$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.cer File: DC23EF8A45CF1AFC023B231103F26334E3B2BF14.cer (raw, json) Hash identifier: Gt6gIcPEKT8iyV+gRFp+gVqRxkWJIEU4jMq/3HLvaJU= Subject key identifier: DC:23:EF:8A:45:CF:1A:FC:02:3B:23:11:03:F2:63:34:E3:B2:BF:14 Authority key identifier: 98:05:E3:98:07:5C:72:66:BC:C4:6F:C2:2F:44:0B:49:46:C6:F3:61 Certificate issuer: /CN=9805E398075C7266BCC46FC22F440B4946C6F361 Certificate serial: 6063830FF76686638FE0CBAFDF0AB309BDF245A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9805E398075C7266BCC46FC22F440B4946C6F361.cer Manifest: rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft caRepository: rsync://rsync.nex3.com.br/repo/AS265356/0/ Notify URL: https://rpki-repo.nex3.com.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 01:04:11 +0000 Certificate not after: Wed 24 Mar 2027 01:09:11 +0000 Subordinate resources: AS: 265356 IP: 168.181.124.0/22 IP: 2804:2ea0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/9805E398075C7266BCC46FC22F440B4946C6F361.crl rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/9805E398075C7266BCC46FC22F440B4946C6F361.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9805E398075C7266BCC46FC22F440B4946C6F361.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:63:83:0f:f7:66:86:63:8f:e0:cb:af:df:0a:b3:09:bd:f2:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9805E398075C7266BCC46FC22F440B4946C6F361 Validity Not Before: Mar 25 01:04:11 2026 GMT Not After : Mar 24 01:09:11 2027 GMT Subject: CN=DC23EF8A45CF1AFC023B231103F26334E3B2BF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:d7:17:60:5b:6b:ad:1b:c6:75:20:05:92: 61:4e:55:59:ea:6c:34:06:9c:c9:23:22:b5:21:28: b9:64:06:42:14:ff:87:ab:b8:12:83:ff:7e:e4:d8: 5a:b3:90:d1:1c:18:74:bc:26:93:59:bb:f5:a5:f8: 4b:c0:be:f9:c8:d2:cc:a7:e1:f9:0a:6f:50:83:fd: 33:e5:ba:b8:e2:8d:a9:1f:b3:80:29:91:1c:9e:4f: 7f:af:ec:c7:45:c4:fc:0b:bb:d9:81:ad:e1:41:aa: c1:d4:15:68:0d:96:5e:33:9a:b7:31:79:df:cb:be: 8a:ea:77:dc:ea:37:2f:e1:db:50:1c:b3:21:08:47: 75:da:07:3b:17:e2:74:55:11:81:f5:7d:2f:d2:ad: d1:29:ca:18:65:2a:12:fd:fa:f0:cf:95:d8:64:b5: 92:bd:29:3e:56:57:3f:92:14:b8:f3:b0:62:60:56: 54:43:d6:bc:64:b7:5b:51:58:06:f5:2f:83:92:3a: 7d:07:e8:ec:4b:5f:81:f1:93:df:96:00:0b:ee:43: e9:f0:da:16:c4:d4:ee:53:ca:b4:db:52:02:b8:fb: f1:42:b1:d0:8b:c2:b9:7c:be:73:ca:8e:79:06:4a: e2:a3:9c:fc:3b:b1:e9:5c:68:d7:3a:06:27:53:98: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:23:EF:8A:45:CF:1A:FC:02:3B:23:11:03:F2:63:34:E3:B2:BF:14 X509v3 Authority Key Identifier: keyid:98:05:E3:98:07:5C:72:66:BC:C4:6F:C2:2F:44:0B:49:46:C6:F3:61 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/9805E398075C7266BCC46FC22F440B4946C6F361.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9805E398075C7266BCC46FC22F440B4946C6F361.cer Subject Information Access: CA Repository - URI:rsync://rsync.nex3.com.br/repo/AS265356/0/ RPKI Manifest - URI:rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft RPKI Notify - URI:https://rpki-repo.nex3.com.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.124.0/22 IPv6: 2804:2ea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265356 Signature Algorithm: sha256WithRSAEncryption 97:8f:39:76:f0:a2:3d:13:80:fc:87:13:09:af:9d:e9:63:57: de:a6:d1:18:e1:9c:a8:cb:1f:ad:b6:9a:60:8b:2b:f5:22:f0: b6:2b:c9:ca:b1:dd:61:b2:ba:d8:2c:f6:83:97:59:e3:d1:81: f4:23:fb:28:75:1e:bd:c4:af:5f:f1:c7:0c:62:2f:df:26:54: 55:f7:44:de:fc:e2:39:58:16:2d:a9:e6:97:e5:af:75:9e:9a: df:81:4e:3d:c8:b9:46:ab:c2:e4:29:ff:b4:d2:01:83:57:0b: 62:f8:dd:e7:57:53:cb:40:7b:97:70:89:9c:06:7b:fe:aa:9b: 5a:c3:9b:db:25:5e:53:23:b4:25:ab:4d:a1:60:ae:aa:23:c0: fc:37:0a:40:ab:c1:7f:84:0b:85:d8:21:07:a8:ad:5c:b9:1f: 16:86:17:c9:f2:e8:4a:8c:26:2b:e9:a3:d0:1d:ff:e1:61:1c: b9:0a:cb:0e:07:4c:e7:a9:30:6d:ff:5a:83:c5:36:c9:52:bc: bd:e9:3b:9c:64:8a:5f:15:68:c8:fd:de:ef:cb:f7:5f:57:55: f2:b0:61:16:e6:21:63:14:f2:9a:0b:d5:fe:b5:ff:59:d0:e5: 66:aa:26:bc:8a:83:77:b8:33:a1:a8:5b:75:0f:09:bf:dd:8a: 35:3a:9c:65 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUYGODD/dmhmOP4Muv3wqzCb3yRaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNUUzOTgwNzVDNzI2NkJDQzQ2RkMyMkY0NDBCNDk0 NkM2RjM2MTAeFw0yNjAzMjUwMTA0MTFaFw0yNzAzMjQwMTA5MTFaMDMxMTAvBgNV BAMTKERDMjNFRjhBNDVDRjFBRkMwMjNCMjMxMTAzRjI2MzM0RTNCMkJGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTtcXYFtrrRvGdSAFkmFOVVnq bDQGnMkjIrUhKLlkBkIU/4eruBKD/37k2FqzkNEcGHS8JpNZu/Wl+EvAvvnI0syn 4fkKb1CD/TPlurjijakfs4ApkRyeT3+v7MdFxPwLu9mBreFBqsHUFWgNll4zmrcx ed/Lvorqd9zqNy/h21AcsyEIR3XaBzsX4nRVEYH1fS/SrdEpyhhlKhL9+vDPldhk tZK9KT5WVz+SFLjzsGJgVlRD1rxkt1tRWAb1L4OSOn0H6OxLX4Hxk9+WAAvuQ+nw 2hbE1O5TyrTbUgK4+/FCsdCLwrl8vnPKjnkGSuKjnPw7selcaNc6BidTmHFlAgMB AAGjggLMMIICyDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcI++KRc8a/AI7 IxED8mM047K/FDAfBgNVHSMEGDAWgBSYBeOYB1xyZrzEb8IvRAtJRsbzYTAOBgNV HQ8BAf8EBAMCAQYwgZQGA1UdHwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtp LXJlcG8ucmVnaXN0cm8uYnIvcmVwby82MmVIWjRmU0s2dk5RR2ROd05YaWJaTVJY S2FVbVpWZkVtdDFFclR1VFdFei8xLzk4MDVFMzk4MDc1QzcyNjZCQ0M0NkZDMjJG NDQwQjQ5NDZDNkYzNjEuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZc cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEv OTgwNUUzOTgwNzVDNzI2NkJDQzQ2RkMyMkY0NDBCNDk0NkM2RjM2MS5jZXIwge0G CCsGAQUFBwELBIHgMIHdMDYGCCsGAQUFBzAFhipyc3luYzovL3JzeW5jLm5leDMu Y29tLmJyL3JlcG8vQVMyNjUzNTYvMC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnN5 bmMubmV4My5jb20uYnIvcmVwby9BUzI2NTM1Ni8wL0RDMjNFRjhBNDVDRjFBRkMw MjNCMjMxMTAzRjI2MzM0RTNCMkJGMTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczov L3Jwa2ktcmVwby5uZXgzLmNvbS5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw BgMEAqi1fDANBAIAAjAHAwUAKAQuoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME DIwwDQYJKoZIhvcNAQELBQADggEBAJePOXbwoj0TgPyHEwmvneljV96m0RjhnKjL H622mmCLK/Ui8LYrycqx3WGyutgs9oOXWePRgfQj+yh1Hr3Er1/xxwxiL98mVFX3 RN784jlYFi2p5pflr3Wemt+BTj3IuUarwuQp/7TSAYNXC2L43edXU8tAe5dwiZwG e/6qm1rDm9slXlMjtCWrTaFgrqojwPw3CkCrwX+EC4XYIQeorVy5HxaGF8ny6EqM Jivpo9Ad/+FhHLkKyw4HTOepMG3/WoPFNslSvL3pO5xkil8VaMj93u/L919XVfKw YRbmIWMU8poL1f61/1nQ5WaqJryKg3e4M6GoW3UPCb/dijU6nGU= -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:43 2026 by rpki-client