$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer File: 14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer (raw, json) Hash identifier: cka5nVEqwRIn5sCYOlpL1EnRDOg8f0U3SS2ofh8Xjiw= Subject key identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70F58FED782986E29C6F1EE95AE89212E36F900F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft caRepository: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 10:39:07 +0000 Certificate not after: Tue 23 Mar 2027 10:44:07 +0000 Subordinate resources: AS: 268155 IP: 45.170.152.0/22 IP: 2804:58e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f5:8f:ed:78:29:86:e2:9c:6f:1e:e9:5a:e8:92:12:e3:6f:90:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 10:39:07 2026 GMT Not After : Mar 23 10:44:07 2027 GMT Subject: CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7a:6c:ee:54:2e:c4:ca:f3:1e:f8:24:50:7e: 5f:ac:cb:f7:92:25:9e:8e:d8:af:ee:be:50:be:30: a5:cd:56:09:36:20:c5:a7:89:46:fe:09:2b:21:35: 0d:12:bd:70:a6:9d:21:0c:f6:4b:00:60:40:de:7f: 0a:45:61:16:85:27:1c:c6:15:bc:0c:b7:c9:b0:5d: 35:3f:7e:04:47:8b:ec:58:82:8d:89:33:f4:24:8c: 34:b6:b8:9c:39:16:cf:47:06:d6:4f:b4:81:e5:a4: bf:77:bf:32:25:9c:ed:b5:36:57:46:87:2a:c6:09: be:d6:8c:81:02:09:f2:77:52:cf:c9:12:81:01:11: b8:4a:88:1f:4f:5a:2d:9a:09:bd:a7:f9:a7:84:61: b7:ef:8b:1e:62:f2:cd:9c:f7:f5:13:1c:12:b7:40: 5e:cd:6c:ed:e6:9b:8a:8a:69:b7:39:69:e5:c6:56: 43:95:96:43:3a:c1:1c:d3:94:70:53:97:63:58:a1: bf:34:51:35:b3:9f:fb:63:f3:ef:1d:1f:c2:6e:2c: 75:20:23:09:3b:41:59:1f:69:ee:6a:d0:ed:bb:3b: 62:13:13:70:fc:ac:30:31:2a:b6:b2:33:28:27:8c: 7a:b0:b8:2c:55:40:f5:b6:5b:38:19:74:bd:eb:76: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.152.0/22 IPv6: 2804:58e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268155 Signature Algorithm: sha256WithRSAEncryption 36:34:74:fa:9a:86:bb:b3:7e:f7:c4:1c:3b:8f:ee:b5:f0:1d: 10:26:f7:fd:2e:86:b5:7b:07:7a:e5:c8:84:c8:d7:54:1c:cc: 12:b8:80:6e:da:45:23:e0:9a:8d:51:d2:c9:70:74:b3:e9:dc: a0:f7:e9:9f:bf:9f:ae:28:d3:73:ad:05:64:d3:cd:01:4b:75: a1:a6:ac:cd:98:6d:b5:51:35:87:44:55:64:08:38:b3:8e:a1: ec:18:e4:be:89:63:93:5a:37:94:a7:13:6d:a2:b8:04:6c:e9: b7:09:a5:ca:09:62:32:54:f1:f0:27:99:4d:91:d2:45:83:e8: 0f:10:e8:a0:9a:ac:75:80:07:ab:4f:ff:a5:63:b8:d4:5e:85: 20:31:49:95:5d:e2:0a:0c:4a:61:31:18:ab:c7:7f:7a:8a:cb: 8b:5b:a7:94:4e:4b:bd:ff:f3:19:81:76:ba:ad:69:4c:50:2d: 9a:5e:3d:3f:9b:3c:c4:6b:fe:16:39:14:11:46:70:9f:5a:22: 66:3c:30:c7:74:84:d5:87:d7:30:04:f5:f6:6c:18:c0:ef:5a: 2c:9c:ab:79:2e:9e:c9:ad:62:31:fe:94:88:f5:83:76:45:0a: 30:43:2a:58:64:bc:cf:32:6e:c0:f8:10:65:dd:a5:3e:e5:62: 61:59:7b:b1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcPWP7XgphuKcbx7pWuiSEuNvkA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxMDM5MDdaFw0yNzAzMjMxMDQ0MDdaMDMxMTAvBgNV BAMTKDE0RTM5N0U3NUUzQjVGOTBBOTI2MTJEQkY0REYxRDg5N0M2MTc3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyemzuVC7EyvMe+CRQfl+sy/eS JZ6O2K/uvlC+MKXNVgk2IMWniUb+CSshNQ0SvXCmnSEM9ksAYEDefwpFYRaFJxzG FbwMt8mwXTU/fgRHi+xYgo2JM/QkjDS2uJw5Fs9HBtZPtIHlpL93vzIlnO21NldG hyrGCb7WjIECCfJ3Us/JEoEBEbhKiB9PWi2aCb2n+aeEYbfvix5i8s2c9/UTHBK3 QF7NbO3mm4qKabc5aeXGVkOVlkM6wRzTlHBTl2NYob80UTWzn/tj8+8dH8JuLHUg Iwk7QVkfae5q0O27O2ITE3D8rDAxKrayMygnjHqwuCxVQPW2WzgZdL3rdsxrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU45fnXjtfkKkm Etv03x2JfGF3LTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHVS V1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR1 UldUU1ZydDl3NVVDWUpUVnZLTVpjOUZFVlRxM3RIWlp5ajZETW5YM3JwLzAvMTRF Mzk3RTc1RTNCNUY5MEE5MjYxMkRCRjRERjFEODk3QzYxNzcyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaqYMA0EAgACMAcDBQAoBFjgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXezANBgkqhkiG9w0BAQsFAAOCAQEANjR0+pqGu7N+98Qc O4/utfAdECb3/S6GtXsHeuXIhMjXVBzMEriAbtpFI+CajVHSyXB0s+ncoPfpn7+f rijTc60FZNPNAUt1oaaszZhttVE1h0RVZAg4s46h7Bjkvoljk1o3lKcTbaK4BGzp twmlygliMlTx8CeZTZHSRYPoDxDooJqsdYAHq0//pWO41F6FIDFJlV3iCgxKYTEY q8d/eorLi1unlE5Lvf/zGYF2uq1pTFAtml49P5s8xGv+FjkUEUZwn1oiZjwwx3SE 1YfXMAT19mwYwO9aLJyreS6eya1iMf6UiPWDdkUKMEMqWGS8zzJuwPgQZd2lPuVi YVl7sQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:54:53 2026 by rpki-client