$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer File: AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer (raw, json) Hash identifier: aNQBSgKDI31oyvupp9jQNwdam97IUbNq5CRegSU9HQI= Subject key identifier: AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04973DE6A836204705A54212D45A1302D39ECA6F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.mft caRepository: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 18:31:38 +0000 Certificate not after: Wed 10 Mar 2027 18:36:38 +0000 Subordinate resources: AS: 265144 IP: 131.161.44.0/22 IP: 143.255.108.0/22 IP: 2804:2b44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:97:3d:e6:a8:36:20:47:05:a5:42:12:d4:5a:13:02:d3:9e:ca:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 11 18:31:38 2026 GMT Not After : Mar 10 18:36:38 2027 GMT Subject: CN=AF01A19C9F193FDBA7A5A04D26153A8EF57917A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:f7:5e:6a:32:e4:6c:34:cc:08:1a:8c:53: 14:f9:27:53:82:ec:5f:b6:be:a6:6f:53:25:8e:a0: b8:c7:67:99:14:8e:4b:38:6a:d4:1f:9c:42:a6:5a: 69:82:99:b1:0b:f9:df:81:79:92:f8:16:21:96:4c: 99:3d:bc:8f:fd:f7:21:69:19:ad:50:d9:d7:25:a9: 71:88:af:a0:08:78:71:45:9d:78:5a:20:dd:ee:a4: 0b:c8:f7:80:f4:81:0e:5c:17:9d:57:cb:3d:fb:af: 17:d4:cb:ad:c9:c0:93:89:a1:f3:d3:e0:38:7b:fb: 00:1d:79:07:ef:7a:52:6a:35:32:5f:95:ee:81:30: 75:bd:25:dc:ef:4c:8e:96:d6:53:e4:ff:7a:39:71: db:c9:23:20:8e:55:70:ea:93:21:0a:0c:d4:5e:e7: 0d:bb:bb:24:ee:6d:91:fc:ad:23:2f:67:44:bb:2e: ab:06:7b:02:00:df:a3:c9:83:70:e0:15:44:90:78: b5:31:e8:1e:c0:74:be:e0:f3:01:35:5a:80:fc:e1: 1e:ac:8a:37:55:cc:d1:b1:ee:67:5a:36:66:2e:ea: 43:d1:78:c8:d8:18:2b:5a:b2:14:c4:a5:ba:69:18: 0b:ba:80:3c:6e:bf:31:7b:5b:d8:54:b1:cc:f4:d6: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.44.0/22 143.255.108.0/22 IPv6: 2804:2b44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265144 Signature Algorithm: sha256WithRSAEncryption 10:98:a3:67:02:a1:55:84:1e:eb:1f:c4:b0:c3:a1:f6:79:ca: 1c:a3:35:4e:4b:e7:9e:d3:d7:1a:bc:0e:6a:0e:61:8e:b2:68: 39:0d:b6:71:8c:28:f3:ce:36:d6:82:b9:78:30:5f:0f:b8:1d: c6:63:3a:95:89:3c:d7:43:4c:20:f2:51:73:ad:48:c0:11:6b: 04:ed:a3:0c:fb:fa:04:23:e6:a2:e4:91:3c:d6:11:a5:34:be: f0:7b:ac:89:e9:ea:3a:c4:b7:cd:a1:01:ba:71:51:94:64:4c: 8a:13:53:55:13:d4:fb:79:a5:27:fa:e3:30:d6:53:2f:48:68: 1c:94:e8:f6:ef:09:7b:eb:e1:7f:e6:47:97:ff:0b:fa:a7:9f: da:3e:d0:a2:ea:ea:d4:9e:ed:d9:32:3a:70:c5:a3:99:91:e6: 44:e2:6d:65:a9:d0:22:54:b1:65:ed:19:5a:09:5f:de:e5:bf: 49:4d:8e:fe:41:86:e2:dd:9c:bc:c0:4f:92:bc:51:14:e2:e4: 40:0d:85:b0:f3:dd:a6:72:6b:4a:b9:2d:78:2f:3a:56:4f:e5: 7b:36:37:70:0d:87:8b:58:69:18:03:6d:e4:fe:4b:4d:39:f0: 00:76:3e:ad:99:5c:56:21:2d:66:a7:40:dc:6f:73:81:75:2c: a9:d4:7a:63 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUBJc95qg2IEcFpUIS1FoTAtOeym8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTExODMxMzhaFw0yNzAzMTAxODM2MzhaMDMxMTAvBgNV BAMTKEFGMDFBMTlDOUYxOTNGREJBN0E1QTA0RDI2MTUzQThFRjU3OTE3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFufdeajLkbDTMCBqMUxT5J1OC 7F+2vqZvUyWOoLjHZ5kUjks4atQfnEKmWmmCmbEL+d+BeZL4FiGWTJk9vI/99yFp Ga1Q2dclqXGIr6AIeHFFnXhaIN3upAvI94D0gQ5cF51Xyz37rxfUy63JwJOJofPT 4Dh7+wAdeQfvelJqNTJfle6BMHW9JdzvTI6W1lPk/3o5cdvJIyCOVXDqkyEKDNRe 5w27uyTubZH8rSMvZ0S7LqsGewIA36PJg3DgFUSQeLUx6B7AdL7g8wE1WoD84R6s ijdVzNGx7mdaNmYu6kPReMjYGCtashTEpbppGAu6gDxuvzF7W9hUscz01uORAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvAaGcnxk/26el oE0mFTqO9XkXoDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGly V3hmeTlkY2hlNGJaQ3B4S0tiZVFXRVZaUVd2SEN0ckNYMVJSdUM4ZVcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGly V3hmeTlkY2hlNGJaQ3B4S0tiZVFXRVZaUVd2SEN0ckNYMVJSdUM4ZVcvMC9BRjAx QTE5QzlGMTkzRkRCQTdBNUEwNEQyNjE1M0E4RUY1NzkxN0EwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKDoSwDBAKP/2wwDQQCAAIwBwMFACgEK0QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAu4MA0GCSqGSIb3DQEBCwUAA4IBAQAQmKNnAqFV hB7rH8Sww6H2ecocozVOS+ee09cavA5qDmGOsmg5DbZxjCjzzjbWgrl4MF8PuB3G YzqViTzXQ0wg8lFzrUjAEWsE7aMM+/oEI+ai5JE81hGlNL7we6yJ6eo6xLfNoQG6 cVGUZEyKE1NVE9T7eaUn+uMw1lMvSGgclOj27wl76+F/5keX/wv6p5/aPtCi6urU nu3ZMjpwxaOZkeZE4m1lqdAiVLFl7RlaCV/e5b9JTY7+QYbi3Zy8wE+SvFEU4uRA DYWw892mcmtKuS14LzpWT+V7NjdwDYeLWGkYA23k/ktNOfAAdj6tmVxWIS1mp0Dc b3OBdSyp1Hpj -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:13 2026 by rpki-client