$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer File: 9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer (raw, json) Hash identifier: RtxkWQg/jMpoxiUXJeW66bF2Fvmoz2Vd52CEFZA9AYo= Subject key identifier: 9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 623E405EDC1CBECED5CA2F76A0F5ABC2FAD06E70 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft caRepository: rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 00:22:42 +0000 Certificate not after: Mon 22 Mar 2027 00:27:42 +0000 Subordinate resources: AS: 266110 IP: 45.5.244.0/22 IP: 2804:3acc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3e:40:5e:dc:1c:be:ce:d5:ca:2f:76:a0:f5:ab:c2:fa:d0:6e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 00:22:42 2026 GMT Not After : Mar 22 00:27:42 2027 GMT Subject: CN=9CF4F570E3A766751DA881F56F05A7C38CFE1867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:0d:c5:b3:a0:83:23:17:fc:10:00:73:3e: 2c:dd:d4:28:e0:95:db:e2:d2:4b:7e:9d:86:86:a1: a5:8e:20:11:65:d9:fd:89:26:85:88:8b:cb:5e:a1: 00:ea:03:9d:e2:d5:21:9b:30:59:82:7b:b1:9e:1e: b6:cb:8d:bf:2d:e5:1d:94:ab:d0:28:0e:23:db:f8: 12:5c:fb:20:0c:b4:50:6f:1c:a4:73:99:9e:9f:60: b6:28:1b:52:b6:c8:7f:08:17:fa:3a:d5:4d:b8:03: e2:8d:e9:51:d8:b5:8e:ef:67:fc:a5:1f:a8:33:bf: ff:40:a1:27:a5:5e:52:4f:24:fc:69:14:ce:de:1d: d2:be:9e:70:61:47:e6:67:fb:97:6a:de:e8:eb:65: c1:2e:3c:49:1e:45:d6:3a:75:71:b8:29:f9:e2:2a: 68:ca:c3:6f:51:7b:98:a9:42:62:7c:5d:31:b5:1c: 5c:23:4a:ab:bc:ca:48:f8:3d:08:f4:6a:81:99:45: 40:23:bc:76:dd:f3:a9:27:ae:68:d3:42:ee:de:6a: cb:d6:2b:ae:0b:c5:8a:ce:06:65:f4:f5:ed:a6:79: 5e:fe:16:87:87:71:f1:21:f0:73:62:ba:4e:19:04: e1:6a:5b:04:46:33:95:73:fe:a4:d4:b2:bc:3d:89: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.244.0/22 IPv6: 2804:3acc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266110 Signature Algorithm: sha256WithRSAEncryption 98:27:b6:07:14:ed:ad:05:10:e1:fd:a3:59:40:10:0c:35:4f: 1a:ee:52:3f:14:58:c2:7a:41:b9:98:b1:74:91:21:a3:38:9a: e7:3f:a0:81:84:9f:7f:7a:b5:75:0b:16:71:78:66:e4:28:d2: 04:0d:f7:83:ae:f7:8d:62:db:c5:61:68:1b:11:9f:e9:24:5d: 91:9e:99:81:c8:cb:24:81:bb:38:5d:9b:5e:a8:6d:8d:88:6d: cc:60:fb:74:53:db:4b:1c:92:bd:28:ed:51:aa:f8:df:6e:72: 27:8b:2b:a1:24:61:dd:af:3a:68:d0:b2:f4:41:8c:4e:08:06: 9f:57:ed:b9:1a:3c:1f:fb:dd:6f:43:39:34:c5:c9:6a:0f:e9: a9:0a:67:94:eb:ce:13:b2:ee:6c:14:45:7a:fd:92:54:fa:5f: 48:58:66:f1:26:c7:f2:e7:e6:54:8a:44:80:87:75:ac:eb:c9: d0:3c:f5:2a:7d:3e:2e:3a:e0:1e:63:d6:2a:f7:ea:5c:3a:65: 88:59:88:ed:bf:3f:f4:71:0a:16:fc:05:2f:06:95:e2:48:5f: 3a:69:02:87:e7:e0:0f:e0:64:35:8c:04:48:2a:a2:3e:f1:f9: 3c:92:aa:bc:19:39:5b:7d:9d:74:55:a1:ee:78:22:06:3f:f8: 74:3a:ae:fb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYj5AXtwcvs7Vyi92oPWrwvrQbnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMwMDIyNDJaFw0yNzAzMjIwMDI3NDJaMDMxMTAvBgNV BAMTKDlDRjRGNTcwRTNBNzY2NzUxREE4ODFGNTZGMDVBN0MzOENGRTE4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKw3Fs6CDIxf8EABzPizd1Cjg ldvi0kt+nYaGoaWOIBFl2f2JJoWIi8teoQDqA53i1SGbMFmCe7GeHrbLjb8t5R2U q9AoDiPb+BJc+yAMtFBvHKRzmZ6fYLYoG1K2yH8IF/o61U24A+KN6VHYtY7vZ/yl H6gzv/9AoSelXlJPJPxpFM7eHdK+nnBhR+Zn+5dq3ujrZcEuPEkeRdY6dXG4Kfni KmjKw29Re5ipQmJ8XTG1HFwjSqu8ykj4PQj0aoGZRUAjvHbd86knrmjTQu7easvW K64LxYrOBmX09e2meV7+FoeHcfEh8HNiuk4ZBOFqWwRGM5Vz/qTUsrw9iV3PAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSc9PVw46dmdR2o gfVvBafDjP4YZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGZ2 RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zua0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rm dkVFc0hZMXJTRG03R3Z5emVVamJVV2JESDczMndzZ3F1VGJFQzdGbmtHLzAvOUNG NEY1NzBFM0E3NjY3NTFEQTg4MUY1NkYwNUE3QzM4Q0ZFMTg2Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQX0MA0EAgACMAcDBQAoBDrMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPfjANBgkqhkiG9w0BAQsFAAOCAQEAmCe2BxTtrQUQ4f2j WUAQDDVPGu5SPxRYwnpBuZixdJEhozia5z+ggYSff3q1dQsWcXhm5CjSBA33g673 jWLbxWFoGxGf6SRdkZ6ZgcjLJIG7OF2bXqhtjYhtzGD7dFPbSxySvSjtUar4325y J4sroSRh3a86aNCy9EGMTggGn1ftuRo8H/vdb0M5NMXJag/pqQpnlOvOE7LubBRF ev2SVPpfSFhm8SbH8ufmVIpEgId1rOvJ0Dz1Kn0+LjrgHmPWKvfqXDpliFmI7b8/ 9HEKFvwFLwaV4khfOmkCh+fgD+BkNYwESCqiPvH5PJKqvBk5W32ddFWh7ngiBj/4 dDqu+w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:00 2026 by rpki-client