$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer File: 2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer (raw, json) Hash identifier: P8PSPhzWttxX+ft/O7KLDrJxqR8EMj0685vheVzDPtg= Subject key identifier: 2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 48076B191C6A47E97D21D3EDD39EFD64E5C179CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.mft caRepository: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 20:47:37 +0000 Certificate not after: Tue 09 Mar 2027 20:52:37 +0000 Subordinate resources: AS: 268786 IP: 45.172.168.0/22 IP: 168.196.204.0/22 IP: 2804:5aa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:07:6b:19:1c:6a:47:e9:7d:21:d3:ed:d3:9e:fd:64:e5:c1:79:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 10 20:47:37 2026 GMT Not After : Mar 9 20:52:37 2027 GMT Subject: CN=2EE47F810421AADFC75A240BE718278F1FEE7E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:45:49:56:15:6e:1d:6a:80:aa:07:99:c5: be:b2:5d:e1:90:0e:7b:ab:60:10:28:b2:2c:2a:6a: 0d:b5:94:5a:95:13:fd:41:0f:a3:58:7c:6f:e2:57: 8c:8b:54:95:44:bd:e5:d3:5e:84:66:de:02:0d:18: 35:07:64:cf:ff:39:89:14:c0:05:f5:41:26:ea:70: e1:1e:46:c2:26:fe:2b:ea:c9:58:96:79:f0:d4:52: 62:69:49:ee:28:43:d4:31:f1:42:59:7e:61:0c:b3: 59:b3:38:8d:9a:fb:aa:22:9d:0a:db:13:0d:6a:ca: 42:bb:b4:3f:a4:e5:64:62:21:f3:cb:a1:14:c4:e2: 09:f3:a2:0b:12:ae:c6:16:e9:16:34:dc:1e:50:e8: 62:82:4e:0d:ab:43:39:0b:c6:af:69:82:7f:97:2f: b0:3c:51:df:e1:ba:ca:44:33:c7:a0:96:dd:4b:fb: a7:12:4c:2e:c5:b5:4c:a3:ca:99:a4:b1:a7:fe:ab: 8e:e1:d4:28:cf:44:63:df:45:2c:74:b6:00:13:91: f7:55:6b:5f:7d:b4:3a:68:b0:77:da:7d:69:bd:f0: cb:93:8e:9b:76:f7:30:4d:2d:5e:5f:66:02:f1:6e: 04:31:70:de:81:a0:ef:ef:64:ad:3c:bf:9f:37:c6: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.168.0/22 168.196.204.0/22 IPv6: 2804:5aa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268786 Signature Algorithm: sha256WithRSAEncryption bb:e8:83:02:1a:87:21:76:46:ad:24:da:df:a0:f1:61:23:4d: d4:d1:29:3a:ce:10:1c:0d:c5:0c:d1:6f:e1:04:ca:bf:26:84: 1e:b1:1c:b8:1b:cf:44:2a:dd:02:e7:01:b7:1a:eb:34:68:20: a2:9f:e6:7f:32:f0:a0:39:43:1b:0f:ea:16:be:9b:a8:69:5b: bc:bf:00:a2:07:b1:7d:54:ce:ab:ae:cc:3d:c0:a6:9d:77:24: e1:bc:6e:8c:f2:3e:24:41:45:61:b4:2d:8c:0c:da:e0:97:d3: 9c:cf:7e:5b:a1:0a:df:ca:af:15:4a:5b:37:33:53:58:9b:10: c6:af:f1:39:0c:2b:97:98:72:d7:e2:6c:89:4a:6c:b7:e8:cf: 61:57:a4:70:26:ea:20:b7:3b:ae:21:d8:76:84:6b:c4:c2:5f: a5:21:d4:4f:8c:3d:99:14:0e:3f:5e:dd:14:b9:9d:7e:32:e4: 86:23:f9:d9:1c:f1:c0:84:12:ea:a3:98:a7:ac:ad:03:20:bb: a3:83:a1:56:c2:6d:02:e3:89:88:08:ee:9d:38:f3:8e:ae:f9: 38:71:b1:79:bd:7e:6e:14:a2:cb:9c:1e:78:45:29:dd:f5:eb: 85:73:5e:23:c8:21:c1:91:bf:b1:8e:9e:28:87:1b:dc:cc:4f: cf:a1:6b:37 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSAdrGRxqR+l9IdPt0579ZOXBec4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTAyMDQ3MzdaFw0yNzAzMDkyMDUyMzdaMDMxMTAvBgNV BAMTKDJFRTQ3RjgxMDQyMUFBREZDNzVBMjQwQkU3MTgyNzhGMUZFRTdFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yUVJVhVuHWqAqgeZxb6yXeGQ DnurYBAosiwqag21lFqVE/1BD6NYfG/iV4yLVJVEveXTXoRm3gINGDUHZM//OYkU wAX1QSbqcOEeRsIm/ivqyViWefDUUmJpSe4oQ9Qx8UJZfmEMs1mzOI2a+6oinQrb Ew1qykK7tD+k5WRiIfPLoRTE4gnzogsSrsYW6RY03B5Q6GKCTg2rQzkLxq9pgn+X L7A8Ud/huspEM8eglt1L+6cSTC7FtUyjypmksaf+q47h1CjPRGPfRSx0tgATkfdV a199tDposHfafWm98MuTjpt29zBNLV5fZgLxbgQxcN6BoO/vZK08v583xsRpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu5H+BBCGq38da JAvnGCePH+5+SzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHgz cXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3aDEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh4 M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAvMkVF NDdGODEwNDIxQUFERkM3NUEyNDBCRTcxODI3OEYxRkVFN0U0Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLayoAwQCqMTMMA0EAgACMAcDBQAoBFqkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZ8jANBgkqhkiG9w0BAQsFAAOCAQEAu+iDAhqH IXZGrSTa36DxYSNN1NEpOs4QHA3FDNFv4QTKvyaEHrEcuBvPRCrdAucBtxrrNGgg op/mfzLwoDlDGw/qFr6bqGlbvL8AogexfVTOq67MPcCmnXck4bxujPI+JEFFYbQt jAza4JfTnM9+W6EK38qvFUpbNzNTWJsQxq/xOQwrl5hy1+JsiUpst+jPYVekcCbq ILc7riHYdoRrxMJfpSHUT4w9mRQOP17dFLmdfjLkhiP52RzxwIQS6qOYp6ytAyC7 o4OhVsJtAuOJiAjunTjzjq75OHGxeb1+bhSiy5weeEUp3fXrhXNeI8ghwZG/sY6e KIcb3MxPz6FrNw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:28:42 2026 by rpki-client