$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer File: E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer (raw, json) Hash identifier: cMD+YA9cqaF34Zjem4SuJ0Ccj0updzR3FlKtXiOgcr4= Subject key identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 34603F40866EEBC7571C2EC57DB1D5E8A1293F85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft caRepository: rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 31 Mar 2026 03:47:20 +0000 Certificate not after: Tue 30 Mar 2027 03:52:20 +0000 Subordinate resources: AS: 264508 IP: 132.255.152.0/22 IP: 167.249.64.0/22 IP: 168.196.4.0/22 IP: 2804:20b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 09:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:60:3f:40:86:6e:eb:c7:57:1c:2e:c5:7d:b1:d5:e8:a1:29:3f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 31 03:47:20 2026 GMT Not After : Mar 30 03:52:20 2027 GMT Subject: CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:72:12:19:7d:d0:f7:f3:43:18:1e:ce:39: 97:dc:6a:71:d0:75:58:c8:df:88:66:8a:31:51:3b: 32:71:d3:ef:6e:cd:30:6e:5d:a4:c8:82:6b:51:f5: 01:89:9d:27:5a:7c:f6:b5:56:b2:c0:92:1f:96:bd: f5:51:a7:fd:38:68:16:a7:ab:9b:71:fc:e4:02:3e: 49:eb:41:cf:88:a4:00:5f:9b:09:59:02:12:4d:b0: 57:ab:81:a8:cb:cb:2c:e8:3d:21:37:89:48:bd:38: 59:df:e4:d2:38:44:5f:5b:d6:28:66:70:be:ec:25: e1:3f:01:ab:cc:b5:fe:5f:62:9c:f6:18:7c:fd:54: 81:cd:7c:bb:03:91:3c:20:b8:9b:db:9d:05:95:eb: 00:fd:26:11:62:07:36:96:4f:8b:88:21:d6:33:7a: c9:0b:27:20:4d:50:32:e2:fd:bc:48:b6:77:6a:e9: 73:be:19:e4:e8:47:3f:e7:d9:ee:7b:c7:7b:a4:10: be:68:dc:23:76:19:71:ba:78:5d:a0:16:4d:90:84: 21:96:28:07:50:5f:99:85:9b:0e:8c:20:40:00:a9: 7f:b6:a1:22:6b:25:b9:e0:bc:a0:d2:cf:3a:a0:d6: 3e:93:02:44:2f:fd:71:95:a5:cc:72:69:7d:d7:fc: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.152.0/22 167.249.64.0/22 168.196.4.0/22 IPv6: 2804:20b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264508 Signature Algorithm: sha256WithRSAEncryption 71:d9:ee:0a:7b:14:82:37:5b:fa:9c:13:66:1a:8b:e4:a8:2b: 4e:fe:04:8a:59:f6:50:ab:04:2f:80:5b:91:6f:d6:b7:97:d8: 53:0b:f3:49:9b:e0:0c:4e:be:0d:cf:f5:36:47:77:96:0e:47: 69:73:86:fa:8d:a2:35:3e:5b:e3:80:bd:cf:4c:4d:c3:c0:12: e4:57:f6:c2:f8:9d:7f:6b:13:43:f9:b4:e1:21:08:90:ae:c6: ec:dd:17:36:96:80:03:b6:6d:29:bb:85:d5:be:08:60:89:21: 62:f8:7c:2e:76:0c:0f:ef:d9:a5:fd:49:a5:f5:59:9d:52:c6: ae:49:dd:54:38:9f:2a:9a:4a:06:a1:ee:57:a6:fc:73:fe:49: 41:cb:d9:bf:8e:3e:f1:6a:59:65:97:83:31:d4:51:eb:ac:6e: da:d7:63:6a:70:20:00:0d:20:68:7a:6b:c5:39:bf:c1:dd:53: 59:09:4c:e9:f6:9e:31:1b:d5:34:b2:0a:1e:24:bd:67:06:03: 91:f6:b7:31:f8:0e:06:14:7b:92:a3:68:85:24:f8:fe:1d:67: bc:23:c6:db:91:4b:80:b5:23:40:ef:3b:a4:ce:30:1a:65:18: 92:1f:b6:f0:01:e1:11:62:01:68:95:ee:ef:25:0a:da:85:6f: ef:2e:ac:ef -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIUNGA/QIZu68dXHC7FfbHV6KEpP4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMzEwMzQ3MjBaFw0yNzAzMzAwMzUyMjBaMDMxMTAvBgNV BAMTKEU3RDE5MEE2QjA2RTBDQ0REMDMxMUMxMEUyRjVGQTY0NjFDQzdEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CHISGX3Q9/NDGB7OOZfcanHQ dVjI34hmijFROzJx0+9uzTBuXaTIgmtR9QGJnSdafPa1VrLAkh+WvfVRp/04aBan q5tx/OQCPknrQc+IpABfmwlZAhJNsFergajLyyzoPSE3iUi9OFnf5NI4RF9b1ihm cL7sJeE/AavMtf5fYpz2GHz9VIHNfLsDkTwguJvbnQWV6wD9JhFiBzaWT4uIIdYz eskLJyBNUDLi/bxItndq6XO+GeToRz/n2e57x3ukEL5o3CN2GXG6eF2gFk2QhCGW KAdQX5mFmw6MIEAAqX+2oSJrJbngvKDSzzqg1j6TAkQv/XGVpcxyaX3X/LiVAgMB AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTn0ZCmsG4MzdAx HBDi9fpkYcx9mjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU2RH Q3oxQTRGamdKdzFnUTc1OTJHQTI1YktvV1NQMmNWdEtFQmpYc2R0dy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU2RH Q3oxQTRGamdKdzFnUTc1OTJHQTI1YktvV1NQMmNWdEtFQmpYc2R0dy8wL0U3RDE5 MEE2QjA2RTBDQ0REMDMxMUMxMEUyRjVGQTY0NjFDQzdEOUEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB /wQrMCkwGAQCAAEwEgMEAoT/mAMEAqf5QAMEAqjEBDANBAIAAjAHAwUAKAQgsDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECTwwDQYJKoZIhvcNAQELBQADggEBAHHZ 7gp7FII3W/qcE2Yai+SoK07+BIpZ9lCrBC+AW5Fv1reX2FML80mb4AxOvg3P9TZH d5YOR2lzhvqNojU+W+OAvc9MTcPAEuRX9sL4nX9rE0P5tOEhCJCuxuzdFzaWgAO2 bSm7hdW+CGCJIWL4fC52DA/v2aX9SaX1WZ1Sxq5J3VQ4nyqaSgah7lem/HP+SUHL 2b+OPvFqWWWXgzHUUeusbtrXY2pwIAANIGh6a8U5v8HdU1kJTOn2njEb1TSyCh4k vWcGA5H2tzH4DgYUe5KjaIUk+P4dZ7wjxtuRS4C1I0DvO6TOMBplGJIftvAB4RFi AWiV7u8lCtqFb+8urO8= -----END CERTIFICATE-----Generated at Thu Apr 9 09:46:36 2026 by rpki-client