$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer File: AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer (raw, json) Hash identifier: wTQWLkfYkYPsKIfVdCfLsU6CNxL+chB3dwqQBl1S5Xw= Subject key identifier: AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E6B0ACC6FBEE3A25F44A817EA74FEFD6B81086D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft caRepository: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 20:27:58 +0000 Certificate not after: Fri 19 Mar 2027 20:32:58 +0000 Subordinate resources: AS: 272607 IP: 2804:85e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6b:0a:cc:6f:be:e3:a2:5f:44:a8:17:ea:74:fe:fd:6b:81:08:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 20:27:58 2026 GMT Not After : Mar 19 20:32:58 2027 GMT Subject: CN=AF22FDFE9E74C4496C70B504FFEC2864F1F6A869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:1f:e0:56:d8:66:bb:7a:9d:f8:ee:da:80: 32:75:ae:e3:45:58:2b:f8:fb:89:45:3c:cc:93:f3: e8:b8:43:0e:3f:2e:75:83:e1:df:dd:75:61:1e:81: ac:ae:cf:7f:ee:4c:3c:39:7d:53:8e:b6:03:cc:15: b7:64:c9:e5:7a:6a:2d:83:a3:5d:76:9f:3a:49:ea: d5:1d:25:36:4b:25:7a:f6:d4:7c:8f:d8:6f:42:d8: 7c:69:a1:04:44:97:17:a5:be:7b:cb:bb:e0:ef:29: e1:bf:f9:4e:94:b1:00:6e:24:39:3b:f8:2c:9f:11: e1:c7:a2:b1:01:20:96:42:14:ef:0c:c7:4a:85:fa: 52:71:8f:4a:48:db:67:f1:ef:fb:f9:50:17:f4:cf: bc:1c:df:e9:63:a3:91:b9:ed:9e:31:f8:bd:6b:55: 55:92:0d:8d:b5:d2:59:b6:8d:32:d2:53:4f:af:51: 79:de:38:78:5f:d4:3c:61:4f:b2:63:3e:3a:ce:c9: a5:d6:9b:f1:20:a4:5d:f0:20:66:32:e9:e5:de:3f: 34:e0:94:68:f5:8e:56:0c:e7:f6:8b:5a:c2:6e:c7: be:6c:8d:2f:9b:43:b6:66:cd:3b:10:12:3d:16:7e: 13:7c:de:5d:4e:4e:d0:5f:7d:7e:be:63:7f:d6:5e: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:85e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272607 Signature Algorithm: sha256WithRSAEncryption a6:69:b3:ff:6c:8f:18:e0:53:a0:20:0d:74:db:b3:a1:9b:ea: c0:f3:6a:39:90:03:4d:64:b9:07:2b:bf:6f:8f:cb:8e:c9:01: 6a:ca:38:5b:2c:90:f0:b8:33:d6:b7:2c:eb:d8:19:7d:30:6e: 35:8e:d9:3d:fe:e7:5b:14:e0:89:d8:51:4d:bf:4e:b4:9b:4d: c5:82:a1:c9:09:23:ee:a0:ff:ce:b0:cd:0c:96:67:e6:47:72: b2:42:2e:e5:ca:09:a9:ec:db:e6:a0:d0:0a:af:de:52:35:79: 60:3b:c7:02:f9:ba:47:c3:af:48:2a:59:35:e6:cf:c1:be:58: ef:0a:d5:01:44:5a:e3:6f:b8:74:bd:fd:a8:12:47:12:f2:24: 3c:67:7e:5b:a7:30:ba:6f:0e:81:2b:d6:40:b7:56:4a:00:0b: 12:85:75:39:3e:88:97:22:7c:bf:25:70:06:2b:78:2c:ab:75: ea:7e:22:fa:0e:9e:4a:ff:85:7b:e1:69:04:23:1e:cc:d0:40: ef:30:ed:60:23:1a:62:09:6b:53:14:08:30:fc:6c:7e:16:44: 5c:bd:4e:32:4e:90:ce:06:e0:e9:fb:60:cd:1b:9e:4f:46:d3: 11:1e:78:de:e6:8d:7e:3c:d0:93:41:b3:23:9f:66:f6:f3:4a: 01:86:d1:36 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUXmsKzG++46JfRKgX6nT+/WuBCG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAyMDI3NThaFw0yNzAzMTkyMDMyNThaMDMxMTAvBgNV BAMTKEFGMjJGREZFOUU3NEM0NDk2QzcwQjUwNEZGRUMyODY0RjFGNkE4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSx/gVthmu3qd+O7agDJ1ruNF WCv4+4lFPMyT8+i4Qw4/LnWD4d/ddWEegayuz3/uTDw5fVOOtgPMFbdkyeV6ai2D o112nzpJ6tUdJTZLJXr21HyP2G9C2HxpoQRElxelvnvLu+DvKeG/+U6UsQBuJDk7 +CyfEeHHorEBIJZCFO8Mx0qF+lJxj0pI22fx7/v5UBf0z7wc3+ljo5G57Z4x+L1r VVWSDY210lm2jTLSU0+vUXneOHhf1DxhT7JjPjrOyaXWm/EgpF3wIGYy6eXePzTg lGj1jlYM5/aLWsJux75sjS+bQ7ZmzTsQEj0WfhN83l1OTtBffX6+Y3/WXgDHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvIv3+nnTESWxw tQT/7Chk8faoaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRK aFlXZEsydUVuUGcxMjZzTkg5aXJrM0JReXU5TXhqZTYxSEp1emJQcjgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk SmhZV2RLMnVFblBnMTI2c05IOWlyazNCUXl1OU14amU2MUhKdXpiUHI4LzAvQUYy MkZERkU5RTc0QzQ0OTZDNzBCNTA0RkZFQzI4NjRGMUY2QTg2OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASF5DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KN8wDQYJKoZIhvcNAQELBQADggEBAKZps/9sjxjgU6AgDXTbs6Gb6sDzajmQA01k uQcrv2+Py47JAWrKOFsskPC4M9a3LOvYGX0wbjWO2T3+51sU4InYUU2/TrSbTcWC ockJI+6g/86wzQyWZ+ZHcrJCLuXKCans2+ag0Aqv3lI1eWA7xwL5ukfDr0gqWTXm z8G+WO8K1QFEWuNvuHS9/agSRxLyJDxnflunMLpvDoEr1kC3VkoACxKFdTk+iJci fL8lcAYreCyrdep+IvoOnkr/hXvhaQQjHszQQO8w7WAjGmIJa1MUCDD8bH4WRFy9 TjJOkM4G4On7YM0bnk9G0xEeeN7mjX480JNBsyOfZvbzSgGG0TY= -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:04 2026 by rpki-client