A06C29C8E5F1200F85D.cer (raw, json) Hash identifier: 23w1Qc8TOXs/FWnaMW5H1r36Hxr8GWLAynEkgvaW/xU= Subject key identifier: C1:E8:4C:15:87:DE:72:27:4D:96:1A:06:C2:9C:8E:5F:12:00:F8:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17A8156753B4BF16ABFDA84CDFEA47A6A9A8E21B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/C1E84C1587DE72274D961A06C29C8E5F1200F85D.mft caRepository: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 28 Jun 2026 05:21:05 +0000 Certificate not after: Sun 27 Jun 2027 05:26:05 +0000 Subordinate resources: AS: 264300 IP: 138.121.132.0/22 IP: 170.244.112.0/22 IP: 2804:25c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a8:15:67:53:b4:bf:16:ab:fd:a8:4c:df:ea:47:a6:a9:a8:e2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 28 05:21:05 2026 GMT Not After : Jun 27 05:26:05 2027 GMT Subject: CN=C1E84C1587DE72274D961A06C29C8E5F1200F85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:74:4e:9e:03:0f:3f:ee:3e:be:69:a4:e1: d8:09:24:e5:49:dc:e6:1c:17:8a:ed:c8:0f:a6:aa: d9:4d:88:3c:e1:00:37:ad:42:f9:50:d3:ba:9d:67: 57:31:11:82:fe:dd:d6:0a:2d:e8:aa:82:86:d8:cd: b9:39:b5:66:e5:ff:0d:28:4e:de:5b:f6:5d:74:55: d7:b9:82:d0:41:14:f4:56:c8:3b:84:25:21:75:e3: b1:83:4e:6c:88:9a:8c:25:8d:8d:89:8a:e1:09:a2: d7:99:2a:64:a3:19:84:83:30:22:bb:e9:b2:94:82: eb:3a:f8:c1:cf:8a:19:c7:31:d5:a9:b4:e0:2c:5e: f0:f4:6f:35:a4:70:74:d0:3e:85:8a:bd:be:31:be: 42:f9:43:96:0a:9e:f5:98:ed:c3:dd:9e:2d:00:0d: b8:4d:e1:1b:6d:99:25:89:ae:c9:32:4c:3f:9c:ae: 33:95:16:ff:b0:8b:70:c9:6f:c8:4d:7e:25:e6:af: aa:96:12:1e:1c:75:96:93:5c:a2:cd:a1:c5:16:dd: 89:bd:f0:ff:8d:4a:5e:34:0e:9d:c0:91:72:6a:97: 89:f5:af:41:3a:91:e1:ac:59:32:0d:74:8b:92:b0: aa:0d:0d:31:ad:a4:75:fb:75:79:ea:98:6e:64:fb: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:E8:4C:15:87:DE:72:27:4D:96:1A:06:C2:9C:8E:5F:12:00:F8:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/C1E84C1587DE72274D961A06C29C8E5F1200F85D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.132.0/22 170.244.112.0/22 IPv6: 2804:25c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264300 Signature Algorithm: sha256WithRSAEncryption 4c:20:5e:5d:bb:76:f0:88:f3:6a:25:11:83:96:d9:57:33:77: f4:bb:00:f1:11:ee:0a:29:83:3b:b4:06:57:c2:3b:9d:43:73: 71:db:89:55:33:65:4e:83:e5:d5:37:63:d7:53:1d:eb:4f:73: 97:aa:ce:73:f3:61:0c:73:0e:5b:da:aa:22:21:ac:b6:a0:e9: 92:10:8c:60:db:ef:b1:65:b4:59:b4:1d:67:f9:32:a3:38:33: 4c:37:ed:4f:9b:95:38:eb:a2:d1:4e:62:18:e2:db:c6:5f:1f: 0d:62:9f:77:a9:ec:69:cb:af:b3:73:08:48:4f:0f:75:cc:ba: 39:76:b8:65:5b:ea:4a:40:3c:0f:7c:ab:fe:bb:f9:9e:06:79: a5:19:8c:74:9c:3d:77:60:da:b7:fa:37:de:f5:ca:5a:85:d7: 64:6a:fe:cd:1d:5d:3f:64:ec:4d:e3:54:5f:5d:1b:5a:b4:a8: cd:88:05:b6:2d:7e:ac:1a:5d:38:e1:1d:7d:a3:2e:b1:6d:fa: 64:17:7b:b6:29:2b:ca:e8:e9:25:09:4f:b1:82:f5:cd:ba:4e: f0:28:54:db:80:56:49:a7:79:d8:f8:9e:5d:cb:2c:9d:62:39: de:08:6a:5c:f5:fd:83:70:f4:5c:2b:a3:80:0d:97:c3:4c:a0: 21:9a:0d:81 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUF6gVZ1O0vxar/ahM3+pHpqmo4hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjgwNTIxMDVaFw0yNzA2MjcwNTI2MDVaMDMxMTAvBgNV BAMTKEMxRTg0QzE1ODdERTcyMjc0RDk2MUEwNkMyOUM4RTVGMTIwMEY4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QHROngMPP+4+vmmk4dgJJOVJ 3OYcF4rtyA+mqtlNiDzhADetQvlQ07qdZ1cxEYL+3dYKLeiqgobYzbk5tWbl/w0o Tt5b9l10Vde5gtBBFPRWyDuEJSF147GDTmyImowljY2JiuEJoteZKmSjGYSDMCK7 6bKUgus6+MHPihnHMdWptOAsXvD0bzWkcHTQPoWKvb4xvkL5Q5YKnvWY7cPdni0A DbhN4RttmSWJrskyTD+crjOVFv+wi3DJb8hNfiXmr6qWEh4cdZaTXKLNocUW3Ym9 8P+NSl40Dp3AkXJql4n1r0E6keGsWTINdIuSsKoNDTGtpHX7dXnqmG5k+xjvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB6EwVh95yJ02W GgbCnI5fEgD4XTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmIy MzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ji MjM1dnlYVTdmRGlSUWlYeGJXUE1KTFJhaXM1ZlhCazhGSnpkVGdEbXlULzAvQzFF ODRDMTU4N0RFNzIyNzREOTYxQTA2QzI5QzhFNUYxMjAwRjg1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinmEAwQCqvRwMA0EAgACMAcDBQAoBCXAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIbDANBgkqhkiG9w0BAQsFAAOCAQEATCBeXbt2 8IjzaiURg5bZVzN39LsA8RHuCimDO7QGV8I7nUNzcduJVTNlToPl1Tdj11Md609z l6rOc/NhDHMOW9qqIiGstqDpkhCMYNvvsWW0WbQdZ/kyozgzTDftT5uVOOui0U5i GOLbxl8fDWKfd6nsacuvs3MISE8Pdcy6OXa4ZVvqSkA8D3yr/rv5ngZ5pRmMdJw9 d2Dat/o33vXKWoXXZGr+zR1dP2TsTeNUX10bWrSozYgFti1+rBpdOOEdfaMusW36 ZBd7tikryujpJQlPsYL1zbpO8ChU24BWSad52PieXcssnWI53ghqXPX9g3D0XCuj gA2Xw0ygIZoNgQ== -----END CERTIFICATE-----Generated at Wed Jul 8 15:18:19 2026 by rpki-client