$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer File: AF709D487025EB90C014C7186CC0AEA341A27C3B.cer (raw, json) Hash identifier: EcGmlO5Qexcn+SXv+FZGlU3dXqnPtmXH/5t+wBQuU5M= Subject key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2BF2173FEC3324F782790E999A8371CE2CB24266 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft caRepository: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Aug 2026 17:01:24 +0000 Certificate not after: Tue 24 Aug 2027 17:06:24 +0000 Subordinate resources: AS: 270737 IP: 177.221.136.0/22 IP: 2804:709c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f2:17:3f:ec:33:24:f7:82:79:0e:99:9a:83:71:ce:2c:b2:42:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 25 17:01:24 2026 GMT Not After : Aug 24 17:06:24 2027 GMT Subject: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:a9:b7:a2:13:b2:64:6b:74:b2:92:95:92: a9:a8:8f:19:ff:c1:0c:03:5b:32:bc:bf:e8:14:e7: 39:94:d0:c5:81:dc:65:2f:a8:18:e8:af:51:59:fd: db:81:6c:c6:7b:dd:38:ac:d4:6e:85:5f:c6:6e:76: 96:4a:75:da:f7:40:6f:ea:ff:dd:7b:34:6c:b6:b1: e5:75:27:20:86:c8:38:5f:0b:db:ed:6d:7a:08:f8: a2:5d:6d:da:68:04:05:f5:7f:95:f1:c4:47:b1:d5: e1:56:21:38:bd:01:9e:b0:6d:f6:e6:9d:63:94:b9: ca:36:8b:7f:29:b3:10:33:35:2f:f1:36:a8:31:6b: 5c:c7:0d:0b:c2:2a:e7:05:1d:51:cf:5a:46:86:52: 3a:e4:56:12:d2:0e:91:72:97:bb:8d:db:f1:96:a5: f5:a0:15:d6:f6:a8:f3:d1:0f:b4:2f:fa:9a:20:db: b7:09:c9:06:b5:43:78:87:5f:49:4d:3f:ff:d1:c4: 01:f0:3a:11:58:a3:9b:93:c1:50:7f:16:94:54:03: 0a:fe:ab:1b:ea:ee:47:a1:4f:ee:68:f0:2e:ab:29: c7:ef:9d:9a:b1:a4:02:9c:01:8d:92:8f:be:76:45: 9d:90:2e:39:3c:b0:62:8a:7a:3e:04:a2:c8:e6:b0: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.221.136.0/22 IPv6: 2804:709c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270737 Signature Algorithm: sha256WithRSAEncryption 7d:46:c7:b9:f8:a6:6e:03:ee:94:ef:03:47:9d:5f:98:c7:62: 45:2f:29:8d:56:6e:59:95:d7:f1:76:d9:e2:54:76:c6:db:44: a0:4e:b4:d6:65:b7:25:8c:75:b7:10:28:e6:c2:53:5e:d2:cf: 1c:5f:5d:c5:6c:8c:7e:d0:7a:3f:5c:a4:07:29:86:d3:c7:e6: b7:2b:8d:cc:db:84:01:1b:4f:22:7f:5b:4e:53:61:17:61:43: 03:d1:42:6a:33:a7:26:18:99:7f:df:63:66:6f:fb:50:2c:6b: 83:e9:7c:b0:1a:55:d7:51:23:b7:68:01:ef:6b:7c:44:6a:34: a7:00:24:92:09:4b:44:58:55:39:31:98:69:e5:3f:80:ae:32: 17:3f:62:87:e4:12:2f:94:66:4a:89:e3:15:a0:c0:80:15:1d: 75:63:50:8b:32:c9:cd:e5:28:c9:88:3c:21:73:23:91:24:63: e2:24:50:5e:6d:75:3c:a3:7b:cf:a3:af:62:23:e2:af:49:1a: 9e:80:68:80:f3:a0:3f:f7:0e:ec:53:a4:3a:d5:29:8c:2c:4a: 00:27:e7:fd:0b:7c:a0:23:8b:38:0c:9a:96:97:cc:3e:a0:9c: 0c:64:06:d6:2e:b4:28:e9:9e:15:38:ab:1a:25:10:3c:c8:f9: 30:07:40:92 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUK/IXP+wzJPeCeQ6ZmoNxziyyQmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjUxNzAxMjRaFw0yNzA4MjQxNzA2MjRaMDMxMTAvBgNV BAMTKEFGNzA5RDQ4NzAyNUVCOTBDMDE0QzcxODZDQzBBRUEzNDFBMjdDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVam3ohOyZGt0spKVkqmojxn/ wQwDWzK8v+gU5zmU0MWB3GUvqBjor1FZ/duBbMZ73Tis1G6FX8ZudpZKddr3QG/q /917NGy2seV1JyCGyDhfC9vtbXoI+KJdbdpoBAX1f5XxxEex1eFWITi9AZ6wbfbm nWOUuco2i38psxAzNS/xNqgxa1zHDQvCKucFHVHPWkaGUjrkVhLSDpFyl7uN2/GW pfWgFdb2qPPRD7Qv+pog27cJyQa1Q3iHX0lNP//RxAHwOhFYo5uTwVB/FpRUAwr+ qxvq7kehT+5o8C6rKcfvnZqxpAKcAY2Sj752RZ2QLjk8sGKKej4EosjmsKVFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvcJ1IcCXrkMAU xxhswK6jQaJ8OzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG9L RGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRv S0RqVHR1VmZSeHliUUVDWmZNUm92NVo2RHByeUY3TXlRTjE3djJzWktrLzAvQUY3 MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0MUEyN0MzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsd2IMA0EAgACMAcDBQAoBHCcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhkTANBgkqhkiG9w0BAQsFAAOCAQEAfUbHufimbgPulO8D R51fmMdiRS8pjVZuWZXX8XbZ4lR2xttEoE601mW3JYx1txAo5sJTXtLPHF9dxWyM ftB6P1ykBymG08fmtyuNzNuEARtPIn9bTlNhF2FDA9FCajOnJhiZf99jZm/7UCxr g+l8sBpV11Ejt2gB72t8RGo0pwAkkglLRFhVOTGYaeU/gK4yFz9ih+QSL5RmSonj FaDAgBUddWNQizLJzeUoyYg8IXMjkSRj4iRQXm11PKN7z6OvYiPir0kanoBogPOg P/cO7FOkOtUpjCxKACfn/Qt8oCOLOAyalpfMPqCcDGQG1i60KOmeFTirGiUQPMj5 MAdAkg== -----END CERTIFICATE-----Generated at Thu Oct 8 13:46:53 2026 by rpki-client