$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer File: 68B41BBED51EE048421EC599A4F5A1921313EE8A.cer (raw, json) Hash identifier: H0QCOQDjmmmwZxU6aHzP0QybKi3WrJg+7f/ecFHaseo= Subject key identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A8D2D23EEEF6DBF7D8A2D9912F4AC78B319E5B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft caRepository: rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Mar 2026 13:03:23 +0000 Certificate not after: Wed 03 Mar 2027 13:08:23 +0000 Subordinate resources: AS: 264072 IP: 143.0.208.0/22 IP: 2804:2a6c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8d:2d:23:ee:ef:6d:bf:7d:8a:2d:99:12:f4:ac:78:b3:19:e5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 4 13:03:23 2026 GMT Not After : Mar 3 13:08:23 2027 GMT Subject: CN=68B41BBED51EE048421EC599A4F5A1921313EE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:a2:fd:a2:be:73:4a:f8:30:83:81:f7:10: be:28:43:ec:c9:e3:bd:f0:3f:45:a8:6e:0d:b4:9c: 10:a9:62:68:ff:06:f7:0b:f8:2b:ac:94:c0:fb:b6: f9:cb:9e:57:b2:47:f1:17:1d:f7:4b:83:57:b6:32: df:96:7c:b8:d1:04:2f:86:ea:73:01:16:09:81:21: 61:e7:b8:35:c7:14:eb:49:9b:cd:03:aa:73:68:68: b0:48:b5:cf:ac:b1:5f:2d:34:6b:cc:cc:d1:10:47: ae:d3:80:5e:b1:99:5a:98:29:71:94:10:e6:9c:84: 33:84:78:5f:29:2e:0a:cd:0a:09:06:e8:04:cc:c3: 2c:77:08:d2:96:95:e9:c7:16:94:36:00:a0:08:38: 92:67:69:a3:9a:a9:52:9f:26:f8:cb:95:a0:82:ae: 14:75:ed:a9:ad:42:29:ee:3d:56:d0:bf:9c:6b:4a: 7b:76:ed:ae:af:09:f6:32:0d:8f:ef:57:6f:e0:01: 3c:dc:3b:98:9b:6b:4b:2c:d0:4a:31:57:9e:74:9b: ea:50:0a:eb:8d:a6:9a:34:cb:96:b2:ec:61:98:97: 45:22:f2:8d:52:6d:aa:06:1b:50:74:c0:c7:9d:ff: 2f:bc:f9:ff:5c:90:2a:83:c6:37:99:b7:56:80:04: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.208.0/22 IPv6: 2804:2a6c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264072 Signature Algorithm: sha256WithRSAEncryption 6e:8f:8c:b9:46:48:f5:1a:c7:e6:7c:91:c3:b2:de:d0:e9:45: 00:2d:02:5c:9a:92:3a:6a:15:8f:9c:5d:46:be:34:1a:45:09: a8:dd:fd:3a:4f:59:7a:9a:09:89:d7:59:46:6e:98:34:c0:6c: 1a:3b:b5:c5:58:62:da:34:b4:5d:a2:6f:99:e1:08:a3:76:34: af:d5:85:24:26:a8:af:5c:e8:1f:d6:d9:81:11:c5:ed:67:39: 49:f8:26:97:db:06:2f:b0:a1:af:12:da:ce:64:58:0e:90:9b: 4d:0d:3a:cf:a9:0c:a2:ee:53:7b:25:ad:db:7d:42:f1:16:a6: 24:2a:46:a7:80:2e:cf:dc:d9:d9:a8:a5:80:b0:b8:6d:55:49: 1e:ae:2c:b2:bb:0e:35:f9:bf:3d:b8:c0:5e:e3:f3:ce:74:a4: 96:26:0f:e5:41:5c:98:dd:8a:75:c0:eb:9b:82:34:d0:a1:3c: 1b:c9:42:ae:31:c2:e0:a8:8b:89:69:ff:fd:c2:8f:90:f0:4a: e5:29:7e:06:cf:c4:3b:07:2b:27:05:f8:b1:86:46:6a:bf:2e: cb:fc:7f:49:b7:e3:39:17:7d:a5:d5:45:3d:13:c8:65:97:42: 5b:1e:e2:49:5e:8e:3a:08:20:e5:87:9c:56:fd:62:d9:42:d4: 23:66:8b:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOo0tI+7vbb99ii2ZEvSseLMZ5bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDQxMzAzMjNaFw0yNzAzMDMxMzA4MjNaMDMxMTAvBgNV BAMTKDY4QjQxQkJFRDUxRUUwNDg0MjFFQzU5OUE0RjVBMTkyMTMxM0VFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfVaL9or5zSvgwg4H3EL4oQ+zJ 473wP0Wobg20nBCpYmj/BvcL+CuslMD7tvnLnleyR/EXHfdLg1e2Mt+WfLjRBC+G 6nMBFgmBIWHnuDXHFOtJm80DqnNoaLBItc+ssV8tNGvMzNEQR67TgF6xmVqYKXGU EOachDOEeF8pLgrNCgkG6ATMwyx3CNKWlenHFpQ2AKAIOJJnaaOaqVKfJvjLlaCC rhR17amtQinuPVbQv5xrSnt27a6vCfYyDY/vV2/gATzcO5iba0ss0EoxV550m+pQ CuuNppo0y5ay7GGYl0Ui8o1SbaoGG1B0wMed/y+8+f9ckCqDxjeZt1aABBKzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRotBu+1R7gSEIe xZmk9aGSExPuijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzRL WFNIbzgyYmgyb3N5V2lIUW9iRE5XYzZ4RnRvSGdEMXFmVjRmMldFdHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0 S1hTSG84MmJoMm9zeVdpSFFvYkROV2M2eEZ0b0hnRDFxZlY0ZjJXRXRxLzAvNjhC NDFCQkVENTFFRTA0ODQyMUVDNTk5QTRGNUExOTIxMzEzRUU4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCjwDQMA0EAgACMAcDBQAoBCpsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHiDANBgkqhkiG9w0BAQsFAAOCAQEAbo+MuUZI9RrH5nyR w7Le0OlFAC0CXJqSOmoVj5xdRr40GkUJqN39Ok9ZepoJiddZRm6YNMBsGju1xVhi 2jS0XaJvmeEIo3Y0r9WFJCaor1zoH9bZgRHF7Wc5Sfgml9sGL7ChrxLazmRYDpCb TQ06z6kMou5TeyWt231C8RamJCpGp4Auz9zZ2ailgLC4bVVJHq4ssrsONfm/PbjA XuPzznSkliYP5UFcmN2KdcDrm4I00KE8G8lCrjHC4KiLiWn//cKPkPBK5Sl+Bs/E OwcrJwX4sYZGar8uy/x/SbfjORd9pdVFPRPIZZdCWx7iSV6OOggg5YecVv1i2ULU I2aLBg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:42 2026 by rpki-client