$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF2099B22162363B1833ADC628B78CB7C15DF31C.cer File: AF2099B22162363B1833ADC628B78CB7C15DF31C.cer (raw, json) Hash identifier: tT8iZVHLbRJlHXNEhibRC4TEAzKS3EMtDwzZ4QCVltw= Subject key identifier: AF:20:99:B2:21:62:36:3B:18:33:AD:C6:28:B7:8C:B7:C1:5D:F3:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64DB989B386E6DA5FEFA87662D2802BD3D27E72B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/AF2099B22162363B1833ADC628B78CB7C15DF31C.mft caRepository: rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 12 Jul 2026 17:58:42 +0000 Certificate not after: Sun 11 Jul 2027 18:03:42 +0000 Subordinate resources: AS: 271115 IP: 201.71.220.0/22 IP: 2804:767c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:db:98:9b:38:6e:6d:a5:fe:fa:87:66:2d:28:02:bd:3d:27:e7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 12 17:58:42 2026 GMT Not After : Jul 11 18:03:42 2027 GMT Subject: CN=AF2099B22162363B1833ADC628B78CB7C15DF31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:bb:2a:a0:48:e0:12:5d:b6:b0:d0:ae:bb: cc:79:4b:9e:85:55:d2:fc:23:ae:c2:e7:1a:28:c1: e7:64:ba:a2:29:d5:8c:1b:e9:67:2c:e7:ab:1b:d2: fc:3e:b2:2c:89:e0:af:db:2a:5d:af:c8:c5:1d:46: 19:77:00:97:5a:0c:88:95:85:39:74:77:88:10:77: c4:bc:68:31:78:4d:9d:84:7d:4e:59:be:07:a0:5f: 0c:fa:1c:9e:e6:60:6d:9f:6e:21:51:ca:42:7b:89: dd:3c:0c:50:a3:af:f4:f3:18:da:98:1c:25:aa:65: 97:c8:cf:1b:9d:47:60:30:23:5e:9f:30:02:6d:a0: 94:50:d6:85:7b:45:ba:4e:31:58:4b:12:dd:11:93: 16:01:8a:2c:cb:cf:05:c0:62:57:91:5b:7b:f6:15: 83:f2:8c:7f:d0:6e:f8:ab:40:7e:a5:4f:30:ec:60: 0d:67:dd:bc:6c:48:61:f5:78:0b:c8:7e:fa:79:cb: b5:28:4b:ff:61:76:0e:29:a7:12:e4:7b:40:a5:24: ee:da:25:be:4c:35:ee:84:a2:56:51:7c:6f:86:98: 2b:00:d0:32:73:6e:cc:d9:7d:ba:f1:13:f0:f9:ec: 3d:16:ab:2d:af:43:b4:a5:f0:ab:0f:ad:0e:69:b9: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:20:99:B2:21:62:36:3B:18:33:AD:C6:28:B7:8C:B7:C1:5D:F3:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/AF2099B22162363B1833ADC628B78CB7C15DF31C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.71.220.0/22 IPv6: 2804:767c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271115 Signature Algorithm: sha256WithRSAEncryption 19:b1:9b:cf:48:b6:e0:e6:c0:98:66:6c:99:69:cc:01:01:1a: 2e:e5:36:2d:79:4d:01:ce:7d:7c:53:3f:1f:0b:68:26:7a:34: 0a:66:11:2b:90:78:4c:2b:a8:f8:cf:04:95:83:73:13:e8:8d: 22:de:14:2d:c9:c7:7d:ee:7d:8b:82:b1:1a:6e:e6:62:b8:3f: 3c:ef:5b:73:15:2c:22:d1:1b:d6:75:0c:b6:6d:4c:22:ad:b0: 6a:02:b4:9f:8e:f1:fe:d7:50:f3:ff:db:05:63:ae:0c:7e:95: 20:07:35:4f:96:44:67:7c:79:37:e2:3e:43:fc:2f:58:e1:22: 3c:1d:dd:09:1d:88:58:38:7a:9b:3d:23:1d:6d:b2:23:f3:e7: 0f:55:41:0e:ba:35:b1:1e:b7:63:d4:3b:be:2d:65:c9:01:2e: 30:17:7e:5e:21:40:30:e5:19:07:34:09:df:5e:db:5e:45:e8: d6:7c:9d:4d:bc:09:c8:2d:11:1b:c3:c1:b2:e1:33:4e:84:00: 39:0f:30:71:d6:70:6e:25:74:87:d8:f8:e3:3f:03:84:04:49: 25:39:6d:e6:01:2f:c6:43:03:45:23:5b:e3:c4:9d:7d:1b:1e: 19:5c:9c:2d:9a:44:f6:5b:12:95:ab:7d:56:5c:5d:45:3c:01: 7c:3e:de:fb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZNuYmzhubaX++odmLSgCvT0n5yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTIxNzU4NDJaFw0yNzA3MTExODAzNDJaMDMxMTAvBgNV BAMTKEFGMjA5OUIyMjE2MjM2M0IxODMzQURDNjI4Qjc4Q0I3QzE1REYzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUbsqoEjgEl22sNCuu8x5S56F VdL8I67C5xoowedkuqIp1Ywb6Wcs56sb0vw+siyJ4K/bKl2vyMUdRhl3AJdaDIiV hTl0d4gQd8S8aDF4TZ2EfU5ZvgegXwz6HJ7mYG2fbiFRykJ7id08DFCjr/TzGNqY HCWqZZfIzxudR2AwI16fMAJtoJRQ1oV7RbpOMVhLEt0RkxYBiizLzwXAYleRW3v2 FYPyjH/QbvirQH6lTzDsYA1n3bxsSGH1eAvIfvp5y7UoS/9hdg4ppxLke0ClJO7a Jb5MNe6EolZRfG+GmCsA0DJzbszZfbrxE/D57D0Wqy2vQ7Sl8KsPrQ5puTohAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvIJmyIWI2Oxgz rcYot4y3wV3zHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3lM VnpGTVdTUHZwa0xWRFNVVmZ1Ulo4OVk1anNkZG9WTVRwRU5Wb3V5MncvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d5 TFZ6Rk1XU1B2cGtMVkRTVVZmdVJaODlZNWpzZGRvVk1UcEVOVm91eTJ3LzAvQUYy MDk5QjIyMTYyMzYzQjE4MzNBREM2MjhCNzhDQjdDMTVERjMxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyUfcMA0EAgACMAcDBQAoBHZ8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjCzANBgkqhkiG9w0BAQsFAAOCAQEAGbGbz0i24ObAmGZs mWnMAQEaLuU2LXlNAc59fFM/HwtoJno0CmYRK5B4TCuo+M8ElYNzE+iNIt4ULcnH fe59i4KxGm7mYrg/PO9bcxUsItEb1nUMtm1MIq2wagK0n47x/tdQ8//bBWOuDH6V IAc1T5ZEZ3x5N+I+Q/wvWOEiPB3dCR2IWDh6mz0jHW2yI/PnD1VBDro1sR63Y9Q7 vi1lyQEuMBd+XiFAMOUZBzQJ317bXkXo1nydTbwJyC0RG8PBsuEzToQAOQ8wcdZw biV0h9j44z8DhARJJTlt5gEvxkMDRSNb48SdfRseGVycLZpE9lsSlat9VlxdRTwB fD7e+w== -----END CERTIFICATE-----Generated at Fri Jul 24 15:56:40 2026 by rpki-client