$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer File: 68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer (raw, json) Hash identifier: xwERYPcIGUPNLHTbyS/U7If9mrHfuc2sar+6ldYNxls= Subject key identifier: 68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03A1782066D368BEB50391FF0B728BEB19F285DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft caRepository: rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 08:20:17 +0000 Certificate not after: Wed 24 Mar 2027 08:25:17 +0000 Subordinate resources: AS: 268245 IP: 45.236.204.0/22 IP: 2804:4e30::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a1:78:20:66:d3:68:be:b5:03:91:ff:0b:72:8b:eb:19:f2:85:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 08:20:17 2026 GMT Not After : Mar 24 08:25:17 2027 GMT Subject: CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:1e:f6:c3:b3:c0:df:7a:27:61:f4:cf:30: a0:17:f7:5a:55:d8:3b:85:01:19:cc:16:d1:10:05: 2a:52:a0:10:46:b6:7c:54:bd:2e:14:f0:b0:7c:90: 10:2c:e8:71:63:04:b5:99:5a:3e:8e:8e:db:00:36: a5:ce:5f:c7:31:75:00:76:1c:ea:1f:5d:47:51:03: 01:52:b9:65:55:94:34:01:f2:8a:24:b2:37:8e:38: b0:2b:db:93:c1:ae:c1:08:0f:66:5f:52:3b:f1:9b: 2d:06:0c:dd:af:57:44:e1:e2:68:16:51:08:4d:4a: 47:56:e1:bb:73:9b:00:9a:2d:8b:a2:27:22:0e:e5: 6b:01:15:11:d0:ac:00:d9:ce:19:39:2f:63:44:7f: 41:b7:bc:a9:2e:90:5c:e0:dc:1b:c8:de:3a:c8:ad: e7:4d:3c:8a:e4:42:a2:81:ed:11:bf:12:ad:ac:c6: a4:72:20:bc:82:64:9c:ef:ba:02:00:91:38:32:15: 0a:bf:c8:31:6b:ab:07:32:f4:ba:ab:27:bb:15:59: 62:4c:94:8b:2d:3f:be:f4:82:52:d3:89:93:6c:90: 2d:85:60:22:cd:71:58:fa:d6:b4:d6:67:e7:b1:b2: 9b:77:23:21:65:33:46:4c:61:47:d5:c7:d8:a7:95: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.204.0/22 IPv6: 2804:4e30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268245 Signature Algorithm: sha256WithRSAEncryption 29:10:7c:46:a7:ca:aa:75:ca:5f:5f:27:a9:92:81:bf:2f:f7: 2e:d2:2c:ff:6a:4d:d5:a7:2f:b8:70:fe:5c:6a:1b:9b:5e:8e: 51:c6:02:94:da:66:9b:59:d8:9a:fe:f4:67:de:41:e2:41:98: a2:15:d3:9b:61:b3:3e:a9:7a:06:cb:2c:6c:d3:97:b7:29:a5: 62:85:65:6a:ae:88:c7:65:a2:7e:77:35:3d:2e:29:9e:5b:d0: 94:f9:58:99:b0:a3:5d:5f:14:fd:a3:82:57:f6:0d:6e:02:f9: 00:06:3d:8e:55:13:aa:30:56:9f:6d:8e:b8:5b:65:e3:00:1c: f7:e1:30:1d:8a:98:9c:5d:8c:d2:80:91:fa:6c:cf:f5:99:40: 60:a5:8e:42:fd:4f:11:69:a8:09:6a:28:39:0f:06:1c:51:3f: 6b:f7:37:35:9e:c0:76:73:c0:08:76:7f:a0:22:c2:a1:03:dd: 91:a0:65:14:7b:93:b6:3f:99:a1:12:41:b6:e2:82:ba:09:31: 1d:27:23:0a:aa:21:c7:3b:1a:c8:d5:7a:e1:e9:bd:16:d0:b1: aa:aa:fc:48:c7:62:8f:62:37:78:b4:5f:6c:8e:35:de:76:c8: c9:81:39:01:0f:f0:e7:9a:37:42:7e:94:13:7c:1b:33:27:18: 0d:c8:99:72 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUA6F4IGbTaL61A5H/C3KL6xnyhd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUwODIwMTdaFw0yNzAzMjQwODI1MTdaMDMxMTAvBgNV BAMTKDY4MzgxMjgyRUU4REE0QzAwNEJENjMzMjlCOEYzOUNCMTdGODVDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7R72w7PA33onYfTPMKAX91pV 2DuFARnMFtEQBSpSoBBGtnxUvS4U8LB8kBAs6HFjBLWZWj6OjtsANqXOX8cxdQB2 HOofXUdRAwFSuWVVlDQB8ooksjeOOLAr25PBrsEID2ZfUjvxmy0GDN2vV0Th4mgW UQhNSkdW4btzmwCaLYuiJyIO5WsBFRHQrADZzhk5L2NEf0G3vKkukFzg3BvI3jrI redNPIrkQqKB7RG/Eq2sxqRyILyCZJzvugIAkTgyFQq/yDFrqwcy9LqrJ7sVWWJM lIstP770glLTiZNskC2FYCLNcVj61rTWZ+exspt3IyFlM0ZMYUfVx9inlT3HAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoOBKC7o2kwAS9 YzKbjznLF/hcDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGd0 NGpXTkxhZURHQ21uTHJuNk5LeWNkamQ2ZFZKdFZYOEh1TjhoeVpBemEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hn dDRqV05MYWVER0NtbkxybjZOS3ljZGpkNmRWSnRWWDhIdU44aHlaQXphLzAvNjgz ODEyODJFRThEQTRDMDA0QkQ2MzMyOUI4RjM5Q0IxN0Y4NUMwQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLezMMA0EAgACMAcDBQAoBE4wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX1TANBgkqhkiG9w0BAQsFAAOCAQEAKRB8RqfKqnXKX18n qZKBvy/3LtIs/2pN1acvuHD+XGobm16OUcYClNpmm1nYmv70Z95B4kGYohXTm2Gz Pql6BsssbNOXtymlYoVlaq6Ix2Wifnc1PS4pnlvQlPlYmbCjXV8U/aOCV/YNbgL5 AAY9jlUTqjBWn22OuFtl4wAc9+EwHYqYnF2M0oCR+mzP9ZlAYKWOQv1PEWmoCWoo OQ8GHFE/a/c3NZ7AdnPACHZ/oCLCoQPdkaBlFHuTtj+ZoRJBtuKCugkxHScjCqoh xzsayNV64em9FtCxqqr8SMdij2I3eLRfbI413nbIyYE5AQ/w55o3Qn6UE3wbMycY DciZcg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:13 2026 by rpki-client