$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer File: 154E883FCB52E91706C17788E2199491DC6E45F7.cer (raw, json) Hash identifier: 2SqIWO2+nOhyH0zF6MzfqhseCuJ72QkBp2tONSDMPGE= Subject key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 30DB8B7B1026569D1B7CB758326A43720919102C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft caRepository: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 16:37:00 +0000 Certificate not after: Wed 24 Mar 2027 16:42:00 +0000 Subordinate resources: AS: 264127 IP: 138.59.220.0/22 IP: 2804:22dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:db:8b:7b:10:26:56:9d:1b:7c:b7:58:32:6a:43:72:09:19:10:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 16:37:00 2026 GMT Not After : Mar 24 16:42:00 2027 GMT Subject: CN=154E883FCB52E91706C17788E2199491DC6E45F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:f8:1f:fa:33:0d:c7:d8:3b:aa:b4:75:4e: 64:53:50:79:49:1e:c1:88:8c:c5:f8:ac:ce:bf:25: 87:2f:97:b8:86:e1:0b:63:f0:3d:f6:ef:e2:0f:d6: 35:50:24:6c:d7:29:c3:79:82:55:08:aa:87:68:5a: 1e:69:ba:54:1f:fa:51:99:14:36:c9:8d:9e:10:7f: f4:65:e6:78:89:12:b0:45:f7:9f:be:f5:a2:86:12: 6d:f9:39:16:15:64:a4:c4:95:7b:d9:22:c7:26:84: 1a:a2:b7:ff:78:a5:3a:08:1f:eb:57:c3:70:1a:9a: 94:94:85:ba:47:73:1d:30:77:24:e5:6d:43:97:ae: b0:9f:96:ac:3f:48:4c:07:9f:c8:f9:74:27:8d:b6: e8:bd:1e:5b:a2:45:3b:58:1f:da:5f:5d:a0:3a:0c: fc:a3:25:59:44:a1:9d:0c:af:7b:46:30:fc:47:46: 2e:2d:cb:87:97:0f:23:65:9d:12:50:cc:0a:42:04: af:4c:e5:3d:40:a3:5c:af:b8:0d:d8:9d:84:c8:4f: 4b:57:53:f3:9a:36:78:28:78:3a:6c:08:1e:52:21: ea:a6:4b:b0:70:a4:e2:40:cd:5d:1e:28:db:09:d8: c6:7a:aa:87:c9:2a:a2:8c:97:a9:b1:db:52:b4:39: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.220.0/22 IPv6: 2804:22dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264127 Signature Algorithm: sha256WithRSAEncryption 00:1d:4f:0d:20:83:f6:b4:63:f3:2e:15:ae:fd:fd:1e:52:32: 42:7d:01:cc:ba:14:85:25:01:22:29:4f:b5:87:4b:ac:57:d5: 58:58:31:38:ec:5c:26:9b:ae:e9:61:ec:3d:f4:d4:b5:12:70: b3:88:18:24:4f:c8:cd:55:de:36:f8:54:9e:5f:ab:8b:94:10: 3f:68:e9:ef:22:a4:21:e2:48:a9:cc:31:62:e0:2b:ce:36:88: c9:e1:79:28:dc:92:9d:56:99:61:55:b9:22:d2:4c:eb:ab:f5: 0f:1b:6e:52:60:31:3f:f9:0f:a5:80:95:8e:f5:f8:8a:8f:7f: 75:15:fd:54:7a:bf:12:dd:fc:fd:d0:5b:c8:3a:2b:84:91:dd: 10:af:9b:d5:c2:66:3c:37:82:7b:3b:e6:be:1e:e2:64:9e:d4: 3a:4a:6b:d7:ea:31:a2:4c:47:8e:ed:e5:93:11:0a:0c:0c:95: a0:1b:49:13:d1:ee:ab:fd:b6:9b:b9:6f:37:22:9c:22:72:69: 12:e2:90:ab:e9:a9:8d:99:99:e6:f6:f2:eb:e5:97:6f:95:ef: b7:ba:15:ba:c4:0b:b5:2a:fb:a5:34:c9:66:82:1a:48:40:67: ca:fd:ba:3e:25:94:f1:61:5a:fb:e3:27:7f:4a:5c:b3:42:9a: 15:c1:4b:c4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMNuLexAmVp0bfLdYMmpDcgkZECwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxNjM3MDBaFw0yNzAzMjQxNjQyMDBaMDMxMTAvBgNV BAMTKDE1NEU4ODNGQ0I1MkU5MTcwNkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmI/gf+jMNx9g7qrR1TmRTUHlJ HsGIjMX4rM6/JYcvl7iG4Qtj8D327+IP1jVQJGzXKcN5glUIqodoWh5pulQf+lGZ FDbJjZ4Qf/Rl5niJErBF95++9aKGEm35ORYVZKTElXvZIscmhBqit/94pToIH+tX w3AampSUhbpHcx0wdyTlbUOXrrCflqw/SEwHn8j5dCeNtui9HluiRTtYH9pfXaA6 DPyjJVlEoZ0Mr3tGMPxHRi4ty4eXDyNlnRJQzApCBK9M5T1Ao1yvuA3YnYTIT0tX U/OaNngoeDpsCB5SIeqmS7BwpOJAzV0eKNsJ2MZ6qofJKqKMl6mx21K0OaWrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVTog/y1LpFwbB d4jiGZSR3G5F9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3dL SkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN3 S0pCajVVM2tOVzRoWkJLTVk0cGpuaEo4SEVqbzZEYXU4SlFNRmFnMVU2LzAvMTU0 RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFEQzZFNDVGNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCijvcMA0EAgACMAcDBQAoBCLcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHvzANBgkqhkiG9w0BAQsFAAOCAQEAAB1PDSCD9rRj8y4V rv39HlIyQn0BzLoUhSUBIilPtYdLrFfVWFgxOOxcJpuu6WHsPfTUtRJws4gYJE/I zVXeNvhUnl+ri5QQP2jp7yKkIeJIqcwxYuArzjaIyeF5KNySnVaZYVW5ItJM66v1 DxtuUmAxP/kPpYCVjvX4io9/dRX9VHq/Et38/dBbyDorhJHdEK+b1cJmPDeCezvm vh7iZJ7UOkpr1+oxokxHju3lkxEKDAyVoBtJE9Huq/22m7lvNyKcInJpEuKQq+mp jZmZ5vby6+WXb5Xvt7oVusQLtSr7pTTJZoIaSEBnyv26PiWU8WFa++Mnf0pcs0Ka FcFLxA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:16:17 2026 by rpki-client