$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer File: 5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer (raw, json) Hash identifier: zHbgHvYcmT1qsMCkPiELa9L2eRMIIETcVw5fE55nb0Y= Subject key identifier: 52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2901C56AC79350D44FAA1F0CA65E7A4B3AB75B9E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.mft caRepository: rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 15:40:46 +0000 Certificate not after: Fri 19 Mar 2027 15:45:46 +0000 Subordinate resources: AS: 262463 IP: 45.169.68.0/22 IP: 177.53.80.0/21 IP: 186.249.24.0/21 IP: 2804:f1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:01:c5:6a:c7:93:50:d4:4f:aa:1f:0c:a6:5e:7a:4b:3a:b7:5b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 15:40:46 2026 GMT Not After : Mar 19 15:45:46 2027 GMT Subject: CN=5259EBF7121D2082AF3146252CEDBEC0A195A8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:36:d6:ab:b3:4c:96:64:87:73:e8:94:c3: 0a:ab:10:eb:e0:a3:b2:3e:18:41:c9:a5:e4:5b:77: fa:63:16:67:b9:67:4c:6e:81:1c:34:1c:57:b2:ef: d0:03:16:12:87:03:9a:ca:1a:a1:d6:ff:16:b1:a6: ff:7e:67:91:dd:5a:77:ff:0b:bb:9b:86:61:fa:50: c8:98:77:8a:4f:76:d5:6f:4a:f0:68:a3:1a:2a:9a: 6c:63:db:70:33:1e:fb:ed:2b:42:02:de:6d:49:1c: d7:62:f6:74:d3:ec:a8:0d:58:16:01:75:b6:93:be: 0d:db:7c:ee:80:40:20:1d:74:25:7c:64:78:e2:bb: 4a:1f:35:6e:31:e4:91:9c:c2:ad:7d:d1:71:13:c6: 2b:12:4e:71:f9:9a:db:82:af:1f:68:7b:3a:ab:32: e6:04:a0:0e:01:2c:93:0a:e8:47:02:c6:cd:ac:02: e6:01:f8:5a:cd:34:55:66:e0:e3:87:72:62:bf:7c: da:84:ad:08:80:5a:0c:56:4e:4f:42:0a:f5:5d:b8: f6:b3:e5:83:cc:44:71:9c:7f:2c:19:2c:5a:37:f8: 1c:77:bb:5a:b1:bb:22:eb:7f:7b:39:86:fb:98:74: 74:ec:5c:49:ea:bf:38:bc:ec:04:3d:89:f4:94:a4: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.68.0/22 177.53.80.0/21 186.249.24.0/21 IPv6: 2804:f1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262463 Signature Algorithm: sha256WithRSAEncryption 82:55:30:65:af:7b:a1:a7:87:c6:fa:77:62:5f:a1:46:de:ad: 3d:d7:20:ac:14:5b:76:5f:bd:2d:6b:27:0e:29:f1:15:d1:49: 60:ec:34:78:9c:c3:8e:a4:3a:71:b9:27:f8:b2:cb:05:80:18: 57:d4:63:e1:ae:eb:ac:49:f8:76:c8:91:ac:90:47:bc:19:45: c6:5c:45:6e:b6:9c:d2:a7:9d:1b:f7:98:e4:ef:fd:c0:e5:d3: 0b:7e:2c:80:21:ca:78:24:ac:e5:a4:9c:98:78:66:a6:a0:4c: 71:7e:59:23:fc:41:30:d8:c2:a7:a8:08:5a:b6:7c:73:03:dd: 7e:3d:86:87:3d:9b:b1:d6:ed:a7:1c:d6:d0:a2:e2:16:2f:dd: 59:27:dd:be:f9:49:7e:92:c1:f9:a5:90:6a:08:f4:17:e8:e9: 68:07:b6:3e:d8:68:33:50:bc:b7:a4:69:d1:da:23:95:1e:ed: 97:3a:5d:37:29:4d:76:75:26:e7:38:72:1a:15:fd:c3:8a:4d: d5:b0:e5:86:fb:67:92:5e:49:4f:00:17:68:4b:b7:90:66:57: 0d:18:a3:f2:87:97:a4:18:30:6d:25:d0:44:5e:8b:88:65:c5: 59:12:23:33:8e:af:29:57:e5:2b:d0:a4:43:44:b7:7d:bd:51: 41:46:13:5d -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUKQHFaseTUNRPqh8Mpl56Szq3W54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAxNTQwNDZaFw0yNzAzMTkxNTQ1NDZaMDMxMTAvBgNV BAMTKDUyNTlFQkY3MTIxRDIwODJBRjMxNDYyNTJDRURCRUMwQTE5NUE4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLzbWq7NMlmSHc+iUwwqrEOvg o7I+GEHJpeRbd/pjFme5Z0xugRw0HFey79ADFhKHA5rKGqHW/xaxpv9+Z5HdWnf/ C7ubhmH6UMiYd4pPdtVvSvBooxoqmmxj23AzHvvtK0IC3m1JHNdi9nTT7KgNWBYB dbaTvg3bfO6AQCAddCV8ZHjiu0ofNW4x5JGcwq190XETxisSTnH5mtuCrx9oezqr MuYEoA4BLJMK6EcCxs2sAuYB+FrNNFVm4OOHcmK/fNqErQiAWgxWTk9CCvVduPaz 5YPMRHGcfywZLFo3+Bx3u1qxuyLrf3s5hvuYdHTsXEnqvzi87AQ9ifSUpAq3AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSWev3Eh0ggq8x RiUs7b7AoZWo9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRE5N dm9hM3VSSjR4U1AxZjFSTE1md2FERFJYVTlnNnhtdmoyVnFOakh6Y1cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RO TXZvYTN1Uko0eFNQMWYxUkxNZndhRERSWFU5ZzZ4bXZqMlZxTmpIemNXLzAvNTI1 OUVCRjcxMjFEMjA4MkFGMzE0NjI1MkNFREJFQzBBMTk1QThGNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLalEAwQDsTVQAwQDuvkYMA0EAgACMAcDBQAoBA8c MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBPzANBgkqhkiG9w0BAQsFAAOCAQEA glUwZa97oaeHxvp3Yl+hRt6tPdcgrBRbdl+9LWsnDinxFdFJYOw0eJzDjqQ6cbkn +LLLBYAYV9Rj4a7rrEn4dsiRrJBHvBlFxlxFbrac0qedG/eY5O/9wOXTC34sgCHK eCSs5aScmHhmpqBMcX5ZI/xBMNjCp6gIWrZ8cwPdfj2Ghz2bsdbtpxzW0KLiFi/d WSfdvvlJfpLB+aWQagj0F+jpaAe2PthoM1C8t6Rp0dojlR7tlzpdNylNdnUm5zhy GhX9w4pN1bDlhvtnkl5JTwAXaEu3kGZXDRij8oeXpBgwbSXQRF6LiGXFWRIjM46v KVflK9CkQ0S3fb1RQUYTXQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:00 2026 by rpki-client