$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer File: 5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer (raw, json) Hash identifier: F78SAr7cG62vV1M1hY6GQz2izJ6BUF4qMh0LoKwIhzA= Subject key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DDFAA5E62165AAC8468463BF393C446CC8D0059 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft caRepository: rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 17:40:49 +0000 Certificate not after: Tue 16 Mar 2027 17:45:49 +0000 Subordinate resources: AS: 28652 IP: 143.255.48.0/22 IP: 177.47.32.0/19 IP: 177.155.96.0 -- 177.155.101.255 IP: 177.155.108.0/22 IP: 187.60.112.0/20 IP: 189.90.176.0/20 IP: 201.76.128.0/20 IP: 2804:45c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:df:aa:5e:62:16:5a:ac:84:68:46:3b:f3:93:c4:46:cc:8d:00:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 17 17:40:49 2026 GMT Not After : Mar 16 17:45:49 2027 GMT Subject: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:a2:7f:e0:95:f7:38:dd:37:ab:59:a3:be: ed:8c:cb:d6:55:94:a7:f7:8c:1c:7c:ba:18:9c:73: a1:fc:b9:4d:68:fa:d6:d6:75:7b:ae:fc:cf:ab:8e: 4f:76:18:12:f6:73:de:10:5d:d7:e2:58:cd:a3:82: e6:d3:11:8a:c2:89:cf:0f:bd:77:c7:2c:a6:4c:ad: dd:74:e1:8d:79:13:37:17:47:48:fc:30:55:45:47: f4:aa:b9:66:8e:85:2c:4f:1d:2d:25:8d:4b:40:9f: 7c:f9:26:6b:2a:51:10:2b:31:15:4a:e6:59:61:45: 60:0f:b8:8c:7c:71:b5:a9:d8:4b:11:24:5c:46:34: 0a:c5:2e:bb:d8:34:9c:6d:2d:e5:3a:22:fc:0d:e7: 30:79:cc:1b:f8:8c:56:83:d8:91:30:73:22:ee:01: ba:59:0d:aa:16:d9:b2:85:10:23:1b:db:14:d4:2c: 1a:a5:ea:2f:14:cc:60:17:ea:20:af:7d:05:84:d7: 2f:46:df:4e:d0:9a:61:70:2e:2d:83:f7:5b:ab:54: 44:9b:81:4f:55:c6:b9:15:38:5c:bf:1e:9f:b0:c1: 23:3e:6a:3b:76:12:c5:dd:e0:64:8d:52:49:86:02: 9a:17:05:f7:fc:d4:53:c3:2b:ab:ec:36:52:4c:e4: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.48.0/22 177.47.32.0/19 177.155.96.0-177.155.101.255 177.155.108.0/22 187.60.112.0/20 189.90.176.0/20 201.76.128.0/20 IPv6: 2804:45c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28652 Signature Algorithm: sha256WithRSAEncryption 99:d6:2f:9a:f9:8f:57:42:d8:c4:13:b3:81:95:ac:f5:07:57: ac:bb:21:8a:77:3e:bb:f1:f2:d5:0d:f7:32:42:59:14:19:cd: 0f:5b:32:ab:db:3a:fc:fd:22:67:55:b5:2e:16:90:5a:0d:71: 54:59:6e:f0:3a:0a:e6:03:20:d4:9d:a0:02:bb:00:89:18:6e: 14:df:a5:fb:b8:a0:5b:20:c6:ed:4f:72:6e:9b:37:b8:a6:9b: cb:5c:b5:e2:a0:59:f7:ff:52:29:40:9c:5e:8a:d5:86:2a:06: 0b:74:7a:be:8a:6b:94:24:de:45:88:3a:e7:a7:2c:07:3b:50: c3:e5:85:c5:99:b9:31:da:97:a9:32:c5:ae:94:f0:a2:e7:15: a5:3b:52:62:5f:5f:3f:bb:ab:8a:6b:d1:d8:a9:21:96:e9:13: ea:76:98:c1:b2:29:2f:4a:e2:1f:2c:7d:46:4b:e9:dc:85:10: a2:8e:da:99:32:a2:a7:00:52:ad:ff:c6:b5:1f:27:a5:4d:bf: fe:f8:39:cb:b4:da:d5:af:fb:df:d7:b1:31:d0:9a:1d:04:b1: f5:70:08:12:1a:eb:94:d0:8e:6a:28:7d:2a:d2:35:36:81:98: 8f:f4:7b:70:51:61:0a:ea:87:d0:40:28:58:88:bc:65:67:22: 86:25:6f:7e -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUHd+qXmIWWqyEaEY785PERsyNAFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTcxNzQwNDlaFw0yNzAzMTYxNzQ1NDlaMDMxMTAvBgNV BAMTKDVFQUU1REVDQzRFOUZGQzQzNTdBOTA3RTQ0NjQwRUQ0MDRDMkNGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhaJ/4JX3ON03q1mjvu2My9ZV lKf3jBx8uhicc6H8uU1o+tbWdXuu/M+rjk92GBL2c94QXdfiWM2jgubTEYrCic8P vXfHLKZMrd104Y15EzcXR0j8MFVFR/SquWaOhSxPHS0ljUtAn3z5JmsqURArMRVK 5llhRWAPuIx8cbWp2EsRJFxGNArFLrvYNJxtLeU6IvwN5zB5zBv4jFaD2JEwcyLu AbpZDaoW2bKFECMb2xTULBql6i8UzGAX6iCvfQWE1y9G307QmmFwLi2D91urVESb gU9VxrkVOFy/Hp+wwSM+ajt2EsXd4GSNUkmGApoXBff81FPDK6vsNlJM5GfZAgMB AAGjggNlMIIDYTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRerl3sxOn/xDV6 kH5EZA7UBMLP6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDkx ZXBxWVhlaGN6dHpBc0dvQ3B3WGZQcm1yQlBlbVQ0QXZQemhIRktGUngvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q5 MWVwcVlYZWhjenR6QXNHb0Nwd1hmUHJtckJQZW1UNEF2UHpoSEZLRlJ4LzAvNUVB RTVERUNDNEU5RkZDNDM1N0E5MDdFNDQ2NDBFRDQwNEMyQ0ZFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEH AQH/BEswSTA4BAIAATAyAwQCj/8wAwQFsS8gMAwDBAWxm2ADBAGxm2QDBAKxm2wD BAS7PHADBAS9WrADBATJTIAwDQQCAAIwBwMFACgEBFwwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICb+wwDQYJKoZIhvcNAQELBQADggEBAJnWL5r5j1dC2MQTs4GVrPUH V6y7IYp3Prvx8tUN9zJCWRQZzQ9bMqvbOvz9ImdVtS4WkFoNcVRZbvA6CuYDINSd oAK7AIkYbhTfpfu4oFsgxu1Pcm6bN7imm8tcteKgWff/UilAnF6K1YYqBgt0er6K a5Qk3kWIOuenLAc7UMPlhcWZuTHal6kyxa6U8KLnFaU7UmJfXz+7q4pr0dipIZbp E+p2mMGyKS9K4h8sfUZL6dyFEKKO2pkyoqcAUq3/xrUfJ6VNv/74Ocu02tWv+9/X sTHQmh0EsfVwCBIa65TQjmoofSrSNTaBmI/0e3BRYQrqh9BAKFiIvGVnIoYlb34= -----END CERTIFICATE-----Generated at Wed Mar 25 22:28:43 2026 by rpki-client