$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer File: C8232E7ADA2149C400868144F5DA83930BC26309.cer (raw, json) Hash identifier: ciWJiYopIfrKEu/p+KJhcXvbwfEn98MKkfkduYvxxJg= Subject key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 76B206BAA3864DC440B4607018ED6C769EE93B41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft caRepository: rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 06:17:46 +0000 Certificate not after: Wed 24 Mar 2027 06:22:46 +0000 Subordinate resources: AS: 262566 IP: 177.73.72.0/22 IP: 177.129.184.0/21 IP: 2804:3f10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b2:06:ba:a3:86:4d:c4:40:b4:60:70:18:ed:6c:76:9e:e9:3b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 06:17:46 2026 GMT Not After : Mar 24 06:22:46 2027 GMT Subject: CN=C8232E7ADA2149C400868144F5DA83930BC26309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:93:f0:ab:3a:79:14:d6:c5:68:0d:d1:fe: 49:e3:9c:e3:a6:8f:3a:76:8a:59:e4:42:50:03:f8: 4d:54:98:6f:1c:28:aa:df:71:6c:e6:2d:0d:9e:06: 56:32:39:bb:a7:92:38:42:0c:8b:11:c5:d9:c8:36: b2:34:52:69:37:df:55:41:2a:c9:66:2e:15:93:66: 18:42:0e:28:59:0c:48:f2:90:c7:8c:c7:72:02:96: 02:1c:c8:a6:d2:a6:3a:c8:cd:11:d8:57:57:e9:0f: 8b:e9:54:8b:be:ef:31:40:b5:1c:cc:17:fe:d2:38: d5:54:29:eb:a6:e6:5c:81:17:51:af:4c:20:99:40: 5b:96:11:0c:19:44:53:f0:d6:26:74:6c:66:40:c5: 6a:5d:c1:28:3b:ee:2a:32:ee:68:e4:18:13:2d:7b: 97:0d:58:72:de:06:ea:e3:3c:90:e5:40:ff:af:37: 89:43:ed:b5:9d:b3:93:3b:d7:d7:33:7d:11:6a:22: f1:10:f6:f7:bc:12:22:14:38:eb:99:13:89:d6:0d: a5:80:4a:7a:22:8b:e0:b5:18:ff:30:3c:41:a8:49: 4c:d1:c4:25:73:cc:b6:74:f9:1f:9e:f0:da:86:1f: f1:58:1b:58:b0:4d:a2:a6:29:19:2f:55:13:fb:85: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.72.0/22 177.129.184.0/21 IPv6: 2804:3f10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262566 Signature Algorithm: sha256WithRSAEncryption aa:c7:30:fc:2d:9c:63:67:5e:6f:ca:77:bf:a6:0c:c6:4a:73: 40:b4:23:65:c3:49:17:4b:46:0b:3a:61:dd:98:88:34:54:8d: c9:0b:95:09:08:b4:73:b4:e6:18:e6:9a:e1:fb:54:16:7d:41: 7d:54:42:b6:5a:03:46:b1:f8:4b:6d:f6:85:9d:a7:46:24:81: 5e:dc:ee:dd:b2:db:79:37:bd:db:75:64:62:22:18:cd:b1:d9: 49:7a:da:e1:9b:04:00:6a:7b:60:da:94:cf:85:8f:07:e9:67: 46:05:e3:c1:8e:37:31:8c:a1:cb:f5:19:87:fa:ae:21:96:3b: 46:81:24:69:ac:ff:62:ab:45:e8:e1:32:64:c7:01:4c:b5:ee: a7:c4:69:a1:16:0f:60:6b:76:36:0e:1b:b4:d4:38:94:9b:a5: 4c:fc:df:37:09:89:a3:2c:ea:7d:b2:2d:ef:18:9f:a2:be:5c: ec:0c:c2:6b:d6:92:41:5a:52:1f:1a:fc:9f:44:df:bc:95:2e: e6:fb:7d:e0:22:ce:0a:56:37:7d:f4:07:f7:87:1a:4c:27:5b: 66:a1:4d:86:7f:ef:24:f7:d0:3c:70:de:02:5b:2b:47:cd:53: 26:a9:96:77:ca:5c:65:c2:49:20:17:b1:71:d3:65:ba:b8:ce: f8:26:cb:2d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdrIGuqOGTcRAtGBwGO1sdp7pO0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUwNjE3NDZaFw0yNzAzMjQwNjIyNDZaMDMxMTAvBgNV BAMTKEM4MjMyRTdBREEyMTQ5QzQwMDg2ODE0NEY1REE4MzkzMEJDMjYzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG5Pwqzp5FNbFaA3R/knjnOOm jzp2ilnkQlAD+E1UmG8cKKrfcWzmLQ2eBlYyObunkjhCDIsRxdnINrI0Umk331VB KslmLhWTZhhCDihZDEjykMeMx3IClgIcyKbSpjrIzRHYV1fpD4vpVIu+7zFAtRzM F/7SONVUKeum5lyBF1GvTCCZQFuWEQwZRFPw1iZ0bGZAxWpdwSg77ioy7mjkGBMt e5cNWHLeBurjPJDlQP+vN4lD7bWds5M719czfRFqIvEQ9ve8EiIUOOuZE4nWDaWA Snoii+C1GP8wPEGoSUzRxCVzzLZ0+R+e8NqGH/FYG1iwTaKmKRkvVRP7hQw1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIIy562iFJxACG gUT12oOTC8JjCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHVt aFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29GVHcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1 bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEvQzgy MzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMwQkMyNjMwOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUlIAwQDsYG4MA0EAgACMAcDBQAoBD8QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBpjANBgkqhkiG9w0BAQsFAAOCAQEAqscw/C2c Y2deb8p3v6YMxkpzQLQjZcNJF0tGCzph3ZiINFSNyQuVCQi0c7TmGOaa4ftUFn1B fVRCtloDRrH4S232hZ2nRiSBXtzu3bLbeTe923VkYiIYzbHZSXra4ZsEAGp7YNqU z4WPB+lnRgXjwY43MYyhy/UZh/quIZY7RoEkaaz/YqtF6OEyZMcBTLXup8RpoRYP YGt2Ng4btNQ4lJulTPzfNwmJoyzqfbIt7xifor5c7AzCa9aSQVpSHxr8n0TfvJUu 5vt94CLOClY3ffQH94caTCdbZqFNhn/vJPfQPHDeAlsrR81TJqmWd8pcZcJJIBex cdNlurjO+CbLLQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:31 2026 by rpki-client