$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer File: 1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer (raw, json) Hash identifier: RJ0L4YSnABOGaPqVF6eLD19jqs4HqREkz23wf3Izhr0= Subject key identifier: 1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24F8F02A328E143C1B0F3C2AE198B293FDBEC011 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.mft caRepository: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 20:25:54 +0000 Certificate not after: Thu 18 Mar 2027 20:30:54 +0000 Subordinate resources: AS: 263528 IP: 170.254.4.0/22 IP: 191.253.64.0/22 IP: 2804:1350::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f8:f0:2a:32:8e:14:3c:1b:0f:3c:2a:e1:98:b2:93:fd:be:c0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 20:25:54 2026 GMT Not After : Mar 18 20:30:54 2027 GMT Subject: CN=1F7B940A7F746AC83D9CDA266811C4C47B7B3479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:08:ef:71:22:b0:ff:b6:e8:70:89:b6:7c: bd:32:fb:6f:51:1e:ce:53:7a:2b:c8:ea:07:48:eb: 16:57:40:01:f5:d0:a7:02:da:60:10:6d:6a:b5:3e: 98:a4:15:dc:18:8f:72:c1:8b:d3:00:7b:fd:dc:c0: 33:0e:99:76:b2:29:df:9b:b4:2a:1d:40:ac:9c:42: 6c:43:10:02:0b:50:aa:5b:21:2f:02:d9:c5:7c:8e: f8:30:96:34:20:7c:7c:45:c3:9d:a4:5d:21:4c:08: 0e:54:3a:19:8b:2f:3d:db:8a:af:82:47:2e:de:3c: 44:33:35:a5:9c:ac:63:c3:45:6c:e5:3e:57:db:83: 62:94:04:af:c2:98:d3:43:5b:ed:10:4f:b3:35:46: 58:56:60:4d:8e:ae:f1:85:52:bb:4b:21:5b:9a:1e: 91:1e:f7:55:94:66:7e:7b:7e:12:d7:8e:c0:8e:05: 1a:00:c3:83:8f:53:f5:4e:25:e9:96:89:77:a8:b1: 0e:d3:ac:6b:2c:13:50:40:b0:b2:51:14:9a:e4:fd: 7d:77:5b:03:5e:fa:ed:f1:dc:7e:98:6e:e4:9b:c9: 75:6d:e7:88:26:eb:dd:1e:ac:22:90:03:03:73:d1: 38:47:2f:5f:12:b9:3f:86:94:aa:ab:ac:9f:55:b5: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.4.0/22 191.253.64.0/22 IPv6: 2804:1350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263528 Signature Algorithm: sha256WithRSAEncryption 45:bc:7f:80:e0:dd:bb:5b:4d:b8:01:dd:94:8b:f5:81:32:08: 5c:f3:43:e3:a5:9b:d1:0a:1a:40:6c:e8:8f:30:8b:e2:4e:ca: 4b:fb:5a:92:a6:ad:30:5e:59:3f:43:60:d6:31:9c:2b:e4:3a: 91:76:d5:22:d6:4d:b9:34:0a:a3:4d:3c:04:24:26:ed:0a:c7: a7:63:3f:4f:68:90:fa:3a:80:11:5f:c1:9f:07:72:85:35:44: b5:87:cf:92:31:20:41:93:a5:ca:1b:77:04:92:7f:97:ba:ad: e9:10:11:7f:20:0c:26:9d:02:69:83:3f:9f:cb:ae:24:92:19: f1:f5:d5:91:53:88:65:a0:98:83:71:64:50:e3:8a:15:54:59: 94:45:8b:d4:14:85:c8:56:b2:fe:d9:ef:01:3e:57:50:1b:f5: 38:4e:25:09:a4:f8:a5:7a:75:05:f0:45:41:83:95:b6:38:e6: 16:b2:ee:fa:d4:83:96:5c:af:b0:15:13:fd:36:bb:c0:c4:d2: 7e:e7:64:5e:40:df:e0:f1:51:7a:8a:e7:d6:57:6b:ca:49:52: 24:63:35:67:9d:b9:60:42:10:2b:b9:23:16:51:88:d3:9a:d4: 0c:c4:41:de:7e:35:f7:e6:14:7f:98:04:60:59:dc:00:c7:be: 15:2c:43:b4 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJPjwKjKOFDwbDzwq4Ziyk/2+wBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkyMDI1NTRaFw0yNzAzMTgyMDMwNTRaMDMxMTAvBgNV BAMTKDFGN0I5NDBBN0Y3NDZBQzgzRDlDREEyNjY4MTFDNEM0N0I3QjM0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/AjvcSKw/7bocIm2fL0y+29R Hs5TeivI6gdI6xZXQAH10KcC2mAQbWq1PpikFdwYj3LBi9MAe/3cwDMOmXayKd+b tCodQKycQmxDEAILUKpbIS8C2cV8jvgwljQgfHxFw52kXSFMCA5UOhmLLz3biq+C Ry7ePEQzNaWcrGPDRWzlPlfbg2KUBK/CmNNDW+0QT7M1RlhWYE2OrvGFUrtLIVua HpEe91WUZn57fhLXjsCOBRoAw4OPU/VOJemWiXeosQ7TrGssE1BAsLJRFJrk/X13 WwNe+u3x3H6YbuSbyXVt54gm690erCKQAwNz0ThHL18SuT+GlKqrrJ9VtTZFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfe5QKf3RqyD2c 2iZoEcTEe3s0eTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG1p Wm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRt aVpuUTVHdUZCVmh2b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzAvMUY3 Qjk0MEE3Rjc0NkFDODNEOUNEQTI2NjgxMUM0QzQ3QjdCMzQ3OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv4EAwQCv/1AMA0EAgACMAcDBQAoBBNQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFaDANBgkqhkiG9w0BAQsFAAOCAQEARbx/gODd u1tNuAHdlIv1gTIIXPND46Wb0QoaQGzojzCL4k7KS/takqatMF5ZP0Ng1jGcK+Q6 kXbVItZNuTQKo008BCQm7QrHp2M/T2iQ+jqAEV/BnwdyhTVEtYfPkjEgQZOlyht3 BJJ/l7qt6RARfyAMJp0CaYM/n8uuJJIZ8fXVkVOIZaCYg3FkUOOKFVRZlEWL1BSF yFay/tnvAT5XUBv1OE4lCaT4pXp1BfBFQYOVtjjmFrLu+tSDllyvsBUT/Ta7wMTS fudkXkDf4PFReorn1ldryklSJGM1Z525YEIQK7kjFlGI05rUDMRB3n419+YUf5gE YFncAMe+FSxDtA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:54:57 2026 by rpki-client