$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.cer File: DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.cer (raw, json) Hash identifier: TNJ15nfyg+m6BdiAx6vWfNBg/RTnpMjPm+pro3zjA9s= Subject key identifier: DC:CF:B9:AD:AF:DC:53:EF:E4:8C:DE:3B:EF:0C:EE:DC:6B:35:6D:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C599230D1A162101C48B42BE2BB01614CC0E975 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.mft caRepository: rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 18:04:00 +0000 Certificate not after: Tue 23 Feb 2027 18:09:00 +0000 Subordinate resources: AS: 270797 IP: 177.84.30.0/24 IP: 177.131.140.0/22 IP: 2804:7190::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 18:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:59:92:30:d1:a1:62:10:1c:48:b4:2b:e2:bb:01:61:4c:c0:e9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 18:04:00 2026 GMT Not After : Feb 23 18:09:00 2027 GMT Subject: CN=DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:eb:ce:2e:c4:ca:dd:2d:f2:9a:e2:bd:b1: 1d:b5:18:9f:70:59:0a:58:73:c6:97:9d:39:df:78: 8c:00:66:dd:7c:b9:c2:28:10:a2:72:24:94:85:ca: e6:4f:d6:8e:4e:cc:1f:8e:b9:46:72:69:e9:d3:34: 5f:f0:74:f6:68:ca:c3:89:9c:9b:9e:eb:1a:c0:09: 28:78:fc:47:b2:8b:03:cf:6c:eb:da:97:2d:9c:b2: 94:cd:a1:a0:60:3a:4a:8c:14:81:22:a8:b7:26:0d: ec:72:45:e7:a3:36:0c:5d:9f:d5:dc:81:4a:b3:62: 06:fe:f8:c3:e8:d0:da:7d:16:d0:e9:e7:2b:75:72: 11:c0:98:94:a2:1b:87:ee:62:62:4b:a8:7d:08:c7: e1:04:cf:2f:12:26:9c:ae:ef:0a:0b:ab:d7:55:78: c1:da:4a:72:66:b9:8e:fe:cf:41:a5:13:1f:74:ad: f4:7c:15:b4:5b:67:dd:eb:f0:bf:5b:d4:05:e8:5e: 03:1d:fc:26:c4:5a:5a:b0:7b:45:14:4d:a7:76:24: 0e:4b:cc:80:f1:b8:85:c0:5f:58:4b:e7:ed:9e:eb: df:4d:bd:3e:52:06:fc:28:d9:82:e4:92:c3:78:a0: 7b:4f:0e:ee:97:2d:0d:54:b0:18:55:55:9b:75:aa: b9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:CF:B9:AD:AF:DC:53:EF:E4:8C:DE:3B:EF:0C:EE:DC:6B:35:6D:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.84.30.0/24 177.131.140.0/22 IPv6: 2804:7190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270797 Signature Algorithm: sha256WithRSAEncryption 72:b2:a6:93:91:b9:40:07:d7:0c:c3:79:97:89:35:30:52:38: af:9a:7d:76:a6:39:f5:87:dc:c6:29:09:9a:12:02:97:9e:bd: 4e:10:75:98:b7:6b:2a:d4:63:a5:25:c2:3c:10:ef:8d:69:b0: de:27:f8:41:d4:00:5e:f5:84:c2:91:14:51:b8:c3:24:22:17: 8c:dc:ad:ca:04:98:dc:c1:df:09:dc:d7:45:8f:a2:d4:45:06: d4:66:63:12:3f:c9:4a:fb:f3:d3:e2:1a:6b:ef:4e:06:e5:aa: 40:05:0d:10:21:35:1d:8a:90:be:36:df:7a:e7:95:87:7c:a0: 81:a4:f8:76:e3:e0:f0:6d:ec:13:9d:07:06:34:60:cf:a2:95: 56:dd:2e:df:97:c9:f2:2f:76:c3:0f:0e:2e:fb:7a:91:23:f7: 11:8a:72:4d:7a:ad:c8:50:7a:95:70:3f:bc:1b:f6:0e:76:a3: 58:0b:a0:5a:56:a7:41:c8:40:af:10:d6:77:e6:63:9d:25:9d: fb:35:6a:a2:0c:05:38:68:82:20:fa:35:03:05:16:b2:55:36: 17:c3:fe:d8:97:d9:58:c6:a2:9a:9b:49:3d:e6:18:74:97:3d: ec:1d:3d:59:21:7b:84:55:39:10:a6:cc:62:b9:1d:2c:bb:97: e6:ac:cc:6c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfFmSMNGhYhAcSLQr4rsBYUzA6XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjQxODA0MDBaFw0yNzAyMjMxODA5MDBaMDMxMTAvBgNV BAMTKERDQ0ZCOUFEQUZEQzUzRUZFNDhDREUzQkVGMENFRURDNkIzNTZEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKOvOLsTK3S3ymuK9sR21GJ9w WQpYc8aXnTnfeIwAZt18ucIoEKJyJJSFyuZP1o5OzB+OuUZyaenTNF/wdPZoysOJ nJue6xrACSh4/EeyiwPPbOvaly2cspTNoaBgOkqMFIEiqLcmDexyReejNgxdn9Xc gUqzYgb++MPo0Np9FtDp5yt1chHAmJSiG4fuYmJLqH0Ix+EEzy8SJpyu7woLq9dV eMHaSnJmuY7+z0GlEx90rfR8FbRbZ93r8L9b1AXoXgMd/CbEWlqwe0UUTad2JA5L zIDxuIXAX1hL5+2e699NvT5SBvwo2YLkksN4oHtPDu6XLQ1UsBhVVZt1qrkVAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcz7mtr9xT7+SM 3jvvDO7cazVtqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXZ4 bk5NdUZtWEFvR3k1NGl6RGJSWG83NWdYd2gzUThvZG13MXY5VVVCN0YvMy8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V2 eG5OTXVGbVhBb0d5NTRpekRiUlhvNzVnWHdoM1E4b2RtdzF2OVVVQjdGLzMvREND RkI5QURBRkRDNTNFRkU0OENERTNCRUYwQ0VFREM2QjM1NkRBOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQAsVQeAwQCsYOMMA0EAgACMAcDBQAoBHGQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQhzTANBgkqhkiG9w0BAQsFAAOCAQEAcrKmk5G5 QAfXDMN5l4k1MFI4r5p9dqY59YfcxikJmhICl569ThB1mLdrKtRjpSXCPBDvjWmw 3if4QdQAXvWEwpEUUbjDJCIXjNytygSY3MHfCdzXRY+i1EUG1GZjEj/JSvvz0+Ia a+9OBuWqQAUNECE1HYqQvjbfeueVh3yggaT4duPg8G3sE50HBjRgz6KVVt0u35fJ 8i92ww8OLvt6kSP3EYpyTXqtyFB6lXA/vBv2DnajWAugWlanQchArxDWd+ZjnSWd +zVqogwFOGiCIPo1AwUWslU2F8P+2JfZWMaimptJPeYYdJc97B09WSF7hFU5EKbM YrkdLLuX5qzMbA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:07:23 2026 by rpki-client