$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.cer File: 5D583209EF860E8AD53CFCC73569B5F879DA6ADF.cer (raw, json) Hash identifier: Mq+d1JoqD9JSX1IW+PoNSHQE0pQx2+UiRM4Kggj9axM= Subject key identifier: 5D:58:32:09:EF:86:0E:8A:D5:3C:FC:C7:35:69:B5:F8:79:DA:6A:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 9DA023B95693FD8D8EDEA5EE3FADA17426725E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.mft caRepository: rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 18:48:15 +0000 Certificate not after: Fri 05 Mar 2027 18:53:15 +0000 Subordinate resources: AS: 52692 IP: 170.246.136.0/22 IP: 177.72.220.0/22 IP: 2804:2ef8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9d:a0:23:b9:56:93:fd:8d:8e:de:a5:ee:3f:ad:a1:74:26:72:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:48:15 2026 GMT Not After : Mar 5 18:53:15 2027 GMT Subject: CN=5D583209EF860E8AD53CFCC73569B5F879DA6ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:b8:a1:05:b8:d2:c9:be:1e:29:5b:47:cc: e8:14:0c:7b:6d:0c:c3:09:8f:46:0f:a1:0d:2f:fd: 78:1b:e8:e5:dc:21:f3:2b:48:7a:94:73:22:cc:5a: c1:54:14:4c:b1:d7:2f:96:6f:6a:0d:53:d5:69:ea: 88:64:71:b0:a0:5b:de:ae:8c:1b:60:23:21:62:54: 96:33:2b:22:ff:da:a4:ec:9a:6e:64:30:e2:c3:62: 21:29:0d:ab:cd:26:de:d2:9e:c2:fc:01:31:0f:e3: 33:4c:38:25:1d:6c:93:7f:eb:f1:31:df:7f:e5:4f: db:90:0a:be:ea:95:29:79:9d:f3:74:95:88:e0:30: 8a:f3:2d:28:ad:fa:25:c1:95:2d:19:fc:86:00:b4: 33:c0:c7:1c:26:cc:74:d3:0f:aa:7e:21:b4:75:e7: 34:36:4c:22:39:c6:6c:fa:76:14:23:f9:35:74:19: 6e:0a:07:67:c2:c5:07:e4:fe:61:67:5c:37:2b:51: 71:78:88:e4:82:99:6a:6a:d1:ae:54:14:2b:04:73: 75:07:57:20:3b:6c:51:cd:67:98:dd:fd:55:88:9f: 6a:c9:3a:bc:c3:2a:c3:63:a1:ad:cd:6d:8f:e8:91: d6:33:75:62:21:a1:c4:f0:16:bb:c9:43:0a:29:24: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:58:32:09:EF:86:0E:8A:D5:3C:FC:C7:35:69:B5:F8:79:DA:6A:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.136.0/22 177.72.220.0/22 IPv6: 2804:2ef8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52692 Signature Algorithm: sha256WithRSAEncryption b7:3b:b5:69:e8:1b:77:64:1e:37:bd:8f:b7:eb:4a:bb:60:f7: 93:42:14:47:ec:16:6d:66:58:f9:6e:1c:2d:7e:c7:12:c5:07: 32:53:01:28:21:26:13:2c:5e:81:15:47:2e:3e:4b:0b:6b:3b: 41:11:68:3c:2f:33:08:28:aa:b6:fb:7c:e6:19:56:2d:f9:0a: dd:b2:b0:5a:a2:1f:9c:c5:8a:18:51:29:44:18:8d:99:d5:c3: 88:17:ac:be:e5:d9:76:a0:58:52:cc:ca:f3:77:4d:8c:f2:2e: 0b:bf:11:1d:4b:f7:32:bf:6c:9b:eb:43:b6:0f:88:3c:41:45: fa:f3:9b:0a:21:24:3d:3c:32:a7:5e:a9:b0:74:95:30:39:aa: 1a:9b:9b:3b:0d:d1:3c:3a:18:8b:f5:40:5f:f3:5f:fc:19:dd: 65:9f:90:54:1c:7f:4c:c5:bb:94:71:8e:81:28:1a:ae:f6:1f: 74:8f:0a:b7:f2:01:d5:47:50:5e:10:ba:12:e9:5e:52:a7:fa: 19:ff:40:04:4e:ef:81:b9:e5:57:c0:cb:71:2a:62:c9:ed:ce: 49:ae:6c:87:44:95:f3:e5:40:12:22:d2:c1:a1:bd:0b:c0:c4: 88:6b:4a:f7:79:0b:0c:6e:8d:9b:98:36:3d:10:13:61:e8:f1: 89:b4:8b:0e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAJ2gI7lWk/2Njt6l7j+toXQmcl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDYxODQ4MTVaFw0yNzAzMDUxODUzMTVaMDMxMTAvBgNV BAMTKDVENTgzMjA5RUY4NjBFOEFENTNDRkNDNzM1NjlCNUY4NzlEQTZBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDrihBbjSyb4eKVtHzOgUDHtt DMMJj0YPoQ0v/Xgb6OXcIfMrSHqUcyLMWsFUFEyx1y+Wb2oNU9Vp6ohkcbCgW96u jBtgIyFiVJYzKyL/2qTsmm5kMOLDYiEpDavNJt7SnsL8ATEP4zNMOCUdbJN/6/Ex 33/lT9uQCr7qlSl5nfN0lYjgMIrzLSit+iXBlS0Z/IYAtDPAxxwmzHTTD6p+IbR1 5zQ2TCI5xmz6dhQj+TV0GW4KB2fCxQfk/mFnXDcrUXF4iOSCmWpq0a5UFCsEc3UH VyA7bFHNZ5jd/VWIn2rJOrzDKsNjoa3NbY/okdYzdWIhocTwFrvJQwopJCWdAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdWDIJ74YOitU8 /Mc1abX4edpq3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2V3 cmE2WG1QNndFNHJQV0w2WkRSZWpFckVBQmpvUnEydnlIVGpKYmVXYmovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdl d3JhNlhtUDZ3RTRyUFdMNlpEUmVqRXJFQUJqb1JxMnZ5SFRqSmJlV2JqLzAvNUQ1 ODMyMDlFRjg2MEU4QUQ1M0NGQ0M3MzU2OUI1Rjg3OURBNkFERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvaIAwQCsUjcMA0EAgACMAcDBQAoBC74MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1DANBgkqhkiG9w0BAQsFAAOCAQEAtzu1aegb d2QeN72Pt+tKu2D3k0IUR+wWbWZY+W4cLX7HEsUHMlMBKCEmEyxegRVHLj5LC2s7 QRFoPC8zCCiqtvt85hlWLfkK3bKwWqIfnMWKGFEpRBiNmdXDiBesvuXZdqBYUszK 83dNjPIuC78RHUv3Mr9sm+tDtg+IPEFF+vObCiEkPTwyp16psHSVMDmqGpubOw3R PDoYi/VAX/Nf/BndZZ+QVBx/TMW7lHGOgSgarvYfdI8Kt/IB1UdQXhC6EuleUqf6 Gf9ABE7vgbnlV8DLcSpiye3OSa5sh0SV8+VAEiLSwaG9C8DEiGtK93kLDG6Nm5g2 PRATYejxibSLDg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:54 2026 by rpki-client