$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer File: 9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer (raw, json) Hash identifier: Yk4mkcbw23rbS+xI1+bOKtpf1w51XfUlgJl05msiDLA= Subject key identifier: 9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2EC57447837C474DB3810CD3124949CBAAF133B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft caRepository: rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 18:11:58 +0000 Certificate not after: Tue 13 Apr 2027 18:16:58 +0000 Subordinate resources: AS: 270271 IP: 200.124.64.0/22 IP: 2804:6974::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 19:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c5:74:47:83:7c:47:4d:b3:81:0c:d3:12:49:49:cb:aa:f1:33:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 14 18:11:58 2026 GMT Not After : Apr 13 18:16:58 2027 GMT Subject: CN=9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:58:ab:13:b6:54:f4:dd:43:90:5d:7a:2a: 72:30:b7:cb:ca:c9:72:17:56:8a:db:e8:64:cf:ed: 0b:10:bb:34:11:03:6e:24:8d:8c:25:7d:ae:37:44: 6e:04:df:cc:8b:9c:dd:c6:4f:59:94:15:ab:c6:2a: df:e1:bd:bf:2c:d4:90:8b:2a:cb:7c:f9:a1:b6:53: 89:19:d4:95:26:cc:77:d7:2f:2d:57:78:b4:5a:55: d5:9d:50:cd:1a:38:46:5d:87:f7:ce:2c:c4:5a:de: ff:50:11:90:a4:c7:56:53:1b:ea:4d:d7:cf:25:bc: e3:b5:67:db:e4:57:26:93:4a:14:04:24:83:cd:12: 70:6a:83:44:4e:b2:91:70:80:f4:c3:85:03:23:13: af:02:5a:64:f7:1a:6d:f6:ed:95:e0:92:97:bb:bd: 04:ae:f9:5c:b5:78:5f:28:55:fb:b8:84:13:76:8d: 37:c4:b1:b5:e8:a7:fe:b2:cc:8b:63:e2:3d:b6:71: 6c:04:b0:9e:06:c5:e4:ac:6a:0c:6f:23:fe:ff:e5: fc:3c:78:4e:77:08:dc:24:69:d8:4e:57:54:14:84: 47:3b:de:52:65:cd:e8:06:3e:5a:3a:bf:06:86:14: 38:c8:b4:da:ad:3e:97:e9:25:a3:48:48:64:f9:e4: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.64.0/22 IPv6: 2804:6974::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270271 Signature Algorithm: sha256WithRSAEncryption 99:3e:11:32:ae:1c:b7:ec:b3:8c:70:24:50:49:63:fb:60:f4: 9d:34:e7:8d:26:c7:51:ad:89:41:aa:d5:88:fe:c6:88:2a:f1: 0a:05:48:e0:b3:01:c1:c2:ea:eb:73:d3:cb:8f:9f:d0:72:49: 27:d3:a0:08:30:13:db:89:2b:c3:94:74:8d:06:6e:af:ad:c4: 16:db:fa:02:2e:6c:2c:f8:91:14:70:64:d6:be:da:53:78:09: 05:13:2d:2e:0f:cb:da:b1:79:94:b4:11:15:c9:5c:10:6a:98: 16:21:a9:d9:18:62:a1:d6:48:ce:03:7d:c1:a3:1d:31:5d:04: be:77:19:94:59:8f:92:65:1f:00:09:42:95:06:52:99:e6:3b: dd:35:2f:9c:46:b7:fb:c3:55:a5:84:56:61:48:d5:f4:3b:f4: 5c:5e:fd:56:60:0c:41:ed:bc:b1:aa:9d:22:43:c6:43:94:fa: 1e:a1:90:22:bc:5a:ce:53:9c:61:73:81:69:eb:e9:fc:52:fa: 78:42:35:4d:2f:94:b4:9a:d2:fc:00:6d:ba:a2:66:fd:62:34: 30:48:cb:e4:84:43:96:ca:67:af:5a:03:b7:2e:15:88:2f:4d: 8f:64:1e:95:0d:08:86:8c:ba:03:29:f7:a3:3a:34:de:48:97: 41:59:e7:51 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULsV0R4N8R02zgQzTEklJy6rxM7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTQxODExNThaFw0yNzA0MTMxODE2NThaMDMxMTAvBgNV BAMTKDlDQUE4QkM0NzVGNkEyQjk0MDVGNkU5NDRBQkU2QUExM0FBQjM5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn1irE7ZU9N1DkF16KnIwt8vK yXIXVorb6GTP7QsQuzQRA24kjYwlfa43RG4E38yLnN3GT1mUFavGKt/hvb8s1JCL Kst8+aG2U4kZ1JUmzHfXLy1XeLRaVdWdUM0aOEZdh/fOLMRa3v9QEZCkx1ZTG+pN 188lvOO1Z9vkVyaTShQEJIPNEnBqg0ROspFwgPTDhQMjE68CWmT3Gm327ZXgkpe7 vQSu+Vy1eF8oVfu4hBN2jTfEsbXop/6yzItj4j22cWwEsJ4GxeSsagxvI/7/5fw8 eE53CNwkadhOV1QUhEc73lJlzegGPlo6vwaGFDjItNqtPpfpJaNISGT55MCVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScqovEdfaiuUBf bpRKvmqhOqs5/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmkz cE5ka1FyUFlINGNUNFZwbjQ2WXZwYXo0dHNiaGRRNm96cnVBRk5ReHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJp M3BOZGtRclBZSDRjVDRWcG40Nll2cGF6NHRzYmhkUTZvenJ1QUZOUXhxLzAvOUNB QThCQzQ3NUY2QTJCOTQwNUY2RTk0NEFCRTZBQTEzQUFCMzlGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyHxAMA0EAgACMAcDBQAoBGl0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQfvzANBgkqhkiG9w0BAQsFAAOCAQEAmT4RMq4ct+yzjHAk UElj+2D0nTTnjSbHUa2JQarViP7GiCrxCgVI4LMBwcLq63PTy4+f0HJJJ9OgCDAT 24krw5R0jQZur63EFtv6Ai5sLPiRFHBk1r7aU3gJBRMtLg/L2rF5lLQRFclcEGqY FiGp2RhiodZIzgN9waMdMV0EvncZlFmPkmUfAAlClQZSmeY73TUvnEa3+8NVpYRW YUjV9Dv0XF79VmAMQe28saqdIkPGQ5T6HqGQIrxazlOcYXOBaevp/FL6eEI1TS+U tJrS/ABtuqJm/WI0MEjL5IRDlspnr1oDty4ViC9Nj2QelQ0Ihoy6Ayn3ozo03kiX QVnnUQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:37 2026 by rpki-client