$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer File: 29E752800F8BF73453CEA055406DCC5F61330F19.cer (raw, json) Hash identifier: yufCyyPfJvuEVirz1LiX5sFvDgQsYBXDYYXSBjs+iUQ= Subject key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09D1A700B54DBF5960E92BA9C4487000B4697738 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft caRepository: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 13:30:36 +0000 Certificate not after: Wed 24 Mar 2027 13:35:36 +0000 Subordinate resources: AS: 264294 IP: 45.232.244.0/22 IP: 138.121.128.0/22 IP: 143.0.176.0/22 IP: 177.107.16.0 -- 177.107.30.255 IP: 2804:25ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d1:a7:00:b5:4d:bf:59:60:e9:2b:a9:c4:48:70:00:b4:69:77:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 13:30:36 2026 GMT Not After : Mar 24 13:35:36 2027 GMT Subject: CN=29E752800F8BF73453CEA055406DCC5F61330F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:f6:5b:d2:6b:60:3f:df:d6:bc:92:3a:3b: 77:1b:62:c0:1b:80:3c:ae:59:f5:a6:69:a5:48:5e: ac:90:64:a3:f2:42:ad:bc:29:47:e4:57:25:13:0c: f9:4d:15:f0:90:ab:1f:a6:7e:14:ae:32:0a:a7:9d: ba:b1:d5:a6:e7:58:0a:74:8c:ec:e1:27:6c:d7:0b: 76:64:1d:93:5c:44:59:10:4c:d6:68:01:8a:93:4f: a0:ef:af:ea:93:d6:ab:95:c3:56:f4:c7:fc:8e:96: 47:2b:15:9f:70:3e:c0:29:e0:8b:b9:98:c7:65:de: 80:68:78:73:17:7d:24:93:11:40:38:bf:d2:3e:dd: 6a:eb:b2:6f:51:ac:50:23:88:d7:81:43:52:7b:94: d0:bd:c9:92:39:c7:ee:0d:94:20:96:e4:c3:b1:3e: 61:98:91:33:3e:29:ba:41:c3:3f:cf:db:02:62:9d: 25:06:62:08:6a:8a:79:4a:de:82:64:94:82:d5:16: f4:5d:a5:48:0a:ec:c2:80:9b:cb:7f:dc:7e:a5:47: 30:f2:43:16:38:fd:e8:d6:54:af:b3:04:a3:04:8b: fd:dd:4f:2a:40:07:9a:80:a8:aa:d5:5f:1c:58:d0: 0a:00:5a:3d:d6:6c:cd:57:f0:a9:f8:9b:92:98:49: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.244.0/22 138.121.128.0/22 143.0.176.0/22 177.107.16.0-177.107.30.255 IPv6: 2804:25ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264294 Signature Algorithm: sha256WithRSAEncryption 5a:9f:17:c8:1e:ca:a2:a3:8a:a5:96:d8:04:b9:83:df:a2:d4: 6a:7b:26:58:e6:d5:fa:21:05:3f:c5:05:3b:7a:ae:4e:46:30: a8:20:6e:69:87:b1:a4:e6:d5:53:ad:2b:7c:a0:99:4f:07:18: bd:b2:ce:d6:c4:92:37:5c:64:1c:71:1e:0c:27:69:51:07:56: 62:c2:3c:d8:31:dc:4a:87:85:11:16:05:b1:e8:e0:1a:ec:0f: 39:65:64:dd:cf:20:5a:ba:05:0e:82:ef:ac:14:c7:92:b1:bc: 4a:18:75:9d:4d:1a:64:e3:00:8f:b2:7c:dc:13:f1:ae:fd:22: da:f2:13:c8:eb:83:d1:55:44:90:53:1c:7f:4c:7c:af:4d:42: 54:30:a8:cf:20:ed:d2:09:38:2b:eb:54:21:24:ac:c4:5b:9c: 64:7b:34:df:ff:21:3d:29:a9:93:cc:79:70:c2:34:fa:8b:bf: 14:36:86:f3:41:12:a5:42:44:81:d8:23:66:fe:93:c3:b8:45: 10:43:e9:71:e0:68:51:96:84:d3:ff:68:41:f0:ba:a7:1a:4c: af:c5:54:98:e3:93:ad:3b:a9:92:40:a3:25:f9:d7:88:55:72: 64:1d:07:30:fa:11:a8:61:fb:ac:cd:c4:99:61:94:78:78:03: c9:0b:07:89 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUCdGnALVNv1lg6SupxEhwALRpdzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxMzMwMzZaFw0yNzAzMjQxMzM1MzZaMDMxMTAvBgNV BAMTKDI5RTc1MjgwMEY4QkY3MzQ1M0NFQTA1NTQwNkRDQzVGNjEzMzBGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRfZb0mtgP9/WvJI6O3cbYsAb gDyuWfWmaaVIXqyQZKPyQq28KUfkVyUTDPlNFfCQqx+mfhSuMgqnnbqx1abnWAp0 jOzhJ2zXC3ZkHZNcRFkQTNZoAYqTT6Dvr+qT1quVw1b0x/yOlkcrFZ9wPsAp4Iu5 mMdl3oBoeHMXfSSTEUA4v9I+3Wrrsm9RrFAjiNeBQ1J7lNC9yZI5x+4NlCCW5MOx PmGYkTM+KbpBwz/P2wJinSUGYghqinlK3oJklILVFvRdpUgK7MKAm8t/3H6lRzDy QxY4/ejWVK+zBKMEi/3dTypAB5qAqKrVXxxY0AoAWj3WbM1X8Kn4m5KYSfs/AgMB AAGjggNUMIIDUDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQp51KAD4v3NFPO oFVAbcxfYTMPGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODZ4 NDh4TGoyNnR1cmtUVWhxWHpjQlNhczJ4bkVRb2h6cVZkYUtkRFFLQXYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg2 eDQ4eExqMjZ0dXJrVFVocVh6Y0JTYXMyeG5FUW9oenFWZGFLZERRS0F2LzAvMjlF NzUyODAwRjhCRjczNDUzQ0VBMDU1NDA2RENDNUY2MTMzMEYxOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEH AQH/BDkwNzAmBAIAATAgAwQCLej0AwQCinmAAwQCjwCwMAwDBASxaxADBACxax4w DQQCAAIwBwMFACgEJawwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhmMA0GCSqG SIb3DQEBCwUAA4IBAQBanxfIHsqio4qlltgEuYPfotRqeyZY5tX6IQU/xQU7eq5O RjCoIG5ph7Gk5tVTrSt8oJlPBxi9ss7WxJI3XGQccR4MJ2lRB1ZiwjzYMdxKh4UR FgWx6OAa7A85ZWTdzyBaugUOgu+sFMeSsbxKGHWdTRpk4wCPsnzcE/Gu/SLa8hPI 64PRVUSQUxx/THyvTUJUMKjPIO3SCTgr61QhJKzEW5xkezTf/yE9KamTzHlwwjT6 i78UNobzQRKlQkSB2CNm/pPDuEUQQ+lx4GhRloTT/2hB8LqnGkyvxVSY45OtO6mS QKMl+deIVXJkHQcw+hGoYfuszcSZYZR4eAPJCweJ -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:18 2026 by rpki-client