$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer File: 45FC107BB0B6654452677B1D69CD570ED537BDB4.cer (raw, json) Hash identifier: JSEl1UOKDjwWliD9n0jWj6HF5akQ8hCuzW/e6Oxd3vk= Subject key identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5C5FD87107CCA549D1A85A89F04C6CC90D45FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft caRepository: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 18:35:08 +0000 Certificate not after: Tue 11 May 2027 18:40:08 +0000 Subordinate resources: AS: 263069 IP: 168.0.128.0/22 IP: 186.233.56.0/22 IP: 2804:2cdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:d8:71:07:cc:a5:49:d1:a8:5a:89:f0:4c:6c:c9:0d:45:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 18:35:08 2026 GMT Not After : May 11 18:40:08 2027 GMT Subject: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:bc:0b:fe:74:80:1c:c3:1f:4f:2d:45:c3: 5d:59:df:81:39:60:59:05:02:3b:a6:1e:30:d6:6b: 5d:a7:3c:f6:3b:38:da:70:cb:d5:7a:3b:38:d4:df: ba:eb:75:ac:7e:a9:bc:df:c8:10:bf:e5:97:1c:4b: 76:be:30:25:c6:d6:ea:f8:51:f6:ee:9f:0d:b1:49: 24:cc:1b:ea:92:86:c6:a9:6a:ee:a6:ff:6b:59:46: d0:52:bb:79:91:ce:97:d1:48:0b:28:38:55:55:fc: 5d:69:ec:d2:d7:ae:45:65:9e:e0:71:06:66:56:6b: f1:ce:f3:bd:c2:96:a9:b8:12:59:f5:aa:63:eb:06: 84:bd:7a:3e:2c:71:ce:77:88:16:00:e4:b0:0c:7c: f0:5d:2c:bf:22:a9:b8:cb:9b:95:3b:49:c7:8e:f0: 27:9b:55:a0:d9:00:ac:d8:45:f9:65:3b:59:35:86: 8d:51:56:de:7d:90:70:90:a1:0e:89:56:e3:b8:96: 57:a9:c9:a6:f6:86:4c:48:df:65:10:cd:ae:f9:38: b7:86:79:f7:86:38:bc:92:98:ed:37:60:58:94:f9: 16:8e:8d:e5:ca:62:ea:cb:7a:76:21:31:04:67:d8: ea:95:40:07:61:7a:33:91:b0:07:ae:60:c9:61:df: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.128.0/22 186.233.56.0/22 IPv6: 2804:2cdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263069 Signature Algorithm: sha256WithRSAEncryption 89:a0:c9:7e:5d:6c:0d:67:19:76:3b:f3:c7:78:f6:22:75:76: 16:7c:86:88:18:8e:d9:69:15:02:63:12:86:e0:b6:7f:e7:72: 6a:14:8b:b6:77:3b:d8:ce:cc:f7:f3:2c:96:cc:a9:83:fc:b1: db:16:c3:36:c1:34:f3:c3:50:0d:a4:e4:df:97:ac:99:39:95: 3b:76:de:07:4b:22:d8:22:7c:cb:ba:6c:af:35:98:a3:14:af: bf:92:8a:e5:06:5d:08:4d:9f:fa:24:6c:6f:1f:b7:a5:2e:0f: ba:09:df:63:7b:b2:81:97:75:92:88:84:c3:2d:ed:9e:cb:d9: fd:7f:ea:5a:78:cc:31:d3:7b:cd:d0:28:a5:45:42:d7:b2:a8: 29:d2:47:48:df:12:37:f5:ec:32:67:18:85:ad:29:23:83:39: 88:09:78:2a:d2:93:37:4e:5a:03:10:3c:41:88:0a:43:fb:65: ac:a6:cd:bc:98:b6:f8:06:f8:08:cd:4e:3a:f3:e8:8e:df:6f: 00:44:4b:7b:47:ae:f2:e7:7e:af:fc:54:46:ae:93:34:80:13: 6f:3f:d6:68:45:6b:9a:34:10:2c:de:79:0b:88:d8:89:e7:9f: 9c:55:71:7c:95:e9:2e:3c:35:06:3a:24:9d:42:f1:9b:38:2d: 44:a5:5a:4f -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgITXF/YcQfMpUnRqFqJ8ExsyQ1F/jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI2MDUxMjE4MzUwOFoXDTI3MDUxMTE4NDAwOFowMzExMC8GA1UE AxMoNDVGQzEwN0JCMEI2NjU0NDUyNjc3QjFENjlDRDU3MEVENTM3QkRCNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN8PvAv+dIAcwx9PLUXDXVnfgTlg WQUCO6YeMNZrXac89js42nDL1Xo7ONTfuut1rH6pvN/IEL/llxxLdr4wJcbW6vhR 9u6fDbFJJMwb6pKGxqlq7qb/a1lG0FK7eZHOl9FICyg4VVX8XWns0teuRWWe4HEG ZlZr8c7zvcKWqbgSWfWqY+sGhL16PixxzneIFgDksAx88F0svyKpuMublTtJx47w J5tVoNkArNhF+WU7WTWGjVFW3n2QcJChDolW47iWV6nJpvaGTEjfZRDNrvk4t4Z5 94Y4vJKY7TdgWJT5Fo6N5cpi6st6diExBGfY6pVAB2F6M5GwB65gyWHf4hsCAwEA AaOCA0AwggM8MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEX8EHuwtmVEUmd7 HWnNVw7VN720MB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GV0FZ alcxVU16WUM0VHBqek42dFd2UzM3SDJiaXBLZndVN0tEQjNHZ1pYMS8xLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRldB WWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2daWDEvMS80NUZD MTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKoAIADBAK66TgwDQQCAAIwBwMFACgELNwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAOdMA0GCSqGSIb3DQEBCwUAA4IBAQCJoMl+XWwN Zxl2O/PHePYidXYWfIaIGI7ZaRUCYxKG4LZ/53JqFIu2dzvYzsz38yyWzKmD/LHb FsM2wTTzw1ANpOTfl6yZOZU7dt4HSyLYInzLumyvNZijFK+/korlBl0ITZ/6JGxv H7elLg+6Cd9je7KBl3WSiITDLe2ey9n9f+paeMwx03vN0CilRULXsqgp0kdI3xI3 9ewyZxiFrSkjgzmICXgq0pM3TloDEDxBiApD+2Wsps28mLb4BvgIzU468+iO328A REt7R67y536v/FRGrpM0gBNvP9ZoRWuaNBAs3nkLiNiJ55+cVXF8lekuPDUGOiSd QvGbOC1EpVpP -----END CERTIFICATE-----Generated at Wed May 13 15:16:24 2026 by rpki-client