$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer File: 12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer (raw, json) Hash identifier: 8102DqXQOoOE0fo5tPmtJgiIKGKNyvqYot3X4vb7hxA= Subject key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 130DDAAF1BDB2E6DF7DC8C00EB269091124E238E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft caRepository: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 03:34:11 +0000 Certificate not after: Tue 23 Mar 2027 03:39:11 +0000 Subordinate resources: AS: 262378 IP: 170.79.192.0/22 IP: 177.131.16.0/20 IP: 2804:2d80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0d:da:af:1b:db:2e:6d:f7:dc:8c:00:eb:26:90:91:12:4e:23:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 03:34:11 2026 GMT Not After : Mar 23 03:39:11 2027 GMT Subject: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:02:dc:be:a7:89:95:d0:31:9e:cc:a8:7e: dc:91:df:e2:67:ff:10:ad:ca:42:c9:f7:f5:28:90: 61:56:70:39:25:a4:57:ff:c0:7a:bb:3f:42:2d:2f: b8:97:13:b2:7d:d7:51:16:20:84:58:10:64:b5:ff: 34:62:7e:b0:1b:01:26:42:03:6c:2e:88:21:f8:4d: c7:37:fd:00:6a:3b:53:d0:82:4c:aa:93:c6:37:d8: 23:0e:a2:6b:e5:34:2c:c3:9f:a2:aa:6c:33:c9:73: f4:7d:5d:33:c4:7a:e9:4b:ff:d6:c5:18:ac:e6:57: cc:de:46:04:0c:44:66:a3:12:c2:c6:6e:ad:28:a5: db:3e:e7:af:c2:57:77:3b:1e:fa:26:73:e2:9d:a8: 56:9a:8e:00:e7:c9:9c:d2:a2:2f:bd:8d:c4:90:ed: 26:59:63:fd:76:71:5f:ff:b8:c9:89:fc:70:5f:c1: 48:f3:7a:01:17:e7:22:6f:b1:50:26:53:f2:e4:19: 0f:6b:c6:2e:1f:2d:8b:95:4c:cf:af:c3:24:26:b0: 9f:cd:9f:5d:51:28:bb:71:23:12:20:98:e8:59:07: ea:18:da:e7:1c:86:78:a8:82:eb:ec:9d:05:42:77: 5c:84:31:b6:57:26:f7:c8:b4:1f:43:11:f9:f1:57: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.192.0/22 177.131.16.0/20 IPv6: 2804:2d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262378 Signature Algorithm: sha256WithRSAEncryption 94:41:5f:bf:63:e0:3d:bd:22:3b:43:73:07:aa:a6:c7:d6:2d: 5d:a5:0b:fb:23:0d:14:86:ed:7c:d6:c5:a1:06:1f:0a:fb:58: 71:5e:c7:52:67:d7:c2:26:c8:2c:58:0d:66:f6:4a:45:97:d7: 1d:28:e4:2a:f5:1a:01:b2:64:46:93:be:e7:10:26:1e:b7:3f: f3:05:92:fa:d2:79:b3:65:28:2e:5b:7b:c3:3f:16:ab:c7:35: 85:d4:cf:45:81:e3:e9:b4:96:e5:83:c5:3e:3c:b6:03:55:cb: 57:20:02:50:16:48:a0:7d:75:05:1e:fa:34:53:8e:e2:97:4d: bb:51:5b:09:a0:36:15:4b:ed:ff:54:7f:ea:66:78:32:e3:83: 8f:7d:b9:fb:a1:dd:fc:49:ee:ca:f3:1b:ac:e0:39:8b:68:7f: b1:ce:2b:4e:97:f9:a6:43:66:5e:08:35:92:2a:01:9e:6c:87: 0a:d6:e5:65:42:e4:25:64:a9:65:35:ed:05:f1:cb:80:c1:d1: 6c:4d:ce:bc:ce:89:00:2a:d4:db:00:aa:c2:d5:4c:7c:21:61: 8d:dd:90:4a:d7:d5:9e:be:d6:c0:f4:69:98:f2:c9:6e:d7:c6: 3a:d5:8a:0f:57:ef:44:da:22:14:e4:9b:ce:ff:04:7e:e1:83: 22:18:c0:66 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEw3arxvbLm333IwA6yaQkRJOI44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQwMzM0MTFaFw0yNzAzMjMwMzM5MTFaMDMxMTAvBgNV BAMTKDEyQzNGRUI5REVDNjE3NkVFNTk1MkY4NUNBRjdBNDRCM0Y2M0YzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSwLcvqeJldAxnsyoftyR3+Jn /xCtykLJ9/UokGFWcDklpFf/wHq7P0ItL7iXE7J911EWIIRYEGS1/zRifrAbASZC A2wuiCH4Tcc3/QBqO1PQgkyqk8Y32CMOomvlNCzDn6KqbDPJc/R9XTPEeulL/9bF GKzmV8zeRgQMRGajEsLGbq0opds+56/CV3c7Hvomc+KdqFaajgDnyZzSoi+9jcSQ 7SZZY/12cV//uMmJ/HBfwUjzegEX5yJvsVAmU/LkGQ9rxi4fLYuVTM+vwyQmsJ/N n11RKLtxIxIgmOhZB+oY2ucchnioguvsnQVCd1yEMbZXJvfItB9DEfnxV0VlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSw/653sYXbuWV L4XK96RLP2PzyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlR dW5wZHcxRERVUTVIVkpWTGJHRm54dXNaOFRoSmFGU0d2UDZzcDJKOTkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp UXVucGR3MUREVVE1SFZKVkxiR0ZueHVzWjhUaEphRlNHdlA2c3AySjk5LzEvMTJD M0ZFQjlERUM2MTc2RUU1OTUyRjg1Q0FGN0E0NEIzRjYzRjNDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk/AAwQEsYMQMA0EAgACMAcDBQAoBC2AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQA6jANBgkqhkiG9w0BAQsFAAOCAQEAlEFfv2Pg Pb0iO0NzB6qmx9YtXaUL+yMNFIbtfNbFoQYfCvtYcV7HUmfXwibILFgNZvZKRZfX HSjkKvUaAbJkRpO+5xAmHrc/8wWS+tJ5s2UoLlt7wz8Wq8c1hdTPRYHj6bSW5YPF Pjy2A1XLVyACUBZIoH11BR76NFOO4pdNu1FbCaA2FUvt/1R/6mZ4MuODj325+6Hd /EnuyvMbrOA5i2h/sc4rTpf5pkNmXgg1kioBnmyHCtblZULkJWSpZTXtBfHLgMHR bE3OvM6JACrU2wCqwtVMfCFhjd2QStfVnr7WwPRpmPLJbtfGOtWKD1fvRNoiFOSb zv8EfuGDIhjAZg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:30:48 2026 by rpki-client