$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer File: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer (raw, json) Hash identifier: ONsutPbBRZrhAqeeXKGDt9F97GVvMkThXOUmzvdC6OQ= Subject key identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 63AF696672A0060F727E07022060E8A60B3D317A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft caRepository: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 18:01:25 +0000 Certificate not after: Wed 10 Mar 2027 18:06:25 +0000 Subordinate resources: AS: 274809 IP: 2804:93ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:af:69:66:72:a0:06:0f:72:7e:07:02:20:60:e8:a6:0b:3d:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 11 18:01:25 2026 GMT Not After : Mar 10 18:06:25 2027 GMT Subject: CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:8e:f8:95:c4:82:2a:88:06:f4:01:7c:3b: a8:81:04:a9:43:fa:ab:8c:5e:f0:c4:e2:89:63:86: 2d:aa:49:ca:b1:d6:7b:81:1e:30:0a:ad:43:9f:2b: a7:cd:9d:ab:2e:4c:18:dd:d0:28:1d:62:ee:3b:83: 64:04:cb:40:f6:8b:29:18:ce:e4:1a:cf:61:10:79: b0:a0:c2:3c:a6:8a:8e:6e:10:6a:41:ba:4d:4c:3b: 32:67:ef:9e:5e:f0:09:2d:94:6d:f4:52:3a:73:9f: 66:7d:33:04:16:c6:ba:ed:91:fa:6b:c2:2b:49:7d: 20:6d:d4:19:f3:a2:a0:ed:00:ab:77:6c:e6:af:b1: 73:ea:ae:06:c3:2f:36:3b:46:2c:98:a2:d5:2f:d9: fc:5a:47:6f:8a:bd:26:07:c5:fe:01:f8:21:9b:ec: 35:45:a4:c2:50:52:cb:af:08:89:9a:44:99:77:7d: 7a:9b:4e:af:d7:f5:5f:fc:12:ba:13:11:9f:47:09: 2c:4c:51:1d:40:0d:c8:ea:73:43:83:09:0e:c4:f3: 45:93:25:0d:eb:ea:48:f6:5b:35:85:b6:cc:0c:5a: 20:2c:65:23:5a:4f:c3:f6:ae:92:31:a5:b9:52:a0: 02:b9:ab:b7:fb:e6:89:46:0b:f1:83:fb:1b:b0:a4: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:93ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274809 Signature Algorithm: sha256WithRSAEncryption db:3e:bb:5a:69:b5:a5:df:ae:a8:eb:74:09:59:93:de:1d:dc: 3a:ec:09:ea:02:8b:c2:59:a7:68:e2:c6:af:8e:fa:5b:90:6c: 6c:c9:a2:95:c6:d2:8b:e1:53:e0:fd:dd:a9:d9:05:5d:4d:74: 35:8b:2b:4c:aa:3e:9d:e8:cc:bd:25:12:42:60:a8:86:c8:5d: cc:10:c0:5a:69:aa:b1:a5:ad:cc:1b:55:d0:11:51:54:63:c9: 8a:3e:e9:10:62:eb:91:37:6e:3c:8b:09:81:65:d6:c9:29:8f: 3c:93:40:6c:06:91:e5:f6:13:91:80:64:9c:1a:1a:cc:2a:fb: c7:38:63:1f:c8:1c:88:6e:b4:5d:38:cf:54:9b:c1:d0:bf:22: ec:31:9d:50:43:b6:1d:5f:c2:97:d8:58:c6:da:03:2a:5a:54: c4:e0:0a:0d:a4:89:1a:0e:35:5a:55:63:ea:e6:fc:c6:ec:3f: 4d:3d:96:63:37:98:bb:22:dc:d7:54:cd:bb:29:17:0e:23:82: 76:00:b1:69:9c:4c:b6:16:36:c5:57:e2:58:45:f2:d2:9e:c1: 98:82:6b:66:01:4f:b9:de:69:22:2f:4e:07:a7:7a:3b:5e:a6: 72:0d:28:3e:00:d1:9a:6b:ec:e9:5a:92:04:77:81:57:f2:4f: 51:45:d5:9e -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUY69pZnKgBg9yfgcCIGDopgs9MXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTExODAxMjVaFw0yNzAzMTAxODA2MjVaMDMxMTAvBgNV BAMTKDQ5NTNGQ0YyQ0I3OTIwMkI3QTNCRjVBMjg5QzU2RUQyNkVDMEJBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtq474lcSCKogG9AF8O6iBBKlD +quMXvDE4oljhi2qScqx1nuBHjAKrUOfK6fNnasuTBjd0CgdYu47g2QEy0D2iykY zuQaz2EQebCgwjymio5uEGpBuk1MOzJn755e8AktlG30Ujpzn2Z9MwQWxrrtkfpr witJfSBt1BnzoqDtAKt3bOavsXPqrgbDLzY7RiyYotUv2fxaR2+KvSYHxf4B+CGb 7DVFpMJQUsuvCImaRJl3fXqbTq/X9V/8EroTEZ9HCSxMUR1ADcjqc0ODCQ7E80WT JQ3r6kj2WzWFtswMWiAsZSNaT8P2rpIxpblSoAK5q7f75olGC/GD+xuwpB+9AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJU/zyy3kgK3o7 9aKJxW7SbsC6ozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Jq Q1pjMUIxU3I4NEN0SnZRaXVGNWhTR3BQVldGeDVyY3J6Z045bnhTQVEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dy akNaYzFCMVNyODRDdEp2UWl1RjVoU0dwUFZXRng1cmNyemdOOW54U0FRLzAvNDk1 M0ZDRjJDQjc5MjAyQjdBM0JGNUEyODlDNTZFRDI2RUMwQkFBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAST7DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MXkwDQYJKoZIhvcNAQELBQADggEBANs+u1pptaXfrqjrdAlZk94d3DrsCeoCi8JZ p2jixq+O+luQbGzJopXG0ovhU+D93anZBV1NdDWLK0yqPp3ozL0lEkJgqIbIXcwQ wFppqrGlrcwbVdARUVRjyYo+6RBi65E3bjyLCYFl1skpjzyTQGwGkeX2E5GAZJwa Gswq+8c4Yx/IHIhutF04z1SbwdC/IuwxnVBDth1fwpfYWMbaAypaVMTgCg2kiRoO NVpVY+rm/MbsP009lmM3mLsi3NdUzbspFw4jgnYAsWmcTLYWNsVX4lhF8tKewZiC a2YBT7neaSIvTgenejtepnINKD4A0Zpr7OlakgR3gVfyT1FF1Z4= -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:02 2026 by rpki-client