$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FEDBE9BFB25753B9586A42ADEEAB9E02CDE00D5.cer File: 5FEDBE9BFB25753B9586A42ADEEAB9E02CDE00D5.cer (raw, json) Hash identifier: TcfZMob2QlQ+mLaQEb5k9xlHY+HnPHwwr3OjVZ4YREI= Subject key identifier: 5F:ED:BE:9B:FB:25:75:3B:95:86:A4:2A:DE:EA:B9:E0:2C:DE:00:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C8A3D5552FDF026E095E2361342FFE3A76D29ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FUtMAnHWa4bDfw5oqi2XotNcAUZN3v1HU1gwzCcuoSc/0/5FEDBE9BFB25753B9586A42ADEEAB9E02CDE00D5.mft caRepository: rsync://rpki-repo.registro.br/repo/FUtMAnHWa4bDfw5oqi2XotNcAUZN3v1HU1gwzCcuoSc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 14:44:30 +0000 Certificate not after: Tue 23 Mar 2027 14:49:30 +0000 Subordinate resources: AS: 275670 IP: 2801:81:220::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8a:3d:55:52:fd:f0:26:e0:95:e2:36:13:42:ff:e3:a7:6d:29:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 14:44:30 2026 GMT Not After : Mar 23 14:49:30 2027 GMT Subject: CN=5FEDBE9BFB25753B9586A42ADEEAB9E02CDE00D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:6d:74:12:d7:f8:43:09:d3:e0:d1:df:bd: f2:29:a0:5c:63:25:a5:1e:39:63:71:2d:41:9f:b9: cb:b9:5b:b2:f8:1d:64:1c:0c:6c:a2:dd:2b:0f:d5: b5:a1:cd:4e:35:7b:c6:5e:a3:be:84:51:4d:98:4b: 04:60:0b:34:14:1d:5a:f0:86:46:36:3e:05:e2:8a: 8e:2d:37:25:da:b5:e0:80:16:53:e0:d6:a6:52:f6: 11:e8:30:5f:c2:7c:2a:e9:2d:9b:99:1c:df:31:18: 30:d8:17:d8:42:17:c1:8d:4b:e7:41:db:ed:f8:b0: 5a:ae:dc:93:23:90:5f:e6:a8:a2:f0:ff:bf:e7:bd: 26:26:db:c2:70:43:09:27:3c:26:22:87:91:a8:64: 18:1d:f6:eb:af:3c:7d:5b:1d:70:7f:be:5f:0d:e4: 7f:a3:92:99:ab:14:56:fc:ab:4b:f0:99:2e:2c:b4: 31:51:25:6b:fe:18:1c:4d:41:6b:83:16:fc:34:53: db:5b:5f:de:4e:78:bf:d0:2a:10:7d:1c:8d:08:63: ec:18:df:4a:b2:7f:79:e1:8f:4d:a6:90:c3:19:0d: 5e:bd:51:c6:47:13:91:4d:50:59:3e:fe:24:80:ac: 11:91:88:f3:e0:b2:fb:92:e1:c3:ac:70:0e:df:09: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:ED:BE:9B:FB:25:75:3B:95:86:A4:2A:DE:EA:B9:E0:2C:DE:00:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FUtMAnHWa4bDfw5oqi2XotNcAUZN3v1HU1gwzCcuoSc/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FUtMAnHWa4bDfw5oqi2XotNcAUZN3v1HU1gwzCcuoSc/0/5FEDBE9BFB25753B9586A42ADEEAB9E02CDE00D5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:81:220::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275670 Signature Algorithm: sha256WithRSAEncryption 1b:5b:28:85:14:86:15:e9:7b:c5:43:c8:1f:7d:d8:7a:47:8e: 27:8f:68:b0:eb:2c:d2:0c:d7:ea:f0:eb:96:6a:65:5a:42:ca: 57:84:2f:6a:23:ca:1b:95:3b:ef:13:8c:9e:f8:9d:70:4b:bd: 8c:e3:40:06:2d:26:96:b9:94:f8:4f:97:c2:b9:ea:7b:76:5c: b7:30:85:be:6a:c1:cc:db:27:4d:ca:3e:b9:cc:b8:a3:f8:cc: ac:98:80:41:b3:21:9b:a5:88:aa:80:78:48:46:37:1e:cb:16: e3:48:6c:30:6f:92:bf:e3:6c:ac:65:75:03:0d:30:ae:e1:18: d8:5f:23:ef:35:32:69:42:ed:23:6a:fc:ae:17:71:9b:b1:3a: a8:df:77:64:ea:9d:66:a2:aa:84:26:de:c1:d0:e0:97:60:03: d9:ac:55:5a:0b:ea:eb:01:e5:38:c9:70:3c:7c:30:f1:19:3e: 33:bf:a5:4e:67:0e:a7:a6:06:cd:1c:94:fe:f7:39:2a:85:ca: d9:9c:d4:c5:f7:e2:e2:fe:be:cf:7c:d1:33:d4:1c:d3:0f:01: e9:f6:41:dc:be:62:52:d4:a8:96:ed:cb:75:49:a0:ed:9b:f3: 40:de:0f:18:ca:f3:f1:2e:79:c2:3e:41:9b:65:da:a4:85:03: e0:71:ca:b4 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUDIo9VVL98CbgleI2E0L/46dtKe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxNDQ0MzBaFw0yNzAzMjMxNDQ5MzBaMDMxMTAvBgNV BAMTKDVGRURCRTlCRkIyNTc1M0I5NTg2QTQyQURFRUFCOUUwMkNERTAwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYMW10Etf4QwnT4NHfvfIpoFxj JaUeOWNxLUGfucu5W7L4HWQcDGyi3SsP1bWhzU41e8Zeo76EUU2YSwRgCzQUHVrw hkY2PgXiio4tNyXateCAFlPg1qZS9hHoMF/CfCrpLZuZHN8xGDDYF9hCF8GNS+dB 2+34sFqu3JMjkF/mqKLw/7/nvSYm28JwQwknPCYih5GoZBgd9uuvPH1bHXB/vl8N 5H+jkpmrFFb8q0vwmS4stDFRJWv+GBxNQWuDFvw0U9tbX95OeL/QKhB9HI0IY+wY 30qyf3nhj02mkMMZDV69UcZHE5FNUFk+/iSArBGRiPPgsvuS4cOscA7fCaYFAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf7b6b+yV1O5WG pCre6rngLN4A1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlV0 TUFuSFdhNGJEZnc1b3FpMlhvdE5jQVVaTjN2MUhVMWd3ekNjdW9TYy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlV0 TUFuSFdhNGJEZnc1b3FpMlhvdE5jQVVaTjN2MUhVMWd3ekNjdW9TYy8wLzVGRURC RTlCRkIyNTc1M0I5NTg2QTQyQURFRUFCOUUwMkNERTAwRDUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB /wQTMBEwDwQCAAIwCQMHACgBAIECIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME NNYwDQYJKoZIhvcNAQELBQADggEBABtbKIUUhhXpe8VDyB992HpHjiePaLDrLNIM 1+rw65ZqZVpCyleEL2ojyhuVO+8TjJ74nXBLvYzjQAYtJpa5lPhPl8K56nt2XLcw hb5qwczbJ03KPrnMuKP4zKyYgEGzIZuliKqAeEhGNx7LFuNIbDBvkr/jbKxldQMN MK7hGNhfI+81MmlC7SNq/K4XcZuxOqjfd2TqnWaiqoQm3sHQ4JdgA9msVVoL6usB 5TjJcDx8MPEZPjO/pU5nDqemBs0clP73OSqFytmc1MX34uL+vs980TPUHNMPAen2 Qdy+YlLUqJbty3VJoO2b80DeDxjK8/EuecI+QZtl2qSFA+BxyrQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:57 2026 by rpki-client