$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7D284FB35C66D128B6148023F9DB09D4AC47348.cer File: B7D284FB35C66D128B6148023F9DB09D4AC47348.cer (raw, json) Hash identifier: uyFXwTSMZb/uXSkNfOvdiD6+TZX7zT9yxkfYR8gBYu0= Subject key identifier: B7:D2:84:FB:35:C6:6D:12:8B:61:48:02:3F:9D:B0:9D:4A:C4:73:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3CB702B1C1F24AA598BB40C9051600C0B757FCE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/B7D284FB35C66D128B6148023F9DB09D4AC47348.mft caRepository: rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 18:29:01 +0000 Certificate not after: Mon 22 Mar 2027 18:34:01 +0000 Subordinate resources: AS: 263471 IP: 138.94.68.0/22 IP: 177.73.108.0/22 IP: 2804:1258::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b7:02:b1:c1:f2:4a:a5:98:bb:40:c9:05:16:00:c0:b7:57:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 18:29:01 2026 GMT Not After : Mar 22 18:34:01 2027 GMT Subject: CN=B7D284FB35C66D128B6148023F9DB09D4AC47348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:37:a9:6f:cd:15:b2:92:1a:dc:ee:42:ad: 14:43:7a:a4:7b:dd:08:47:e1:e3:47:a4:0e:56:c5: 72:ab:d1:58:9c:4c:e5:49:8f:ec:16:6d:7d:cb:29: c1:55:76:ad:d5:87:3a:81:bc:b9:f5:88:1c:1d:56: eb:3a:1f:08:00:c9:e1:8a:43:fa:e5:dd:e2:88:aa: cc:49:c0:11:08:83:4f:e5:d2:23:3e:dc:00:d0:76: 6e:26:e4:46:e8:33:a2:f4:7d:62:65:b1:ca:ed:55: 4a:d5:7a:e0:f1:c5:d2:5c:5d:55:cd:9e:3c:b3:5e: 73:f5:f6:64:6b:28:cb:a6:c2:a4:c5:f8:72:b2:95: 8c:2c:52:21:1a:6c:c4:5b:93:02:d6:6b:f3:64:bd: eb:10:17:79:04:68:06:62:c5:b4:31:2c:db:e1:c0: ae:fc:7b:b2:46:08:9e:ee:c3:6b:7b:1b:26:0e:a9: eb:b8:05:70:a1:39:a9:dd:e7:6f:7e:09:9c:34:f6: 7e:32:5c:aa:7a:19:d2:2b:58:38:1c:65:f8:af:fd: fc:68:a5:b9:21:a7:e2:44:1a:6b:89:d0:c2:34:91: bd:11:77:1c:44:8a:47:7e:c0:24:a3:fc:58:4e:d5: 06:0a:c4:3e:9f:d3:6b:24:f4:ee:ba:ce:63:64:2b: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:D2:84:FB:35:C6:6D:12:8B:61:48:02:3F:9D:B0:9D:4A:C4:73:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/B7D284FB35C66D128B6148023F9DB09D4AC47348.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.68.0/22 177.73.108.0/22 IPv6: 2804:1258::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263471 Signature Algorithm: sha256WithRSAEncryption 82:c8:03:33:0f:fa:a1:79:5a:4d:3b:9c:db:f8:a3:d9:92:1f: 10:bd:a9:58:2f:63:88:aa:d5:89:13:47:10:a4:32:d5:2c:9b: 6d:c4:f9:c1:09:47:b3:4c:c9:2c:0c:07:6b:90:ed:a7:a3:3e: 9d:9d:a0:ff:44:0c:22:b6:c7:a2:b3:97:91:60:5b:97:4d:66: cb:25:ea:ab:f5:12:21:e9:5b:af:c5:c9:3c:85:a2:05:06:a4: 4c:cd:49:18:bd:51:8b:bb:16:b2:61:ec:b3:da:45:d3:d2:3b: c5:7a:24:9c:42:a1:8f:65:23:be:63:bc:28:af:39:c2:96:7d: 1b:1b:0b:ec:7b:6f:35:23:28:51:7d:b2:98:d7:b6:26:ae:3c: 5f:43:1c:e0:80:e1:59:94:24:4a:3d:66:7a:c9:cc:01:96:0e: dd:ba:cc:ee:4c:95:a2:4c:72:9c:18:98:d9:48:5d:eb:03:e7: c0:fc:b3:1e:51:dd:12:30:4d:58:00:00:d5:86:37:95:83:1e: ad:a2:1c:54:cb:cd:0d:04:66:c9:57:f0:70:3a:cd:f9:39:6a: 53:c7:d6:4f:4c:7c:56:6b:25:16:73:73:a1:a0:06:b0:1f:d1: df:83:94:ac:f5:d0:08:42:02:bf:63:7e:0b:c8:1a:8a:56:df: 5c:da:71:9d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPLcCscHySqWYu0DJBRYAwLdX/OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxODI5MDFaFw0yNzAzMjIxODM0MDFaMDMxMTAvBgNV BAMTKEI3RDI4NEZCMzVDNjZEMTI4QjYxNDgwMjNGOURCMDlENEFDNDczNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgjepb80VspIa3O5CrRRDeqR7 3QhH4eNHpA5WxXKr0VicTOVJj+wWbX3LKcFVdq3VhzqBvLn1iBwdVus6HwgAyeGK Q/rl3eKIqsxJwBEIg0/l0iM+3ADQdm4m5EboM6L0fWJlscrtVUrVeuDxxdJcXVXN njyzXnP19mRrKMumwqTF+HKylYwsUiEabMRbkwLWa/NkvesQF3kEaAZixbQxLNvh wK78e7JGCJ7uw2t7GyYOqeu4BXChOand529+CZw09n4yXKp6GdIrWDgcZfiv/fxo pbkhp+JEGmuJ0MI0kb0RdxxEikd+wCSj/FhO1QYKxD6f02sk9O66zmNkK401AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS30oT7NcZtEoth SAI/nbCdSsRzSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRu VERTR0paaHhmajJWWGY5dkF3ckEyR2RXVFlZOTRwYWdmUDR1WVR1MWMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o0 blREU0dKWmh4ZmoyVlhmOXZBd3JBMkdkV1RZWTk0cGFnZlA0dVlUdTFjLzAvQjdE Mjg0RkIzNUM2NkQxMjhCNjE0ODAyM0Y5REIwOUQ0QUM0NzM0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCil5EAwQCsUlsMA0EAgACMAcDBQAoBBJYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFLzANBgkqhkiG9w0BAQsFAAOCAQEAgsgDMw/6 oXlaTTuc2/ij2ZIfEL2pWC9jiKrViRNHEKQy1SybbcT5wQlHs0zJLAwHa5Dtp6M+ nZ2g/0QMIrbHorOXkWBbl01myyXqq/USIelbr8XJPIWiBQakTM1JGL1Ri7sWsmHs s9pF09I7xXoknEKhj2UjvmO8KK85wpZ9GxsL7HtvNSMoUX2ymNe2Jq48X0Mc4IDh WZQkSj1mesnMAZYO3brM7kyVokxynBiY2Uhd6wPnwPyzHlHdEjBNWAAA1YY3lYMe raIcVMvNDQRmyVfwcDrN+TlqU8fWT0x8VmslFnNzoaAGsB/R34OUrPXQCEICv2N+ C8gailbfXNpxnQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:38 2026 by rpki-client