$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer File: 8B61F412D9491EE5358447F35A3653BE4A23D667.cer (raw, json) Hash identifier: SMA2ODtAYjfRn1L7Gage4Wvu/cJOj3tw5zt3/fPPwpk= Subject key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E1F612BF16E9C51D4B39D36F4FF7D57EEA6EB2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft caRepository: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 16:05:53 +0000 Certificate not after: Wed 24 Mar 2027 16:10:53 +0000 Subordinate resources: AS: 267142 IP: 45.229.240.0/22 IP: 177.128.88.0/22 IP: 2804:48c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1f:61:2b:f1:6e:9c:51:d4:b3:9d:36:f4:ff:7d:57:ee:a6:eb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 16:05:53 2026 GMT Not After : Mar 24 16:10:53 2027 GMT Subject: CN=8B61F412D9491EE5358447F35A3653BE4A23D667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:39:0a:cc:dc:d8:f0:c9:4d:02:4e:2a:fb: 29:87:b9:54:ca:99:f4:b1:ab:5f:b6:01:14:5f:b2: b2:d3:15:b6:6e:8d:67:92:06:8c:8f:6e:27:55:05: ba:27:66:59:25:7c:10:4a:39:fe:d3:4e:82:70:1d: 97:1f:18:fa:cf:6b:de:32:f5:6a:3e:d4:be:b9:9b: b5:5c:0b:6e:60:76:9b:96:dc:ef:05:89:33:71:ba: 50:19:3c:ef:c1:c8:8d:bd:39:06:f6:cb:8b:96:4b: 14:2e:02:7a:cc:60:eb:80:92:58:ab:4c:92:e0:9d: 95:bc:0e:a0:cc:fe:2a:c8:66:e7:b2:88:a5:69:2a: 19:cf:2d:be:e6:b1:14:a0:85:a3:fb:22:59:01:12: 52:d9:fa:6b:b0:63:03:2f:67:60:65:69:b8:da:53: a2:32:89:af:62:27:5f:01:55:5d:1d:43:9d:ec:10: b3:47:88:15:10:4f:06:58:ef:c9:42:30:18:ed:35: c1:50:4a:5b:17:2e:2b:73:52:6a:4a:9c:49:b6:78: 54:8c:90:a6:d5:53:85:22:4e:e0:59:20:94:b2:21: 80:f0:ee:96:5c:91:f2:d6:d1:2e:26:94:6f:d1:2a: b9:eb:fa:03:3d:9d:23:1e:30:11:53:33:d7:80:9e: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.240.0/22 177.128.88.0/22 IPv6: 2804:48c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267142 Signature Algorithm: sha256WithRSAEncryption c9:cf:a2:71:5f:e4:7a:43:bd:e8:00:be:76:f5:8c:69:a0:98: 90:72:04:5f:0f:b2:0b:fe:e2:e0:5c:a7:f6:a1:84:a9:5c:37: 8a:5e:48:05:ce:0c:ea:bf:38:d9:4e:63:85:27:0f:43:d5:16: 57:3b:17:e3:81:36:15:a6:94:43:41:b2:a1:f4:1a:34:8d:32: 58:16:fc:7b:31:f1:26:8d:92:26:4b:77:a2:65:0a:af:c9:33: f8:70:3d:fa:ef:18:57:75:f6:79:b1:70:2e:ed:42:06:08:15: ed:74:6c:e0:62:27:b2:de:79:58:11:67:54:09:2a:f6:bc:fa: 64:09:08:1e:66:39:fd:25:90:ac:a3:74:3e:4d:48:a4:aa:2e: cb:32:53:1b:25:6d:0a:fd:3e:dc:e1:4a:6c:0d:f1:82:61:9a: ac:63:94:2e:68:8f:0d:e1:69:a1:60:b9:d1:86:24:15:05:4a: b4:c9:b6:61:17:a0:1e:ba:d5:1a:91:6a:33:92:bd:e0:b2:3d: 2a:b1:44:d6:03:c6:fe:f6:2d:cd:f1:01:dc:82:96:0d:98:c1: aa:b8:1b:95:b8:b7:42:1d:e8:b2:88:24:b2:34:fe:bd:59:18: cd:b4:95:08:b0:50:05:97:19:c3:fe:39:33:80:a5:77:48:43: d9:69:07:eb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTh9hK/FunFHUs5029P99V+6m6yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxNjA1NTNaFw0yNzAzMjQxNjEwNTNaMDMxMTAvBgNV BAMTKDhCNjFGNDEyRDk0OTFFRTUzNTg0NDdGMzVBMzY1M0JFNEEyM0Q2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgzkKzNzY8MlNAk4q+ymHuVTK mfSxq1+2ARRfsrLTFbZujWeSBoyPbidVBbonZlklfBBKOf7TToJwHZcfGPrPa94y 9Wo+1L65m7VcC25gdpuW3O8FiTNxulAZPO/ByI29OQb2y4uWSxQuAnrMYOuAklir TJLgnZW8DqDM/irIZueyiKVpKhnPLb7msRSghaP7IlkBElLZ+muwYwMvZ2Blabja U6Iyia9iJ18BVV0dQ53sELNHiBUQTwZY78lCMBjtNcFQSlsXLitzUmpKnEm2eFSM kKbVU4UiTuBZIJSyIYDw7pZckfLW0S4mlG/RKrnr+gM9nSMeMBFTM9eAnsB/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLYfQS2Uke5TWE R/NaNlO+SiPWZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGho YWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ro aGFjSkZnV3M5d0s5Q3VFUFRYZVFDMVhEd2poZ01OSnMzelRoOXc5dEJVLzAvOEI2 MUY0MTJEOTQ5MUVFNTM1ODQ0N0YzNUEzNjUzQkU0QTIzRDY2Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeXwAwQCsYBYMA0EAgACMAcDBQAoBEjAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQThjANBgkqhkiG9w0BAQsFAAOCAQEAyc+icV/k ekO96AC+dvWMaaCYkHIEXw+yC/7i4Fyn9qGEqVw3il5IBc4M6r842U5jhScPQ9UW VzsX44E2FaaUQ0GyofQaNI0yWBb8ezHxJo2SJkt3omUKr8kz+HA9+u8YV3X2ebFw Lu1CBggV7XRs4GInst55WBFnVAkq9rz6ZAkIHmY5/SWQrKN0Pk1IpKouyzJTGyVt Cv0+3OFKbA3xgmGarGOULmiPDeFpoWC50YYkFQVKtMm2YRegHrrVGpFqM5K94LI9 KrFE1gPG/vYtzfEB3IKWDZjBqrgblbi3Qh3osogksjT+vVkYzbSVCLBQBZcZw/45 M4Cld0hD2WkH6w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:58 2026 by rpki-client