$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer File: 1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer (raw, json) Hash identifier: G3k4RRXNXuDU0wqegg/jllEA8GyXNSALbk+LHq+ObBE= Subject key identifier: 1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 533781742D14CDE0BFEDD1FBCC23A81F48D135B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.mft caRepository: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 13:52:44 +0000 Certificate not after: Tue 23 Mar 2027 13:57:44 +0000 Subordinate resources: AS: 267198 IP: 45.231.124.0/22 IP: 2804:49b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:37:81:74:2d:14:cd:e0:bf:ed:d1:fb:cc:23:a8:1f:48:d1:35:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 13:52:44 2026 GMT Not After : Mar 23 13:57:44 2027 GMT Subject: CN=1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:13:52:01:ec:b0:3e:5d:52:6e:47:f7:59: 90:0f:fe:4a:a0:ee:9b:e2:87:bf:1e:55:53:aa:80: 29:08:2d:df:64:e8:26:18:38:db:5b:e9:96:78:45: 0b:7f:c3:be:56:ab:d6:fb:d6:f7:7b:0e:b8:43:b6: 8d:77:3f:af:7d:98:11:da:82:53:61:70:71:bd:bc: 80:ca:48:21:b3:d1:6b:a4:a5:46:25:da:c3:73:f4: 1d:8a:c3:3c:04:d4:d6:3f:2d:65:dd:15:a7:fb:48: 1a:a4:a8:0f:38:82:91:16:1e:9c:5f:a6:7c:3b:e2: 0c:94:25:06:15:3a:2b:15:1a:6f:af:93:03:ef:f2: 84:2d:84:21:6e:99:64:a9:f5:09:49:2e:b2:7b:e7: 36:4b:90:64:64:ba:28:58:fa:a3:e7:a0:43:7d:1a: 38:aa:74:35:36:bd:6b:8a:d7:16:98:76:1a:a2:f4: 1e:4b:fe:0e:14:04:be:10:a2:a0:20:f1:ab:08:cb: 89:25:f7:2e:d2:eb:de:e2:a1:10:64:34:81:5f:34: 2d:e0:98:8b:38:e3:46:ab:8b:1b:f7:dd:b7:89:b8: de:45:3b:bc:44:40:f0:54:60:16:c4:8d:b6:e2:be: 4c:90:4e:ea:aa:0b:51:4a:6a:8f:63:f1:fe:cd:04: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.124.0/22 IPv6: 2804:49b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267198 Signature Algorithm: sha256WithRSAEncryption a6:ae:96:dc:71:2e:9e:9f:7b:fe:4c:0e:ab:b4:60:d0:1f:aa: 6f:59:b6:ee:e6:2e:1a:bd:d7:71:28:45:99:8c:39:80:ba:67: 88:ef:5d:31:05:73:d7:73:a7:9a:35:8e:62:99:2c:79:f6:dc: 0b:83:38:cb:2e:1b:63:6b:c3:a4:b2:cf:d6:49:cb:4f:8d:5c: 9d:20:76:80:c0:52:86:cc:87:82:23:2f:cd:1d:f1:d7:7b:0b: 8a:68:dd:28:fc:79:50:36:8b:7b:0d:4d:bd:8b:53:d5:e6:d6: c2:b1:86:65:3c:4a:cb:f2:d3:9c:3c:7b:14:39:08:ae:b6:6c: 90:38:3d:aa:b0:28:5b:f2:cf:64:df:c0:b4:a9:72:56:34:5c: b5:46:66:2c:9e:9f:02:66:9b:e5:93:15:25:aa:88:d1:af:47: 9d:be:00:3c:5d:ff:d3:8b:04:14:1d:3a:b9:6f:58:e8:42:c8: ed:b8:c0:db:c6:ce:79:3b:37:e2:35:ff:6e:f3:30:cc:66:e1: 27:cf:9b:4e:30:74:25:f5:48:72:59:90:d3:e9:d9:81:14:0d: d9:b1:3e:1b:16:aa:23:76:72:a1:bc:ed:36:35:ab:ff:12:e2: 27:17:70:9b:58:e3:38:d3:67:da:02:8c:f0:2b:4d:37:0b:6f: df:04:ec:7b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUzeBdC0UzeC/7dH7zCOoH0jRNbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxMzUyNDRaFw0yNzAzMjMxMzU3NDRaMDMxMTAvBgNV BAMTKDFBRDUyNjJCRkEyM0JCNDFDRDBCRDZDNEMzMUMzMTlGRDU2MUVDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExxNSAeywPl1Sbkf3WZAP/kqg 7pvih78eVVOqgCkILd9k6CYYONtb6ZZ4RQt/w75Wq9b71vd7DrhDto13P699mBHa glNhcHG9vIDKSCGz0WukpUYl2sNz9B2KwzwE1NY/LWXdFaf7SBqkqA84gpEWHpxf pnw74gyUJQYVOisVGm+vkwPv8oQthCFumWSp9QlJLrJ75zZLkGRkuihY+qPnoEN9 GjiqdDU2vWuK1xaYdhqi9B5L/g4UBL4QoqAg8asIy4kl9y7S697ioRBkNIFfNC3g mIs440arixv33beJuN5FO7xEQPBUYBbEjbbivkyQTuqqC1FKao9j8f7NBKMpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQa1SYr+iO7Qc0L 1sTDHDGf1WHswTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2c3 QlBLaDFXMXJvUm9kQURyTTVTQkM3azhvN3BURVRZdGg4eW8zb1NOZGovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdn N0JQS2gxVzFyb1JvZEFEck01U0JDN2s4bzdwVEVUWXRoOHlvM29TTmRqLzAvMUFE NTI2MkJGQTIzQkI0MUNEMEJENkM0QzMxQzMxOUZENTYxRUNDMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLed8MA0EAgACMAcDBQAoBEm0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTvjANBgkqhkiG9w0BAQsFAAOCAQEApq6W3HEunp97/kwO q7Rg0B+qb1m27uYuGr3XcShFmYw5gLpniO9dMQVz13OnmjWOYpksefbcC4M4yy4b Y2vDpLLP1knLT41cnSB2gMBShsyHgiMvzR3x13sLimjdKPx5UDaLew1NvYtT1ebW wrGGZTxKy/LTnDx7FDkIrrZskDg9qrAoW/LPZN/AtKlyVjRctUZmLJ6fAmab5ZMV JaqI0a9Hnb4APF3/04sEFB06uW9Y6ELI7bjA28bOeTs34jX/bvMwzGbhJ8+bTjB0 JfVIclmQ0+nZgRQN2bE+GxaqI3ZyobztNjWr/xLiJxdwm1jjONNn2gKM8CtNNwtv 3wTsew== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:20 2026 by rpki-client