$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer File: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer (raw, json) Hash identifier: v9EqHCYNpDCKGK8Eq7z9mXPd65k4p9oNEQT/umOizrA= Subject key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 658B704D53E70873CD8D065D418F12D3197FF552 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft caRepository: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 21:15:05 +0000 Certificate not after: Mon 22 Mar 2027 21:20:05 +0000 Subordinate resources: AS: 266986 IP: 45.226.40.0/22 IP: 200.229.92.0/22 IP: 2804:4660::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8b:70:4d:53:e7:08:73:cd:8d:06:5d:41:8f:12:d3:19:7f:f5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 21:15:05 2026 GMT Not After : Mar 22 21:20:05 2027 GMT Subject: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:f2:1c:f3:43:b9:39:d2:e0:31:ce:d5:b1: 19:d6:fb:62:f5:a1:8b:50:89:9c:c0:69:5d:59:16: 1b:96:c2:26:91:68:08:d2:c8:b5:b1:5e:5e:af:9b: 9c:9e:8a:99:82:6b:30:7a:04:d7:6e:f8:38:2e:5d: e6:66:1e:7d:8b:a8:c6:b1:cc:94:48:e3:9a:04:87: 49:fe:94:6a:f3:8e:8f:7e:65:af:6b:a4:0d:52:01: ef:da:75:ea:ad:ce:87:d8:0f:5e:8b:37:75:bb:41: a3:50:f3:d2:ed:8f:74:bd:21:0c:1c:11:fc:09:01: 78:71:15:c3:ac:0a:5b:dd:75:34:21:40:d8:c0:5e: d9:79:2d:85:31:25:f2:af:e0:c5:48:e5:4b:93:26: f0:3f:0f:8f:70:7b:b8:dd:c9:63:86:fb:97:91:67: d3:d1:47:6e:a2:47:a8:7b:06:9c:16:08:89:35:5b: f0:af:37:2d:dd:8e:1e:c7:bc:4b:56:9c:8f:4a:3f: b5:7d:0d:93:1f:f2:a6:a9:a4:dc:30:1d:f9:dc:69: d0:70:b5:e8:6b:0b:5a:8a:8e:9d:1a:c5:e8:5c:56: 59:d4:a1:2b:61:26:3c:19:d8:53:1a:b4:53:06:c8: aa:32:3c:99:0e:e2:d4:ec:af:c2:42:13:b9:03:dc: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.40.0/22 200.229.92.0/22 IPv6: 2804:4660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266986 Signature Algorithm: sha256WithRSAEncryption d8:b0:9e:46:b9:c5:b2:68:43:45:12:84:3d:e8:77:c8:8d:cf: f5:07:1c:3f:ff:4d:95:95:a8:04:09:3b:86:d5:cc:af:00:27: be:38:11:b8:39:8f:65:91:0b:cb:18:b4:21:48:e4:0e:f1:21: da:7d:94:06:b0:43:d9:3d:1f:28:6c:26:e9:bd:23:51:d2:13: 8a:93:de:f0:70:2c:70:28:a0:82:93:3f:c1:9c:1c:4b:71:a0: 7d:c3:95:c5:0b:06:5a:01:24:ff:66:d1:cb:0a:b4:61:bc:32: fe:22:06:a8:0b:48:c5:c4:f2:46:ff:c6:e1:0e:ac:db:cd:79: 36:d0:fc:58:ed:09:36:d4:b0:47:29:f7:60:2c:ac:19:5f:2a: 7b:9e:d3:76:15:39:c9:25:88:a0:a1:36:e0:71:b9:a1:ca:24: 2f:99:80:d5:aa:cc:51:48:d8:87:f1:51:0c:8a:bc:47:5d:f4: 23:f5:b9:ac:9e:90:9d:2e:ef:4f:d0:2e:89:fd:1e:14:ea:f4: c4:02:03:6c:2f:a5:74:b8:ee:2a:79:e7:03:fb:0d:6a:ee:3b: 16:c8:d1:c6:dd:11:7c:b0:0f:6b:72:75:91:fd:88:66:b5:5b: ba:29:3b:3c:04:2d:35:d0:e8:18:5b:f4:8b:7e:5f:7d:91:9b: 54:48:33:0a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZYtwTVPnCHPNjQZdQY8S0xl/9VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMyMTE1MDVaFw0yNzAzMjIyMTIwMDVaMDMxMTAvBgNV BAMTKDc4QzMxRjg1Q0Y4QjZBODQxOEZBRDI1QTU1RjU5NDJGM0JBQ0RFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXfIc80O5OdLgMc7VsRnW+2L1 oYtQiZzAaV1ZFhuWwiaRaAjSyLWxXl6vm5yeipmCazB6BNdu+DguXeZmHn2LqMax zJRI45oEh0n+lGrzjo9+Za9rpA1SAe/adeqtzofYD16LN3W7QaNQ89Ltj3S9IQwc EfwJAXhxFcOsClvddTQhQNjAXtl5LYUxJfKv4MVI5UuTJvA/D49we7jdyWOG+5eR Z9PRR26iR6h7BpwWCIk1W/CvNy3djh7HvEtWnI9KP7V9DZMf8qappNwwHfncadBw tehrC1qKjp0axehcVlnUoSthJjwZ2FMatFMGyKoyPJkO4tTsr8JCE7kD3Ed1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4wx+Fz4tqhBj6 0lpV9ZQvO6zeDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzhl Vlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERBb1UvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M4 ZVZYdm1Hb2hvYjFrQUdUaWFKRFVEMVVablNQRW0xbTNVZFEydnBEQW9VLzEvNzhD MzFGODVDRjhCNkE4NDE4RkFEMjVBNTVGNTk0MkYzQkFDREUwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeIoAwQCyOVcMA0EAgACMAcDBQAoBEZgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQS6jANBgkqhkiG9w0BAQsFAAOCAQEA2LCeRrnF smhDRRKEPeh3yI3P9QccP/9NlZWoBAk7htXMrwAnvjgRuDmPZZELyxi0IUjkDvEh 2n2UBrBD2T0fKGwm6b0jUdITipPe8HAscCiggpM/wZwcS3GgfcOVxQsGWgEk/2bR ywq0Ybwy/iIGqAtIxcTyRv/G4Q6s2815NtD8WO0JNtSwRyn3YCysGV8qe57TdhU5 ySWIoKE24HG5ocokL5mA1arMUUjYh/FRDIq8R130I/W5rJ6QnS7vT9Auif0eFOr0 xAIDbC+ldLjuKnnnA/sNau47FsjRxt0RfLAPa3J1kf2IZrVbuik7PAQtNdDoGFv0 i35ffZGbVEgzCg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:56:48 2026 by rpki-client