$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer File: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer (raw, json) Hash identifier: 8kVWkTgLOusllnKipo8rCs1Efxj2XHQ+4E4bKsxM0bg= Subject key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4ACAF3E21C2B3012EB075D1CE2AB73E3D7C32DFA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft caRepository: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Mar 2026 12:17:35 +0000 Certificate not after: Mon 08 Mar 2027 12:22:35 +0000 Subordinate resources: AS: 274673 IP: 168.195.142.0/23 IP: 2804:91e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 02:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:f3:e2:1c:2b:30:12:eb:07:5d:1c:e2:ab:73:e3:d7:c3:2d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 9 12:17:35 2026 GMT Not After : Mar 8 12:22:35 2027 GMT Subject: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3d:6c:9f:c0:3d:bf:2c:6e:07:79:6f:fb:f5: 19:8e:cf:69:90:a4:6c:c1:06:5b:38:8a:04:01:e2: af:d7:55:8b:6f:3d:dc:00:2b:c8:3b:71:fb:45:80: 06:49:54:92:e7:80:e6:d0:f1:3c:c6:ec:49:b5:08: d4:75:99:fe:a2:9b:d2:97:f2:d4:47:d7:ce:d7:f5: 03:e1:35:8d:bd:93:e6:d3:6e:e8:e5:d9:97:b8:50: 51:2b:67:d5:d7:d0:09:4d:49:81:80:93:56:ff:6c: 13:f3:a1:aa:3b:4b:8b:72:88:67:3e:6d:c9:b6:33: 74:de:61:36:6b:c8:89:bf:5a:0e:23:03:34:6a:0b: 5c:d8:5b:7e:6e:ab:10:49:08:7f:1f:f3:9a:30:18: 40:ac:69:f6:d9:db:49:aa:72:e6:8d:fa:68:da:c0: 76:62:13:b9:6d:45:a3:42:b9:5c:4b:d4:33:67:f8: 12:6b:6c:66:bb:92:65:cf:1d:68:cb:1d:ea:32:1a: 56:83:b4:2d:b9:ee:7c:8c:de:70:45:57:94:0a:ac: 54:85:bb:bc:62:4a:a9:bc:95:a9:4a:d3:83:d3:85: 69:a6:9e:60:86:2f:75:78:67:8b:3f:fc:65:d8:44: b4:86:f5:21:62:c7:e9:8c:55:09:96:5c:c2:74:06: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.142.0/23 IPv6: 2804:91e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274673 Signature Algorithm: sha256WithRSAEncryption 4c:59:cb:d9:23:4c:97:8d:ef:98:5f:9d:38:f1:1d:d1:53:56: 0f:31:80:dd:3c:8e:3f:ac:17:3e:d7:cc:de:2f:f8:d8:7e:d3: d4:14:1c:a1:2f:a0:1c:63:5d:27:1c:83:4a:fe:2f:a9:04:a7: bd:7e:d3:5b:88:9c:b4:b0:f8:4c:c4:85:73:a1:d3:7a:9d:db: c3:dd:4f:83:eb:40:f2:1d:98:33:22:5b:7d:af:30:1d:1a:47: 25:19:98:e2:2d:c3:65:21:0b:ad:be:c0:20:40:24:d3:9a:de: 2c:2e:d8:f6:fb:30:e0:8a:22:11:8b:3c:e6:81:10:b4:47:ff: d0:36:60:4c:7f:f1:4f:cc:79:98:9f:69:1b:1c:08:9e:2f:21: 39:38:bd:f7:5f:53:8d:8a:c4:bb:8e:3b:cf:71:93:67:dc:36: 63:04:ef:5b:0d:73:ec:13:48:79:21:ae:56:95:07:de:36:ae: da:9a:f7:84:18:43:ab:79:52:33:74:d7:45:d8:ba:5f:59:b6: e4:fe:66:c8:75:f4:88:18:04:5d:fa:79:91:d0:c5:bc:2f:b5: f5:68:0e:5f:0d:a3:18:7c:3f:8f:de:e1:35:71:ec:d0:74:be: 21:69:60:db:d9:01:c4:34:55:f6:96:9b:be:7e:6c:92:fb:17: c2:3b:f3:8e -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUSsrz4hwrMBLrB10c4qtz49fDLfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDkxMjE3MzVaFw0yNzAzMDgxMjIyMzVaMDMxMTAvBgNV BAMTKDE3QUU4QUJDNzAzRkE4NTg2ODA5RDREODdFQjVDNjQ1Mjc4OEE5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyPWyfwD2/LG4HeW/79RmOz2mQ pGzBBls4igQB4q/XVYtvPdwAK8g7cftFgAZJVJLngObQ8TzG7Em1CNR1mf6im9KX 8tRH187X9QPhNY29k+bTbujl2Ze4UFErZ9XX0AlNSYGAk1b/bBPzoao7S4tyiGc+ bcm2M3TeYTZryIm/Wg4jAzRqC1zYW35uqxBJCH8f85owGECsafbZ20mqcuaN+mja wHZiE7ltRaNCuVxL1DNn+BJrbGa7kmXPHWjLHeoyGlaDtC257nyM3nBFV5QKrFSF u7xiSqm8lalK04PThWmmnmCGL3V4Z4s//GXYRLSG9SFix+mMVQmWXMJ0Bn97AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXroq8cD+oWGgJ 1Nh+tcZFJ4ip7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2lF RXpVNm1ZbU5xaUNhVDR2bnQ0VUY0bmN5WjlWaHpUMmJmVnlVVWUzaS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2lF RXpVNm1ZbU5xaUNhVDR2bnQ0VUY0bmN5WjlWaHpUMmJmVnlVVWUzaS8wLzE3QUU4 QUJDNzAzRkE4NTg2ODA5RDREODdFQjVDNjQ1Mjc4OEE5RUUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAajDjjANBAIAAjAHAwUAKASR5DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEMPEwDQYJKoZIhvcNAQELBQADggEBAExZy9kjTJeN75hfnTjx HdFTVg8xgN08jj+sFz7XzN4v+Nh+09QUHKEvoBxjXSccg0r+L6kEp71+01uInLSw +EzEhXOh03qd28PdT4PrQPIdmDMiW32vMB0aRyUZmOItw2UhC62+wCBAJNOa3iwu 2Pb7MOCKIhGLPOaBELRH/9A2YEx/8U/MeZifaRscCJ4vITk4vfdfU42KxLuOO89x k2fcNmME71sNc+wTSHkhrlaVB942rtqa94QYQ6t5UjN010XYul9ZtuT+Zsh19IgY BF36eZHQxbwvtfVoDl8Noxh8P4/e4TVx7NB0viFpYNvZAcQ0VfaWm75+bJL7F8I7 844= -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:10 2026 by rpki-client