$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer File: F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer (raw, json) Hash identifier: dkZP0tRjZfAUbyyhyfB43wL++3HNQidX2NwuLgI0akw= Subject key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D671501B07126F6271AC10E0C3AE215108F5DC5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft caRepository: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 10:52:48 +0000 Certificate not after: Fri 09 Apr 2027 10:57:48 +0000 Subordinate resources: AS: 273663 IP: 177.8.71.0/24 IP: 200.124.78.0/23 IP: 2804:8a58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:67:15:01:b0:71:26:f6:27:1a:c1:0e:0c:3a:e2:15:10:8f:5d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 10:52:48 2026 GMT Not After : Apr 9 10:57:48 2027 GMT Subject: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:49:af:93:99:72:71:47:d4:09:88:17:da: 72:18:52:e7:b5:24:71:a3:36:cc:99:19:3d:7c:e0: 8b:3f:a5:bf:d2:fa:8b:dd:e1:28:41:49:0b:f2:11: e9:7d:65:d9:fb:8f:f8:ea:9f:5b:e1:b9:18:84:92: 44:cb:83:ae:2e:a6:27:99:9c:88:1e:2f:38:e6:a3: 30:f8:c5:3e:89:7f:d4:08:89:ad:e1:c3:fe:34:4e: bc:cc:63:ed:03:0f:79:19:70:17:e1:1e:fb:fc:b9: d9:6d:d7:f3:4e:9a:21:04:af:e8:2d:c3:6a:45:2d: 6d:84:f0:93:bf:bc:47:f0:76:34:a6:2c:38:15:9b: cf:ad:0f:dd:70:65:2d:3d:50:c3:37:0b:0a:45:3c: 80:61:a7:23:29:9b:70:1d:a4:a2:07:6c:50:a6:a5: 72:18:2d:5d:e7:fe:75:fb:58:db:af:4d:64:e3:52: 25:93:7e:5c:23:3a:b5:f7:68:53:ba:54:f6:1e:b5: 95:19:c2:31:b6:71:94:d5:f0:1d:09:55:03:6c:bc: 63:5f:ee:c8:50:b1:9e:41:b2:26:89:6b:24:f0:3d: 66:ca:f1:68:b5:79:94:b3:aa:94:98:65:16:99:58: 79:6a:24:ca:3f:ad:e7:59:a2:01:76:33:d2:ab:45: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.8.71.0/24 200.124.78.0/23 IPv6: 2804:8a58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273663 Signature Algorithm: sha256WithRSAEncryption b4:70:ee:52:5e:55:d3:a6:7e:68:04:b7:7a:02:c1:58:fa:80: fc:33:05:db:f5:e3:52:ee:3f:0c:ac:83:40:b4:0b:bb:8f:26: ff:e2:94:4d:3d:3b:32:f4:9d:6a:e2:d8:b6:ce:1e:ce:ae:26: e5:4a:58:00:85:ff:53:c5:69:34:d0:bc:3d:87:a7:83:cc:1e: 0e:c3:5b:cd:f0:4a:e8:54:2b:58:8d:29:14:d7:1c:4f:08:46: 43:62:ef:61:8f:13:9b:4e:ab:af:ff:d8:2c:e2:e5:72:71:09: cb:cf:58:ec:47:fb:bc:9c:fe:77:df:e2:e1:01:c7:95:57:af: 99:9b:f6:53:77:64:e8:9d:06:94:cf:c1:59:f2:54:4c:cf:78: 92:d2:93:ab:02:28:9b:4b:e3:ec:10:3c:71:43:c0:25:a1:07: 02:dd:65:f9:55:03:65:d9:a5:79:53:5f:34:9d:18:9a:d9:d1: c9:6a:5b:55:a2:96:21:5e:b0:11:52:b8:54:5a:a9:61:34:71: 5a:ad:9f:8b:d3:f6:cc:8d:32:8e:7f:cb:6a:de:85:85:69:43: 68:d0:8e:a1:1b:ad:6e:2d:dd:e0:df:d6:a5:f8:a8:73:59:0a: 64:81:b6:78:9e:29:4a:35:48:b6:f9:44:8f:66:7a:79:05:7b: 2e:74:93:f8 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUXWcVAbBxJvYnGsEODDriFRCPXcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTAxMDUyNDhaFw0yNzA0MDkxMDU3NDhaMDMxMTAvBgNV BAMTKEYxMERBQTUwOEJCQUM1RTI4N0E5NUY4QUFCQjhGQTU0MkMxNUVDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz0mvk5lycUfUCYgX2nIYUue1 JHGjNsyZGT184Is/pb/S+ovd4ShBSQvyEel9Zdn7j/jqn1vhuRiEkkTLg64upieZ nIgeLzjmozD4xT6Jf9QIia3hw/40TrzMY+0DD3kZcBfhHvv8udlt1/NOmiEEr+gt w2pFLW2E8JO/vEfwdjSmLDgVm8+tD91wZS09UMM3CwpFPIBhpyMpm3AdpKIHbFCm pXIYLV3n/nX7WNuvTWTjUiWTflwjOrX3aFO6VPYetZUZwjG2cZTV8B0JVQNsvGNf 7shQsZ5BsiaJayTwPWbK8Wi1eZSzqpSYZRaZWHlqJMo/redZogF2M9KrRbz7AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxDapQi7rF4oep X4qruPpULBXsyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wL0YxMERB QTUwOEJCQUM1RTI4N0E5NUY4QUFCQjhGQTU0MkMxNUVDQ0IubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEALEIRwMEAch8TjANBAIAAjAHAwUAKASKWDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMELP8wDQYJKoZIhvcNAQELBQADggEBALRw7lJeVdOm fmgEt3oCwVj6gPwzBdv141LuPwysg0C0C7uPJv/ilE09OzL0nWri2LbOHs6uJuVK WACF/1PFaTTQvD2Hp4PMHg7DW83wSuhUK1iNKRTXHE8IRkNi72GPE5tOq6//2Czi 5XJxCcvPWOxH+7yc/nff4uEBx5VXr5mb9lN3ZOidBpTPwVnyVEzPeJLSk6sCKJtL 4+wQPHFDwCWhBwLdZflVA2XZpXlTXzSdGJrZ0clqW1WiliFesBFSuFRaqWE0cVqt n4vT9syNMo5/y2rehYVpQ2jQjqEbrW4t3eDf1qX4qHNZCmSBtnieKUo1SLb5RI9m enkFey50k/g= -----END CERTIFICATE-----Generated at Fri Apr 17 23:08:03 2026 by rpki-client