$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer File: C8232E7ADA2149C400868144F5DA83930BC26309.cer (raw, json) Hash identifier: uNTg+s/ftM/eKZwDQpAwpvhcoYDfhu/lRKZqoAigJHY= Subject key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C898065F6BDE5B05C89C9B075E54E7228C73EB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft caRepository: rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 05 Apr 2026 23:29:12 +0000 Certificate not after: Sun 04 Apr 2027 23:34:12 +0000 Subordinate resources: AS: 262566 IP: 177.73.72.0/22 IP: 177.129.184.0/21 IP: 2804:3f10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 14:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:89:80:65:f6:bd:e5:b0:5c:89:c9:b0:75:e5:4e:72:28:c7:3e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 23:29:12 2026 GMT Not After : Apr 4 23:34:12 2027 GMT Subject: CN=C8232E7ADA2149C400868144F5DA83930BC26309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:93:f0:ab:3a:79:14:d6:c5:68:0d:d1:fe: 49:e3:9c:e3:a6:8f:3a:76:8a:59:e4:42:50:03:f8: 4d:54:98:6f:1c:28:aa:df:71:6c:e6:2d:0d:9e:06: 56:32:39:bb:a7:92:38:42:0c:8b:11:c5:d9:c8:36: b2:34:52:69:37:df:55:41:2a:c9:66:2e:15:93:66: 18:42:0e:28:59:0c:48:f2:90:c7:8c:c7:72:02:96: 02:1c:c8:a6:d2:a6:3a:c8:cd:11:d8:57:57:e9:0f: 8b:e9:54:8b:be:ef:31:40:b5:1c:cc:17:fe:d2:38: d5:54:29:eb:a6:e6:5c:81:17:51:af:4c:20:99:40: 5b:96:11:0c:19:44:53:f0:d6:26:74:6c:66:40:c5: 6a:5d:c1:28:3b:ee:2a:32:ee:68:e4:18:13:2d:7b: 97:0d:58:72:de:06:ea:e3:3c:90:e5:40:ff:af:37: 89:43:ed:b5:9d:b3:93:3b:d7:d7:33:7d:11:6a:22: f1:10:f6:f7:bc:12:22:14:38:eb:99:13:89:d6:0d: a5:80:4a:7a:22:8b:e0:b5:18:ff:30:3c:41:a8:49: 4c:d1:c4:25:73:cc:b6:74:f9:1f:9e:f0:da:86:1f: f1:58:1b:58:b0:4d:a2:a6:29:19:2f:55:13:fb:85: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.72.0/22 177.129.184.0/21 IPv6: 2804:3f10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262566 Signature Algorithm: sha256WithRSAEncryption 75:02:3e:bf:b1:5e:b4:61:84:97:bb:f2:db:6f:01:2b:30:8b: 2d:a9:74:50:44:f9:0d:78:4d:fb:6a:73:3b:67:bd:e1:da:8b: cc:5e:e0:30:48:04:14:be:ef:b3:77:43:34:dd:f4:27:f9:6f: 26:7b:c9:18:e6:cd:4a:8c:a9:28:d2:fd:29:65:95:98:8a:b3: 43:bb:88:f1:a2:ee:5b:67:a5:25:da:14:2f:38:93:f2:ed:d7: 34:ad:83:af:93:42:ad:5c:09:c4:f9:2a:01:65:25:6c:9b:57: c1:79:10:b7:e0:3a:c7:25:9e:8d:7d:8a:6a:3b:67:fc:37:dc: 82:cb:86:4e:13:50:72:93:50:78:89:99:1e:0a:a8:22:eb:a2: c4:9c:de:2b:be:94:5b:cf:9f:08:e6:53:83:68:52:23:64:96: 52:c7:52:8f:08:d5:9b:57:39:3e:ee:b6:77:c1:e9:60:21:a5: a1:c0:89:45:1b:bb:7b:9a:ae:dd:51:42:77:9b:5e:79:fa:3f: 95:cd:50:92:1d:50:77:a0:4e:ad:36:4f:93:8e:19:e5:25:fb: cf:0b:5d:24:7e:c5:5a:91:57:0b:be:ce:77:7f:b3:a0:cf:79: a2:9d:08:4a:69:ff:52:6e:2e:7f:8e:3d:42:47:47:9a:05:ca: 70:36:ab:d0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfImAZfa95bBcicmwdeVOcijHPrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDUyMzI5MTJaFw0yNzA0MDQyMzM0MTJaMDMxMTAvBgNV BAMTKEM4MjMyRTdBREEyMTQ5QzQwMDg2ODE0NEY1REE4MzkzMEJDMjYzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG5Pwqzp5FNbFaA3R/knjnOOm jzp2ilnkQlAD+E1UmG8cKKrfcWzmLQ2eBlYyObunkjhCDIsRxdnINrI0Umk331VB KslmLhWTZhhCDihZDEjykMeMx3IClgIcyKbSpjrIzRHYV1fpD4vpVIu+7zFAtRzM F/7SONVUKeum5lyBF1GvTCCZQFuWEQwZRFPw1iZ0bGZAxWpdwSg77ioy7mjkGBMt e5cNWHLeBurjPJDlQP+vN4lD7bWds5M719czfRFqIvEQ9ve8EiIUOOuZE4nWDaWA Snoii+C1GP8wPEGoSUzRxCVzzLZ0+R+e8NqGH/FYG1iwTaKmKRkvVRP7hQw1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIIy562iFJxACG gUT12oOTC8JjCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHVt aFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29GVHcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1 bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEvQzgy MzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMwQkMyNjMwOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUlIAwQDsYG4MA0EAgACMAcDBQAoBD8QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBpjANBgkqhkiG9w0BAQsFAAOCAQEAdQI+v7Fe tGGEl7vy228BKzCLLal0UET5DXhN+2pzO2e94dqLzF7gMEgEFL7vs3dDNN30J/lv JnvJGObNSoypKNL9KWWVmIqzQ7uI8aLuW2elJdoULziT8u3XNK2Dr5NCrVwJxPkq AWUlbJtXwXkQt+A6xyWejX2Kajtn/DfcgsuGThNQcpNQeImZHgqoIuuixJzeK76U W8+fCOZTg2hSI2SWUsdSjwjVm1c5Pu62d8HpYCGlocCJRRu7e5qu3VFCd5teefo/ lc1Qkh1Qd6BOrTZPk44Z5SX7zwtdJH7FWpFXC77Od3+zoM95op0ISmn/Um4uf449 QkdHmgXKcDar0A== -----END CERTIFICATE-----Generated at Thu Apr 9 12:49:08 2026 by rpki-client