$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer File: 8174C9AD000FD5B5D370A3A331707606802570C2.cer (raw, json) Hash identifier: QuRlr1hn+aa510gVgctQ1kTEXpO+NMv3cCtzAC4iHxA= Subject key identifier: 81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B0C097278B8E9A7D638461B9C0EF777FC291974 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft caRepository: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 02 May 2026 03:59:28 +0000 Certificate not after: Sat 01 May 2027 04:04:28 +0000 Subordinate resources: AS: 266911 IP: 45.224.108.0/22 IP: 2804:4534::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0c:09:72:78:b8:e9:a7:d6:38:46:1b:9c:0e:f7:77:fc:29:19:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 03:59:28 2026 GMT Not After : May 1 04:04:28 2027 GMT Subject: CN=8174C9AD000FD5B5D370A3A331707606802570C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:6c:e2:f4:62:b1:24:c1:36:0f:7d:24:5a: 31:e6:d4:eb:dd:37:c2:e2:b0:53:7e:1a:ef:a4:f7: 7b:1d:c6:7e:5d:72:2b:3f:ce:4c:1f:16:55:d4:89: 21:60:54:b6:5f:53:c1:1a:a3:d7:c8:d1:2f:6e:88: 9e:1d:fb:5f:f4:9d:7d:79:d7:79:e1:e2:7f:e8:95: a8:e4:11:00:a3:9c:f1:c7:ed:90:70:2f:10:53:80: 2f:91:7e:2b:c9:9a:9e:1d:e2:48:ab:4e:a1:8a:e7: 27:11:31:ab:cb:28:33:ec:45:90:fe:b0:e4:67:03: 45:a2:67:7f:49:6c:1f:07:c7:a4:75:21:ef:6f:44: 54:89:ab:ac:a7:b3:64:a7:fa:67:94:28:19:b0:c5: 2c:ae:be:e5:7c:48:a9:b6:a9:05:ea:80:10:8b:52: 1a:d8:5d:c4:ba:1d:9c:64:06:47:54:31:bc:58:44: 3b:69:29:ae:01:60:0c:bc:ef:a4:cd:80:8d:36:07: a8:42:f4:0a:09:dd:ea:bd:53:d1:9a:b7:d8:70:5f: f2:13:e6:3f:bf:b5:6a:df:82:c9:a7:f1:a3:cd:64: 46:57:f8:b1:a2:57:65:0f:1b:a8:52:07:fc:48:04: 05:90:ea:d6:33:5f:b6:a8:d7:25:74:30:1a:d3:84: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.108.0/22 IPv6: 2804:4534::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266911 Signature Algorithm: sha256WithRSAEncryption a8:b9:20:89:59:9c:e0:bc:c4:38:78:95:7e:3b:6d:1a:6f:cc: 0b:f5:26:5b:96:d6:1b:e1:70:19:9d:20:be:4c:49:71:da:39: da:c9:20:20:a7:07:c5:b4:7d:b3:62:52:12:ff:af:65:a7:d7: f6:a3:d4:76:49:6b:5e:32:f0:29:11:00:36:b0:81:d7:27:71: c4:e8:97:42:db:b5:91:92:4a:93:ac:0e:bb:d6:ba:c0:01:46: 5b:27:5a:4f:4c:1b:e5:83:be:3e:89:ed:ba:00:7b:e6:0f:39: e5:71:18:b2:89:c7:d6:32:f8:8c:cc:28:04:5d:8c:89:7c:d1: 35:ee:79:6d:62:b7:36:12:68:6b:4e:e1:50:ab:99:07:6e:b5: 76:b9:e8:c6:dc:34:50:8f:0d:36:5c:ea:17:cc:f8:ad:10:8f: b0:2d:22:56:71:c9:5b:b8:b5:c4:55:1e:e2:a6:e7:87:dd:88: 2d:5a:46:3f:1b:ca:e5:5e:f6:bf:fe:fb:03:e7:29:f6:36:d6: 04:8f:57:78:cd:dc:c1:46:c7:8b:a1:ac:a1:d0:55:ac:b4:39: de:4b:fd:9b:9e:96:14:bb:44:f9:78:15:3d:c8:20:aa:7b:12: 2d:fe:4c:9f:9f:11:c3:4e:d1:03:f7:96:36:a5:d7:dd:60:72: 55:44:5b:bf -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUawwJcni46afWOEYbnA73d/wpGXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDIwMzU5MjhaFw0yNzA1MDEwNDA0MjhaMDMxMTAvBgNV BAMTKDgxNzRDOUFEMDAwRkQ1QjVEMzcwQTNBMzMxNzA3NjA2ODAyNTcwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvB2zi9GKxJME2D30kWjHm1Ovd N8LisFN+Gu+k93sdxn5dcis/zkwfFlXUiSFgVLZfU8Eao9fI0S9uiJ4d+1/0nX15 13nh4n/olajkEQCjnPHH7ZBwLxBTgC+RfivJmp4d4kirTqGK5ycRMavLKDPsRZD+ sORnA0WiZ39JbB8Hx6R1Ie9vRFSJq6yns2Sn+meUKBmwxSyuvuV8SKm2qQXqgBCL UhrYXcS6HZxkBkdUMbxYRDtpKa4BYAy876TNgI02B6hC9AoJ3eq9U9Gat9hwX/IT 5j+/tWrfgsmn8aPNZEZX+LGiV2UPG6hSB/xIBAWQ6tYzX7ao1yV0MBrThO2XAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBdMmtAA/VtdNw o6MxcHYGgCVwwjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2g5 NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVRWHcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNo OTc2WmJSWWNUVGllU3VlVkNBQ0ZMR0RtUkVERDNDeGhqQ0hRVExlUVh3LzAvODE3 NEM5QUQwMDBGRDVCNUQzNzBBM0EzMzE3MDc2MDY4MDI1NzBDMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeBsMA0EAgACMAcDBQAoBEU0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSnzANBgkqhkiG9w0BAQsFAAOCAQEAqLkgiVmc4LzEOHiV fjttGm/MC/UmW5bWG+FwGZ0gvkxJcdo52skgIKcHxbR9s2JSEv+vZafX9qPUdklr XjLwKREANrCB1ydxxOiXQtu1kZJKk6wOu9a6wAFGWydaT0wb5YO+PontugB75g85 5XEYsonH1jL4jMwoBF2MiXzRNe55bWK3NhJoa07hUKuZB261drnoxtw0UI8NNlzq F8z4rRCPsC0iVnHJW7i1xFUe4qbnh92ILVpGPxvK5V72v/77A+cp9jbWBI9XeM3c wUbHi6GsodBVrLQ53kv9m56WFLtE+XgVPcggqnsSLf5Mn58Rw07RA/eWNqXX3WBy VURbvw== -----END CERTIFICATE-----Generated at Wed May 13 15:13:39 2026 by rpki-client