$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer File: 358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer (raw, json) Hash identifier: bWYHfQDOGZR9sCbIVGK+UkcLUIv2gClgYzdcrGCqm9E= Subject key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B7C2FD1AFD06233F85491F20B0EFE887B2C204D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft caRepository: rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 11 May 2026 08:05:02 +0000 Certificate not after: Mon 10 May 2027 08:10:02 +0000 Subordinate resources: AS: 268901 IP: 45.175.108.0/22 IP: 2804:5c50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7c:2f:d1:af:d0:62:33:f8:54:91:f2:0b:0e:fe:88:7b:2c:20:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 11 08:05:02 2026 GMT Not After : May 10 08:10:02 2027 GMT Subject: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:8e:1c:90:8c:cd:39:fe:79:dc:82:93:af: 65:8d:20:04:f1:8d:7b:29:91:ab:59:14:ce:de:54: c2:66:30:23:7f:83:6e:01:ed:87:35:57:d4:9a:c7: 49:dd:47:e8:fd:01:59:f9:d9:2a:7f:d4:0e:95:c6: 54:06:c0:4b:25:64:d1:fe:8f:52:6e:02:09:28:7c: e1:f0:61:ef:70:7a:ab:66:30:73:a4:2a:c8:07:4f: 1b:11:da:6f:a9:40:74:67:6a:36:9f:44:d2:1e:76: 94:23:f7:21:f5:5c:9d:12:3c:a4:58:94:89:31:18: 14:94:5c:76:4d:65:df:e1:bd:a9:7a:c4:1d:ec:5c: be:44:32:84:c0:3b:23:5d:e1:82:da:ab:c1:a6:23: b5:61:15:29:62:4b:2d:58:8d:0c:31:16:ec:29:7f: 31:6c:02:92:df:a5:1a:2c:18:e2:e3:72:5a:9d:28: 9a:b5:70:de:43:d9:33:ac:ab:93:b0:a7:8f:45:44: 77:9c:7a:95:47:47:5b:30:03:57:8f:0a:db:52:17: f1:a3:ca:15:6b:2c:53:26:1a:7d:67:70:b5:a5:e7: c2:c5:b2:fc:44:fb:d2:19:52:7d:cb:f4:a6:74:15: 33:bf:c8:a9:bc:80:3e:c1:13:39:11:d8:ee:91:c3: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.108.0/22 IPv6: 2804:5c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268901 Signature Algorithm: sha256WithRSAEncryption 29:f1:f4:5a:70:ab:ba:eb:cd:3e:e0:40:3c:7f:0b:da:f8:8f: 41:3c:48:8d:71:3c:e1:a7:53:53:5d:12:41:64:18:9a:ff:6e: bf:1a:27:48:89:a9:24:f4:ff:2c:fd:00:8f:04:d2:13:bf:ec: 98:97:34:9a:82:7e:d7:7e:3e:ec:b5:8e:c5:5c:b4:86:e8:fc: 77:30:02:e2:5d:c1:28:02:bc:07:e2:48:4c:66:0c:da:38:96: 0f:60:99:e2:fb:76:71:3f:bb:d3:9b:4b:02:b1:28:6d:47:36: b6:5c:eb:07:93:7b:7f:48:b4:98:83:7f:27:d8:67:39:92:71: ed:6c:00:44:41:54:1f:55:42:bf:58:6a:99:07:38:26:9e:89: b9:bb:84:23:9d:21:ba:df:21:d1:9d:17:b4:10:c9:27:de:7c: 36:72:98:9b:80:d7:7b:1d:70:a9:7c:30:93:80:01:5f:15:ab: c5:41:56:63:f9:f1:75:86:d8:33:8c:5a:59:36:e1:38:17:39: 96:a2:83:b2:f3:95:42:44:7d:a1:0b:30:3f:5b:80:24:4f:30: 1d:f7:db:8f:0d:ad:ac:2d:43:a1:7b:dd:4b:41:f9:46:91:12: fc:db:1c:59:2a:2c:19:1b:d4:e8:2b:b3:ec:62:ee:4b:ba:ff: da:3b:58:4e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUS3wv0a/QYjP4VJHyCw7+iHssIE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTEwODA1MDJaFw0yNzA1MTAwODEwMDJaMDMxMTAvBgNV BAMTKDM1OEQwQ0JBMUFCQTIyNjJBM0FGRDVGODJDNjBFRjkyQkQ1ODdDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBo4ckIzNOf553IKTr2WNIATx jXspkatZFM7eVMJmMCN/g24B7Yc1V9Sax0ndR+j9AVn52Sp/1A6VxlQGwEslZNH+ j1JuAgkofOHwYe9weqtmMHOkKsgHTxsR2m+pQHRnajafRNIedpQj9yH1XJ0SPKRY lIkxGBSUXHZNZd/hval6xB3sXL5EMoTAOyNd4YLaq8GmI7VhFSliSy1YjQwxFuwp fzFsApLfpRosGOLjclqdKJq1cN5D2TOsq5Owp49FRHecepVHR1swA1ePCttSF/Gj yhVrLFMmGn1ncLWl58LFsvxE+9IZUn3L9KZ0FTO/yKm8gD7BEzkR2O6Rw1d9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1jQy6GroiYqOv 1fgsYO+SvVh8UTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3pQ d1RGZDVydXBlb0w2clI0dUttWTJCYnVkVHloZWhGM2ltNlVrcVZDR24vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N6 UHdURmQ1cnVwZW9MNnJSNHVLbVkyQmJ1ZFR5aGVoRjNpbTZVa3FWQ0duLzEvMzU4 RDBDQkExQUJBMjI2MkEzQUZENUY4MkM2MEVGOTJCRDU4N0M1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa9sMA0EAgACMAcDBQAoBFxQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaZTANBgkqhkiG9w0BAQsFAAOCAQEAKfH0WnCruuvNPuBA PH8L2viPQTxIjXE84adTU10SQWQYmv9uvxonSImpJPT/LP0AjwTSE7/smJc0moJ+ 134+7LWOxVy0huj8dzAC4l3BKAK8B+JITGYM2jiWD2CZ4vt2cT+705tLArEobUc2 tlzrB5N7f0i0mIN/J9hnOZJx7WwAREFUH1VCv1hqmQc4Jp6JubuEI50hut8h0Z0X tBDJJ958NnKYm4DXex1wqXwwk4ABXxWrxUFWY/nxdYbYM4xaWTbhOBc5lqKDsvOV QkR9oQswP1uAJE8wHffbjw2trC1DoXvdS0H5RpES/NscWSosGRvU6Cuz7GLuS7r/ 2jtYTg== -----END CERTIFICATE-----Generated at Wed May 13 15:53:07 2026 by rpki-client