$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer File: 871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer (raw, json) Hash identifier: l9N5dO0jBl/RCBpr6hU4RTOhmL/YzpENBkGauCXiZcQ= Subject key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33DDA5C84AF2863EB4E86DD85EE63D249B6B18F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft caRepository: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 16:05:55 +0000 Certificate not after: Sun 28 Feb 2027 16:10:55 +0000 Subordinate resources: AS: 269155 IP: 45.180.208.0/22 IP: 2804:6040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:dd:a5:c8:4a:f2:86:3e:b4:e8:6d:d8:5e:e6:3d:24:9b:6b:18:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 1 16:05:55 2026 GMT Not After : Feb 28 16:10:55 2027 GMT Subject: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:11:c5:5f:0c:f2:02:b1:0a:0a:42:02:29: bc:f6:6a:fe:c2:be:66:b3:e9:a6:08:3a:aa:ab:8c: 43:c4:65:d4:cb:7b:7a:b2:9b:ee:60:60:1e:47:c7: 69:9f:0a:35:68:f9:89:ee:73:9d:01:6e:6c:b2:af: 08:a1:1f:b0:d6:59:c7:7a:c0:5f:92:4d:d0:c9:6d: b8:05:cc:86:2c:ca:54:07:74:1f:d6:1a:a1:59:a0: 83:29:80:54:e4:ec:6c:e7:3f:5a:e2:db:9a:44:c4: 04:09:40:2d:dd:da:ff:2e:d9:e9:24:b7:47:4b:e4: 40:f9:55:03:12:9f:9f:65:ca:4a:96:a3:e3:2f:49: 22:f0:36:a1:74:1e:ad:a8:7c:7b:7c:f5:a9:0f:e3: 75:9b:c9:52:18:6a:50:47:9e:78:0a:eb:f5:a5:22: 70:d8:8c:d4:c6:42:5e:bc:d5:91:22:38:50:8a:2b: c7:6c:8f:71:14:23:49:40:90:26:c7:26:a5:88:63: d4:65:50:1c:3d:b1:a9:fa:e6:5e:8b:87:36:3d:65: 66:57:38:16:0f:ac:4a:19:98:51:46:a6:73:25:67: de:d6:1a:88:b0:3f:13:7e:d8:80:67:2d:36:3f:a7: dc:89:ea:5e:36:97:f1:50:25:3e:b3:91:e0:20:2a: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.208.0/22 IPv6: 2804:6040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269155 Signature Algorithm: sha256WithRSAEncryption 9d:b9:f1:bd:f7:3c:66:0b:93:78:0b:69:a9:9f:14:be:3a:85: b8:8a:4c:9b:ac:b0:c9:68:5e:3b:be:36:21:cb:8c:a2:bc:a2: 2a:e2:3b:20:e5:b6:c6:17:d4:75:37:e3:f7:6c:13:2d:02:85: d9:99:ad:89:87:c3:ae:16:2c:f8:e4:99:95:02:6f:c0:71:e4: 1e:f3:57:94:53:c1:62:ab:47:9e:33:97:56:e7:d1:96:7c:b0: 4f:ac:ed:d6:05:f3:f8:a1:3d:01:74:e2:8a:9e:1b:7f:dd:2f: 73:fe:a3:4a:05:73:02:40:bf:01:14:5c:89:37:f0:cb:38:e1: f0:d1:9c:a2:33:1d:1c:5a:bf:be:80:bf:b7:bd:b3:2b:21:e7: d6:83:62:07:6f:1a:f0:65:23:48:b5:33:4f:45:21:cc:db:c6: d5:86:9f:7b:3d:50:60:19:74:34:1b:23:bb:ca:91:de:a5:d0: 06:5f:3c:81:a2:bd:f6:b3:72:18:7c:c0:88:59:27:87:97:8f: 3d:8e:53:dd:fc:db:59:9f:79:b1:f2:53:18:ca:78:88:1d:b1: bc:87:50:e8:12:e7:1b:67:68:a6:c1:41:20:32:73:89:83:39: 0d:90:02:a2:41:82:13:07:62:72:32:db:be:d7:1b:e2:89:7a: a7:e5:0b:db -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM92lyEryhj606G3YXuY9JJtrGPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDExNjA1NTVaFw0yNzAyMjgxNjEwNTVaMDMxMTAvBgNV BAMTKDg3MUYzOTUyNUJDRTg4RTY5QTVEQzIwRURCQTJDQkZFQUVEQzlFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNxHFXwzyArEKCkICKbz2av7C vmaz6aYIOqqrjEPEZdTLe3qym+5gYB5Hx2mfCjVo+Ynuc50BbmyyrwihH7DWWcd6 wF+STdDJbbgFzIYsylQHdB/WGqFZoIMpgFTk7GznP1ri25pExAQJQC3d2v8u2ekk t0dL5ED5VQMSn59lykqWo+MvSSLwNqF0Hq2ofHt89akP43WbyVIYalBHnngK6/Wl InDYjNTGQl681ZEiOFCKK8dsj3EUI0lAkCbHJqWIY9RlUBw9san65l6LhzY9ZWZX OBYPrEoZmFFGpnMlZ97WGoiwPxN+2IBnLTY/p9yJ6l42l/FQJT6zkeAgKszzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHHzlSW86I5ppd wg7bosv+rtyeUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ1 SHJpZUNrTEI3N2FNQ3h1MlNrb21zb2FtcXRwTVNCclE0M2YzanpqanovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 dUhyaWVDa0xCNzdhTUN4dTJTa29tc29hbXF0cE1TQnJRNDNmM2p6amp6LzAvODcx RjM5NTI1QkNFODhFNjlBNURDMjBFREJBMkNCRkVBRURDOUU1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbTQMA0EAgACMAcDBQAoBGBAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbYzANBgkqhkiG9w0BAQsFAAOCAQEAnbnxvfc8ZguTeAtp qZ8UvjqFuIpMm6ywyWheO742IcuMoryiKuI7IOW2xhfUdTfj92wTLQKF2ZmtiYfD rhYs+OSZlQJvwHHkHvNXlFPBYqtHnjOXVufRlnywT6zt1gXz+KE9AXTiip4bf90v c/6jSgVzAkC/ARRciTfwyzjh8NGcojMdHFq/voC/t72zKyHn1oNiB28a8GUjSLUz T0UhzNvG1Yafez1QYBl0NBsju8qR3qXQBl88gaK99rNyGHzAiFknh5ePPY5T3fzb WZ95sfJTGMp4iB2xvIdQ6BLnG2dopsFBIDJziYM5DZACokGCEwdicjLbvtcb4ol6 p+UL2w== -----END CERTIFICATE-----Generated at Sun Mar 1 21:09:40 2026 by rpki-client