$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer File: B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer (raw, json) Hash identifier: OjF0bNvEFRLMoy610JXUKa7AXrn7pEGJ6bczxqswwd0= Subject key identifier: B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5EF3D34D8C612BE629AC4CF8C3CEC0D8BC568167 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.mft caRepository: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 18:01:23 +0000 Certificate not after: Mon 22 Mar 2027 18:06:23 +0000 Subordinate resources: AS: 262791 IP: 168.0.108.0/22 IP: 186.233.192.0/21 IP: 2804:220::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:d3:4d:8c:61:2b:e6:29:ac:4c:f8:c3:ce:c0:d8:bc:56:81:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 18:01:23 2026 GMT Not After : Mar 22 18:06:23 2027 GMT Subject: CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:12:01:45:db:48:e7:07:d9:c8:73:ae:07: c4:f8:b6:12:4f:f9:74:63:a1:0f:5a:4c:c7:a3:35: d9:cf:b9:e8:88:9b:96:c7:3a:c0:f4:43:86:72:e8: 1e:cb:81:9f:0a:9c:13:1a:18:a4:28:25:d9:ee:b3: 83:6c:f5:df:72:8f:b4:d2:66:91:25:20:2b:f1:e5: 83:e2:55:db:f5:ba:e5:29:ea:4f:a9:ea:30:76:c6: 3c:36:f1:c8:71:33:2a:b1:14:86:be:20:07:0c:06: c0:20:30:4d:18:5f:25:b9:5c:e7:42:20:25:cb:d5: 53:a7:7f:c0:f7:aa:a1:85:b3:27:b1:7c:27:1c:62: 00:26:ee:bf:5b:f2:94:e6:6e:09:22:69:f2:1b:20: 61:13:c5:35:79:44:57:de:9f:9b:7d:f8:00:d9:fa: b6:79:6b:08:85:47:fb:19:fb:b9:79:8c:46:36:6f: 43:65:bc:b3:62:1b:1b:4d:5b:85:15:91:24:22:f3: 99:7c:8c:08:44:06:66:5e:64:c5:5f:eb:18:47:91: 5f:b1:bc:e6:bd:4f:78:dc:0d:56:b0:91:ce:88:e5: e6:c0:e2:5e:05:6d:7f:32:b2:04:11:7b:5b:dc:c7: 9b:1f:6b:c0:eb:bc:f0:08:e2:99:0a:56:6b:1a:d8: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.108.0/22 186.233.192.0/21 IPv6: 2804:220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262791 Signature Algorithm: sha256WithRSAEncryption 0f:bd:b1:e1:26:28:d7:6d:63:b8:a5:48:86:87:8f:40:6e:07: 51:0b:6b:81:49:b7:c3:54:98:7a:b2:fb:35:b7:ad:46:d6:fa: 73:3f:9e:0c:50:07:8a:f8:4d:95:7e:77:82:c7:a9:95:bd:91: a3:85:b6:16:7e:bd:92:68:f6:e9:15:aa:b4:d9:5d:71:e6:0e: 4d:69:3d:a0:d7:dc:1e:20:8f:ff:f6:cb:16:6e:b5:24:4e:b8: 3f:db:db:74:9d:70:68:1f:5b:7e:22:0f:fc:0f:d3:58:a5:5a: 73:e5:ad:a8:12:6e:29:3f:eb:d9:74:3c:2c:1b:99:26:e3:67: f7:e6:1c:e6:b0:50:35:1e:02:e7:9a:91:2c:80:53:ff:79:e0: cb:4b:01:aa:bf:b1:4a:f6:f8:1c:48:f7:01:76:ed:a1:f6:fc: bf:e9:c0:13:3e:0f:0b:cd:18:29:99:cd:bb:f0:38:9f:93:73: 6d:5d:ed:f9:e4:ca:0b:bd:31:cb:40:89:dc:af:74:c7:29:5f: f1:aa:ca:3f:ca:4a:49:d1:f0:c0:ad:24:e3:62:c6:74:ec:6f: 1f:70:10:68:fc:b7:4f:3f:72:8a:2c:64:b6:1a:26:31:4e:96: ec:e3:c7:bf:c2:0e:3b:cf:54:13:be:d4:1e:77:9e:ea:84:0d: 60:2b:ba:02 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXvPTTYxhK+YprEz4w87A2LxWgWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxODAxMjNaFw0yNzAzMjIxODA2MjNaMDMxMTAvBgNV BAMTKEI0QzZEOUM1RDMxNkRCOUVDMTM4OTlDMzhDQ0RDMzEzNkFDMUZENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59BIBRdtI5wfZyHOuB8T4thJP +XRjoQ9aTMejNdnPueiIm5bHOsD0Q4Zy6B7LgZ8KnBMaGKQoJdnus4Ns9d9yj7TS ZpElICvx5YPiVdv1uuUp6k+p6jB2xjw28chxMyqxFIa+IAcMBsAgME0YXyW5XOdC ICXL1VOnf8D3qqGFsyexfCccYgAm7r9b8pTmbgkiafIbIGETxTV5RFfen5t9+ADZ +rZ5awiFR/sZ+7l5jEY2b0NlvLNiGxtNW4UVkSQi85l8jAhEBmZeZMVf6xhHkV+x vOa9T3jcDVawkc6I5ebA4l4FbX8ysgQRe1vcx5sfa8DrvPAI4pkKVmsa2P0HAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0xtnF0xbbnsE4 mcOMzcMTasH9RTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM29t REIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1nWFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNv bURCM3p4SlcxZTduTVp0SlpWb2VlazJKVE1MMzR4MXgycTF0S25tZ1hRLzAvQjRD NkQ5QzVEMzE2REI5RUMxMzg5OUMzOENDREMzMTM2QUMxRkQ0NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqABsAwQDuunAMA0EAgACMAcDBQAoBAIgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQChzANBgkqhkiG9w0BAQsFAAOCAQEAD72x4SYo 121juKVIhoePQG4HUQtrgUm3w1SYerL7NbetRtb6cz+eDFAHivhNlX53gseplb2R o4W2Fn69kmj26RWqtNldceYOTWk9oNfcHiCP//bLFm61JE64P9vbdJ1waB9bfiIP /A/TWKVac+WtqBJuKT/r2XQ8LBuZJuNn9+Yc5rBQNR4C55qRLIBT/3ngy0sBqr+x Svb4HEj3AXbtofb8v+nAEz4PC80YKZnNu/A4n5NzbV3t+eTKC70xy0CJ3K90xylf 8arKP8pKSdHwwK0k42LGdOxvH3AQaPy3Tz9yiixkthomMU6W7OPHv8IOO89UE77U Hnee6oQNYCu6Ag== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:04 2026 by rpki-client