$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.cer File: 009AD209F174E84F1CA5645CAD86B7AF61AAC24A.cer (raw, json) Hash identifier: P646W5yoStG2L+E3Doc5UswrnUj4hGoQy6jFAiyOWVI= Subject key identifier: 00:9A:D2:09:F1:74:E8:4F:1C:A5:64:5C:AD:86:B7:AF:61:AA:C2:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 28975FE749E658778A9F693D7683CAE1A6A12A3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.mft caRepository: rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Mar 2026 16:50:54 +0000 Certificate not after: Mon 08 Mar 2027 16:55:54 +0000 Subordinate resources: AS: 266964 IP: 45.225.232.0/22 IP: 2804:4608::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:97:5f:e7:49:e6:58:77:8a:9f:69:3d:76:83:ca:e1:a6:a1:2a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 9 16:50:54 2026 GMT Not After : Mar 8 16:55:54 2027 GMT Subject: CN=009AD209F174E84F1CA5645CAD86B7AF61AAC24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:a8:fe:bd:45:b6:3a:0f:8b:32:90:80:9d: 3e:b4:a3:88:e8:4a:f9:1d:d9:22:d0:b2:43:fd:92: ed:95:37:77:aa:43:d9:c1:0e:e0:a0:b8:c4:bf:d5: 3a:cb:86:57:55:77:f8:fa:0d:e5:bd:65:de:c7:36: 1a:17:75:e7:a8:8f:08:11:23:09:0f:cc:5f:cd:8f: af:1a:4a:3c:f1:51:f6:7c:10:5a:18:73:d1:73:4e: 97:72:09:a7:65:58:57:99:3d:0f:7c:fa:6e:7d:cf: df:ee:32:69:74:0f:3a:9e:bd:2c:70:24:04:56:68: b7:b0:ee:ca:a2:76:f1:d8:12:da:aa:f1:19:5c:e0: 89:42:e9:c3:94:63:7d:13:8d:29:a0:3e:5b:c0:f8: 78:da:7c:0d:16:ee:af:c2:85:fe:3b:db:b5:0c:99: fe:e4:86:d5:a0:c3:88:4c:d8:cd:6b:75:3e:65:ee: b2:79:ae:2f:0f:44:de:b6:32:d8:e7:ec:9c:88:11: 34:41:f0:64:ef:5a:d1:d2:ac:82:e1:ee:ad:78:17: 0c:02:37:51:62:05:71:c2:2d:c0:53:3b:a2:b6:e8: 53:7c:54:5e:b5:6f:93:07:71:ba:87:9b:c1:fc:d9: c9:e8:7b:0f:7b:85:f9:69:39:04:0f:19:6b:c9:21: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:9A:D2:09:F1:74:E8:4F:1C:A5:64:5C:AD:86:B7:AF:61:AA:C2:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.232.0/22 IPv6: 2804:4608::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266964 Signature Algorithm: sha256WithRSAEncryption 82:aa:91:ef:eb:b8:09:3b:9b:82:76:73:80:a6:61:8f:09:92: ca:db:44:d7:57:35:5b:aa:d4:45:72:17:db:fc:c6:e6:6f:42: f0:a4:a6:84:b1:8a:8f:ad:22:27:f2:8d:d2:b9:b3:7f:6d:89: c5:98:f8:9c:92:be:18:4e:ed:80:cc:f3:c0:26:92:18:47:d7: 80:c9:90:5c:fa:4c:b1:b7:2e:a4:5d:c2:c1:ff:e9:e5:07:86: d7:e9:b3:b8:28:19:42:e3:62:d6:ee:75:56:f3:04:b1:ba:ea: 97:39:b7:56:a9:63:91:d9:48:09:82:ae:5f:24:3a:54:0e:85: 46:d0:7c:37:44:2a:6b:c0:0a:5c:24:62:99:83:37:00:47:2f: b7:b1:5a:40:b5:08:32:e7:c4:fe:74:da:82:be:c2:6a:4d:6c: 3f:cd:13:b6:e3:2a:f4:15:d8:b4:38:9b:3e:07:bd:08:c0:5b: ce:bd:ec:71:f9:b8:be:1d:5d:bc:df:05:50:56:04:2e:a9:59: e4:1a:f7:29:83:52:cb:21:aa:d7:41:20:5e:36:b0:74:8e:d6: 1b:4a:74:dc:25:c5:05:31:b1:e8:ec:f1:b9:93:c1:e9:06:29: fe:fa:53:67:45:f5:51:e9:8b:4b:66:15:6f:dc:a0:aa:70:a1: 04:49:90:a2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKJdf50nmWHeKn2k9doPK4aahKj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDkxNjUwNTRaFw0yNzAzMDgxNjU1NTRaMDMxMTAvBgNV BAMTKDAwOUFEMjA5RjE3NEU4NEYxQ0E1NjQ1Q0FEODZCN0FGNjFBQUMyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2qj+vUW2Og+LMpCAnT60o4jo Svkd2SLQskP9ku2VN3eqQ9nBDuCguMS/1TrLhldVd/j6DeW9Zd7HNhoXdeeojwgR IwkPzF/Nj68aSjzxUfZ8EFoYc9FzTpdyCadlWFeZPQ98+m59z9/uMml0DzqevSxw JARWaLew7sqidvHYEtqq8Rlc4IlC6cOUY30TjSmgPlvA+HjafA0W7q/Chf4727UM mf7khtWgw4hM2M1rdT5l7rJ5ri8PRN62Mtjn7JyIETRB8GTvWtHSrILh7q14FwwC N1FiBXHCLcBTO6K26FN8VF61b5MHcbqHm8H82cnoew97hflpOQQPGWvJISxRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAmtIJ8XToTxyl ZFythrevYarCSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWl5 bXRUTUYyblNGV1FOMnJtNXNtQ1Axd3YyQXpiS0dWdTFoeVphaVBTREEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp eW10VE1GMm5TRldRTjJybTVzbUNQMXd2MkF6YktHVnUxaHlaYWlQU0RBLzAvMDA5 QUQyMDlGMTc0RTg0RjFDQTU2NDVDQUQ4NkI3QUY2MUFBQzI0QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeHoMA0EAgACMAcDBQAoBEYIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQS1DANBgkqhkiG9w0BAQsFAAOCAQEAgqqR7+u4CTubgnZz gKZhjwmSyttE11c1W6rURXIX2/zG5m9C8KSmhLGKj60iJ/KN0rmzf22JxZj4nJK+ GE7tgMzzwCaSGEfXgMmQXPpMsbcupF3Cwf/p5QeG1+mzuCgZQuNi1u51VvMEsbrq lzm3VqljkdlICYKuXyQ6VA6FRtB8N0Qqa8AKXCRimYM3AEcvt7FaQLUIMufE/nTa gr7Cak1sP80TtuMq9BXYtDibPge9CMBbzr3scfm4vh1dvN8FUFYELqlZ5Br3KYNS yyGq10EgXjawdI7WG0p03CXFBTGx6OzxuZPB6QYp/vpTZ0X1UemLS2YVb9ygqnCh BEmQog== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:10 2026 by rpki-client