$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.cer File: 7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.cer (raw, json) Hash identifier: 8A8ksTPWbFrdacVjtxZC7/uPQfuvMfKf6qjXdv7XKhw= Subject key identifier: 7A:21:AF:4B:7D:1A:FE:C2:2E:78:8E:71:A5:AF:50:4B:BC:68:00:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3747D8AD21C9873F5CBDAC662B259EC478EF157E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft caRepository: rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 13:51:46 +0000 Certificate not after: Fri 19 Mar 2027 13:56:46 +0000 Subordinate resources: AS: 274569 IP: 2804:9618::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:47:d8:ad:21:c9:87:3f:5c:bd:ac:66:2b:25:9e:c4:78:ef:15:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 13:51:46 2026 GMT Not After : Mar 19 13:56:46 2027 GMT Subject: CN=7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:b3:01:db:45:51:a0:e5:75:9d:2c:01:5b: ff:82:3c:8a:bf:3f:2d:6a:75:44:aa:45:d3:91:3b: ea:94:af:35:9a:48:dc:07:ae:18:d5:30:a0:c8:d6: 20:2c:c0:10:93:34:4b:b8:24:00:8b:63:b8:f7:c8: 63:d2:82:af:7b:86:09:a3:d1:08:7e:84:d1:06:7f: 02:cd:97:22:9a:88:11:1c:31:4e:e7:2a:5f:d5:0c: b2:b2:2f:c5:4a:c6:81:da:13:ed:64:44:44:34:e0: 37:50:ec:f1:2a:e9:c3:3e:db:19:a7:26:69:61:2f: b2:15:67:85:f6:ec:a0:35:82:24:e6:8e:0b:56:8b: ef:a2:f7:28:e0:41:29:65:c7:d7:db:bb:fb:1e:90: f2:70:49:30:62:64:49:a5:4f:af:6e:ba:57:9a:f4: 48:3c:4c:f0:0f:44:49:a9:ee:c3:21:e0:dd:20:5b: e6:7f:63:fe:34:ab:5e:71:e8:47:15:db:5c:e4:32: 8d:ca:8c:c8:14:26:a7:7c:61:a8:07:58:e9:3a:02: a2:1d:7f:00:1b:81:91:6f:2b:42:73:1a:5c:97:59: f1:bc:04:54:90:84:9e:98:0a:52:e3:fb:a7:e4:8f: f4:4d:75:93:87:2c:df:20:31:e4:ec:98:69:4f:94: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:21:AF:4B:7D:1A:FE:C2:2E:78:8E:71:A5:AF:50:4B:BC:68:00:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FTd5GkVhgoQqSKm59GC2wFbjsEREaq8uZa4yaCTwqCyn/0/7A21AF4B7D1AFEC22E788E71A5AF504BBC6800BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9618::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274569 Signature Algorithm: sha256WithRSAEncryption 14:54:e2:11:45:0c:85:38:72:8c:93:98:ad:66:3b:6c:59:ff: aa:8a:0f:3f:ad:f5:aa:42:68:27:5f:e5:35:22:8f:3e:7b:9b: 3a:d4:0d:52:ee:58:c0:d0:22:7f:eb:2c:2e:e8:e6:e7:c2:68: 54:c2:1d:77:06:ff:f3:63:e0:af:18:5e:89:50:9d:f3:87:85: d2:0d:25:8e:2f:52:b3:b8:a5:94:51:c9:7b:5d:2a:1b:7c:c4: ed:3c:22:c6:09:44:b7:40:3e:d7:e5:4e:e5:8b:13:29:f9:01: 74:3b:48:16:4e:eb:b1:46:8c:f8:94:bc:c5:f0:55:90:05:35: 78:2c:00:3d:c5:0d:81:fa:6e:85:a9:d3:b1:b9:05:3c:3f:a6: d7:8b:b8:83:a0:77:76:db:3a:55:07:a5:b3:b4:20:ac:49:ba: 9b:a8:d9:73:fc:20:ad:59:7c:8f:2c:2c:17:15:30:26:a6:38: 20:31:6c:01:05:92:51:e1:25:c7:f6:12:8b:25:a8:93:d2:72: b8:9f:7a:6c:e9:b1:ce:c4:c2:20:40:82:c3:13:07:21:eb:8e: 61:4a:66:aa:5b:e1:70:4b:fe:c3:07:a2:ee:c2:d6:e4:a5:79: 0a:57:a3:61:fa:66:02:46:49:74:0c:e8:3a:1b:e6:28:f8:e8: 4a:82:cf:72 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUN0fYrSHJhz9cvaxmKyWexHjvFX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAxMzUxNDZaFw0yNzAzMTkxMzU2NDZaMDMxMTAvBgNV BAMTKDdBMjFBRjRCN0QxQUZFQzIyRTc4OEU3MUE1QUY1MDRCQkM2ODAwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPbMB20VRoOV1nSwBW/+CPIq/ Py1qdUSqRdORO+qUrzWaSNwHrhjVMKDI1iAswBCTNEu4JACLY7j3yGPSgq97hgmj 0Qh+hNEGfwLNlyKaiBEcMU7nKl/VDLKyL8VKxoHaE+1kREQ04DdQ7PEq6cM+2xmn JmlhL7IVZ4X27KA1giTmjgtWi++i9yjgQSllx9fbu/sekPJwSTBiZEmlT69uulea 9Eg8TPAPREmp7sMh4N0gW+Z/Y/40q15x6EcV21zkMo3KjMgUJqd8YagHWOk6AqId fwAbgZFvK0JzGlyXWfG8BFSQhJ6YClLj+6fkj/RNdZOHLN8gMeTsmGlPlOonAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6Ia9LfRr+wi54 jnGlr1BLvGgAvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlRk NUdrVmhnb1FxU0ttNTlHQzJ3RmJqc0VSRWFxOHVaYTR5YUNUd3FDeW4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZU ZDVHa1ZoZ29RcVNLbTU5R0Myd0ZianNFUkVhcTh1WmE0eWFDVHdxQ3luLzAvN0Ey MUFGNEI3RDFBRkVDMjJFNzg4RTcxQTVBRjUwNEJCQzY4MDBCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASWGDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MIkwDQYJKoZIhvcNAQELBQADggEBABRU4hFFDIU4coyTmK1mO2xZ/6qKDz+t9apC aCdf5TUijz57mzrUDVLuWMDQIn/rLC7o5ufCaFTCHXcG//Nj4K8YXolQnfOHhdIN JY4vUrO4pZRRyXtdKht8xO08IsYJRLdAPtflTuWLEyn5AXQ7SBZO67FGjPiUvMXw VZAFNXgsAD3FDYH6boWp07G5BTw/pteLuIOgd3bbOlUHpbO0IKxJupuo2XP8IK1Z fI8sLBcVMCamOCAxbAEFklHhJcf2EoslqJPScrifemzpsc7EwiBAgsMTByHrjmFK Zqpb4XBL/sMHou7C1uSleQpXo2H6ZgJGSXQM6Dob5ij46EqCz3I= -----END CERTIFICATE-----Generated at Wed Mar 25 23:53:49 2026 by rpki-client