$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer File: 87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer (raw, json) Hash identifier: gkOI2+FoHpDN66L0MtLfnFoUZo1UZ4ZTPCgTh/anJhk= Subject key identifier: 87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 259DF1D3402D451AEF57BE9B5919BF0F6A5D9CD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft caRepository: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 15:54:57 +0000 Certificate not after: Thu 18 Mar 2027 15:59:57 +0000 Subordinate resources: AS: 270253 IP: 200.110.204.0/22 IP: 2804:692c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:f1:d3:40:2d:45:1a:ef:57:be:9b:59:19:bf:0f:6a:5d:9c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 15:54:57 2026 GMT Not After : Mar 18 15:59:57 2027 GMT Subject: CN=87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:e0:09:03:f0:22:f5:a2:cf:82:fd:15:60: 8a:94:03:57:75:ce:d3:79:c1:8f:77:31:6c:7a:69: 05:7e:cc:08:f1:24:3e:5f:15:ff:98:e1:63:7a:2d: 60:19:bc:70:f6:0f:6a:d5:01:2d:00:4c:02:6f:53: 42:75:ac:67:68:a8:f4:42:e7:bc:23:5d:d7:f4:b4: 69:d3:db:5d:4b:3a:2c:3a:3e:96:71:bf:8c:48:7a: 58:75:2b:10:aa:d7:be:d2:ab:fb:6e:e3:cb:5a:ec: 4b:c0:af:6b:c0:b9:d9:8f:5a:a7:32:78:eb:17:5d: 64:40:df:b8:b6:0a:f8:8c:ac:83:50:3b:80:0c:0f: f9:ac:1f:ef:fb:fc:6d:34:b1:18:0b:ca:11:84:f4: 19:ed:bb:c3:3a:d8:52:2a:82:b8:31:42:72:a9:79: 65:25:78:b7:23:be:07:56:78:0c:92:de:3f:3d:0b: b1:d8:17:a7:ab:1e:cd:be:cf:f2:94:cc:99:3a:ee: c8:52:12:82:a8:fe:13:dd:81:75:0d:51:7e:fe:2c: e9:04:3d:22:44:37:41:3a:c6:2a:71:29:5e:bf:d2: d9:e9:7d:6d:20:eb:fb:2d:7f:b3:c9:eb:3b:07:89: 08:82:de:ea:00:d1:79:1d:ba:9b:1a:32:1b:90:89: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.110.204.0/22 IPv6: 2804:692c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270253 Signature Algorithm: sha256WithRSAEncryption bc:3c:d0:97:51:a4:1e:d0:cf:60:27:94:ab:c4:e5:db:a1:8f: e2:ab:a6:83:20:03:6d:4b:03:bd:e3:be:a9:56:13:89:73:e6: ff:29:07:81:30:15:22:ec:0a:d3:c8:86:92:07:5f:4b:de:7f: 5d:4d:9c:df:a8:a3:0f:d8:15:0b:c7:75:fd:2f:74:9e:7f:c2: 96:0b:8e:68:cb:b3:9a:ed:e1:4b:68:fe:66:b9:ad:4f:14:2a: df:16:1a:54:99:4e:c3:a1:5d:6a:33:8c:84:ae:5c:a7:31:ed: 19:58:20:76:c0:9c:dc:c2:23:cf:8c:36:38:4b:db:69:57:b4: 17:12:a4:4d:4d:47:d9:1a:1c:f2:6d:56:3c:17:91:41:e8:d8: db:e3:95:bc:89:bb:d5:5e:d2:71:1c:97:31:34:8a:e2:22:82: 4a:62:c1:02:b9:a6:31:aa:a0:0a:e8:b2:04:2c:a4:cc:63:a9: e4:5f:01:02:3d:e4:11:34:d6:0f:0c:e9:19:ad:bd:1b:73:f2: 3f:4e:6b:9a:b8:f3:a0:84:ee:07:53:0c:92:58:f1:4f:a4:e9: 6b:6a:ee:13:ec:9d:57:9c:69:b9:f5:cc:ea:30:ea:c0:27:45: db:c5:dd:33:cb:d6:b9:21:78:ee:13:b5:2e:21:31:42:8a:41: 3d:b5:11:58 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJZ3x00AtRRrvV76bWRm/D2pdnNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkxNTU0NTdaFw0yNzAzMTgxNTU5NTdaMDMxMTAvBgNV BAMTKDg3QzE1MTU0OTBGRTg1QkYwOTRCMUMwRTM3QkJFRkM1RjFEMUNBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuuAJA/Ai9aLPgv0VYIqUA1d1 ztN5wY93MWx6aQV+zAjxJD5fFf+Y4WN6LWAZvHD2D2rVAS0ATAJvU0J1rGdoqPRC 57wjXdf0tGnT211LOiw6PpZxv4xIelh1KxCq177Sq/tu48ta7EvAr2vAudmPWqcy eOsXXWRA37i2CviMrINQO4AMD/msH+/7/G00sRgLyhGE9Bntu8M62FIqgrgxQnKp eWUleLcjvgdWeAyS3j89C7HYF6erHs2+z/KUzJk67shSEoKo/hPdgXUNUX7+LOkE PSJEN0E6xipxKV6/0tnpfW0g6/stf7PJ6zsHiQiC3uoA0XkdupsaMhuQiT/ZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHwVFUkP6FvwlL HA43u+/F8dHKPjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jj NDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi YzQ4NnRjeUJhdmFvaFdmNjlvTDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvODdD MTUxNTQ5MEZFODVCRjA5NEIxQzBFMzdCQkVGQzVGMUQxQ0EzRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyG7MMA0EAgACMAcDBQAoBGksMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQfrTANBgkqhkiG9w0BAQsFAAOCAQEAvDzQl1GkHtDPYCeU q8Tl26GP4qumgyADbUsDveO+qVYTiXPm/ykHgTAVIuwK08iGkgdfS95/XU2c36ij D9gVC8d1/S90nn/ClguOaMuzmu3hS2j+ZrmtTxQq3xYaVJlOw6FdajOMhK5cpzHt GVggdsCc3MIjz4w2OEvbaVe0FxKkTU1H2Roc8m1WPBeRQejY2+OVvIm71V7ScRyX MTSK4iKCSmLBArmmMaqgCuiyBCykzGOp5F8BAj3kETTWDwzpGa29G3PyP05rmrjz oITuB1MMkljxT6Tpa2ruE+ydV5xpufXM6jDqwCdF28XdM8vWuSF47hO1LiExQopB PbURWA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:56 2026 by rpki-client