$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer File: 85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer (raw, json) Hash identifier: UkB0EjIZRTtRTR51byAgztI6tQNNV7nxESVezR3uj0M= Subject key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60435847007A0767284D9ECD4E919D12FCE4956A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft caRepository: rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 19:10:20 +0000 Certificate not after: Mon 22 Mar 2027 19:15:20 +0000 Subordinate resources: AS: 264879 IP: 168.227.124.0/22 IP: 2804:2f3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:43:58:47:00:7a:07:67:28:4d:9e:cd:4e:91:9d:12:fc:e4:95:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 19:10:20 2026 GMT Not After : Mar 22 19:15:20 2027 GMT Subject: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:f8:d7:e1:39:02:6b:b0:e2:b0:ac:65:36: 28:2e:08:22:aa:01:e0:81:fb:cb:10:17:4f:86:b3: 9a:33:38:6e:77:77:0a:d5:93:d6:7f:4e:5f:72:7f: 08:bd:08:15:2a:7d:c7:c8:da:d4:83:df:71:a4:fc: 7f:c2:9e:82:8a:dc:43:ad:5b:40:9b:08:27:59:05: ff:39:f2:e3:f5:81:3f:a0:a8:2d:16:c0:6e:78:2e: a7:d0:5e:1c:e6:69:83:60:e6:36:07:01:09:59:f2: a4:33:df:17:e2:da:23:bb:01:75:aa:f2:04:b3:8a: 16:59:b5:86:a4:49:20:de:63:2f:39:4a:e5:a8:cb: 22:42:83:ba:82:55:63:ef:2f:c2:c8:c8:0f:bd:8d: 90:ba:7d:7f:12:7d:0d:2a:11:e7:2c:80:07:65:ac: b8:ef:f4:72:db:97:44:e6:46:bb:6f:aa:05:74:47: 43:ee:70:17:93:7b:ba:1f:d3:3f:5c:18:cb:a0:c7: d4:c2:7f:3e:9f:ea:29:0c:18:78:9f:b6:42:e4:46: cb:ce:03:c3:18:57:38:d6:fd:53:60:11:56:69:71: f6:ca:77:11:97:6a:dd:a7:0c:2f:68:e8:46:5d:b9: d0:0c:26:0f:53:2f:98:10:5f:97:0a:05:8b:e8:ba: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.124.0/22 IPv6: 2804:2f3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264879 Signature Algorithm: sha256WithRSAEncryption c2:1c:9c:2d:02:44:ee:d8:68:3a:f8:80:8f:66:74:32:35:be: f5:66:be:73:f0:79:31:12:d6:ca:df:48:56:16:9d:cf:e2:68: df:1b:ce:33:f1:ae:8f:95:99:fa:88:cf:a3:d8:74:93:6a:d9: a9:1c:3c:7a:74:26:62:15:15:ac:0c:e5:77:5c:e7:3b:22:6a: 06:cb:18:8b:4c:13:7b:b7:a2:63:f1:65:1d:e6:b3:ff:95:09: 1f:6a:e2:28:7a:e3:4e:80:49:0a:dd:81:c0:61:81:0f:ab:f5: d1:f7:f2:e7:80:9a:bf:4d:26:21:a9:e8:d2:bb:ec:0e:e2:ef: 77:45:17:a7:2c:db:d5:e7:08:54:6b:ab:24:a0:6c:2b:0d:40: a9:cc:d5:05:d0:6b:b6:49:47:0a:47:6a:06:b2:31:db:cf:cc: c8:ec:e9:bc:7f:fe:96:b4:1d:d5:a0:15:98:0e:fd:69:c6:a5: b1:fd:3a:e3:b5:6b:1f:7e:61:4d:49:e8:c7:4a:61:b8:71:ea: b1:28:28:96:ec:23:ab:9f:a9:32:2e:0c:fb:08:b0:64:7e:31: 42:26:8b:b5:ba:1e:3e:a1:65:fd:08:e5:7d:ee:cc:c9:06:c4: e8:5a:1a:da:ca:9c:88:50:92:53:bb:9e:ac:d1:ea:1d:9e:c9: 90:4d:8b:58 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYENYRwB6B2coTZ7NTpGdEvzklWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxOTEwMjBaFw0yNzAzMjIxOTE1MjBaMDMxMTAvBgNV BAMTKDg1QTU2RkNGRTU2M0ZFRjkzODQ1RjM4ODFFRDMyRUVGODJCRUFEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPU/jX4TkCa7DisKxlNiguCCKq AeCB+8sQF0+Gs5ozOG53dwrVk9Z/Tl9yfwi9CBUqfcfI2tSD33Gk/H/CnoKK3EOt W0CbCCdZBf858uP1gT+gqC0WwG54LqfQXhzmaYNg5jYHAQlZ8qQz3xfi2iO7AXWq 8gSzihZZtYakSSDeYy85SuWoyyJCg7qCVWPvL8LIyA+9jZC6fX8SfQ0qEecsgAdl rLjv9HLbl0TmRrtvqgV0R0PucBeTe7of0z9cGMugx9TCfz6f6ikMGHiftkLkRsvO A8MYVzjW/VNgEVZpcfbKdxGXat2nDC9o6EZdudAMJg9TL5gQX5cKBYvouk8nAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFpW/P5WP++ThF 84ge0y7vgr6tBDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnRr d0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllEMTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ0 a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzAvODVB NTZGQ0ZFNTYzRkVGOTM4NDVGMzg4MUVEMzJFRUY4MkJFQUQwNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqON8MA0EAgACMAcDBQAoBC88MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQKrzANBgkqhkiG9w0BAQsFAAOCAQEAwhycLQJE7thoOviA j2Z0MjW+9Wa+c/B5MRLWyt9IVhadz+Jo3xvOM/Guj5WZ+ojPo9h0k2rZqRw8enQm YhUVrAzld1znOyJqBssYi0wTe7eiY/FlHeaz/5UJH2riKHrjToBJCt2BwGGBD6v1 0ffy54Cav00mIano0rvsDuLvd0UXpyzb1ecIVGurJKBsKw1AqczVBdBrtklHCkdq BrIx28/MyOzpvH/+lrQd1aAVmA79acalsf0647VrH35hTUnox0phuHHqsSgoluwj q5+pMi4M+wiwZH4xQiaLtboePqFl/Qjlfe7MyQbE6Foa2sqciFCSU7uerNHqHZ7J kE2LWA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:53:48 2026 by rpki-client