$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer File: CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer (raw, json) Hash identifier: Z2mcwoMsD7olhXPstgU3m5/DprSbXvZuXGRfo4zVv9Q= Subject key identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6682D3BAB29AF829F0C747DFA31F695332F5640A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft caRepository: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 17:54:27 +0000 Certificate not after: Thu 18 Mar 2027 17:59:27 +0000 Subordinate resources: AS: 262437 IP: 170.82.8.0/22 IP: 177.52.40.0/22 IP: 201.175.48.0/22 IP: 2804:47c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:82:d3:ba:b2:9a:f8:29:f0:c7:47:df:a3:1f:69:53:32:f5:64:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 17:54:27 2026 GMT Not After : Mar 18 17:59:27 2027 GMT Subject: CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:f3:53:89:27:1c:5f:ef:a0:4c:1b:49:46: 43:de:7d:6c:fa:aa:25:c5:19:ce:0d:1a:33:de:08: 9a:d4:33:88:db:63:17:bd:a4:08:09:f4:0d:38:fd: 8c:9a:31:8f:9a:44:02:a5:d0:60:47:e7:94:58:15: 73:47:04:9a:7c:8c:86:ee:cd:81:2b:44:75:9b:e3: 57:93:0d:37:8e:dd:1f:81:4f:39:69:1e:84:74:4d: 03:d4:b9:bf:f3:1c:36:f5:8b:d4:8c:d0:4a:3f:d9: f7:8a:23:a8:db:03:32:8e:4d:5a:ff:27:e6:3d:4c: 2c:30:2c:63:ab:65:dc:47:d7:d0:ca:ef:a7:a2:bd: f8:75:e5:25:20:34:10:1d:67:89:e2:06:28:46:f4: db:3b:38:6d:67:b4:1a:26:81:17:17:a9:9e:1e:fc: 0c:cd:7e:ae:59:65:ad:c6:d9:dd:25:45:0c:a7:e6: 78:1c:2f:25:1f:cc:6b:2b:78:29:20:e0:8f:2f:d0: e3:5f:18:b1:79:56:00:5f:37:8e:6f:a2:0b:cb:76: ed:20:80:0c:9d:f1:e7:7d:09:12:14:2a:91:29:e2: 4c:5d:33:4c:e3:e1:9b:42:78:32:bc:a5:f7:2f:16: 73:30:67:db:ac:65:18:fc:50:24:92:38:2d:0a:ab: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.8.0/22 177.52.40.0/22 201.175.48.0/22 IPv6: 2804:47c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262437 Signature Algorithm: sha256WithRSAEncryption 5f:d3:9b:3d:62:54:93:43:9b:31:6c:47:f4:62:54:31:47:13: 8f:23:46:d5:13:28:ca:6c:58:6e:0b:46:ec:a7:f7:f9:47:ac: d2:72:e9:da:a6:f3:0a:5c:50:54:01:5c:1d:a3:03:87:bf:4a: 4e:28:c8:6d:10:49:4e:45:46:79:ac:c6:2c:9f:2f:98:fb:24: 25:e7:2d:25:20:92:30:12:ac:77:f2:2a:c2:ac:14:fd:eb:30: 33:d3:af:90:df:d5:c3:f2:fa:ae:dd:7f:02:12:8f:30:53:5b: 7d:d8:c4:44:48:1c:f4:08:3b:e9:cc:d8:5f:d8:67:13:c0:be: 41:c4:c5:46:04:e7:9f:7b:12:6b:3a:18:fa:41:ca:11:6d:e9: 36:fe:3c:e5:c2:fd:03:ce:51:6b:12:b9:a4:fc:c1:7e:97:db: e0:ff:ad:5d:7c:3c:ab:1a:04:0f:52:c5:54:36:d4:42:df:53: 3a:8c:b8:75:7c:f9:38:10:10:6b:ba:37:27:4c:09:f8:07:39: 6b:26:3c:1b:84:2a:51:94:f2:0b:cb:6c:de:f1:bf:8b:ab:2e: f9:45:ca:38:da:f6:c6:81:eb:15:24:24:32:ea:1f:1b:8d:ab: 1d:3a:01:2b:fb:88:15:3c:fa:39:24:cb:03:58:ed:48:63:e5: c6:2a:17:3d -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUZoLTurKa+Cnwx0ffox9pUzL1ZAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkxNzU0MjdaFw0yNzAzMTgxNzU5MjdaMDMxMTAvBgNV BAMTKENBRkE1QjhBRDk3REU4OEZERDJGOTc2MkY1MTNCQjNFNkRGNjcxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFvNTiSccX++gTBtJRkPefWz6 qiXFGc4NGjPeCJrUM4jbYxe9pAgJ9A04/YyaMY+aRAKl0GBH55RYFXNHBJp8jIbu zYErRHWb41eTDTeO3R+BTzlpHoR0TQPUub/zHDb1i9SM0Eo/2feKI6jbAzKOTVr/ J+Y9TCwwLGOrZdxH19DK76eivfh15SUgNBAdZ4niBihG9Ns7OG1ntBomgRcXqZ4e /AzNfq5ZZa3G2d0lRQyn5ngcLyUfzGsreCkg4I8v0ONfGLF5VgBfN45vogvLdu0g gAyd8ed9CRIUKpEp4kxdM0zj4ZtCeDK8pfcvFnMwZ9usZRj8UCSSOC0Kq+6RAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK+luK2X3oj90v l2L1E7s+bfZxujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1V2 c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNV dnNDYkhHdzV2VWdzRXFMU1c3UGtEYjZ5OFFEdjFaQjZqdU5mQTl6dTVMLzAvQ0FG QTVCOEFEOTdERTg4RkREMkY5NzYyRjUxM0JCM0U2REY2NzFCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqlIIAwQCsTQoAwQCya8wMA0EAgACMAcDBQAoBAR8 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBJTANBgkqhkiG9w0BAQsFAAOCAQEA X9ObPWJUk0ObMWxH9GJUMUcTjyNG1RMoymxYbgtG7Kf3+Ues0nLp2qbzClxQVAFc HaMDh79KTijIbRBJTkVGeazGLJ8vmPskJectJSCSMBKsd/IqwqwU/eswM9OvkN/V w/L6rt1/AhKPMFNbfdjEREgc9Ag76czYX9hnE8C+QcTFRgTnn3sSazoY+kHKEW3p Nv485cL9A85RaxK5pPzBfpfb4P+tXXw8qxoED1LFVDbUQt9TOoy4dXz5OBAQa7o3 J0wJ+Ac5ayY8G4QqUZTyC8ts3vG/i6su+UXKONr2xoHrFSQkMuofG42rHToBK/uI FTz6OSTLA1jtSGPlxioXPQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:11 2026 by rpki-client