$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer File: B4EF21A72F48760DE13763E987C39973E33F9FD5.cer (raw, json) Hash identifier: 6jZcl6g38iWWT8+EHXMVDtXtTn5EDXMoSnuwEEohchQ= Subject key identifier: B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DD6259E6859014E56FF8AED0F9B11833DA59F63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft caRepository: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 19:06:11 +0000 Certificate not after: Fri 19 Mar 2027 19:11:11 +0000 Subordinate resources: AS: 272499 IP: 2804:821c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d6:25:9e:68:59:01:4e:56:ff:8a:ed:0f:9b:11:83:3d:a5:9f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 19:06:11 2026 GMT Not After : Mar 19 19:11:11 2027 GMT Subject: CN=B4EF21A72F48760DE13763E987C39973E33F9FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:c6:98:b3:bb:9b:dc:bc:fc:24:b6:84:0f: d4:9a:96:f2:db:7d:66:0b:b4:d1:31:a9:6a:97:c2: be:55:f8:30:88:28:2c:a2:f6:62:4b:95:f7:59:10: 73:71:fd:43:32:50:08:04:72:61:b9:2d:c0:18:ed: e4:09:b4:f8:5a:ac:8b:81:24:d1:7b:f6:1e:c3:ff: d5:4a:0d:1d:dc:47:26:d5:b1:d8:65:35:86:d8:58: 69:1d:84:41:9f:a1:b4:1e:c2:de:19:8a:82:ae:40: 9f:05:a8:a3:d7:fe:c8:05:c8:1c:4c:f5:ce:0c:8d: ff:6f:73:55:ff:71:7b:a4:61:20:c9:ef:2d:5e:f2: eb:94:07:9e:1b:91:6f:c5:7d:06:de:55:89:7b:e4: b2:ee:ff:90:fe:34:05:db:f6:76:76:e4:42:03:44: 5f:f1:4c:d5:5e:6d:a8:67:2e:4b:20:38:17:ef:f2: b4:5f:1d:00:7d:d6:69:44:0d:59:51:fd:ee:39:07: 64:3b:21:20:ec:c7:04:f2:ae:a8:d7:56:32:d0:df: 6f:31:e8:11:d8:0a:c5:1f:ed:3e:72:3b:d1:1d:d6: c0:26:1f:ab:15:e6:9c:fb:44:cb:77:bc:a7:ad:8d: 8b:04:10:54:0a:0a:f0:21:90:e4:2c:cd:6f:92:87: 91:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:821c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272499 Signature Algorithm: sha256WithRSAEncryption af:db:71:75:b7:da:51:14:a7:c5:36:d6:6e:6d:7f:71:ca:78: bb:1d:06:33:dc:56:f5:47:30:51:0a:2a:ca:67:d3:d4:b7:ce: 63:7f:a5:10:59:e5:53:a2:9e:ef:06:73:9f:45:38:c7:ed:a7: a3:19:be:0a:47:a5:58:f9:63:f4:f0:2e:2c:5a:b3:7c:d1:f8: d5:1d:24:dc:28:a6:d7:25:66:70:ec:c8:bf:1c:72:4b:af:4d: d7:44:75:6f:34:c4:b2:a1:be:ac:2e:0a:d2:ec:9d:f2:f0:cc: 8d:e2:3b:88:8b:b2:8c:d0:02:0b:bb:08:bc:80:51:d3:31:1f: 58:bd:35:d2:67:b5:0a:17:7b:fd:bf:f6:69:3d:cf:38:27:0f: c2:96:4e:58:69:32:d0:f6:e9:7f:d9:b2:52:3d:8a:f7:b2:df: c6:2e:9e:68:d4:89:91:02:54:1d:5b:89:f0:2a:c2:f3:2c:9a: 87:08:77:32:52:c6:12:d6:fb:02:32:56:6b:a5:a6:2c:59:18: 52:50:1c:97:2d:a9:90:00:f0:65:9a:f3:ba:e4:da:9c:0c:f2: 60:84:ed:6c:71:a6:2b:6d:7b:ff:dc:63:74:10:6f:01:33:96: df:12:0a:a7:8d:1c:23:7b:5d:8b:c4:a1:eb:52:f3:46:8f:60: 53:3e:f0:70 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUXdYlnmhZAU5W/4rtD5sRgz2ln2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAxOTA2MTFaFw0yNzAzMTkxOTExMTFaMDMxMTAvBgNV BAMTKEI0RUYyMUE3MkY0ODc2MERFMTM3NjNFOTg3QzM5OTczRTMzRjlGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopMaYs7ub3Lz8JLaED9SalvLb fWYLtNExqWqXwr5V+DCIKCyi9mJLlfdZEHNx/UMyUAgEcmG5LcAY7eQJtPharIuB JNF79h7D/9VKDR3cRybVsdhlNYbYWGkdhEGfobQewt4ZioKuQJ8FqKPX/sgFyBxM 9c4Mjf9vc1X/cXukYSDJ7y1e8uuUB54bkW/FfQbeVYl75LLu/5D+NAXb9nZ25EID RF/xTNVebahnLksgOBfv8rRfHQB91mlEDVlR/e45B2Q7ISDsxwTyrqjXVjLQ328x 6BHYCsUf7T5yO9Ed1sAmH6sV5pz7RMt3vKetjYsEEFQKCvAhkOQszW+Sh5HlAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS07yGnL0h2DeE3 Y+mHw5lz4z+f1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDM3 YW1Kd0hKMzRMWUxyZ1hlNEVITFBydkppNFZRY2s1U25SWG50VjNMaC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDM3 YW1Kd0hKMzRMWUxyZ1hlNEVITFBydkppNFZRY2s1U25SWG50VjNMaC8wL0I0RUYy MUE3MkY0ODc2MERFMTM3NjNFOTg3QzM5OTczRTMzRjlGRDUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEghwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBChz MA0GCSqGSIb3DQEBCwUAA4IBAQCv23F1t9pRFKfFNtZubX9xyni7HQYz3Fb1RzBR CirKZ9PUt85jf6UQWeVTop7vBnOfRTjH7aejGb4KR6VY+WP08C4sWrN80fjVHSTc KKbXJWZw7Mi/HHJLr03XRHVvNMSyob6sLgrS7J3y8MyN4juIi7KM0AILuwi8gFHT MR9YvTXSZ7UKF3v9v/ZpPc84Jw/Clk5YaTLQ9ul/2bJSPYr3st/GLp5o1ImRAlQd W4nwKsLzLJqHCHcyUsYS1vsCMlZrpaYsWRhSUByXLamQAPBlmvO65NqcDPJghO1s caYrbXv/3GN0EG8BM5bfEgqnjRwje12LxKHrUvNGj2BTPvBw -----END CERTIFICATE-----Generated at Wed Mar 25 22:30:04 2026 by rpki-client