$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer File: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer (raw, json) Hash identifier: 0CecRlBKMmm4hwgOMkrkfUInC18APXOnSsRAZ5fl+24= Subject key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 665D9FD2DC0158BC999BED6D1F815C3E19E6B149 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft caRepository: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 20:27:24 +0000 Certificate not after: Tue 23 Mar 2027 20:32:24 +0000 Subordinate resources: AS: 263582 IP: 131.255.204.0/22 IP: 168.196.80.0/22 IP: 179.109.80.0/21 IP: 2804:f60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 02:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5d:9f:d2:dc:01:58:bc:99:9b:ed:6d:1f:81:5c:3e:19:e6:b1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 20:27:24 2026 GMT Not After : Mar 23 20:32:24 2027 GMT Subject: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:ff:d2:c7:1e:7c:27:f7:ac:33:65:8d:e0: d5:f1:51:8f:68:ed:66:2c:69:d6:e8:3d:83:08:9d: 01:9a:02:3e:51:cd:ce:c3:01:67:67:c1:fd:71:da: 99:ca:b0:1b:f8:8e:a0:25:1c:86:c0:6c:d9:dd:6a: 10:38:8b:9a:97:70:81:db:2d:04:09:2d:f5:57:f1: 5f:d0:16:a8:16:bc:0b:74:ff:cc:72:fe:b7:fd:4e: 1e:9b:5d:ad:5d:24:17:50:b1:2e:72:18:1c:66:3c: 98:49:28:9f:8b:4e:0a:ab:02:ae:02:f5:4f:8a:8e: 6a:a2:c1:14:f9:bd:d1:59:44:50:ce:0d:15:7b:63: 53:a4:24:aa:f2:22:c3:d1:f8:90:c2:38:65:c5:15: 43:99:f2:78:c6:a4:b4:5b:4b:60:e8:25:75:c2:64: b2:b7:e1:90:5e:96:c7:5f:98:db:3f:3c:a8:b5:7a: 93:cf:21:b5:12:45:64:0c:05:31:a3:10:26:3c:cc: 40:7d:11:eb:29:7f:32:ec:60:77:9e:9f:e7:63:b6: 26:ed:ae:f7:2c:2d:64:f5:bb:88:06:40:40:4c:6a: f3:ec:14:99:ea:99:92:47:53:09:99:50:38:4c:ec: ce:9b:be:c8:a1:1b:30:8e:78:c8:36:6b:8d:44:16: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.204.0/22 168.196.80.0/22 179.109.80.0/21 IPv6: 2804:f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263582 Signature Algorithm: sha256WithRSAEncryption dc:90:85:6d:d8:e0:b4:74:4a:ae:0a:aa:15:d7:37:ad:43:70: c2:f2:60:de:6a:d9:e8:0a:1b:71:2e:d9:fc:03:b9:59:35:92: d6:3b:ee:69:4b:86:34:ec:b5:4f:80:93:c7:82:6a:ec:18:d6: 32:cf:c7:c8:19:71:42:4b:74:6e:8a:64:93:e1:d7:27:48:ac: 87:17:db:6f:00:6c:39:d0:3a:9b:de:ff:dd:aa:1d:f5:af:8d: 31:11:66:08:df:25:69:3f:c9:6d:4c:2b:10:67:01:65:c9:51: df:e2:0b:28:de:b9:db:9b:00:67:32:99:62:32:19:47:69:c1: cd:d8:e7:15:28:a6:93:0c:0b:15:83:80:c7:eb:2d:30:fb:41: b3:a2:06:0e:e9:fd:98:1f:ad:9e:5a:73:80:03:b4:58:47:57: b4:49:82:cf:8b:6d:9b:71:68:a6:fa:5f:06:65:de:37:89:a1: f7:df:08:0f:1e:22:03:09:a8:92:c3:24:96:78:00:65:e7:5a: 4b:5c:e4:1b:4d:88:d2:2e:31:a9:30:ea:71:0f:55:24:0a:8b: 0d:c4:48:83:31:8e:20:29:1a:f6:bb:20:92:48:ca:ba:5a:50: eb:8d:75:00:0d:03:1b:8e:bc:18:b6:fb:d6:e7:f7:85:05:12: 84:cb:9a:93 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUZl2f0twBWLyZm+1tH4FcPhnmsUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQyMDI3MjRaFw0yNzAzMjMyMDMyMjRaMDMxMTAvBgNV BAMTKDQzNzMwMjFBMTAxOTUzN0MyQTlEODRGRjAzNzIwQjBFQ0Y0RUJCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsf//Sxx58J/esM2WN4NXxUY9o 7WYsadboPYMInQGaAj5Rzc7DAWdnwf1x2pnKsBv4jqAlHIbAbNndahA4i5qXcIHb LQQJLfVX8V/QFqgWvAt0/8xy/rf9Th6bXa1dJBdQsS5yGBxmPJhJKJ+LTgqrAq4C 9U+KjmqiwRT5vdFZRFDODRV7Y1OkJKryIsPR+JDCOGXFFUOZ8njGpLRbS2DoJXXC ZLK34ZBelsdfmNs/PKi1epPPIbUSRWQMBTGjECY8zEB9EespfzLsYHeen+djtibt rvcsLWT1u4gGQEBMavPsFJnqmZJHUwmZUDhM7M6bvsihGzCOeMg2a41EFvf/AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDcwIaEBlTfCqd hP8DcgsOz067UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVNH YjlvU3h1ekVjNGNjUHVEelV0czM3QVVNb21iaHRYNTFQZTI1czk4RmgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlT R2I5b1N4dXpFYzRjY1B1RHpVdHMzN0FVTW9tYmh0WDUxUGUyNXM5OEZoLzEvNDM3 MzAyMUExMDE5NTM3QzJBOUQ4NEZGMDM3MjBCMEVDRjRFQkI1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCg//MAwQCqMRQAwQDs21QMA0EAgACMAcDBQAoBA9g MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFnjANBgkqhkiG9w0BAQsFAAOCAQEA 3JCFbdjgtHRKrgqqFdc3rUNwwvJg3mrZ6AobcS7Z/AO5WTWS1jvuaUuGNOy1T4CT x4Jq7BjWMs/HyBlxQkt0bopkk+HXJ0ishxfbbwBsOdA6m97/3aod9a+NMRFmCN8l aT/JbUwrEGcBZclR3+ILKN6525sAZzKZYjIZR2nBzdjnFSimkwwLFYOAx+stMPtB s6IGDun9mB+tnlpzgAO0WEdXtEmCz4ttm3FopvpfBmXeN4mh998IDx4iAwmoksMk lngAZedaS1zkG02I0i4xqTDqcQ9VJAqLDcRIgzGOICka9rsgkkjKulpQ6411AA0D G468GLb71uf3hQUShMuakw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:02 2026 by rpki-client