$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer File: B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer (raw, json) Hash identifier: x+bvSqnSa1r+Smq6WQP+IEZo9bGTbBSTZbayR3KNo0Q= Subject key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5FF8892C4F03D45A42092FC0E627A3430C1924F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft caRepository: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 08:04:13 +0000 Certificate not after: Thu 18 Mar 2027 08:09:13 +0000 Subordinate resources: AS: 271597 IP: 179.63.12.0/23 IP: 179.63.15.0/24 IP: 2804:7e04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Mar 2026 00:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f8:89:2c:4f:03:d4:5a:42:09:2f:c0:e6:27:a3:43:0c:19:24:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 19 08:04:13 2026 GMT Not After : Mar 18 08:09:13 2027 GMT Subject: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:c0:02:84:df:3a:6e:d5:7e:7b:bc:e6:3d: 9a:5e:be:34:3f:7a:4e:52:b8:a6:e8:e9:6e:3c:4c: 3a:d9:da:43:21:38:cd:89:fd:ea:ca:c5:a2:41:da: 3f:6f:94:f2:b3:55:ac:5d:93:a0:1a:bd:2c:25:77: 0a:29:53:af:0a:1f:85:0e:c2:37:69:78:77:2d:b8: 33:52:b8:62:6c:e4:81:5b:a1:7c:2d:59:b9:09:29: 0d:f5:ab:7d:ae:d4:fa:44:6b:8d:36:e9:a3:55:8c: 72:1a:c4:08:0e:9f:77:23:a4:e8:0d:39:40:1e:34: 26:dd:75:24:ab:a0:fa:64:fe:49:76:5b:6c:77:91: ed:9a:a7:17:39:b1:4f:b3:f1:92:76:6d:d0:22:c8: bf:57:62:e2:a8:5b:53:35:b1:64:87:5e:5e:d0:f2: 62:b4:26:4e:0d:36:f7:a7:87:38:68:39:cd:a1:d2: 22:9e:e4:eb:14:92:c3:b9:6b:a2:5a:3f:75:62:cf: 5c:aa:14:8b:2b:bc:19:d2:b8:14:98:25:da:8c:3e: fb:2b:c5:8f:3e:ab:e4:cd:a2:ff:23:97:81:d7:48: 7a:bb:95:78:fd:bc:06:01:fe:ef:4b:fa:b6:fa:72: 67:5a:57:66:cd:39:24:92:2b:40:65:fc:48:7f:c7: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.63.12.0/23 179.63.15.0/24 IPv6: 2804:7e04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271597 Signature Algorithm: sha256WithRSAEncryption 36:ce:1a:44:bc:e2:4e:dd:14:dd:4f:f8:06:5d:ff:29:6d:50: e2:e4:d1:3f:ce:49:f0:ba:03:be:d9:b6:e5:55:89:38:a3:dc: fc:5e:57:53:d9:96:da:63:68:c2:41:3c:03:1f:a7:1f:9d:6e: f1:86:da:75:9a:34:f5:44:98:54:58:a2:42:24:b0:b7:08:6f: 52:c9:ae:98:f4:96:f3:ad:40:64:11:e0:ff:66:7d:89:78:91: 50:40:32:6b:ed:52:65:9b:9c:33:7b:f8:73:d3:2e:b3:4d:ae: 8d:c4:86:c1:4b:01:c2:62:46:bd:9d:a4:77:f5:d4:70:58:41: fb:7e:6f:37:d3:4d:64:af:3f:09:dd:96:06:2e:cf:43:4c:49: 19:25:a4:d7:de:78:de:f4:6e:be:17:71:2c:b4:a3:26:74:d0: 23:8a:1a:11:7f:db:23:f2:5c:27:5c:ee:0d:21:03:07:fb:06: 34:a1:47:c7:b8:fe:78:9a:98:35:75:57:b3:f3:cf:fb:59:ca: 02:52:ed:49:b6:fd:3e:c0:2a:52:25:c1:cf:93:9f:55:fe:62: 1d:9a:bb:47:b3:24:f6:6a:1d:1f:e5:f4:5b:69:ee:9a:e1:c1: 05:28:0c:3f:74:16:0b:30:b8:b4:5d:96:ce:6e:57:b1:81:2f: e7:ec:33:4d -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUX/iJLE8D1FpCCS/A5iejQwwZJPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTkwODA0MTNaFw0yNzAzMTgwODA5MTNaMDMxMTAvBgNV BAMTKEIxOTFERjIyMEJDNjJEQjZBNTI1QzlBNEQ2QTA5Rjc2MkY4MDZENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3sAChN86btV+e7zmPZpevjQ/ ek5SuKbo6W48TDrZ2kMhOM2J/erKxaJB2j9vlPKzVaxdk6AavSwldwopU68KH4UO wjdpeHctuDNSuGJs5IFboXwtWbkJKQ31q32u1PpEa4026aNVjHIaxAgOn3cjpOgN OUAeNCbddSSroPpk/kl2W2x3ke2apxc5sU+z8ZJ2bdAiyL9XYuKoW1M1sWSHXl7Q 8mK0Jk4NNvenhzhoOc2h0iKe5OsUksO5a6JaP3Viz1yqFIsrvBnSuBSYJdqMPvsr xY8+q+TNov8jl4HXSHq7lXj9vAYB/u9L+rb6cmdaV2bNOSSSK0Bl/Eh/x6bTAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxkd8iC8YttqUl yaTWoJ92L4BtRTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkd3 N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdMeHUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkd3 N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdMeHUvMS9CMTkx REYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAGzPwwDBACzPw8wDQQCAAIwBwMFACgEfgQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCTtMA0GCSqGSIb3DQEBCwUAA4IBAQA2zhpEvOJO 3RTdT/gGXf8pbVDi5NE/zknwugO+2bblVYk4o9z8XldT2ZbaY2jCQTwDH6cfnW7x htp1mjT1RJhUWKJCJLC3CG9Sya6Y9JbzrUBkEeD/Zn2JeJFQQDJr7VJlm5wze/hz 0y6zTa6NxIbBSwHCYka9naR39dRwWEH7fm83001krz8J3ZYGLs9DTEkZJaTX3nje 9G6+F3EstKMmdNAjihoRf9sj8lwnXO4NIQMH+wY0oUfHuP54mpg1dVez88/7WcoC Uu1Jtv0+wCpSJcHPk59V/mIdmrtHsyT2ah0f5fRbae6a4cEFKAw/dBYLMLi0XZbO blexgS/n7DNN -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:02 2026 by rpki-client