$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.cer File: BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.cer (raw, json) Hash identifier: qKyYvMjZVNzypC/KYMThYJCnSwNKtKu2rN4W4nPtSSs= Subject key identifier: BF:2C:B7:4E:51:C0:E4:35:FB:37:90:8E:AA:03:27:F9:D8:AE:A7:FE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D779DFE054A31F22F026825C275CC0460E6635D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.mft caRepository: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Jun 2026 21:07:27 +0000 Certificate not after: Mon 07 Jun 2027 21:12:27 +0000 Subordinate resources: AS: 263421 IP: 168.121.156.0/22 IP: 168.195.220.0/22 IP: 179.191.240.0/20 IP: 2804:1600::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:77:9d:fe:05:4a:31:f2:2f:02:68:25:c2:75:cc:04:60:e6:63:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 8 21:07:27 2026 GMT Not After : Jun 7 21:12:27 2027 GMT Subject: CN=BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:cc:de:33:ee:10:26:48:dd:22:f0:21:76: 63:9b:b8:e7:93:3f:85:f8:80:5d:f2:a5:1c:c1:c8: be:13:fc:97:1d:62:85:71:df:42:81:71:39:e6:ec: 60:87:47:4f:af:6f:ab:47:e2:5a:c6:98:fa:a1:ee: a8:d6:61:91:35:ea:0c:31:87:88:ba:14:0f:c4:06: 2d:bc:e2:fd:0d:da:51:e4:62:2e:1a:01:64:e2:5f: ac:3c:87:06:f9:99:af:3a:e9:45:db:b9:d6:31:5d: 0a:04:f3:90:10:a9:20:6f:be:05:cf:64:dd:b0:5a: 7d:66:af:36:87:6e:42:2e:85:4e:1e:9f:8e:a6:2f: e6:ce:b7:39:f2:20:f2:23:bf:ec:4a:37:30:64:ee: fd:2e:95:6e:fc:04:54:dd:92:38:8d:43:e9:ed:ba: 5d:31:8c:17:a2:97:a2:73:ae:7c:53:53:5f:54:eb: 4a:9e:0b:2a:44:1b:cf:37:34:de:b4:7a:94:14:c6: 26:00:74:67:a0:a6:95:33:cf:2f:c3:6f:6d:8d:8c: f1:e9:92:e4:98:cc:8b:57:05:70:e3:c9:30:35:c9: 55:74:5c:bf:62:c5:4d:9d:77:99:92:71:a6:2b:9e: b2:58:59:d9:5f:bd:c6:64:08:2c:1e:96:80:88:1b: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:2C:B7:4E:51:C0:E4:35:FB:37:90:8E:AA:03:27:F9:D8:AE:A7:FE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.156.0/22 168.195.220.0/22 179.191.240.0/20 IPv6: 2804:1600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263421 Signature Algorithm: sha256WithRSAEncryption 6e:62:87:09:19:31:dd:5e:db:c6:80:6b:72:40:72:89:ad:0f: d8:b2:10:38:fc:42:bb:80:0d:bf:a2:e5:69:c7:fd:93:4d:95: 97:69:ab:03:61:39:2d:23:db:f6:c1:db:b2:d3:42:9a:84:ce: 36:c9:6a:db:0c:29:82:33:2b:34:ac:5b:07:bc:ed:36:25:a9: 91:49:1c:32:02:de:c8:e3:65:2b:31:ad:d7:e9:b3:fc:15:0f: b7:34:80:3b:fb:32:ac:8a:98:45:ed:73:41:fa:1c:7d:40:c0: 9c:ab:28:ca:fa:79:51:95:dd:4a:d6:09:1b:a2:30:1c:87:50: 5e:0d:8e:28:76:13:9f:fc:5d:ce:8b:53:44:23:12:eb:68:f6: 97:84:bd:7a:5d:b7:f1:53:3e:f4:07:81:87:c2:d6:c5:30:06: 17:29:61:8f:c9:e1:4f:ee:d6:d7:7a:bf:a2:0f:89:7b:54:58: 2c:bb:45:d9:83:f1:f7:7f:68:84:61:43:80:a1:fb:0e:83:68: 6c:33:3f:25:77:5e:74:35:bc:9b:03:2a:90:21:bb:68:e7:f7: a4:9b:57:b2:81:c4:21:35:5d:1f:5c:c4:bb:e3:30:df:9f:fa: 86:ac:9c:c0:3c:3d:d8:ee:d0:0f:f0:5b:43:5f:02:b1:13:b9: 28:12:18:b5 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUPXed/gVKMfIvAmglwnXMBGDmY10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MDgyMTA3MjdaFw0yNzA2MDcyMTEyMjdaMDMxMTAvBgNV BAMTKEJGMkNCNzRFNTFDMEU0MzVGQjM3OTA4RUFBMDMyN0Y5RDhBRUE3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkMzeM+4QJkjdIvAhdmObuOeT P4X4gF3ypRzByL4T/JcdYoVx30KBcTnm7GCHR0+vb6tH4lrGmPqh7qjWYZE16gwx h4i6FA/EBi284v0N2lHkYi4aAWTiX6w8hwb5ma866UXbudYxXQoE85AQqSBvvgXP ZN2wWn1mrzaHbkIuhU4en46mL+bOtznyIPIjv+xKNzBk7v0ulW78BFTdkjiNQ+nt ul0xjBeil6JzrnxTU19U60qeCypEG883NN60epQUxiYAdGegppUzzy/Db22NjPHp kuSYzItXBXDjyTA1yVV0XL9ixU2dd5mScaYrnrJYWdlfvcZkCCweloCIGws5AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/LLdOUcDkNfs3 kI6qAyf52K6n/jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm53 VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdMeUYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ju d1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAvQkYy Q0I3NEU1MUMwRTQzNUZCMzc5MDhFQUEwMzI3RjlEOEFFQTdGRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqHmcAwQCqMPcAwQEs7/wMA0EAgACMAcDBQAoBBYA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQE/TANBgkqhkiG9w0BAQsFAAOCAQEA bmKHCRkx3V7bxoBrckByia0P2LIQOPxCu4ANv6Llacf9k02Vl2mrA2E5LSPb9sHb stNCmoTONslq2wwpgjMrNKxbB7ztNiWpkUkcMgLeyONlKzGt1+mz/BUPtzSAO/sy rIqYRe1zQfocfUDAnKsoyvp5UZXdStYJG6IwHIdQXg2OKHYTn/xdzotTRCMS62j2 l4S9el238VM+9AeBh8LWxTAGFylhj8nhT+7W13q/og+Je1RYLLtF2YPx939ohGFD gKH7DoNobDM/JXdedDW8mwMqkCG7aOf3pJtXsoHEITVdH1zEu+Mw35/6hqycwDw9 2O7QD/BbQ18CsRO5KBIYtQ== -----END CERTIFICATE-----Generated at Sun Jun 14 02:26:17 2026 by rpki-client