$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/84439550FE934C6B17D871B561B22D63210161FD.cer File: 84439550FE934C6B17D871B561B22D63210161FD.cer (raw, json) Hash identifier: P8zrrf+yLHeAOxeUcTXCUoHAyUSF0hYrXNx1SW4ZjbM= Subject key identifier: 84:43:95:50:FE:93:4C:6B:17:D8:71:B5:61:B2:2D:63:21:01:61:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D63BA0CFCBE471F195A182B047E1C2A58C9F868 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/84439550FE934C6B17D871B561B22D63210161FD.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 15:15:11 +0000 Certificate not after: Tue 09 Mar 2027 15:20:11 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 21:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:63:ba:0c:fc:be:47:1f:19:5a:18:2b:04:7e:1c:2a:58:c9:f8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 10 15:15:11 2026 GMT Not After : Mar 9 15:20:11 2027 GMT Subject: CN=84439550FE934C6B17D871B561B22D63210161FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:c5:34:0d:f7:32:8a:b2:d0:98:aa:58:1e: bd:7f:d8:59:b7:db:e4:55:f0:33:4b:9d:eb:12:09: 89:76:5d:c1:1d:5d:51:63:39:72:ba:98:69:f3:d0: 59:18:51:55:e9:9c:ff:7f:b4:38:4b:20:b7:96:ea: 0c:1e:c3:ba:77:94:af:71:eb:e1:da:51:63:23:fa: e8:ba:f9:35:34:e5:32:e3:27:5c:28:10:e3:fb:5f: 2e:eb:9c:95:76:62:df:79:36:55:bf:a2:9a:d8:36: 63:3b:b6:a2:dc:13:b1:3b:86:7c:23:18:7e:32:17: ef:40:d0:ad:d5:69:67:24:98:bc:ee:89:d4:b0:6b: ec:1c:23:d5:1c:de:73:5f:83:e4:02:94:8b:c5:7c: 19:cc:06:7a:f8:b6:e3:42:64:b3:d8:4a:96:ff:2f: 1c:de:59:4b:e5:7c:dc:c6:81:49:6a:e1:bf:23:c1: 95:29:23:22:a2:a3:9e:b2:a6:7f:30:47:42:a1:39: e9:c0:00:72:e1:6e:b4:8d:e4:2e:94:ad:d1:1c:97: c5:68:42:9b:fc:39:7e:9c:51:79:b9:69:72:11:8d: a6:81:73:64:1f:95:55:ab:a5:4d:4a:f0:23:0d:8e: 35:4e:90:f2:a8:2e:20:43:72:cc:1a:e2:8f:6f:b0: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:43:95:50:FE:93:4C:6B:17:D8:71:B5:61:B2:2D:63:21:01:61:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/84439550FE934C6B17D871B561B22D63210161FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption bb:35:4c:7b:00:91:06:99:5d:5f:be:bb:8b:50:76:4b:3a:59: 08:c4:c0:53:97:aa:a3:b6:7f:ed:15:82:b3:34:90:1b:31:52: 96:6f:58:be:61:b0:d6:de:c4:13:4a:d7:5c:b0:02:41:c8:35: ff:85:bc:2a:22:13:5d:83:f9:13:7a:8d:43:b4:7e:5e:9c:6c: 54:71:b7:2a:ce:df:c7:4a:cf:a6:ef:fb:61:2f:8d:5c:02:cc: 8e:27:02:46:64:09:96:2e:b3:f3:d3:c7:d7:ff:52:75:f1:bb: 9e:34:65:00:8f:b2:a5:bc:a0:d7:b6:1c:3c:06:0e:2b:0f:11: 93:a6:6e:de:14:62:9e:b7:a9:77:72:61:b1:4f:8d:f8:56:b3: 6b:2f:43:55:8a:28:c8:40:85:49:0d:11:d1:c7:dc:0c:93:34: 8b:3f:0e:1d:d4:af:7d:5c:02:70:71:48:27:a2:da:b1:d3:20: f3:3c:21:10:de:69:98:26:f7:d3:25:4e:21:7a:77:0c:70:f2: 27:2b:fb:d5:e2:56:e5:06:a9:81:9b:2b:04:09:c4:a9:1e:9f: 6f:27:95:de:2a:1d:55:d9:df:e0:56:52:e3:e3:e5:38:9b:32: 21:15:93:e7:6e:a4:ee:b5:e0:0c:1e:79:17:8e:c0:37:71:8c: 90:c2:fb:6e -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUXWO6DPy+Rx8ZWhgrBH4cKljJ+GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTAxNTE1MTFaFw0yNzAzMDkxNTIwMTFaMDMxMTAvBgNV BAMTKDg0NDM5NTUwRkU5MzRDNkIxN0Q4NzFCNTYxQjIyRDYzMjEwMTYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WcU0DfcyirLQmKpYHr1/2Fm3 2+RV8DNLnesSCYl2XcEdXVFjOXK6mGnz0FkYUVXpnP9/tDhLILeW6gwew7p3lK9x 6+HaUWMj+ui6+TU05TLjJ1woEOP7Xy7rnJV2Yt95NlW/oprYNmM7tqLcE7E7hnwj GH4yF+9A0K3VaWckmLzuidSwa+wcI9Uc3nNfg+QClIvFfBnMBnr4tuNCZLPYSpb/ LxzeWUvlfNzGgUlq4b8jwZUpIyKio56ypn8wR0KhOenAAHLhbrSN5C6UrdEcl8Vo Qpv8OX6cUXm5aXIRjaaBc2QflVWrpU1K8CMNjjVOkPKoLiBDcswa4o9vsBYfAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEQ5VQ/pNMaxfY cbVhsi1jIQFh/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvODQ0 Mzk1NTBGRTkzNEM2QjE3RDg3MUI1NjFCMjJENjMyMTAxNjFGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQC7NUx7AJEGmV1f vruLUHZLOlkIxMBTl6qjtn/tFYKzNJAbMVKWb1i+YbDW3sQTStdcsAJByDX/hbwq IhNdg/kTeo1DtH5enGxUcbcqzt/HSs+m7/thL41cAsyOJwJGZAmWLrPz08fX/1J1 8bueNGUAj7KlvKDXthw8Bg4rDxGTpm7eFGKet6l3cmGxT434VrNrL0NViijIQIVJ DRHRx9wMkzSLPw4d1K99XAJwcUgnotqx0yDzPCEQ3mmYJvfTJU4hencMcPInK/vV 4lblBqmBmysECcSpHp9vJ5XeKh1V2d/gVlLj4+U4mzIhFZPnbqTuteAMHnkXjsA3 cYyQwvtu -----END CERTIFICATE-----Generated at Thu Mar 26 19:56:15 2026 by rpki-client