$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer File: 2C425257AE7B63529EB88108AC7DEA60648B43E5.cer (raw, json) Hash identifier: RQ2reyg7T/zBgd+fmQo1qrDQ7stZYEG6Pn/YWrRJGHk= Subject key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 28D57ACB595E27C663121325604EA22A6FB1F3AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft caRepository: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Mar 2026 01:29:40 +0000 Certificate not after: Wed 03 Mar 2027 01:34:40 +0000 Subordinate resources: AS: 272549 IP: 181.232.230.0/23 IP: 187.84.152.0/22 IP: 2804:84f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d5:7a:cb:59:5e:27:c6:63:12:13:25:60:4e:a2:2a:6f:b1:f3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 4 01:29:40 2026 GMT Not After : Mar 3 01:34:40 2027 GMT Subject: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:48:08:ba:1e:2d:7a:79:a7:e9:3e:8e:fe: cd:07:4e:94:46:75:ac:46:7d:76:ea:68:1f:d6:d8: 86:b7:63:6f:97:b4:35:e5:35:46:30:bf:50:72:b4: 55:71:40:e8:19:c2:0f:b5:0a:a9:10:73:0b:f5:4a: 09:e2:c5:0b:db:1e:6b:7c:e1:f4:10:fa:5c:64:16: a4:12:dd:06:bf:a9:92:de:59:d8:cf:aa:31:4a:ce: fa:c1:90:8a:45:f5:ad:98:df:93:db:e4:fb:ce:79: 2c:07:37:49:53:a9:b9:57:f0:e5:b2:11:88:19:ca: ed:9f:f0:55:4a:5a:e3:84:b8:9c:14:76:be:f9:8e: 7e:fe:73:61:bc:f9:97:a6:76:5e:73:5d:75:88:cc: c9:b7:fb:3c:18:63:a6:67:27:1c:48:16:f0:70:1b: 51:ca:93:6b:cd:4d:91:df:4c:b1:1c:dc:5f:6e:18: 72:bd:49:8b:c1:cf:41:a1:6e:de:ce:38:c9:43:e2: 80:15:74:18:fb:36:93:d7:74:3e:28:c0:06:7b:83: 5d:29:8c:31:48:95:3b:9a:e4:5c:c6:8c:11:a4:49: 54:7c:8a:13:39:ef:c9:0b:45:12:9d:17:88:64:24: 0e:98:95:6a:2b:c7:ef:ca:6b:9b:92:90:4f:0e:ae: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.230.0/23 187.84.152.0/22 IPv6: 2804:84f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272549 Signature Algorithm: sha256WithRSAEncryption 6d:23:0f:26:9c:07:7e:02:82:aa:8e:f7:09:82:14:40:bd:10: ea:78:50:5c:83:31:ac:3f:c7:66:83:37:8c:a5:a8:32:1d:43: 85:78:7f:bb:44:4e:19:a3:ac:a5:7c:e1:d4:4a:7e:c8:04:0c: 0e:74:36:47:98:0d:c3:a8:64:ed:fb:0c:3a:16:ae:75:f9:35: ef:6f:da:e9:cc:2e:e3:d9:ff:b2:0b:17:8d:bd:a6:89:a9:c3: d1:f9:0e:49:70:e6:de:ac:58:78:d5:a5:03:bb:fe:5d:3a:05: fb:45:42:7f:0c:79:54:f9:96:43:d0:8e:de:0b:cc:f3:28:12: 4c:f1:05:23:98:e4:66:d4:b6:8e:48:77:d1:84:e7:b0:16:10: 66:f8:a4:02:45:59:bb:fb:e6:80:28:16:73:2d:65:c7:07:b6: 64:3d:d8:6c:93:00:be:e8:9e:bf:db:fc:1c:07:43:bc:a1:62: 15:28:65:be:7d:5b:ab:a3:c8:98:db:d3:e7:d1:5c:23:5a:b5: 02:b9:be:d0:0f:e2:3b:5a:df:b5:d6:dc:e3:ee:dd:54:63:d9: bb:25:e0:c2:bc:aa:ed:59:e5:d8:ea:48:ad:5b:5a:04:4e:a6: a5:d8:fa:9b:46:5a:52:5e:0b:42:0f:b6:75:6b:44:37:de:1e: 50:07:50:c7 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUKNV6y1leJ8ZjEhMlYE6iKm+x86owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDQwMTI5NDBaFw0yNzAzMDMwMTM0NDBaMDMxMTAvBgNV BAMTKDJDNDI1MjU3QUU3QjYzNTI5RUI4ODEwOEFDN0RFQTYwNjQ4QjQzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6EgIuh4tenmn6T6O/s0HTpRG daxGfXbqaB/W2Ia3Y2+XtDXlNUYwv1BytFVxQOgZwg+1CqkQcwv1SgnixQvbHmt8 4fQQ+lxkFqQS3Qa/qZLeWdjPqjFKzvrBkIpF9a2Y35Pb5PvOeSwHN0lTqblX8OWy EYgZyu2f8FVKWuOEuJwUdr75jn7+c2G8+Zemdl5zXXWIzMm3+zwYY6ZnJxxIFvBw G1HKk2vNTZHfTLEc3F9uGHK9SYvBz0Ghbt7OOMlD4oAVdBj7NpPXdD4owAZ7g10p jDFIlTua5FzGjBGkSVR8ihM578kLRRKdF4hkJA6YlWorx+/Ka5uSkE8Orhz9AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsQlJXrntjUp64 gQisfepgZItD5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMS8yQzQy NTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0M0U1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAG16OYDBAK7VJgwDQQCAAIwBwMFACgEhPgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCilMA0GCSqGSIb3DQEBCwUAA4IBAQBtIw8mnAd+ AoKqjvcJghRAvRDqeFBcgzGsP8dmgzeMpagyHUOFeH+7RE4Zo6ylfOHUSn7IBAwO dDZHmA3DqGTt+ww6Fq51+TXvb9rpzC7j2f+yCxeNvaaJqcPR+Q5JcOberFh41aUD u/5dOgX7RUJ/DHlU+ZZD0I7eC8zzKBJM8QUjmORm1LaOSHfRhOewFhBm+KQCRVm7 ++aAKBZzLWXHB7ZkPdhskwC+6J6/2/wcB0O8oWIVKGW+fVuro8iY29Pn0VwjWrUC ub7QD+I7Wt+11tzj7t1UY9m7JeDCvKrtWeXY6kitW1oETqal2PqbRlpSXgtCD7Z1 a0Q33h5QB1DH -----END CERTIFICATE-----Generated at Thu Mar 26 00:02:12 2026 by rpki-client