$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer File: 0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer (raw, json) Hash identifier: 0oBTWMB15dJYqGhbdPs2IIrCDtD/b46zV+jXvFhuNRc= Subject key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 740160B89D9A571B9125D80934A4097B68F2C203 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft caRepository: rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 11 Jul 2026 20:49:21 +0000 Certificate not after: Sat 10 Jul 2027 20:54:21 +0000 Subordinate resources: AS: 263349 IP: 189.51.96.0/19 IP: 191.37.16.0/21 IP: 2804:14c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:01:60:b8:9d:9a:57:1b:91:25:d8:09:34:a4:09:7b:68:f2:c2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 11 20:49:21 2026 GMT Not After : Jul 10 20:54:21 2027 GMT Subject: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bf:6a:1e:8d:55:e2:62:e7:84:fd:b3:86:80: 2a:e9:8e:6f:40:e2:1b:2f:c5:99:23:ea:e6:91:0a: 6f:02:08:30:02:bd:01:35:64:73:f7:7f:10:2b:77: 03:18:40:5a:67:6e:ef:f8:ed:46:52:46:9c:6f:29: ed:37:3f:96:91:7a:e4:11:98:01:27:11:31:98:6f: 4d:2f:79:0a:a7:d9:fd:6e:e3:30:42:49:7d:d8:12: 74:ca:5a:06:b3:2e:92:ba:5b:dc:c9:79:4f:e4:7e: f8:79:83:8c:4b:ad:74:d9:ee:b2:29:00:32:ec:e0: 14:88:de:ba:48:6e:e9:f0:18:d6:97:95:10:21:21: 1f:4e:a8:81:37:29:80:e6:f6:8b:39:fa:f7:7d:af: ce:af:75:35:f0:22:64:d0:d8:92:6a:95:97:13:ec: e9:68:32:d7:16:d2:9d:6c:9e:8c:33:fa:d8:63:8e: 87:f1:64:ca:6c:7d:05:5b:0a:3f:80:63:0f:90:a4: a2:85:b8:a8:88:19:e6:b1:cd:ec:a9:ad:a9:6d:71: dc:6c:dc:5c:f4:74:19:d6:8d:e6:dd:32:25:92:e7: a7:8d:24:6b:4c:02:aa:70:50:73:ca:15:e2:44:b9: 20:70:0b:32:8e:3d:d8:03:97:d5:79:36:6c:83:fb: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.51.96.0/19 191.37.16.0/21 IPv6: 2804:14c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263349 Signature Algorithm: sha256WithRSAEncryption 7e:fb:1f:18:2e:33:de:58:2d:7c:bd:c0:39:da:94:f3:cf:d3: f8:42:b9:04:44:0f:db:6d:d7:2a:cf:88:a2:17:23:87:74:be: 92:13:fc:63:a4:a1:9b:4a:66:44:94:85:f6:d6:d8:00:ec:b4: c2:8d:8d:78:bd:dd:49:ad:bd:6b:19:28:43:92:cc:96:18:07: 3a:10:0f:28:ae:62:43:6a:95:e6:df:50:cc:d0:36:65:45:18: dd:92:a6:21:8b:3b:df:48:70:ab:1d:ec:01:0c:6a:f0:89:37: 9e:39:b0:08:89:fe:e5:6f:ec:ce:76:b0:ab:ac:b1:98:3d:f3: fb:10:9a:b4:e4:fb:c1:ec:00:35:c0:a4:03:d9:19:0f:05:c6: 07:ee:e3:d2:09:ec:d7:10:13:fc:60:dd:b2:ce:ec:2b:ca:91: 4f:4a:a3:08:99:98:86:57:4e:34:d2:c0:63:ce:8e:a3:e0:de: 26:fc:9b:ef:6f:70:52:c6:94:9d:f1:54:eb:eb:6e:b2:dc:2a: ae:b6:48:5b:4f:e2:db:53:1b:a3:6d:79:5e:84:94:9a:71:e1: 8d:44:7d:56:3e:a8:0c:b4:81:ca:4a:b7:5a:05:20:c4:bd:f5: bc:3a:4e:0a:0d:6d:2d:65:0b:4a:0c:65:62:e6:59:7b:0d:34: bf:d2:13:4e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdAFguJ2aVxuRJdgJNKQJe2jywgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTEyMDQ5MjFaFw0yNzA3MTAyMDU0MjFaMDMxMTAvBgNV BAMTKDBGMDdDRTVDQjYwNzc5RTgxQ0QyREUwNzlERkNDNENBRUFEODVBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvv2oejVXiYueE/bOGgCrpjm9A 4hsvxZkj6uaRCm8CCDACvQE1ZHP3fxArdwMYQFpnbu/47UZSRpxvKe03P5aReuQR mAEnETGYb00veQqn2f1u4zBCSX3YEnTKWgazLpK6W9zJeU/kfvh5g4xLrXTZ7rIp ADLs4BSI3rpIbunwGNaXlRAhIR9OqIE3KYDm9os5+vd9r86vdTXwImTQ2JJqlZcT 7OloMtcW0p1snowz+thjjofxZMpsfQVbCj+AYw+QpKKFuKiIGeaxzeypraltcdxs 3Fz0dBnWjebdMiWS56eNJGtMAqpwUHPKFeJEuSBwCzKOPdgDl9V5NmyD+4XjAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPB85ctgd56BzS 3ged/MTK6tha2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHQ0 dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlrbk0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h0 NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAvMEYw N0NFNUNCNjA3NzlFODFDRDJERTA3OURGQ0M0Q0FFQUQ4NUFEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQFvTNgAwQDvyUQMA0EAgACMAcDBQAoBBTEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEtTANBgkqhkiG9w0BAQsFAAOCAQEAfvsfGC4z 3lgtfL3AOdqU88/T+EK5BEQP223XKs+Iohcjh3S+khP8Y6Shm0pmRJSF9tbYAOy0 wo2NeL3dSa29axkoQ5LMlhgHOhAPKK5iQ2qV5t9QzNA2ZUUY3ZKmIYs730hwqx3s AQxq8Ik3njmwCIn+5W/sznawq6yxmD3z+xCatOT7wewANcCkA9kZDwXGB+7j0gns 1xAT/GDdss7sK8qRT0qjCJmYhldONNLAY86Oo+DeJvyb729wUsaUnfFU6+tustwq rrZIW0/i21Mbo215XoSUmnHhjUR9Vj6oDLSBykq3WgUgxL31vDpOCg1tLWULSgxl YuZZew00v9ITTg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:00 2026 by rpki-client