$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer File: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer (raw, json) Hash identifier: QIZGyi+SWYMHrFJqVzOirDeZyg/jgJDGS4LbQjKbisc= Subject key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F413BCB79DDDB878F2A640A8F73891D46B3B88A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft caRepository: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 18:30:02 +0000 Certificate not after: Thu 18 Mar 2027 18:35:02 +0000 Subordinate resources: AS: 263087 IP: 177.137.208.0/20 IP: 179.109.160.0/20 IP: 2804:978::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:41:3b:cb:79:dd:db:87:8f:2a:64:0a:8f:73:89:1d:46:b3:b8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 18:30:02 2026 GMT Not After : Mar 18 18:35:02 2027 GMT Subject: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:c0:a8:76:15:49:da:dc:06:2e:99:ff:68: 47:1b:b2:5e:66:1b:03:12:c5:bc:28:ac:28:96:e5: 53:9f:5f:d2:53:8d:2b:69:2f:db:56:01:93:19:5b: 4c:4a:70:bd:ef:70:3b:6d:5c:0c:50:c4:34:b2:22: 44:58:93:2c:e5:76:43:55:5e:77:42:0b:13:ba:62: e1:2f:1f:8b:7d:06:a3:a8:59:f1:93:10:72:82:f9: 81:4b:21:7f:1c:e8:3f:f9:42:08:7e:1a:8d:04:f1: 2a:db:9c:ba:a7:d9:19:70:ff:ce:b0:29:37:5d:7f: ee:e9:17:b4:6d:bf:64:30:46:7b:dc:41:be:65:94: 5d:4c:3f:43:92:c8:97:61:e6:2f:6b:72:67:ae:44: d9:d1:ec:3e:fd:98:2e:c7:0e:62:37:45:dc:3c:dd: c0:9f:6b:7d:61:83:95:cf:28:28:e9:fc:9b:1b:a1: 00:27:e4:fc:5a:98:6b:43:30:ac:d8:3b:50:10:bf: 6a:3d:d3:d4:c9:c9:18:c3:45:13:20:a7:1c:02:34: c6:d4:e5:15:0d:98:6d:10:a4:f6:eb:1c:c4:dc:fb: 01:76:34:62:2a:6d:6f:37:76:8a:3b:9c:77:50:e9: 36:88:47:66:09:7a:5d:d5:53:d4:4b:93:4d:c5:af: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.137.208.0/20 179.109.160.0/20 IPv6: 2804:978::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263087 Signature Algorithm: sha256WithRSAEncryption 06:81:c5:40:e7:1b:f9:cd:7e:fe:fb:bf:4e:3e:cd:56:4b:a8: 63:80:f2:48:b1:81:75:32:4c:b3:30:9d:c5:82:62:50:06:d0: fe:c7:cf:1a:95:9e:f0:b5:95:2a:a8:af:a6:3c:07:cd:e8:a9: 1f:7a:27:e1:3b:d0:95:7c:10:3a:c0:74:f5:dd:70:cb:fa:7a: 92:7a:44:75:98:86:d4:1c:e6:ac:e4:33:0d:d1:8f:b9:e5:9d: 84:d5:1a:b8:01:b7:91:65:ea:21:78:3f:11:fe:9d:97:fd:ec: fc:54:b1:fe:36:c5:2a:48:23:a9:59:08:a8:9c:17:4d:e3:68: 56:14:ea:4b:8d:84:37:74:69:41:37:2e:6b:37:3e:cb:2f:17: 00:b4:2b:79:13:a4:12:ee:08:90:e0:1b:54:42:b2:93:e1:56: c5:d5:6b:c7:2d:d9:de:f3:f3:09:54:14:5f:90:aa:de:d6:a0: 39:1b:12:d3:3b:69:4c:e9:67:93:67:3d:54:ea:9e:ce:26:95: 5d:1d:75:71:85:d8:ab:6d:e4:08:3a:79:74:cc:b9:cd:d7:d1: aa:14:0b:fb:ae:54:46:c8:0a:a3:1d:65:db:06:7b:c9:74:37: c2:70:05:e1:25:e0:52:3e:76:c9:49:68:46:b2:b7:1d:a8:34: 40:ab:71:35 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUX0E7y3nd24ePKmQKj3OJHUazuIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkxODMwMDJaFw0yNzAzMTgxODM1MDJaMDMxMTAvBgNV BAMTKDAzRDhCMTZDMjQxN0M2OEM3MzI1QjNERjJFQUQ0NUExMjA4RkEyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/MCodhVJ2twGLpn/aEcbsl5m GwMSxbworCiW5VOfX9JTjStpL9tWAZMZW0xKcL3vcDttXAxQxDSyIkRYkyzldkNV XndCCxO6YuEvH4t9BqOoWfGTEHKC+YFLIX8c6D/5Qgh+Go0E8SrbnLqn2Rlw/86w KTddf+7pF7Rtv2QwRnvcQb5llF1MP0OSyJdh5i9rcmeuRNnR7D79mC7HDmI3Rdw8 3cCfa31hg5XPKCjp/JsboQAn5PxamGtDMKzYO1AQv2o909TJyRjDRRMgpxwCNMbU 5RUNmG0QpPbrHMTc+wF2NGIqbW83doo7nHdQ6TaIR2YJel3VU9RLk03Fr59ZAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD2LFsJBfGjHMl s98urUWhII+iQzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0Zl OUZHM2F4SFpvNUdlSEYzZkZGYm1XQzE1N3U1bmNUV2RjNllBcVZtQi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0Zl OUZHM2F4SFpvNUdlSEYzZkZGYm1XQzE1N3U1bmNUV2RjNllBcVZtQi8wLzAzRDhC MTZDMjQxN0M2OEM3MzI1QjNERjJFQUQ0NUExMjA4RkEyNDMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEBLGJ0AMEBLNtoDANBAIAAjAHAwUAKAQJeDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEA68wDQYJKoZIhvcNAQELBQADggEBAAaBxUDnG/nN fv77v04+zVZLqGOA8kixgXUyTLMwncWCYlAG0P7HzxqVnvC1lSqor6Y8B83oqR96 J+E70JV8EDrAdPXdcMv6epJ6RHWYhtQc5qzkMw3Rj7nlnYTVGrgBt5Fl6iF4PxH+ nZf97PxUsf42xSpII6lZCKicF03jaFYU6kuNhDd0aUE3Lms3PssvFwC0K3kTpBLu CJDgG1RCspPhVsXVa8ct2d7z8wlUFF+Qqt7WoDkbEtM7aUzpZ5NnPVTqns4mlV0d dXGF2Ktt5Ag6eXTMuc3X0aoUC/uuVEbICqMdZdsGe8l0N8JwBeEl4FI+dslJaEay tx2oNECrcTU= -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:39 2026 by rpki-client