$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21816AEF53DA4A1266254E59D156C2DF097928E3.cer File: 21816AEF53DA4A1266254E59D156C2DF097928E3.cer (raw, json) Hash identifier: rg5BnuTYjt7dEkrhH58znMGhamz6lYk0agnbTtI/Usg= Subject key identifier: 21:81:6A:EF:53:DA:4A:12:66:25:4E:59:D1:56:C2:DF:09:79:28:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A15559D4D491D427876704F58CD666BD571655D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft caRepository: rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 12:52:15 +0000 Certificate not after: Tue 23 Mar 2027 12:57:15 +0000 Subordinate resources: AS: 268286 IP: 45.237.156.0/22 IP: 2804:4ed8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:15:55:9d:4d:49:1d:42:78:76:70:4f:58:cd:66:6b:d5:71:65:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 12:52:15 2026 GMT Not After : Mar 23 12:57:15 2027 GMT Subject: CN=21816AEF53DA4A1266254E59D156C2DF097928E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:cd:d3:99:32:92:0b:bc:b7:27:e2:d7:cf: 0f:e4:dc:85:16:d8:6f:b6:f2:c2:94:d8:6d:ed:44: 46:9b:26:53:b6:e5:c8:cc:39:ff:bf:af:c0:3c:5f: 41:f9:15:ca:00:8f:38:1f:81:6c:43:ae:03:e9:9d: fe:4a:23:8a:58:0b:a4:e5:f0:73:11:16:45:d2:4c: 63:76:5c:57:b0:9a:51:47:31:4f:b5:b8:11:bf:5f: 1a:04:86:a1:45:7f:6f:10:54:a8:b8:1b:05:9b:99: ae:f1:31:d2:77:93:51:b0:69:e8:e1:d2:3e:2a:04: c8:68:46:24:70:0a:13:81:13:3d:2b:92:c1:52:5b: 98:f5:46:44:20:b1:a3:86:77:31:27:69:d8:2b:b6: 63:8f:a1:5a:a5:e7:2f:1a:a6:a6:08:d6:4e:38:b3: 03:55:7b:39:1f:c1:08:c0:9a:41:2a:9f:b0:f9:68: 99:f2:9b:79:09:d6:6c:db:3c:e1:79:51:f8:14:83: 87:7b:86:cd:03:cf:c0:3c:bb:97:d5:3a:d7:41:23: ea:4e:ff:e9:ea:9b:9c:1a:7e:33:66:fa:d0:14:5a: 52:46:9d:8b:65:8c:e1:41:5b:59:4d:0b:54:89:54: 2e:00:a4:f0:cc:ff:63:14:e1:6e:c3:0d:95:eb:f4: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:81:6A:EF:53:DA:4A:12:66:25:4E:59:D1:56:C2:DF:09:79:28:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.156.0/22 IPv6: 2804:4ed8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268286 Signature Algorithm: sha256WithRSAEncryption a1:e1:33:d8:fd:82:8c:8e:5d:db:21:53:2b:03:7a:b4:d3:38: c7:b0:74:4d:0e:1e:8e:76:ad:ff:97:b0:f0:3d:df:7e:25:3e: 65:78:61:94:c0:56:0b:76:49:ff:3c:52:48:82:e2:f1:f2:f4: c1:26:cc:85:0a:b7:29:48:c9:93:65:a3:2c:6a:ce:50:12:29: 05:b0:63:5d:ac:57:e6:87:0c:fe:f7:01:dd:a6:8f:82:7a:62: 04:0c:28:09:7d:47:bf:e3:32:29:d5:77:45:56:19:49:10:7d: fc:d8:76:fc:9c:3a:2e:9a:3f:32:98:2d:a0:df:a8:b2:64:3c: f1:5a:35:ca:ad:cd:11:d1:3e:06:39:e6:4b:26:29:71:c1:58: 8e:b7:5c:dc:97:cd:3a:ea:bc:0f:ad:4f:74:14:7f:7b:f0:24: e4:8e:9f:fa:c6:c8:bc:db:8a:f0:79:ce:07:73:a8:f4:ae:d1: 81:19:e0:a7:3a:dc:a3:02:a2:a5:59:0c:ec:bf:d7:ef:03:3e: c1:f0:39:69:6c:d5:b7:67:ac:d6:5b:0b:d2:dc:b3:35:f5:66: 18:00:60:68:d2:3a:6f:01:73:c0:f4:2e:d3:b5:e5:24:65:2f: 71:39:da:1a:f7:83:92:7a:22:e6:cc:93:8d:61:0c:b6:5b:b7: 4f:9f:b8:b5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWhVVnU1JHUJ4dnBPWM1ma9VxZV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxMjUyMTVaFw0yNzAzMjMxMjU3MTVaMDMxMTAvBgNV BAMTKDIxODE2QUVGNTNEQTRBMTI2NjI1NEU1OUQxNTZDMkRGMDk3OTI4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYs3TmTKSC7y3J+LXzw/k3IUW 2G+28sKU2G3tREabJlO25cjMOf+/r8A8X0H5FcoAjzgfgWxDrgPpnf5KI4pYC6Tl 8HMRFkXSTGN2XFewmlFHMU+1uBG/XxoEhqFFf28QVKi4GwWbma7xMdJ3k1Gwaejh 0j4qBMhoRiRwChOBEz0rksFSW5j1RkQgsaOGdzEnadgrtmOPoVql5y8apqYI1k44 swNVezkfwQjAmkEqn7D5aJnym3kJ1mzbPOF5UfgUg4d7hs0Dz8A8u5fVOtdBI+pO /+nqm5wafjNm+tAUWlJGnYtljOFBW1lNC1SJVC4ApPDM/2MU4W7DDZXr9HpTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhgWrvU9pKEmYl TlnRVsLfCXko4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFQ5 WUNGVjJoTXF5dkdNNUtWSHVuR3lyamdiWFBVTXBXaEhMUEp6YmRoQzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hU OVlDRlYyaE1xeXZHTTVLVkh1bkd5cmpnYlhQVU1wV2hITFBKemJkaEMzLzAvMjE4 MTZBRUY1M0RBNEExMjY2MjU0RTU5RDE1NkMyREYwOTc5MjhFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe2cMA0EAgACMAcDBQAoBE7YMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX/jANBgkqhkiG9w0BAQsFAAOCAQEAoeEz2P2CjI5d2yFT KwN6tNM4x7B0TQ4ejnat/5ew8D3ffiU+ZXhhlMBWC3ZJ/zxSSILi8fL0wSbMhQq3 KUjJk2WjLGrOUBIpBbBjXaxX5ocM/vcB3aaPgnpiBAwoCX1Hv+MyKdV3RVYZSRB9 /Nh2/Jw6Lpo/MpgtoN+osmQ88Vo1yq3NEdE+BjnmSyYpccFYjrdc3JfNOuq8D61P dBR/e/Ak5I6f+sbIvNuK8HnOB3Oo9K7RgRngpzrcowKipVkM7L/X7wM+wfA5aWzV t2es1lsL0tyzNfVmGABgaNI6bwFzwPQu07XlJGUvcTnaGveDknoi5syTjWEMtlu3 T5+4tQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:54:52 2026 by rpki-client