$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer File: 5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer (raw, json) Hash identifier: JDvuU/FxexklEQSlImrWu+PN97e8iUbOBOkN6HhWJB4= Subject key identifier: 5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 545C7AF631EB98FB9BD3B7F291AD6BC99B703F80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft caRepository: rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Mar 2026 17:16:56 +0000 Certificate not after: Tue 02 Mar 2027 17:21:56 +0000 Subordinate resources: AS: 26218 IP: 200.152.32.0/20 IP: 2804:23c0::/31 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:7a:f6:31:eb:98:fb:9b:d3:b7:f2:91:ad:6b:c9:9b:70:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 3 17:16:56 2026 GMT Not After : Mar 2 17:21:56 2027 GMT Subject: CN=5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:af:a9:e3:35:79:5c:aa:8e:56:ff:44:71: 90:5e:81:2e:08:57:14:c7:e7:07:9d:40:1a:6e:18: 84:1f:a3:72:b8:40:cc:33:90:01:ca:c2:9e:2c:4a: 55:40:af:64:f5:b2:71:12:72:d6:da:f1:57:7d:00: 7e:ab:67:f3:ca:27:d4:f4:f5:6b:8e:6d:70:22:9c: 5c:0c:ea:09:f8:d3:d1:68:d6:fb:76:95:cf:74:74: ec:cf:b2:04:21:fb:77:3c:74:ab:0c:a6:da:c8:1d: 73:f5:bc:dd:76:35:c6:98:9b:b6:f5:11:71:48:eb: 3c:db:08:c7:a1:69:9b:29:df:8f:c6:11:92:28:9b: b3:25:d8:b3:5a:cb:7e:02:a5:ba:4c:b6:7d:b9:b4: ca:43:f1:ad:56:de:82:23:d4:4f:eb:98:73:d3:d6: 40:f3:bc:e0:c5:a3:1a:7c:a3:5a:d9:43:b0:8b:f1: c1:46:5c:5c:81:f0:78:e4:4f:53:93:46:bb:13:79: 06:3b:fb:ea:51:7e:ad:2a:5e:52:75:b6:71:d5:c8: ad:59:86:5e:b3:fe:b1:48:fb:8e:a4:47:bd:de:00: 86:78:e5:8d:86:0f:32:65:be:b8:9b:21:f5:aa:4b: 51:17:1e:18:f7:3b:59:7b:95:10:4d:37:ec:a7:a1: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.32.0/20 IPv6: 2804:23c0::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26218 Signature Algorithm: sha256WithRSAEncryption 65:c4:bd:c6:60:a9:9a:35:7c:05:e4:50:01:07:ac:b5:34:36: 18:86:1b:64:4b:65:63:21:c5:8e:1b:43:cc:b8:5c:4f:26:74: 8a:e7:0f:92:b5:88:d5:b6:e4:e0:74:5f:b3:93:a9:8a:ed:97: ca:35:76:a7:07:b0:e3:2a:3e:1d:83:4d:60:51:a6:21:fc:45: fa:a8:3d:69:25:c4:41:00:d8:aa:00:4e:34:d4:f3:f0:5a:0d: 0a:86:65:70:5a:55:8c:95:a9:67:46:f7:dd:97:4e:ef:f1:f9: 82:a5:05:ba:e4:14:59:8d:ba:89:df:1a:a5:1a:e6:c9:f7:28: b3:e9:02:bd:56:c0:fb:14:9a:f5:cf:fc:19:6e:f2:77:6e:b2: 91:c5:66:57:4c:2b:11:5b:ef:cc:87:18:e8:c3:e4:51:ec:17: fc:1a:24:58:46:ba:2b:a4:78:61:a0:d1:47:c1:d0:f3:5c:6a: ab:53:fc:ca:86:a2:2c:ae:40:af:c4:fa:44:88:e2:de:6f:c1: ce:cf:46:b8:58:55:ec:10:4a:6e:4c:63:c7:70:bf:1f:35:1f: 33:bc:9a:c2:16:5a:c8:3c:40:af:b2:d6:ce:e1:ef:76:88:ee: f9:83:77:a4:06:14:b2:25:fb:4b:72:bb:92:63:17:52:95:ad: 8b:5e:4d:10 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUVFx69jHrmPub07fyka1ryZtwP4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDMxNzE2NTZaFw0yNzAzMDIxNzIxNTZaMDMxMTAvBgNV BAMTKDVEMTJBMTMxMkZCNUY3NUQ2Mjk1RkFCMkJENTY4QjRFRUI2RjVCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSa+p4zV5XKqOVv9EcZBegS4I VxTH5wedQBpuGIQfo3K4QMwzkAHKwp4sSlVAr2T1snESctba8Vd9AH6rZ/PKJ9T0 9WuObXAinFwM6gn409Fo1vt2lc90dOzPsgQh+3c8dKsMptrIHXP1vN12NcaYm7b1 EXFI6zzbCMehaZsp34/GEZIom7Ml2LNay34CpbpMtn25tMpD8a1W3oIj1E/rmHPT 1kDzvODFoxp8o1rZQ7CL8cFGXFyB8HjkT1OTRrsTeQY7++pRfq0qXlJ1tnHVyK1Z hl6z/rFI+46kR73eAIZ45Y2GDzJlvribIfWqS1EXHhj3O1l7lRBNN+ynofgjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdEqExL7X3XWKV +rK9VotO629bYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGlV bVpjWG5FTUhkbWVSVkZuZWY5dzRNODVzemZxZUdNcFg4QWlZbmRSeHovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rp VW1aY1huRU1IZG1lUlZGbmVmOXc0TTg1c3pmcWVHTXBYOEFpWW5kUnh6LzAvNUQx MkExMzEyRkI1Rjc1RDYyOTVGQUIyQkQ1NjhCNEVFQjZGNUI2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyJggMA0EAgACMAcDBQEoBCPAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAmZqMA0GCSqGSIb3DQEBCwUAA4IBAQBlxL3GYKmaNXwF5FAB B6y1NDYYhhtkS2VjIcWOG0PMuFxPJnSK5w+StYjVtuTgdF+zk6mK7ZfKNXanB7Dj Kj4dg01gUaYh/EX6qD1pJcRBANiqAE401PPwWg0KhmVwWlWMlalnRvfdl07v8fmC pQW65BRZjbqJ3xqlGubJ9yiz6QK9VsD7FJr1z/wZbvJ3brKRxWZXTCsRW+/Mhxjo w+RR7Bf8GiRYRrorpHhhoNFHwdDzXGqrU/zKhqIsrkCvxPpEiOLeb8HOz0a4WFXs EEpuTGPHcL8fNR8zvJrCFlrIPECvstbO4e92iO75g3ekBhSyJftLcruSYxdSla2L Xk0Q -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:55 2026 by rpki-client