$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer File: 871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer (raw, json) Hash identifier: KQHej/dljwR751/sAkP2AB7Ex3KXI0MxbrM4giqsDkw= Subject key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BE80A964192E79B2B2C99E4D1C4EED3B0481E32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft caRepository: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 23 Jul 2026 18:17:44 +0000 Certificate not after: Thu 22 Jul 2027 18:22:44 +0000 Subordinate resources: AS: 269155 IP: 45.180.208.0/22 IP: 2804:6040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 19:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e8:0a:96:41:92:e7:9b:2b:2c:99:e4:d1:c4:ee:d3:b0:48:1e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 23 18:17:44 2026 GMT Not After : Jul 22 18:22:44 2027 GMT Subject: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:11:c5:5f:0c:f2:02:b1:0a:0a:42:02:29: bc:f6:6a:fe:c2:be:66:b3:e9:a6:08:3a:aa:ab:8c: 43:c4:65:d4:cb:7b:7a:b2:9b:ee:60:60:1e:47:c7: 69:9f:0a:35:68:f9:89:ee:73:9d:01:6e:6c:b2:af: 08:a1:1f:b0:d6:59:c7:7a:c0:5f:92:4d:d0:c9:6d: b8:05:cc:86:2c:ca:54:07:74:1f:d6:1a:a1:59:a0: 83:29:80:54:e4:ec:6c:e7:3f:5a:e2:db:9a:44:c4: 04:09:40:2d:dd:da:ff:2e:d9:e9:24:b7:47:4b:e4: 40:f9:55:03:12:9f:9f:65:ca:4a:96:a3:e3:2f:49: 22:f0:36:a1:74:1e:ad:a8:7c:7b:7c:f5:a9:0f:e3: 75:9b:c9:52:18:6a:50:47:9e:78:0a:eb:f5:a5:22: 70:d8:8c:d4:c6:42:5e:bc:d5:91:22:38:50:8a:2b: c7:6c:8f:71:14:23:49:40:90:26:c7:26:a5:88:63: d4:65:50:1c:3d:b1:a9:fa:e6:5e:8b:87:36:3d:65: 66:57:38:16:0f:ac:4a:19:98:51:46:a6:73:25:67: de:d6:1a:88:b0:3f:13:7e:d8:80:67:2d:36:3f:a7: dc:89:ea:5e:36:97:f1:50:25:3e:b3:91:e0:20:2a: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.208.0/22 IPv6: 2804:6040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269155 Signature Algorithm: sha256WithRSAEncryption c7:6a:32:36:99:51:4c:0f:61:2e:9f:4c:01:9d:eb:b7:ca:14: f4:39:77:3c:8d:28:2b:66:68:b7:9a:7d:8c:4d:cf:9a:af:04: e8:9c:90:5c:9f:e0:5d:dc:33:d2:4c:ec:06:f9:e9:aa:bf:88: 00:05:b2:15:a5:d8:2e:e5:15:98:92:2b:8a:61:90:ad:19:12: cf:e0:a3:ed:9e:9f:95:1f:97:7c:29:36:05:9d:a6:8d:0e:64: f0:df:d9:74:b5:40:9e:4b:28:e6:3e:17:21:10:8d:f9:89:55: 79:a2:27:96:20:9f:3f:fd:e9:85:88:a3:36:26:fc:50:4c:b9: c3:92:32:bd:9b:1a:f3:5c:53:6a:06:9d:ac:32:6c:fa:b9:2b: af:cc:e6:a6:7c:57:87:00:5b:d3:99:af:32:c5:9a:6b:bb:b9: 96:4b:2e:a5:7c:74:34:ef:55:df:3b:a6:a8:77:fe:a8:a3:6a: 2f:a1:aa:9a:f2:f2:41:91:bc:cc:e4:44:a0:5e:b9:9f:80:48: be:04:e4:fa:0a:97:37:25:a7:be:a3:ab:6a:da:2c:9e:27:f7: 1f:58:54:4a:53:b1:a9:de:70:70:ab:62:c8:5e:66:1d:a5:f9: 54:5d:e3:fd:fb:73:e8:47:8d:55:eb:2b:f1:47:43:2b:f6:29: 28:16:a5:fd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG+gKlkGS55srLJnk0cTu07BIHjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjMxODE3NDRaFw0yNzA3MjIxODIyNDRaMDMxMTAvBgNV BAMTKDg3MUYzOTUyNUJDRTg4RTY5QTVEQzIwRURCQTJDQkZFQUVEQzlFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNxHFXwzyArEKCkICKbz2av7C vmaz6aYIOqqrjEPEZdTLe3qym+5gYB5Hx2mfCjVo+Ynuc50BbmyyrwihH7DWWcd6 wF+STdDJbbgFzIYsylQHdB/WGqFZoIMpgFTk7GznP1ri25pExAQJQC3d2v8u2ekk t0dL5ED5VQMSn59lykqWo+MvSSLwNqF0Hq2ofHt89akP43WbyVIYalBHnngK6/Wl InDYjNTGQl681ZEiOFCKK8dsj3EUI0lAkCbHJqWIY9RlUBw9san65l6LhzY9ZWZX OBYPrEoZmFFGpnMlZ97WGoiwPxN+2IBnLTY/p9yJ6l42l/FQJT6zkeAgKszzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHHzlSW86I5ppd wg7bosv+rtyeUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ1 SHJpZUNrTEI3N2FNQ3h1MlNrb21zb2FtcXRwTVNCclE0M2YzanpqanovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 dUhyaWVDa0xCNzdhTUN4dTJTa29tc29hbXF0cE1TQnJRNDNmM2p6amp6LzAvODcx RjM5NTI1QkNFODhFNjlBNURDMjBFREJBMkNCRkVBRURDOUU1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbTQMA0EAgACMAcDBQAoBGBAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbYzANBgkqhkiG9w0BAQsFAAOCAQEAx2oyNplRTA9hLp9M AZ3rt8oU9Dl3PI0oK2Zot5p9jE3Pmq8E6JyQXJ/gXdwz0kzsBvnpqr+IAAWyFaXY LuUVmJIrimGQrRkSz+Cj7Z6flR+XfCk2BZ2mjQ5k8N/ZdLVAnkso5j4XIRCN+YlV eaInliCfP/3phYijNib8UEy5w5IyvZsa81xTagadrDJs+rkrr8zmpnxXhwBb05mv MsWaa7u5lksupXx0NO9V3zumqHf+qKNqL6GqmvLyQZG8zOREoF65n4BIvgTk+gqX NyWnvqOratosnif3H1hUSlOxqd5wcKtiyF5mHaX5VF3j/ftz6EeNVesr8UdDK/Yp KBal/Q== -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:41 2026 by rpki-client