$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer File: 168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer (raw, json) Hash identifier: wLyvhTJ7gu6urXfmBwZb5hDKUd52lPksq5xQ2kw8hYE= Subject key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 069860E058FC1843C42D725AE05ABE5AD24642CF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft caRepository: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Mar 2026 15:34:04 +0000 Certificate not after: Thu 11 Mar 2027 15:39:04 +0000 Subordinate resources: AS: 28252 IP: 179.189.240.0/20 IP: 187.1.160.0/20 IP: 2804:1544::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 02:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:98:60:e0:58:fc:18:43:c4:2d:72:5a:e0:5a:be:5a:d2:46:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 12 15:34:04 2026 GMT Not After : Mar 11 15:39:04 2027 GMT Subject: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:86:43:25:84:e5:6e:30:3d:55:19:22:0b: e0:96:2d:70:f7:e2:08:0e:0f:08:a3:64:b5:1b:5b: f7:5d:8f:69:1c:4f:f6:ec:97:a4:bb:f0:91:a8:27: d6:e8:fb:27:54:c1:29:95:87:39:c5:22:52:69:6a: 8d:f9:af:6c:8e:be:99:24:2d:80:5f:70:f5:7c:57: 17:ff:20:a0:c4:ea:22:d1:bc:d7:f0:67:36:dd:09: 94:58:91:02:85:bb:30:18:5a:ef:e6:2c:e7:68:5c: ce:fc:d4:a5:55:1b:9d:46:d5:06:ef:fd:86:4e:33: 2e:bd:7e:6b:d0:be:40:2e:7f:c4:1f:77:0b:0a:b1: 7c:c4:f9:0b:e7:36:61:db:99:89:f4:98:dc:e0:9d: f4:4d:da:bd:be:2d:17:83:7e:19:79:09:c3:ca:a6: f2:45:41:7e:4a:a7:56:11:cd:ea:e0:dd:3f:7b:3e: 68:93:7f:87:5d:64:5f:8e:21:96:e3:9d:95:f7:d2: 20:34:38:c3:a2:74:35:d2:5d:09:c3:41:17:81:e9: 56:10:60:de:82:ac:ae:cb:e4:a6:fa:f5:eb:05:0a: 51:d5:a2:7b:ea:14:de:75:89:2b:40:6e:ee:8a:64: 82:78:9f:ad:90:f1:51:88:04:3f:8b:ea:cf:37:87: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.189.240.0/20 187.1.160.0/20 IPv6: 2804:1544::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28252 Signature Algorithm: sha256WithRSAEncryption ba:f3:30:01:2c:57:bc:c8:c3:3c:50:7c:11:47:70:35:ed:83: 1f:73:e3:a0:ee:60:36:0b:50:a1:bb:9c:0d:b1:9c:37:6c:97: f7:94:e1:52:de:0c:3e:80:04:70:d1:70:ac:2f:a4:2b:b0:1d: 69:9d:50:0b:72:b8:93:f5:d3:f5:e1:38:f6:7f:ca:80:b2:2c: 33:fa:f4:56:07:81:b4:62:87:f6:46:b2:8e:06:e3:4d:87:b1: 44:4c:60:33:d7:c7:6f:15:00:95:a2:c3:50:4d:56:23:e4:00: 70:9e:35:44:69:b5:fa:fc:64:31:48:6a:6f:47:ba:12:55:9b: c2:61:c5:28:cd:7e:11:ef:1c:c4:a7:bc:87:a7:18:74:53:12: d5:02:62:01:41:a6:12:93:db:17:0f:49:f1:30:dc:09:6d:3d: a3:10:43:43:34:4f:29:25:16:60:b5:28:53:c5:59:b0:93:36: 5c:11:4c:03:22:f9:56:f7:65:eb:6c:68:47:2c:dd:3b:91:69: ed:df:8b:c2:25:a8:a4:f4:ea:3d:92:a9:1c:dc:c9:de:f7:81: 45:b6:d9:5c:50:b5:4e:5d:9d:86:6f:7b:2c:63:09:5e:dd:d4: 93:9c:7d:1d:81:13:44:a0:d1:c5:00:34:c0:f4:91:51:22:ea: a9:77:4c:ad -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUBphg4Fj8GEPELXJa4Fq+WtJGQs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTIxNTM0MDRaFw0yNzAzMTExNTM5MDRaMDMxMTAvBgNV BAMTKDE2OEUyQzczQUE3RUM5REFCMzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXoZDJYTlbjA9VRkiC+CWLXD3 4ggODwijZLUbW/ddj2kcT/bsl6S78JGoJ9bo+ydUwSmVhznFIlJpao35r2yOvpkk LYBfcPV8Vxf/IKDE6iLRvNfwZzbdCZRYkQKFuzAYWu/mLOdoXM781KVVG51G1Qbv /YZOMy69fmvQvkAuf8QfdwsKsXzE+QvnNmHbmYn0mNzgnfRN2r2+LReDfhl5CcPK pvJFQX5Kp1YRzerg3T97PmiTf4ddZF+OIZbjnZX30iA0OMOidDXSXQnDQReB6VYQ YN6CrK7L5Kb69esFClHVonvqFN51iStAbu6KZIJ4n62Q8VGIBD+L6s83h+7BAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWjixzqn7J2rMG 2Atbqk2+w9yrNDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3hT b0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1bTMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3hT b0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1bTMvMC8xNjhF MkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBASzvfADBAS7AaAwDQQCAAIwBwMFACgEFUQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICblwwDQYJKoZIhvcNAQELBQADggEBALrzMAEsV7zI wzxQfBFHcDXtgx9z46DuYDYLUKG7nA2xnDdsl/eU4VLeDD6ABHDRcKwvpCuwHWmd UAtyuJP10/XhOPZ/yoCyLDP69FYHgbRih/ZGso4G402HsURMYDPXx28VAJWiw1BN ViPkAHCeNURptfr8ZDFIam9HuhJVm8JhxSjNfhHvHMSnvIenGHRTEtUCYgFBphKT 2xcPSfEw3AltPaMQQ0M0TyklFmC1KFPFWbCTNlwRTAMi+Vb3ZetsaEcs3TuRae3f i8IlqKT06j2SqRzcyd73gUW22VxQtU5dnYZveyxjCV7d1JOcfR2BE0Sg0cUANMD0 kVEi6ql3TK0= -----END CERTIFICATE-----Generated at Thu Mar 26 01:19:20 2026 by rpki-client