$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A7DC0F991B842ED005C2708AE3382FEE42A842A.cer File: 1A7DC0F991B842ED005C2708AE3382FEE42A842A.cer (raw, json) Hash identifier: idQlx5T0vY0JLweDQaVJPuvTG84c2QRMvbqiBscNNb8= Subject key identifier: 1A:7D:C0:F9:91:B8:42:ED:00:5C:27:08:AE:33:82:FE:E4:2A:84:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D92BD20D544DDB3CEE235C84E03A0F7E6576467 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JCcsPiECTovmpDmdpL1x5MqeYJawYJLUo7FwEvpZ4e6T/0/1A7DC0F991B842ED005C2708AE3382FEE42A842A.mft caRepository: rsync://rpki-repo.registro.br/repo/JCcsPiECTovmpDmdpL1x5MqeYJawYJLUo7FwEvpZ4e6T/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Apr 2026 12:37:41 +0000 Certificate not after: Thu 29 Apr 2027 12:42:41 +0000 Subordinate resources: AS: 271749 IP: 179.0.194.0/23 IP: 200.10.236.0/23 IP: 2804:806c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 19:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:bd:20:d5:44:dd:b3:ce:e2:35:c8:4e:03:a0:f7:e6:57:64:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 12:37:41 2026 GMT Not After : Apr 29 12:42:41 2027 GMT Subject: CN=1A7DC0F991B842ED005C2708AE3382FEE42A842A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:be:02:7e:48:66:ca:0e:bf:f8:f6:e0:c5: 65:15:14:58:34:09:9c:c6:ee:00:46:ce:3e:8e:8e: 0f:1c:cc:18:42:07:96:a2:75:96:85:a4:e0:a9:d3: 02:bd:58:5f:22:cf:84:ae:b9:92:f9:be:fc:0b:be: 34:6a:b5:07:fe:f4:ff:08:5e:45:50:14:6e:1a:5a: 4b:19:ff:af:80:67:08:47:9d:bd:13:c4:e7:db:6a: 63:14:7d:94:34:2f:d0:16:fe:b7:3d:cf:e6:8b:27: f6:df:15:4d:49:95:d3:03:78:ab:2a:b9:73:bd:67: 11:6d:1f:96:b8:20:b1:da:21:1b:5a:cf:e4:6e:bc: 71:e0:7f:bc:15:2c:23:ad:f5:f5:09:2e:ea:0f:a9: 11:21:0d:92:3d:83:10:7e:24:77:9f:54:d7:f4:f6: 9f:9d:4a:02:56:68:9a:ca:f7:f4:c6:14:a8:71:d8: f3:f2:dd:6d:98:c5:6e:75:07:ca:b0:05:f2:55:67: a9:2b:5f:2d:d5:88:49:7b:d6:35:6e:d0:3e:03:fc: 1c:c7:f4:70:5a:3f:b3:db:73:69:ff:76:1f:91:57: 7d:b8:4e:52:df:20:b3:0f:e6:62:94:ea:0c:e0:94: 55:d1:b7:e9:1b:22:b7:d8:25:e9:b5:84:6d:73:a4: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:7D:C0:F9:91:B8:42:ED:00:5C:27:08:AE:33:82:FE:E4:2A:84:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCcsPiECTovmpDmdpL1x5MqeYJawYJLUo7FwEvpZ4e6T/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCcsPiECTovmpDmdpL1x5MqeYJawYJLUo7FwEvpZ4e6T/0/1A7DC0F991B842ED005C2708AE3382FEE42A842A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.194.0/23 200.10.236.0/23 IPv6: 2804:806c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271749 Signature Algorithm: sha256WithRSAEncryption a7:be:7c:31:74:8f:fe:0e:e4:58:cf:be:51:a6:3f:e7:35:14: 82:ed:db:cb:5a:54:80:fc:43:57:8b:40:e1:9f:7f:54:8d:34: a2:0c:76:19:fb:06:b0:52:21:b0:0c:9f:28:f6:f6:7f:9d:e1: d5:4d:45:d6:6b:e7:86:14:36:b6:14:3a:bd:d4:41:61:67:cf: bb:f7:25:54:14:85:98:9f:79:35:a6:ee:a8:af:b7:f0:26:98: 70:b8:f3:da:f6:90:ed:88:94:6c:c8:76:0b:75:06:32:2a:4b: e7:e5:0b:6e:9b:ab:b9:18:d0:14:95:71:0e:00:e3:ad:5f:e9: a1:5f:f0:0c:5c:05:0f:66:29:9b:91:63:a2:e4:1b:5b:25:01: 24:13:be:0f:42:21:a2:90:0b:03:b0:04:62:79:a0:13:ca:0b: 57:2c:20:78:16:57:57:bd:dc:08:a1:5d:0b:77:02:46:44:1a: de:ca:f1:e6:37:0c:5c:ac:3d:f2:d2:7a:49:a9:f7:f3:80:10: a0:cb:bf:68:b9:ab:b6:67:34:44:36:59:fc:ca:e1:4c:da:14: f5:28:5e:1f:1f:e5:69:e5:21:02:f4:60:2a:d3:aa:89:3d:bb: 92:92:f6:d3:76:0a:7a:c7:4a:13:6a:7a:cc:97:19:58:ec:02: 3e:82:b9:22 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfZK9INVE3bPO4jXITgOg9+ZXZGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MzAxMjM3NDFaFw0yNzA0MjkxMjQyNDFaMDMxMTAvBgNV BAMTKDFBN0RDMEY5OTFCODQyRUQwMDVDMjcwOEFFMzM4MkZFRTQyQTg0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+r4Cfkhmyg6/+PbgxWUVFFg0 CZzG7gBGzj6Ojg8czBhCB5aidZaFpOCp0wK9WF8iz4SuuZL5vvwLvjRqtQf+9P8I XkVQFG4aWksZ/6+AZwhHnb0TxOfbamMUfZQ0L9AW/rc9z+aLJ/bfFU1JldMDeKsq uXO9ZxFtH5a4ILHaIRtaz+RuvHHgf7wVLCOt9fUJLuoPqREhDZI9gxB+JHefVNf0 9p+dSgJWaJrK9/TGFKhx2PPy3W2YxW51B8qwBfJVZ6krXy3ViEl71jVu0D4D/BzH 9HBaP7Pbc2n/dh+RV324TlLfILMP5mKU6gzglFXRt+kbIrfYJem1hG1zpESZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQafcD5kbhC7QBc JwiuM4L+5CqEKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkNj c1BpRUNUb3ZtcERtZHBMMXg1TXFlWUphd1lKTFVvN0Z3RXZwWjRlNlQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pD Y3NQaUVDVG92bXBEbWRwTDF4NU1xZVlKYXdZSkxVbzdGd0V2cFo0ZTZULzAvMUE3 REMwRjk5MUI4NDJFRDAwNUMyNzA4QUUzMzgyRkVFNDJBODQyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQBswDCAwQByArsMA0EAgACMAcDBQAoBIBsMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQlhTANBgkqhkiG9w0BAQsFAAOCAQEAp758MXSP /g7kWM++UaY/5zUUgu3by1pUgPxDV4tA4Z9/VI00ogx2GfsGsFIhsAyfKPb2f53h 1U1F1mvnhhQ2thQ6vdRBYWfPu/clVBSFmJ95NabuqK+38CaYcLjz2vaQ7YiUbMh2 C3UGMipL5+ULbpuruRjQFJVxDgDjrV/poV/wDFwFD2Ypm5FjouQbWyUBJBO+D0Ih opALA7AEYnmgE8oLVywgeBZXV73cCKFdC3cCRkQa3srx5jcMXKw98tJ6San384AQ oMu/aLmrtmc0RDZZ/MrhTNoU9SheHx/laeUhAvRgKtOqiT27kpL203YKesdKE2p6 zJcZWOwCPoK5Ig== -----END CERTIFICATE-----Generated at Tue May 12 21:42:12 2026 by rpki-client