$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer File: 391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer (raw, json) Hash identifier: Ix41ikI9DhlJCIN8o5/Bg3/V0yXo+ZC78XvgxPK0L2E= Subject key identifier: 39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AF8902BA6E9C634DC33CC7F6FE6C1BDEB0514EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.mft caRepository: rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Mar 2026 18:31:43 +0000 Certificate not after: Wed 17 Mar 2027 18:36:43 +0000 Subordinate resources: AS: 265029 IP: 170.84.24.0/22 IP: 2804:31a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f8:90:2b:a6:e9:c6:34:dc:33:cc:7f:6f:e6:c1:bd:eb:05:14:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 18 18:31:43 2026 GMT Not After : Mar 17 18:36:43 2027 GMT Subject: CN=391282C4F59DDE74999B174E8FDB2EB861BF7A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:fc:84:80:4f:5d:4f:a2:6d:cd:ee:8e:fa: 49:5d:04:0e:e8:62:4c:95:94:26:ef:b6:9a:fe:3a: 78:4e:bb:b6:d8:a6:ef:2e:8b:64:48:23:10:c1:a5: b0:4d:98:66:30:70:34:0c:00:b8:37:29:6c:a9:64: e5:ac:f0:f1:11:d9:fe:64:29:3f:32:84:15:b5:ab: e9:bc:9d:65:69:87:6a:19:47:24:d2:7d:5f:f1:d0: 92:10:83:de:cb:7e:d4:8b:78:a2:d9:df:62:33:07: ae:4f:3d:58:14:af:c8:32:52:77:0a:33:12:ed:05: 88:1f:a5:16:7b:d1:69:bd:f2:95:0f:6b:b8:e5:01: 21:43:bf:16:48:bd:51:30:20:d7:9a:1e:22:af:48: 85:43:0f:3c:0c:5c:51:34:38:1a:53:a9:82:dd:ee: b7:39:30:0a:0d:e3:90:c0:4b:ad:29:cf:e5:31:ef: f5:22:53:ac:0e:5f:ee:65:2d:01:b9:5f:8b:f1:de: e5:2d:77:d9:ec:f5:36:7c:a7:a4:77:32:8a:41:d9: c0:4f:6c:20:04:db:b6:da:bb:e7:bf:31:26:17:f0: f8:14:4b:69:48:20:9d:ad:d7:db:c9:54:31:11:96: bb:ed:29:36:1d:dc:fd:00:80:8c:0f:0c:c4:14:65: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.24.0/22 IPv6: 2804:31a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265029 Signature Algorithm: sha256WithRSAEncryption bb:b9:88:7c:aa:72:69:40:9f:4e:8c:c7:de:bf:19:5b:ce:d5: a0:5f:f4:72:2f:71:00:d5:ce:c0:f7:15:1d:ac:d4:0d:4c:ad: 14:76:df:da:f0:fd:6a:73:d8:1b:44:bf:13:1a:0a:e0:73:1b: 1e:61:13:b8:a0:66:20:e1:85:b6:a8:4f:71:e0:6e:22:46:11: af:28:c5:17:e3:73:32:37:ec:a1:df:5d:45:7c:3f:0d:9e:95: e5:ba:ca:12:2c:1b:b9:eb:79:a1:9a:bb:60:ad:9a:b4:02:7c: a2:32:31:43:6e:57:b3:5c:bd:d2:ed:3e:0c:11:97:d3:3c:bb: 78:ed:3d:45:48:80:e8:ce:25:64:d0:45:69:7d:65:30:af:f9: f9:ba:74:d2:9d:ce:79:26:af:5b:52:14:8c:bc:a9:a1:d0:c3: 11:88:20:93:9a:38:ee:9e:25:01:7c:08:a0:75:50:35:6e:61: c2:0e:43:13:d3:81:4f:b2:56:f8:cf:fd:64:5b:bf:69:ad:1c: f8:26:2c:a2:0d:34:7b:13:66:ea:51:e2:98:aa:80:6a:de:7f: 83:e2:f1:f0:d7:4a:29:c3:91:f5:bf:9c:69:2e:07:22:b4:17: 17:aa:d7:48:a4:32:57:5d:61:36:77:cd:7b:91:16:a5:b8:5e: c6:5c:f2:7e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKviQK6bpxjTcM8x/b+bBvesFFOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTgxODMxNDNaFw0yNzAzMTcxODM2NDNaMDMxMTAvBgNV BAMTKDM5MTI4MkM0RjU5RERFNzQ5OTlCMTc0RThGREIyRUI4NjFCRjdBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXPyEgE9dT6Jtze6O+kldBA7o YkyVlCbvtpr+OnhOu7bYpu8ui2RIIxDBpbBNmGYwcDQMALg3KWypZOWs8PER2f5k KT8yhBW1q+m8nWVph2oZRyTSfV/x0JIQg97LftSLeKLZ32IzB65PPVgUr8gyUncK MxLtBYgfpRZ70Wm98pUPa7jlASFDvxZIvVEwINeaHiKvSIVDDzwMXFE0OBpTqYLd 7rc5MAoN45DAS60pz+Ux7/UiU6wOX+5lLQG5X4vx3uUtd9ns9TZ8p6R3MopB2cBP bCAE27bau+e/MSYX8PgUS2lIIJ2t19vJVDERlrvtKTYd3P0AgIwPDMQUZb/pAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5EoLE9Z3edJmb F06P2y64Yb96jDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Fn RkZ4NzRZR3RQR3FvOFJTM0Z0eTFDalR4ZXBpUFIxeVlKNnN2cXFlVEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dx Z0ZGeDc0WUd0UEdxbzhSUzNGdHkxQ2pUeGVwaVBSMXlZSjZzdnFxZVRKLzAvMzkx MjgyQzRGNTlEREU3NDk5OUIxNzRFOEZEQjJFQjg2MUJGN0E4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlQYMA0EAgACMAcDBQAoBDGoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLRTANBgkqhkiG9w0BAQsFAAOCAQEAu7mIfKpyaUCfTozH 3r8ZW87VoF/0ci9xANXOwPcVHazUDUytFHbf2vD9anPYG0S/ExoK4HMbHmETuKBm IOGFtqhPceBuIkYRryjFF+NzMjfsod9dRXw/DZ6V5brKEiwbuet5oZq7YK2atAJ8 ojIxQ25Xs1y90u0+DBGX0zy7eO09RUiA6M4lZNBFaX1lMK/5+bp00p3OeSavW1IU jLypodDDEYggk5o47p4lAXwIoHVQNW5hwg5DE9OBT7JW+M/9ZFu/aa0c+CYsog00 exNm6lHimKqAat5/g+Lx8NdKKcOR9b+caS4HIrQXF6rXSKQyV11hNnfNe5EWpbhe xlzyfg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:21 2026 by rpki-client