$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF86488C62F083B085650D6E078DB46974C5A149.cer File: CF86488C62F083B085650D6E078DB46974C5A149.cer (raw, json) Hash identifier: QOV2D4Xrart+fBxFu/EnCTyxBsh9QbRrgShPs17MRNM= Subject key identifier: CF:86:48:8C:62:F0:83:B0:85:65:0D:6E:07:8D:B4:69:74:C5:A1:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69125ECB2E18D6E8DCFD86085325CE840CFD43A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/CF86488C62F083B085650D6E078DB46974C5A149.mft caRepository: rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 06 May 2026 19:36:00 +0000 Certificate not after: Wed 05 May 2027 19:41:00 +0000 Subordinate resources: AS: 271069 IP: 138.97.76.0/22 IP: 179.48.0.0/22 IP: 2804:75c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:12:5e:cb:2e:18:d6:e8:dc:fd:86:08:53:25:ce:84:0c:fd:43:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 19:36:00 2026 GMT Not After : May 5 19:41:00 2027 GMT Subject: CN=CF86488C62F083B085650D6E078DB46974C5A149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:d5:5e:8e:d9:ab:64:df:bf:33:cf:66:00: 7c:9a:94:b1:03:ae:1a:77:bb:0e:07:32:d6:ca:41: ea:1a:fc:23:60:34:c8:d2:0c:2d:ba:ad:32:8a:75: 6f:7c:d0:6b:ee:f1:89:11:ec:eb:1f:eb:7b:50:f4: 0f:1b:55:a5:ad:bd:7d:9a:1c:bd:d3:f9:f5:c1:e1: 94:a6:7d:52:6b:69:82:cc:8b:e0:ef:4f:05:9c:c7: b3:0c:65:65:92:84:8a:09:ce:bc:44:5d:6a:90:d3: 64:95:bc:1a:9b:ad:75:0d:87:ff:07:6b:00:6b:19: 22:16:23:0d:de:5f:12:80:7c:bc:72:bb:64:4a:fd: 6a:50:4b:e1:fe:c3:03:50:74:1f:80:29:0e:54:84: 80:4a:22:93:05:65:59:32:5b:56:ac:fc:ce:a8:35: ff:b1:af:e8:ba:8f:0f:40:c7:cb:b6:26:37:75:8b: 04:cb:0d:b8:9e:a0:b3:0f:97:40:47:2e:f8:eb:0d: cf:93:b3:d3:0f:58:c7:0b:3e:68:9f:b9:ef:e4:ca: a6:72:d1:72:f7:13:30:a6:26:8d:21:77:31:04:04: af:49:a5:37:77:df:47:e0:df:f8:75:25:95:19:e3: 2b:ff:83:e6:73:bb:e2:01:2f:35:58:32:bc:0b:ac: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:86:48:8C:62:F0:83:B0:85:65:0D:6E:07:8D:B4:69:74:C5:A1:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/CF86488C62F083B085650D6E078DB46974C5A149.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.76.0/22 179.48.0.0/22 IPv6: 2804:75c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271069 Signature Algorithm: sha256WithRSAEncryption 7b:83:ad:15:cd:fd:78:48:af:ec:52:24:ed:9f:5f:00:fd:c2: 4f:68:c0:57:d6:a5:d3:fe:3e:51:6b:53:d3:be:89:2a:2f:73: db:33:e4:c6:c8:d5:16:1c:43:4a:09:86:09:d3:88:7b:c0:b0: 3e:bf:30:f7:e5:b7:66:5b:4d:c9:05:bc:c1:ff:24:83:34:c3: 54:ee:37:a0:53:d2:6f:ad:9f:03:1a:8b:63:85:9f:9b:90:5f: 15:55:b7:db:3a:70:13:ca:b8:bf:2e:46:0e:98:2e:4e:da:06: c7:71:2f:1c:61:24:7c:ec:3e:3e:e6:eb:68:6e:ee:89:30:f4: 27:ef:05:76:65:72:6b:e1:fa:03:bb:67:c7:b5:e1:b2:f4:85: e2:c0:a2:0b:ed:e4:9c:52:83:e4:33:b1:fb:b6:fe:c5:62:7a: 26:d7:75:62:5e:56:9a:16:04:5f:ec:21:19:7a:c4:09:d6:87: 08:97:2a:f5:13:d3:2f:c4:62:84:2a:f8:74:fc:ca:13:88:9c: 9b:e0:a7:fc:11:4e:43:72:86:39:6c:81:b3:8d:ae:58:4b:25: 9d:cc:77:76:82:8e:96:66:b0:6b:7d:86:6f:af:8c:29:b0:d8: a4:a4:32:fb:ac:bd:fc:c7:76:e9:14:b0:16:9b:c6:98:39:23: 7b:c0:19:cf -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaRJeyy4Y1ujc/YYIUyXOhAz9Q6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDYxOTM2MDBaFw0yNzA1MDUxOTQxMDBaMDMxMTAvBgNV BAMTKENGODY0ODhDNjJGMDgzQjA4NTY1MEQ2RTA3OERCNDY5NzRDNUExNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaNVejtmrZN+/M89mAHyalLED rhp3uw4HMtbKQeoa/CNgNMjSDC26rTKKdW980Gvu8YkR7Osf63tQ9A8bVaWtvX2a HL3T+fXB4ZSmfVJraYLMi+DvTwWcx7MMZWWShIoJzrxEXWqQ02SVvBqbrXUNh/8H awBrGSIWIw3eXxKAfLxyu2RK/WpQS+H+wwNQdB+AKQ5UhIBKIpMFZVkyW1as/M6o Nf+xr+i6jw9Ax8u2Jjd1iwTLDbieoLMPl0BHLvjrDc+Ts9MPWMcLPmifue/kyqZy 0XL3EzCmJo0hdzEEBK9JpTd330fg3/h1JZUZ4yv/g+Zzu+IBLzVYMrwLrIQdAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPhkiMYvCDsIVl DW4HjbRpdMWhSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk5X Q01QZm5WTW5tYnNZVjd1R1A0ZWIxYnNlOTgzSlBOMjEzckh0SFc0QkYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZO V0NNUGZuVk1ubWJzWVY3dUdQNGViMWJzZTk4M0pQTjIxM3JIdEhXNEJGLzAvQ0Y4 NjQ4OEM2MkYwODNCMDg1NjUwRDZFMDc4REI0Njk3NEM1QTE0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimFMAwQCszAAMA0EAgACMAcDBQAoBHXIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQi3TANBgkqhkiG9w0BAQsFAAOCAQEAe4OtFc39 eEiv7FIk7Z9fAP3CT2jAV9al0/4+UWtT076JKi9z2zPkxsjVFhxDSgmGCdOIe8Cw Pr8w9+W3ZltNyQW8wf8kgzTDVO43oFPSb62fAxqLY4Wfm5BfFVW32zpwE8q4vy5G DpguTtoGx3EvHGEkfOw+PubraG7uiTD0J+8FdmVya+H6A7tnx7XhsvSF4sCiC+3k nFKD5DOx+7b+xWJ6Jtd1Yl5WmhYEX+whGXrECdaHCJcq9RPTL8RihCr4dPzKE4ic m+Cn/BFOQ3KGOWyBs42uWEslncx3doKOlmawa32Gb6+MKbDYpKQy+6y9/Md26RSw FpvGmDkje8AZzw== -----END CERTIFICATE-----Generated at Wed May 13 14:57:55 2026 by rpki-client