$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer File: A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer (raw, json) Hash identifier: Ong5y9LUn4qvNDJ1ZcfpJjLNJd9RnhjL36BkKzdOvIQ= Subject key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A23A851BD45F1EE3465382BBC5973903BA0BA4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.mft caRepository: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Mar 2026 16:39:45 +0000 Certificate not after: Wed 17 Mar 2027 16:44:45 +0000 Subordinate resources: AS: 263866 IP: 138.186.112.0/22 IP: 2804:26f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:23:a8:51:bd:45:f1:ee:34:65:38:2b:bc:59:73:90:3b:a0:ba:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 18 16:39:45 2026 GMT Not After : Mar 17 16:44:45 2027 GMT Subject: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:17:02:2c:60:86:1f:7d:d2:de:2d:57:4c: 28:40:71:84:2e:b3:5b:76:2b:45:48:41:8c:84:eb: d5:ad:f0:db:25:46:ef:d0:5e:7e:93:13:46:d0:36: 91:c9:76:28:12:9a:72:f8:b6:00:d2:88:20:1f:ae: 7f:26:4f:fc:f8:72:ba:57:43:92:f7:d5:73:17:bf: bb:c3:62:4c:03:80:7c:57:8a:a6:45:75:1d:35:bc: 51:17:3c:0a:dc:f3:41:a5:af:11:0d:64:e9:f6:40: d5:d5:1c:04:d4:4e:7d:35:c0:b6:c8:23:1a:d7:3f: ef:d1:e2:72:a9:b4:cb:dd:92:f0:8c:36:25:c6:02: de:3b:3e:69:53:7f:ff:40:82:4f:29:e2:60:4b:78: c6:a0:9c:f1:fa:c5:e8:7f:4d:ec:ca:4e:72:c9:4a: 90:0a:c1:a2:7b:0d:bc:b1:5e:20:32:f4:12:c4:51: 98:18:ae:34:bf:c3:85:33:64:95:b4:a3:ac:0c:3d: 52:38:01:56:33:bd:1c:01:4c:a5:55:43:4a:f0:15: 2b:92:e8:72:e9:bb:9c:18:49:f9:5c:0d:09:38:2c: eb:4a:8f:9a:44:8f:37:33:45:7c:77:ec:d1:59:76: d2:0f:b5:01:b0:dc:04:a6:33:a5:7c:39:6c:a1:fe: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.112.0/22 IPv6: 2804:26f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263866 Signature Algorithm: sha256WithRSAEncryption 3e:c6:f1:c9:58:ff:67:ca:cc:a3:33:ea:36:42:b4:c2:5f:bb: 3a:b0:f6:17:fc:8f:53:92:98:df:99:f6:50:86:80:b4:ec:a9: aa:73:d3:16:9f:ff:f0:13:24:52:45:cb:d2:df:cd:f2:ff:14: 09:32:6c:9f:93:75:68:d0:1d:d3:c4:49:0b:88:11:82:67:9c: 59:d6:e2:0c:3d:f4:45:f7:df:da:e4:76:f8:d7:1b:a3:d4:74: 0b:1c:6b:25:02:ee:f4:b0:f8:e5:43:0e:46:b3:a2:6e:46:99: 54:1e:a7:63:e3:75:ab:30:ba:24:2e:b7:a4:0c:85:67:28:35: 4a:b3:16:c7:be:f7:5b:45:3f:79:bf:a9:5e:6b:fc:e9:44:fb: f9:29:06:00:35:55:6c:30:1d:34:af:46:40:8b:e8:52:e8:3b: 24:f4:d6:a7:60:91:bd:29:f8:86:b4:20:f8:3a:3b:a7:8c:9f: fd:cb:fa:83:79:ff:2f:1f:a2:82:7a:1b:91:32:2f:0b:07:70: 8d:b3:c1:11:2f:00:6a:f7:7c:47:c0:07:6e:a4:81:bd:75:29: 5b:5d:05:75:11:d0:3b:15:2c:43:a2:31:30:ae:73:9f:64:f2: f6:1b:13:d8:11:11:00:7d:e8:4e:16:79:70:b1:d0:4e:b3:89: b5:69:03:38 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUGiOoUb1F8e40ZTgrvFlzkDugukowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTgxNjM5NDVaFw0yNzAzMTcxNjQ0NDVaMDMxMTAvBgNV BAMTKEE1OTU5RUJENERGNTFERkU4RkQ5NjI5OUNFQ0QyODQ3RDREMjA1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23xcCLGCGH33S3i1XTChAcYQu s1t2K0VIQYyE69Wt8NslRu/QXn6TE0bQNpHJdigSmnL4tgDSiCAfrn8mT/z4crpX Q5L31XMXv7vDYkwDgHxXiqZFdR01vFEXPArc80GlrxENZOn2QNXVHATUTn01wLbI IxrXP+/R4nKptMvdkvCMNiXGAt47PmlTf/9Agk8p4mBLeMagnPH6xeh/TezKTnLJ SpAKwaJ7DbyxXiAy9BLEUZgYrjS/w4UzZJW0o6wMPVI4AVYzvRwBTKVVQ0rwFSuS 6HLpu5wYSflcDQk4LOtKj5pEjzczRXx37NFZdtIPtQGw3ASmM6V8OWyh/i0FAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSllZ69TfUd/o/Z YpnOzShH1NIFpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wL0E1OTU5 RUJENERGNTFERkU4RkQ5NjI5OUNFQ0QyODQ3RDREMjA1QTcubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq6cDANBAIAAjAHAwUAKAQm9DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBrowDQYJKoZIhvcNAQELBQADggEBAD7G8clY/2fKzKMz6jZC tMJfuzqw9hf8j1OSmN+Z9lCGgLTsqapz0xaf//ATJFJFy9LfzfL/FAkybJ+TdWjQ HdPESQuIEYJnnFnW4gw99EX339rkdvjXG6PUdAscayUC7vSw+OVDDkazom5GmVQe p2PjdaswuiQut6QMhWcoNUqzFse+91tFP3m/qV5r/OlE+/kpBgA1VWwwHTSvRkCL 6FLoOyT01qdgkb0p+Ia0IPg6O6eMn/3L+oN5/y8fooJ6G5EyLwsHcI2zwREvAGr3 fEfAB26kgb11KVtdBXUR0DsVLEOiMTCuc59k8vYbE9gREQB96E4WeXCx0E6zibVp Azg= -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:19 2026 by rpki-client