$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer File: 87D07CAAFE73106D66C0E11F789B0243A67141F9.cer (raw, json) Hash identifier: kThFhepR0jVIFerpI+AJ/4lw1ET31oK4xNHiCRl42kQ= Subject key identifier: 87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5EA3425D98D3841B6572CAA0787A3D1C96997C03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.mft caRepository: rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 20:16:00 +0000 Certificate not after: Tue 23 Mar 2027 20:21:00 +0000 Subordinate resources: AS: 270588 IP: 177.129.36.0/22 IP: 2804:6e50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a3:42:5d:98:d3:84:1b:65:72:ca:a0:78:7a:3d:1c:96:99:7c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 20:16:00 2026 GMT Not After : Mar 23 20:21:00 2027 GMT Subject: CN=87D07CAAFE73106D66C0E11F789B0243A67141F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:88:81:14:0e:1a:35:7f:af:fe:74:7c:84: cb:69:96:90:58:24:d9:20:6f:89:65:9c:8b:cf:24: 05:37:3b:7b:77:06:f6:f6:78:a6:54:74:8e:fb:2f: c0:15:4a:91:17:6b:27:1c:6d:6a:f5:da:0c:82:57: 0b:27:1f:5b:30:60:ef:62:0f:50:6f:6e:48:3b:bc: c5:97:a7:21:12:c4:fa:11:dc:9c:b2:2a:97:34:83: b2:e4:f7:25:c5:b2:95:90:5a:c1:ea:1b:b3:9c:64: 61:71:f2:82:14:30:2d:4f:7b:34:0e:2d:19:7f:4c: 36:33:7f:d7:ae:7a:3e:20:64:bf:af:fd:61:87:2f: de:6b:dc:08:31:6d:c6:6c:70:a5:1d:54:1e:37:67: a6:96:da:5d:88:27:51:c9:10:a2:aa:78:b6:7b:33: e9:7c:8d:99:ba:bc:9f:90:84:3c:c2:d5:44:b5:0a: 6a:4f:bc:6a:4c:e9:ec:4c:43:9f:e0:bc:ad:b9:30: de:0d:6d:3e:fa:04:6a:93:83:38:88:74:01:2b:19: 90:97:e3:43:da:ed:ed:66:8d:67:fa:67:5d:77:66: 50:51:54:f6:89:bc:a6:c9:c4:07:12:50:9a:3b:57: 1f:e4:e7:f9:d3:82:52:c3:ce:60:03:20:ff:0a:0d: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.36.0/22 IPv6: 2804:6e50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270588 Signature Algorithm: sha256WithRSAEncryption a6:fd:15:e0:0d:f4:38:b1:43:6b:46:55:32:58:1d:4e:33:00: 67:31:77:fc:9d:47:fa:26:3f:c9:15:62:5d:b5:36:08:d6:72: d3:4a:3a:eb:bd:3a:e8:76:d4:31:b4:05:4e:6b:5e:6e:24:e4: 47:c7:28:1f:a6:e4:84:16:98:72:e2:c3:d2:aa:c8:d4:06:fb: d1:84:ee:e9:37:11:c1:4c:68:e1:40:32:31:92:fb:59:c6:22: b6:d2:df:ca:54:f0:f9:9b:44:aa:ed:ca:4a:8c:5a:c0:71:ed: c5:23:b8:0c:4b:68:3c:fd:5f:a0:2b:9e:10:4b:44:38:cc:d1: 7a:86:1d:04:8c:57:b5:18:db:77:74:3a:2e:89:ca:d4:aa:1e: 80:da:8f:03:f2:8d:a7:06:00:5a:9b:d4:27:0a:1c:dd:95:14: 5a:79:fe:0d:f6:02:37:8f:bf:4a:99:c2:09:ec:50:80:fc:9f: f0:36:29:34:54:cd:8f:3c:bb:c8:f0:07:35:4c:36:35:6f:73: 16:73:ec:b6:cc:30:1b:1e:e5:ba:3a:10:27:74:18:6f:f9:e3: 9b:4b:1f:06:7d:3a:66:90:95:f5:28:5f:1c:13:87:da:9e:df: 5a:ea:11:47:2a:be:60:1e:77:1d:c0:22:4a:2c:a3:63:22:4f: 05:12:48:52 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUXqNCXZjThBtlcsqgeHo9HJaZfAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQyMDE2MDBaFw0yNzAzMjMyMDIxMDBaMDMxMTAvBgNV BAMTKDg3RDA3Q0FBRkU3MzEwNkQ2NkMwRTExRjc4OUIwMjQzQTY3MTQxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjoiBFA4aNX+v/nR8hMtplpBY JNkgb4llnIvPJAU3O3t3Bvb2eKZUdI77L8AVSpEXayccbWr12gyCVwsnH1swYO9i D1Bvbkg7vMWXpyESxPoR3JyyKpc0g7Lk9yXFspWQWsHqG7OcZGFx8oIUMC1PezQO LRl/TDYzf9euej4gZL+v/WGHL95r3AgxbcZscKUdVB43Z6aW2l2IJ1HJEKKqeLZ7 M+l8jZm6vJ+QhDzC1US1CmpPvGpM6exMQ5/gvK25MN4NbT76BGqTgziIdAErGZCX 40Pa7e1mjWf6Z113ZlBRVPaJvKbJxAcSUJo7Vx/k5/nTglLDzmADIP8KDY7/AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSH0Hyq/nMQbWbA 4R94mwJDpnFB+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSlpW YnBZdVk0Znl2b3o4QkFjSnRabjZiTm1kbTl0WGVOYVloWEo4ZjJWZy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSlpW YnBZdVk0Znl2b3o4QkFjSnRabjZiTm1kbTl0WGVOYVloWEo4ZjJWZy8wLzg3RDA3 Q0FBRkU3MzEwNkQ2NkMwRTExRjc4OUIwMjQzQTY3MTQxRjkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEArGBJDANBAIAAjAHAwUAKARuUDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIPwwDQYJKoZIhvcNAQELBQADggEBAKb9FeAN9DixQ2tGVTJY HU4zAGcxd/ydR/omP8kVYl21NgjWctNKOuu9Ouh21DG0BU5rXm4k5EfHKB+m5IQW mHLiw9KqyNQG+9GE7uk3EcFMaOFAMjGS+1nGIrbS38pU8PmbRKrtykqMWsBx7cUj uAxLaDz9X6ArnhBLRDjM0XqGHQSMV7UY23d0Oi6JytSqHoDajwPyjacGAFqb1CcK HN2VFFp5/g32AjePv0qZwgnsUID8n/A2KTRUzY88u8jwBzVMNjVvcxZz7LbMMBse 5bo6ECd0GG/545tLHwZ9OmaQlfUoXxwTh9qe31rqEUcqvmAedx3AIkoso2MiTwUS SFI= -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:42 2026 by rpki-client