$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF73A4C80D9EBECC1AB45CC5101DC71F2CA42A81.cer File: AF73A4C80D9EBECC1AB45CC5101DC71F2CA42A81.cer (raw, json) Hash identifier: AD2XFe1/gSs7VageqzsuVFOsjzX7Tribni7XXOtLgOg= Subject key identifier: AF:73:A4:C8:0D:9E:BE:CC:1A:B4:5C:C5:10:1D:C7:1F:2C:A4:2A:81 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4AB546B3E59279C81A90DD220A9EE94143DB4A8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/AF73A4C80D9EBECC1AB45CC5101DC71F2CA42A81.mft caRepository: rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Feb 2026 15:25:24 +0000 Certificate not after: Fri 26 Feb 2027 15:30:24 +0000 Subordinate resources: AS: 272275 IP: 2804:84b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 17:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b5:46:b3:e5:92:79:c8:1a:90:dd:22:0a:9e:e9:41:43:db:4a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 27 15:25:24 2026 GMT Not After : Feb 26 15:30:24 2027 GMT Subject: CN=AF73A4C80D9EBECC1AB45CC5101DC71F2CA42A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6b:03:7f:23:88:c0:b3:32:06:47:d1:4c:e2: 11:ee:44:1a:79:64:b7:39:a0:cd:37:b3:a6:26:21: 3d:2d:f1:73:14:bd:f0:0c:4c:f6:95:79:7f:d7:6c: f7:19:6d:38:e8:a5:47:53:eb:06:f1:2b:94:4e:b1: 64:bc:eb:2b:22:a8:9b:bd:7c:12:a8:2d:1b:53:24: c3:ff:2b:07:54:53:42:4c:2b:fa:61:ee:69:cd:ad: 28:14:3d:1f:d4:73:d5:c0:7c:a9:ba:df:b4:97:32: 26:a2:3b:5c:4f:88:11:76:e6:dd:85:e4:2c:66:46: f3:4b:28:51:85:6c:db:99:e2:1b:16:ed:8f:a6:d6: dc:4a:e7:76:f0:b6:2e:3c:a5:e3:cd:35:36:b4:73: 79:ef:3d:fa:1c:06:42:4f:13:1e:dd:be:63:73:f3: 3a:52:8e:f6:68:b8:7a:ac:fa:5a:f0:d9:6e:72:e4: e8:7e:ce:87:a2:8f:b0:c1:65:f0:12:bf:72:ee:45: 10:d9:d9:fe:fb:5d:cc:e2:bd:a9:d7:38:9e:70:9e: 64:34:59:f0:8a:6d:72:4f:95:9a:1a:4f:b5:e4:82: 3b:f6:7c:06:b8:66:58:ba:dd:e5:43:4c:1d:6e:7a: fc:12:21:2b:d5:bc:ac:84:2f:1a:1d:49:56:7b:b5: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:73:A4:C8:0D:9E:BE:CC:1A:B4:5C:C5:10:1D:C7:1F:2C:A4:2A:81 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/32WSc9LtNTfKGt6STedFmULinWN9tydK6PhLWcBjosQq/0/AF73A4C80D9EBECC1AB45CC5101DC71F2CA42A81.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:84b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272275 Signature Algorithm: sha256WithRSAEncryption 27:b9:8c:7f:0d:92:d4:86:44:89:0f:bc:7c:5f:b9:a1:83:21: 3b:91:39:53:84:7e:95:17:b4:11:bf:a5:d0:43:fc:48:57:7c: b6:16:6c:0b:ea:be:a7:d3:56:cf:9d:04:24:b5:0f:d1:56:4a: c3:c0:95:61:c3:88:45:0e:67:da:c2:48:ef:ff:b8:fb:4e:91: 36:0f:36:d0:fb:6f:7b:d8:8a:98:4e:a6:33:f4:ea:2d:17:c8: 9c:fd:cf:ed:8b:36:d9:36:3c:d3:09:ba:4c:d0:16:a9:c9:e6: ae:91:08:73:c1:56:80:48:f5:7c:85:3a:63:4e:eb:cf:c8:f6: 1e:7a:38:00:7c:0f:57:4d:f1:ed:42:2d:cf:12:5b:41:c7:1e: fa:e5:bd:8a:64:fb:36:3e:1f:96:b6:7f:ee:8f:1d:22:f5:2c: 65:6b:40:d8:46:68:f0:29:60:a8:09:3e:f9:6c:78:3b:c6:01: 15:1a:52:42:4a:13:53:f0:a7:31:b1:6f:93:58:0b:94:33:40: a3:21:ee:eb:6b:66:2e:6e:e9:8e:bb:a8:db:92:66:d9:44:6c: fd:3c:dc:24:5a:98:7c:66:98:6f:2f:f8:82:66:1c:6e:95:0a: eb:93:75:8a:e9:9b:ba:eb:8b:1d:af:f1:f5:51:f3:26:a2:dd: 09:da:fe:92 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUSrVGs+WSecgakN0iCp7pQUPbSo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjcxNTI1MjRaFw0yNzAyMjYxNTMwMjRaMDMxMTAvBgNV BAMTKEFGNzNBNEM4MEQ5RUJFQ0MxQUI0NUNDNTEwMURDNzFGMkNBNDJBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkawN/I4jAszIGR9FM4hHuRBp5 ZLc5oM03s6YmIT0t8XMUvfAMTPaVeX/XbPcZbTjopUdT6wbxK5ROsWS86ysiqJu9 fBKoLRtTJMP/KwdUU0JMK/ph7mnNrSgUPR/Uc9XAfKm637SXMiaiO1xPiBF25t2F 5CxmRvNLKFGFbNuZ4hsW7Y+m1txK53bwti48pePNNTa0c3nvPfocBkJPEx7dvmNz 8zpSjvZouHqs+lrw2W5y5Oh+zoeij7DBZfASv3LuRRDZ2f77XczivanXOJ5wnmQ0 WfCKbXJPlZoaT7Xkgjv2fAa4Zli63eVDTB1uevwSISvVvKyELxodSVZ7tS3pAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvc6TIDZ6+zBq0 XMUQHccfLKQqgTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzJX U2M5THROVGZLR3Q2U1RlZEZtVUxpbldOOXR5ZEs2UGhMV2NCam9zUXEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMy V1NjOUx0TlRmS0d0NlNUZWRGbVVMaW5XTjl0eWRLNlBoTFdjQmpvc1FxLzAvQUY3 M0E0QzgwRDlFQkVDQzFBQjQ1Q0M1MTAxREM3MUYyQ0E0MkE4MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASEsDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME J5MwDQYJKoZIhvcNAQELBQADggEBACe5jH8NktSGRIkPvHxfuaGDITuROVOEfpUX tBG/pdBD/EhXfLYWbAvqvqfTVs+dBCS1D9FWSsPAlWHDiEUOZ9rCSO//uPtOkTYP NtD7b3vYiphOpjP06i0XyJz9z+2LNtk2PNMJukzQFqnJ5q6RCHPBVoBI9XyFOmNO 68/I9h56OAB8D1dN8e1CLc8SW0HHHvrlvYpk+zY+H5a2f+6PHSL1LGVrQNhGaPAp YKgJPvlseDvGARUaUkJKE1PwpzGxb5NYC5QzQKMh7utrZi5u6Y67qNuSZtlEbP08 3CRamHxmmG8v+IJmHG6VCuuTdYrpm7rrix2v8fVR8yai3Qna/pI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:18:18 2026 by rpki-client