$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer File: 5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer (raw, json) Hash identifier: IEW+XlpdatuOmB1eXivockTr/W1L8v9l7O0nH9tcc8w= Subject key identifier: 5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08C77959FC52F0431C929AF0F3937900B39E3902 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.mft caRepository: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 16:18:14 +0000 Certificate not after: Tue 23 Mar 2027 16:23:14 +0000 Subordinate resources: AS: 61756 IP: 131.100.72.0/22 IP: 2804:1be8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c7:79:59:fc:52:f0:43:1c:92:9a:f0:f3:93:79:00:b3:9e:39:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 16:18:14 2026 GMT Not After : Mar 23 16:23:14 2027 GMT Subject: CN=5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:6b:e7:4c:ec:9b:00:b4:34:8c:f1:61:5e: 2d:a1:40:30:82:01:59:4a:e2:25:44:70:79:5f:6b: ac:c3:fd:c3:a5:21:7d:98:82:d5:64:67:11:fe:dd: 95:ef:e5:3e:55:ce:eb:59:a9:ce:c9:83:d0:1a:9e: a3:73:cd:d6:a5:6b:85:eb:5f:4e:6f:dc:20:43:81: 9a:17:db:32:28:2a:62:b1:25:b3:6f:df:31:23:eb: 81:20:f0:03:a8:a2:c6:48:b5:6e:c8:7f:98:5a:5a: 9b:8d:72:9b:52:e3:0d:ec:e7:b0:93:b2:f6:41:18: 8c:8a:9e:8f:51:c5:3e:a2:a1:da:5e:b6:c1:01:45: 76:f9:a2:d1:7b:0c:df:52:17:1b:ee:d9:62:93:4a: f8:18:b3:83:b5:73:9a:76:5c:6d:3b:f9:17:95:4c: 19:aa:c5:97:c0:ea:2f:1a:f9:bb:32:11:93:ab:ae: d2:be:1c:29:c5:77:ed:15:f6:79:2f:ca:43:32:44: 9e:2b:61:50:e4:ab:41:f9:61:95:69:37:56:94:22: f0:2e:ae:53:16:b4:c1:65:e0:f8:d1:85:1c:c4:c1: 71:16:6f:45:ac:f0:03:26:4b:20:64:f6:3b:9a:04: 10:cf:5c:c0:17:aa:c6:fa:9a:1d:2a:6b:a9:27:8e: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.72.0/22 IPv6: 2804:1be8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61756 Signature Algorithm: sha256WithRSAEncryption 40:2d:99:7f:fd:a7:69:e4:4b:31:f4:d3:ab:dc:16:5e:c9:ee: f9:22:b5:58:fc:9a:98:29:ca:5c:34:1b:bb:f4:bd:24:84:36: e9:b5:df:fb:e5:d7:6d:6b:14:9b:e9:90:5d:5c:23:fd:d8:3a: a3:c2:36:e1:66:f6:eb:c2:5c:7f:b9:fa:01:b1:c5:77:6c:fc: 6f:db:1a:60:86:a7:22:4c:12:ab:ec:59:e1:56:5e:bb:c0:49: c0:fc:71:95:1e:8c:ad:fc:97:80:bf:61:03:58:70:18:5e:8d: 57:7f:34:2c:85:cb:fc:51:e1:28:3e:f0:05:80:74:91:2b:30: e0:1d:e2:d0:af:cd:82:c1:a0:50:02:cf:a3:da:24:3a:fe:6d: 55:95:1f:1a:83:fd:27:1e:2d:a5:09:da:a3:bb:96:be:dd:6c: 22:62:b2:ee:f3:e0:7d:12:a6:21:d0:d5:63:36:16:5a:b2:ba: 18:09:2e:67:51:ed:fa:9e:b8:34:fd:94:f0:9b:23:66:c3:3f: f3:a8:3a:ff:b4:ae:65:ca:88:03:3d:0d:c4:ab:7b:b9:0a:13: 2b:d0:96:17:36:5e:93:b1:7b:a7:93:10:af:ac:5f:db:bb:e8: 6c:6d:4f:20:cf:33:3c:a3:f5:de:69:cb:0d:1e:06:18:82:56: ec:bb:4e:44 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCMd5WfxS8EMckprw85N5ALOeOQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxNjE4MTRaFw0yNzAzMjMxNjIzMTRaMDMxMTAvBgNV BAMTKDVCRDU0REJCOUIxQ0IyOEQxNEEyMDZENUFFOUI4RkU4MzA3NzRENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiWvnTOybALQ0jPFhXi2hQDCC AVlK4iVEcHlfa6zD/cOlIX2YgtVkZxH+3ZXv5T5VzutZqc7Jg9AanqNzzdala4Xr X05v3CBDgZoX2zIoKmKxJbNv3zEj64Eg8AOoosZItW7If5haWpuNcptS4w3s57CT svZBGIyKno9RxT6iodpetsEBRXb5otF7DN9SFxvu2WKTSvgYs4O1c5p2XG07+ReV TBmqxZfA6i8a+bsyEZOrrtK+HCnFd+0V9nkvykMyRJ4rYVDkq0H5YZVpN1aUIvAu rlMWtMFl4PjRhRzEwXEWb0Ws8AMmSyBk9juaBBDPXMAXqsb6mh0qa6knjuy5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRb1U27mxyyjRSi BtWum4/oMHdNXDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1FY djdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NR WHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAvNUJE NTREQkI5QjFDQjI4RDE0QTIwNkQ1QUU5QjhGRTgzMDc3NEQ1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2RIMA0EAgACMAcDBQAoBBvoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxPDANBgkqhkiG9w0BAQsFAAOCAQEAQC2Zf/2naeRLMfTT q9wWXsnu+SK1WPyamCnKXDQbu/S9JIQ26bXf++XXbWsUm+mQXVwj/dg6o8I24Wb2 68Jcf7n6AbHFd2z8b9saYIanIkwSq+xZ4VZeu8BJwPxxlR6MrfyXgL9hA1hwGF6N V380LIXL/FHhKD7wBYB0kSsw4B3i0K/NgsGgUALPo9okOv5tVZUfGoP9Jx4tpQna o7uWvt1sImKy7vPgfRKmIdDVYzYWWrK6GAkuZ1Ht+p64NP2U8JsjZsM/86g6/7Su ZcqIAz0NxKt7uQoTK9CWFzZek7F7p5MQr6xf27vobG1PIM8zPKP13mnLDR4GGIJW 7LtORA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:07 2026 by rpki-client