$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.cer File: 04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.cer (raw, json) Hash identifier: 8ct3gA4zxG96Y0lP9DFLcAhcFaHUiCX8X1IvHJA0XXI= Subject key identifier: 04:FD:2A:DD:A9:8E:9E:5E:0B:61:89:2E:0C:D6:23:E0:4D:9F:50:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 76CF7A283987A30F374AFB3610DADBC48F8DCBFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft caRepository: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 20:33:12 +0000 Certificate not after: Tue 23 Feb 2027 20:38:12 +0000 Subordinate resources: AS: 264997 IP: 170.84.144.0/22 IP: 177.12.144.0/21 IP: 2804:3128::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 17:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cf:7a:28:39:87:a3:0f:37:4a:fb:36:10:da:db:c4:8f:8d:cb:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 20:33:12 2026 GMT Not After : Feb 23 20:38:12 2027 GMT Subject: CN=04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:f6:0b:cd:d7:84:49:c0:93:1f:b8:0d:7d: 91:ac:d0:dd:07:49:a9:b1:de:43:f8:70:cf:4b:86: 39:eb:55:f0:6a:a2:54:f7:82:8e:b5:42:40:6f:bb: 44:cf:3c:29:7b:01:ec:a0:2d:1c:89:c5:5e:c0:22: f6:49:d3:6f:7b:ac:a3:86:cc:2c:ec:51:f5:69:77: 24:e7:d4:f7:98:2d:75:d9:a7:b0:01:70:2f:8f:df: fa:9e:81:a5:25:d2:43:c6:00:58:5b:f4:56:9b:da: 68:6c:19:d9:25:32:0b:10:6f:a4:b0:94:fc:f8:13: e1:c4:66:38:37:5d:59:57:f3:f3:a1:90:57:c2:6a: ec:23:dc:3f:54:55:b5:d7:1d:96:7b:6e:ec:41:59: 82:04:b9:04:a1:48:77:e8:b9:11:7a:62:38:bb:d7: d7:ab:3b:a9:50:ba:f0:0b:26:f6:50:95:b7:8b:eb: b6:44:62:89:92:9d:4a:42:01:67:cd:7f:20:ab:2d: a5:16:4f:34:09:36:7e:f1:9c:95:05:e8:f0:73:b4: 4e:71:ff:bc:de:aa:3c:45:17:77:79:a0:49:21:66: e7:8b:98:e9:0d:83:10:1c:0e:33:86:45:5e:c0:c8: 2b:6e:b7:5e:d2:0c:26:68:be:c7:63:d1:70:4c:c7: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:FD:2A:DD:A9:8E:9E:5E:0B:61:89:2E:0C:D6:23:E0:4D:9F:50:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.144.0/22 177.12.144.0/21 IPv6: 2804:3128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264997 Signature Algorithm: sha256WithRSAEncryption 99:2f:7b:07:9f:0b:3b:dd:ab:ea:4d:77:8c:44:6d:bd:8c:45: 37:b5:b4:58:48:56:92:43:63:cb:5b:00:c8:4c:e6:87:3e:85: 99:c6:7b:20:1b:7a:39:51:db:e3:31:ce:f7:2b:40:53:3c:a8: 94:79:76:cd:07:f8:fa:01:b0:2e:75:59:d4:8d:ad:85:c7:8f: 43:89:6b:2e:ee:81:41:8f:e1:69:ac:ab:5e:d0:ea:44:c0:46: 2a:b4:f4:77:5b:a4:11:8f:fd:41:13:fc:57:75:db:4b:e8:6b: 00:20:4e:40:45:14:8f:1d:75:89:63:7a:11:b4:c7:5f:33:44: 15:5d:62:18:03:af:63:e6:ae:c6:68:f1:53:c7:67:19:f4:32: b1:3d:79:0d:88:4c:b9:ee:bb:42:ca:7c:2f:0f:7c:c4:a5:2d: 2c:7a:fe:47:94:ca:d4:52:92:fa:cc:88:64:45:fd:41:3e:85: cc:74:3a:0c:91:42:8d:4e:84:0e:e1:8f:cd:78:0f:25:8b:7c: fe:e1:ba:34:7a:ca:c1:3a:78:5a:86:47:1a:0b:b1:b4:b4:6f: 2f:2b:9e:c5:39:46:89:71:98:39:56:0d:34:2f:e3:00:19:4e: 26:45:cf:d6:af:c1:89:e1:b7:ab:d3:59:63:9f:51:19:3e:31: 02:05:2d:77 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUds96KDmHow83Svs2ENrbxI+Ny/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjQyMDMzMTJaFw0yNzAyMjMyMDM4MTJaMDMxMTAvBgNV BAMTKDA0RkQyQUREQTk4RTlFNUUwQjYxODkyRTBDRDYyM0UwNEQ5RjUwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I/YLzdeEScCTH7gNfZGs0N0H Samx3kP4cM9LhjnrVfBqolT3go61QkBvu0TPPCl7AeygLRyJxV7AIvZJ0297rKOG zCzsUfVpdyTn1PeYLXXZp7ABcC+P3/qegaUl0kPGAFhb9Fab2mhsGdklMgsQb6Sw lPz4E+HEZjg3XVlX8/OhkFfCauwj3D9UVbXXHZZ7buxBWYIEuQShSHfouRF6Yji7 19erO6lQuvALJvZQlbeL67ZEYomSnUpCAWfNfyCrLaUWTzQJNn7xnJUF6PBztE5x /7zeqjxFF3d5oEkhZueLmOkNgxAcDjOGRV7AyCtut17SDCZovsdj0XBMx2PRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQE/SrdqY6eXgth iS4M1iPgTZ9QtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlU TTN3YVNRUnV3ZHc0c0RxdnlnR0IyR0Q5N2JNWGh1UDRHc0o1ZXFaTlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp VE0zd2FTUVJ1d2R3NHNEcXZ5Z0dCMkdEOTdiTVhodVA0R3NKNWVxWk5XLzAvMDRG RDJBRERBOThFOUU1RTBCNjE4OTJFMENENjIzRTA0RDlGNTBCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlSQAwQDsQyQMA0EAgACMAcDBQAoBDEoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLJTANBgkqhkiG9w0BAQsFAAOCAQEAmS97B58L O92r6k13jERtvYxFN7W0WEhWkkNjy1sAyEzmhz6FmcZ7IBt6OVHb4zHO9ytAUzyo lHl2zQf4+gGwLnVZ1I2thcePQ4lrLu6BQY/haayrXtDqRMBGKrT0d1ukEY/9QRP8 V3XbS+hrACBOQEUUjx11iWN6EbTHXzNEFV1iGAOvY+auxmjxU8dnGfQysT15DYhM ue67Qsp8Lw98xKUtLHr+R5TK1FKS+syIZEX9QT6FzHQ6DJFCjU6EDuGPzXgPJYt8 /uG6NHrKwTp4WoZHGguxtLRvLyuexTlGiXGYOVYNNC/jABlOJkXP1q/BieG3q9NZ Y59RGT4xAgUtdw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:18:09 2026 by rpki-client