$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer File: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer (raw, json) Hash identifier: 9NLe/OoW0Rj6jHoNbFEFCl7dRaEaSiWQRKqGNk+yfko= Subject key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71D0FD7424531D3EEA6ACC8E8C7DD4B5B8B215BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft caRepository: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 03:43:54 +0000 Certificate not after: Sat 20 Mar 2027 03:48:54 +0000 Subordinate resources: AS: 274461 IP: 45.170.138.0/24 IP: 2804:947c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d0:fd:74:24:53:1d:3e:ea:6a:cc:8e:8c:7d:d4:b5:b8:b2:15:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 03:43:54 2026 GMT Not After : Mar 20 03:48:54 2027 GMT Subject: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:fa:f3:32:21:c5:19:e2:92:fb:76:9a:03: 28:e0:d6:58:30:f1:cc:b3:9e:a1:c3:ab:f2:a5:fb: 55:85:90:05:00:13:db:33:79:10:45:7d:e9:ef:10: 21:32:26:3b:ac:ba:fe:f6:d5:f0:fa:58:61:1e:80: 0f:49:79:f4:d6:0f:65:2d:78:fd:52:7a:67:e1:cd: 06:18:09:f4:84:9f:7d:20:a6:2b:da:01:b6:17:c8: 33:fd:df:52:11:2f:be:a3:fb:57:ca:cf:1a:ca:f3: 8f:08:d4:8c:6c:83:e1:fd:6a:c4:7b:93:a4:1a:e5: 22:82:27:5b:06:79:f2:e1:1c:de:f7:05:8d:30:99: f3:25:e4:00:a4:b2:97:62:ee:40:33:76:3f:dd:5a: 4e:2e:ab:58:79:40:3f:2b:82:c3:77:38:17:fb:0c: 2e:bc:88:7a:57:78:52:8a:8c:9e:b3:64:d6:29:da: a2:15:19:9a:f2:43:68:fb:41:36:8e:a0:e5:f9:ed: 40:e3:4c:d0:34:bf:a7:21:11:7d:bf:2b:e0:f9:1d: 55:f3:c1:05:a2:0e:17:08:6d:b9:3d:b3:1c:00:9f: 2d:53:af:2a:3e:7a:43:20:59:07:80:b1:d1:45:4b: 58:6b:4c:c5:d9:1f:ef:80:e9:cc:f9:76:46:9f:44: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.138.0/24 IPv6: 2804:947c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274461 Signature Algorithm: sha256WithRSAEncryption 65:5e:61:35:d9:3c:ae:ea:39:fd:16:55:15:e5:1e:e9:25:45: db:c3:de:d0:e6:7d:c5:b1:57:50:96:51:88:d5:88:68:cc:33: 15:36:93:64:19:b8:9a:c4:3f:f7:1b:81:df:2a:51:07:9f:47: c9:47:8c:bf:8d:62:cd:a6:7c:95:98:6c:12:b0:eb:a3:42:73: a6:54:5a:f1:59:87:dd:a6:0f:27:4b:77:ae:7b:cc:49:98:72: 9b:97:2e:22:e0:36:20:93:08:5d:55:25:d8:ce:e6:b4:ae:cc: 00:00:fd:d8:c5:e6:03:31:44:e9:6b:26:41:ba:6b:c4:d9:b7: 0b:1d:86:43:a3:f9:fb:61:52:7d:cf:13:1e:51:50:44:e4:4b: 97:cc:cc:f5:69:29:36:3a:a1:04:3c:ce:53:01:da:f1:e4:cc: b3:fa:f0:5d:12:9d:3e:e7:aa:69:ba:d6:b1:63:89:23:60:21: 53:97:1d:57:63:b0:c2:bc:c7:fa:12:b3:50:3c:28:9d:65:6d: 31:fb:f7:c7:95:82:b0:ea:8e:71:d7:9a:68:2b:01:75:2b:76: 15:06:88:1d:88:7c:06:92:65:a0:da:e0:f6:15:28:20:a2:6b: 8a:d6:eb:44:d8:0f:ba:84:ad:f7:22:8e:27:4d:67:aa:5c:2a: df:61:93:ae -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcdD9dCRTHT7qasyOjH3UtbiyFbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjEwMzQzNTRaFw0yNzAzMjAwMzQ4NTRaMDMxMTAvBgNV BAMTKDY3QjJBMzMzMzYyNTI1QzlFQ0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0frzMiHFGeKS+3aaAyjg1lgw 8cyznqHDq/Kl+1WFkAUAE9szeRBFfenvECEyJjusuv721fD6WGEegA9JefTWD2Ut eP1SemfhzQYYCfSEn30gpivaAbYXyDP931IRL76j+1fKzxrK848I1Ixsg+H9asR7 k6Qa5SKCJ1sGefLhHN73BY0wmfMl5ACkspdi7kAzdj/dWk4uq1h5QD8rgsN3OBf7 DC68iHpXeFKKjJ6zZNYp2qIVGZryQ2j7QTaOoOX57UDjTNA0v6chEX2/K+D5HVXz wQWiDhcIbbk9sxwAny1Tryo+ekMgWQeAsdFFS1hrTMXZH++A6cz5dkafRCJ7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnsqMzNiUlyezV rkexvRLh4vy8UzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOENk TnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25HQ3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhD ZE55VlFRNllWYmtubUVOd3NEdXNYWlBRY1JBcGRuWUtpUmgzdUNuR0N5LzAvNjdC MkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFFMkZDQkM1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQALaqKMA0EAgACMAcDBQAoBJR8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQwHTANBgkqhkiG9w0BAQsFAAOCAQEAZV5hNdk8ruo5/RZV FeUe6SVF28Pe0OZ9xbFXUJZRiNWIaMwzFTaTZBm4msQ/9xuB3ypRB59HyUeMv41i zaZ8lZhsErDro0JzplRa8VmH3aYPJ0t3rnvMSZhym5cuIuA2IJMIXVUl2M7mtK7M AAD92MXmAzFE6WsmQbprxNm3Cx2GQ6P5+2FSfc8THlFQRORLl8zM9WkpNjqhBDzO UwHa8eTMs/rwXRKdPueqabrWsWOJI2AhU5cdV2OwwrzH+hKzUDwonWVtMfv3x5WC sOqOcdeaaCsBdSt2FQaIHYh8BpJloNrg9hUoIKJritbrRNgPuoSt9yKOJ01nqlwq 32GTrg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:30:01 2026 by rpki-client