$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FED93D6166517B9CCA7BDF8E41D6309C8D9BCDC.cer File: 4FED93D6166517B9CCA7BDF8E41D6309C8D9BCDC.cer (raw, json) Hash identifier: WjfzHqTkiIBH4KjubGI0VqFlBoPYwIHpZnTUFSi0jeQ= Subject key identifier: 4F:ED:93:D6:16:65:17:B9:CC:A7:BD:F8:E4:1D:63:09:C8:D9:BC:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B0CAA9E6F2C3702D30BEBB296FBF6FAB3122384 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/4FED93D6166517B9CCA7BDF8E41D6309C8D9BCDC.mft caRepository: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 14:02:25 +0000 Certificate not after: Tue 23 Mar 2027 14:07:25 +0000 Subordinate resources: AS: 270254 IP: 45.191.40.0/22 IP: 2804:6930::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0c:aa:9e:6f:2c:37:02:d3:0b:eb:b2:96:fb:f6:fa:b3:12:23:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 14:02:25 2026 GMT Not After : Mar 23 14:07:25 2027 GMT Subject: CN=4FED93D6166517B9CCA7BDF8E41D6309C8D9BCDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:a8:6d:36:b1:8e:70:68:d7:2f:5e:07:c1: 74:45:c7:94:50:7f:68:97:df:26:bb:8c:24:26:19: 14:ea:59:c5:83:52:a9:6f:42:de:a2:52:a5:2e:86: 7e:aa:3d:c2:de:94:ad:b1:21:03:ce:79:a8:5a:4f: 7e:4b:95:0b:a2:29:32:c3:fb:53:eb:b0:ee:18:48: 4b:d4:8e:71:f6:da:6f:09:0f:2a:0f:31:fb:6e:cd: 78:a5:4a:b1:1b:86:57:04:0b:09:d1:d2:53:47:44: d2:26:51:fe:4e:9c:1c:e5:0c:b4:5b:77:80:71:64: 29:18:84:38:fd:88:85:85:66:bf:d8:6e:93:80:12: f1:02:41:d7:30:63:cb:52:b0:f6:9e:6e:21:32:9c: 52:15:9e:72:89:fa:62:0c:13:54:38:a2:11:e2:9c: 1e:74:c3:5f:53:3c:da:33:04:62:09:8a:48:75:e0: c8:95:32:40:ae:d7:70:a7:7b:88:6b:75:29:7c:cc: 88:f7:aa:1f:c3:a9:7b:2c:97:6e:b7:58:c0:69:27: 3d:c9:5b:bd:ae:f9:2a:2c:e5:f2:bb:f3:a9:6d:96: 4b:20:00:b8:80:11:93:a2:64:59:8c:26:66:2f:49: 71:7c:dd:20:c5:e2:30:de:27:2d:04:9e:3f:27:dd: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:ED:93:D6:16:65:17:B9:CC:A7:BD:F8:E4:1D:63:09:C8:D9:BC:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/4FED93D6166517B9CCA7BDF8E41D6309C8D9BCDC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.40.0/22 IPv6: 2804:6930::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270254 Signature Algorithm: sha256WithRSAEncryption 2e:b0:af:ab:08:11:4c:3c:92:da:21:f5:ca:5c:4e:39:65:29: c7:13:ac:7f:c9:7e:b5:b1:74:47:d6:d4:bb:f0:d0:59:77:12: ef:1f:5f:de:25:5a:51:ea:fa:77:ab:9b:c3:ef:f2:8d:aa:0a: d2:ed:5e:57:9c:48:ad:9f:98:bd:0d:e1:81:45:95:de:63:22: 52:47:72:be:e7:11:4f:af:8f:4e:d4:9a:66:88:cc:e9:61:e4: 37:cc:28:c7:ac:ca:5a:83:86:2c:28:26:9b:9a:1c:28:49:a6: ad:15:ed:34:ed:84:16:75:7a:37:82:b7:68:32:83:04:fc:6d: 8f:f9:1b:b1:68:63:bf:27:40:8e:49:81:c8:e6:37:60:23:3b: aa:99:f9:c3:dc:de:6c:07:7e:61:da:62:32:d4:fe:e6:5b:65: 93:0c:73:a4:72:4c:54:d7:2a:88:d1:97:ff:24:35:9f:bb:90: 8c:3c:88:be:f4:b6:e0:e3:30:ca:05:98:db:d8:29:54:7b:7c: 31:00:50:90:8a:1a:86:42:32:88:5d:1f:12:a8:03:1f:18:1f: 3a:84:28:af:b0:7e:67:81:91:36:0d:f9:76:49:c2:93:5e:96: e0:63:b2:ef:c7:ad:03:58:51:67:b3:24:6d:2c:5f:d8:1c:2f: d5:c4:e1:74 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUWwyqnm8sNwLTC+uylvv2+rMSI4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxNDAyMjVaFw0yNzAzMjMxNDA3MjVaMDMxMTAvBgNV BAMTKDRGRUQ5M0Q2MTY2NTE3QjlDQ0E3QkRGOEU0MUQ2MzA5QzhEOUJDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40KhtNrGOcGjXL14HwXRFx5RQ f2iX3ya7jCQmGRTqWcWDUqlvQt6iUqUuhn6qPcLelK2xIQPOeahaT35LlQuiKTLD +1PrsO4YSEvUjnH22m8JDyoPMftuzXilSrEbhlcECwnR0lNHRNImUf5OnBzlDLRb d4BxZCkYhDj9iIWFZr/YbpOAEvECQdcwY8tSsPaebiEynFIVnnKJ+mIME1Q4ohHi nB50w19TPNozBGIJikh14MiVMkCu13Cne4hrdSl8zIj3qh/DqXssl263WMBpJz3J W72u+Sos5fK786ltlksgALiAEZOiZFmMJmYvSXF83SDF4jDeJy0Enj8n3QLHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP7ZPWFmUXucyn vfjkHWMJyNm83DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWER2 YnFUOEZnaFBCeDVQTE5aRVAzZDJ3azQ3eDdaNmRvQ2dYVjhpa2ZLcy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWER2 YnFUOEZnaFBCeDVQTE5aRVAzZDJ3azQ3eDdaNmRvQ2dYVjhpa2ZLcy8wLzRGRUQ5 M0Q2MTY2NTE3QjlDQ0E3QkRGOEU0MUQ2MzA5QzhEOUJDREMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2/KDANBAIAAjAHAwUAKARpMDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEH64wDQYJKoZIhvcNAQELBQADggEBAC6wr6sIEUw8ktoh9cpc TjllKccTrH/JfrWxdEfW1Lvw0Fl3Eu8fX94lWlHq+nerm8Pv8o2qCtLtXlecSK2f mL0N4YFFld5jIlJHcr7nEU+vj07UmmaIzOlh5DfMKMesylqDhiwoJpuaHChJpq0V 7TTthBZ1ejeCt2gygwT8bY/5G7FoY78nQI5JgcjmN2AjO6qZ+cPc3mwHfmHaYjLU /uZbZZMMc6RyTFTXKojRl/8kNZ+7kIw8iL70tuDjMMoFmNvYKVR7fDEAUJCKGoZC MohdHxKoAx8YHzqEKK+wfmeBkTYN+XZJwpNeluBjsu/HrQNYUWezJG0sX9gcL9XE 4XQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:53:54 2026 by rpki-client