$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer File: 28D273356F90D13FC143833120BC59A454646F71.cer (raw, json) Hash identifier: rZyBHVRwLUmNZg05u294ZVn08DiB2jZLatfrIJ19j/0= Subject key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D068FF9ECDC03173C55CC9EEEDA93D1D3DC2885 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft caRepository: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 18:57:03 +0000 Certificate not after: Thu 18 Mar 2027 19:02:03 +0000 Subordinate resources: AS: 274833 IP: 2804:9448::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:06:8f:f9:ec:dc:03:17:3c:55:cc:9e:ee:da:93:d1:d3:dc:28:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 18:57:03 2026 GMT Not After : Mar 18 19:02:03 2027 GMT Subject: CN=28D273356F90D13FC143833120BC59A454646F71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:7a:ba:70:e6:61:ad:34:c9:29:a7:ac:ef: 4d:7e:35:22:28:8d:da:f6:5c:ee:82:8d:6e:40:5d: dd:2b:1e:b8:75:c8:cf:65:09:97:12:98:54:f9:b5: 85:09:55:79:00:3d:67:d2:3e:a0:0a:5e:cb:c1:df: 25:8d:d5:e9:88:aa:ce:14:72:01:cc:d7:16:a6:de: 91:9e:ae:2c:5b:00:db:e6:46:13:7b:7b:26:2f:b0: 78:f9:b8:1f:bf:0e:12:dd:4e:c8:0a:7d:e4:46:d1: b4:4e:c8:25:bf:79:cd:b2:1c:ff:28:27:be:fb:d7: f6:77:20:2a:fc:aa:da:9f:12:a3:ce:6f:c1:88:35: 0b:30:9b:48:7d:b2:d2:41:dc:81:0b:ab:05:93:ab: 2e:17:92:30:11:e7:76:fb:ae:ad:e6:45:95:c5:63: 14:3f:61:72:72:12:91:04:37:74:6c:ca:c5:6e:dd: aa:20:8c:e8:73:5d:fe:68:f9:99:27:a9:3c:48:4d: d8:5e:85:a2:12:d3:03:88:8e:5b:7b:38:a8:a5:08: 6d:40:cc:89:73:e1:a3:32:16:f8:a7:70:9c:9f:af: ec:1c:ab:bb:63:1a:99:79:f3:d3:17:ef:5a:f8:82: 3c:b5:f9:b4:d2:0a:ed:26:a3:fb:15:55:04:21:83: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9448::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274833 Signature Algorithm: sha256WithRSAEncryption 0e:51:3c:48:dd:af:bc:cd:33:43:21:72:36:45:b3:cb:95:9f: 45:b0:0e:49:eb:99:75:d9:5c:f2:83:a1:b5:95:d2:35:f5:8f: 06:24:a6:30:fc:af:ce:32:01:6e:e3:71:79:6b:ce:21:d4:5f: af:ee:1a:89:99:45:68:2f:4d:44:0f:82:9c:20:a5:fb:9a:f3: cc:40:b0:d5:03:16:de:a2:54:ec:98:80:c1:f6:65:82:4f:0d: 55:96:22:98:24:8c:67:81:b7:ea:3a:1e:a8:b0:26:19:29:e3: 7c:e2:72:a2:b3:8d:f4:96:64:90:3f:2f:01:81:1c:1e:59:6d: 3c:4e:08:dd:f2:ef:7a:e3:7d:0b:cf:ce:e5:64:61:ee:54:18: f8:cd:87:16:90:dc:03:68:ce:24:b6:12:8b:48:94:ee:c4:e5: d8:56:aa:1b:65:74:37:90:e6:fa:6e:fc:f9:4e:20:87:d9:0b: 3a:ee:42:ab:6c:f7:63:60:1c:1e:04:11:47:47:f3:4a:77:cd: 38:32:e7:78:53:60:f8:9c:3c:88:d6:5a:0c:6e:e3:08:27:4e: 07:d1:d9:9a:4c:0b:0e:4f:90:e9:d4:6e:c9:39:8c:51:a0:03: 5b:1f:b8:16:ab:08:32:ff:cd:54:91:31:66:d4:46:47:d6:67: 60:5d:ae:26 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUPQaP+ezcAxc8Vcye7tqT0dPcKIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkxODU3MDNaFw0yNzAzMTgxOTAyMDNaMDMxMTAvBgNV BAMTKDI4RDI3MzM1NkY5MEQxM0ZDMTQzODMzMTIwQkM1OUE0NTQ2NDZGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6Xq6cOZhrTTJKaes701+NSIo jdr2XO6CjW5AXd0rHrh1yM9lCZcSmFT5tYUJVXkAPWfSPqAKXsvB3yWN1emIqs4U cgHM1xam3pGerixbANvmRhN7eyYvsHj5uB+/DhLdTsgKfeRG0bROyCW/ec2yHP8o J7771/Z3ICr8qtqfEqPOb8GINQswm0h9stJB3IELqwWTqy4XkjAR53b7rq3mRZXF YxQ/YXJyEpEEN3RsysVu3aogjOhzXf5o+ZknqTxITdhehaIS0wOIjlt7OKilCG1A zIlz4aMyFvincJyfr+wcq7tjGpl589MX71r4gjy1+bTSCu0mo/sVVQQhg2/TAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo0nM1b5DRP8FD gzEgvFmkVGRvcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkNY WXpZTWMyTXNtc01TTG1NVEFmM2FjdlRleWRzazc3V2ZYOVlIYmRxRFYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZD WFl6WU1jMk1zbXNNU0xtTVRBZjNhY3ZUZXlkc2s3N1dmWDlZSGJkcURWLzAvMjhE MjczMzU2RjkwRDEzRkMxNDM4MzMxMjBCQzU5QTQ1NDY0NkY3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASUSDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MZEwDQYJKoZIhvcNAQELBQADggEBAA5RPEjdr7zNM0MhcjZFs8uVn0WwDknrmXXZ XPKDobWV0jX1jwYkpjD8r84yAW7jcXlrziHUX6/uGomZRWgvTUQPgpwgpfua88xA sNUDFt6iVOyYgMH2ZYJPDVWWIpgkjGeBt+o6HqiwJhkp43zicqKzjfSWZJA/LwGB HB5ZbTxOCN3y73rjfQvPzuVkYe5UGPjNhxaQ3ANoziS2EotIlO7E5dhWqhtldDeQ 5vpu/PlOIIfZCzruQqts92NgHB4EEUdH80p3zTgy53hTYPicPIjWWgxu4wgnTgfR 2ZpMCw5PkOnUbsk5jFGgA1sfuBarCDL/zVSRMWbURkfWZ2BdriY= -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:48 2026 by rpki-client