$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer File: B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer (raw, json) Hash identifier: bUySusXNsZ5195TPeEfvvbcsJHcVGtFID6PJw13OcSk= Subject key identifier: B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1681B56A102D7EAF4F772C997951255B4EDFD59B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.mft caRepository: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 18:58:02 +0000 Certificate not after: Mon 22 Mar 2027 19:03:02 +0000 Subordinate resources: AS: 264900 IP: 168.228.8.0/22 IP: 170.80.236.0/22 IP: 2804:2f94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:81:b5:6a:10:2d:7e:af:4f:77:2c:99:79:51:25:5b:4e:df:d5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 18:58:02 2026 GMT Not After : Mar 22 19:03:02 2027 GMT Subject: CN=B9184DBAB131ECA85F8F91549B3B52C12458AF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:22:88:07:ac:df:03:de:54:f3:03:ca:a9: 96:a1:8d:0a:af:45:ee:ec:38:05:b4:07:34:f8:d5: 3f:74:f9:d3:48:c9:69:1a:de:5f:80:42:22:9b:45: cd:be:6c:0a:b7:0f:3d:2a:9d:7a:0d:2f:42:34:33: 4d:3c:24:6a:33:4f:4e:cf:32:85:1a:72:39:11:97: fb:53:70:14:0a:f6:49:95:db:12:60:98:a5:71:be: 0e:05:ac:90:0b:40:01:6c:10:c7:72:03:2f:fb:bb: 91:8e:17:5b:5e:83:e5:e2:fb:14:df:aa:f3:85:b7: 5f:38:84:ec:f5:1b:11:c3:63:a5:92:40:24:b8:cc: e2:d6:d8:4b:bf:43:6a:5d:33:3c:0e:b8:d8:20:77: 51:8d:9f:34:94:86:37:00:c8:d8:6c:9d:f9:ad:5b: 22:ec:5f:7e:6c:d3:f2:96:d4:2b:34:1e:f4:2d:7f: 5d:2d:7b:77:36:b5:5c:2d:a5:92:c1:e6:db:3a:90: 62:d5:27:fe:a7:23:6f:b3:f6:d3:43:fe:04:bd:39: 4f:10:bf:dc:13:3f:46:54:af:6d:6f:73:64:5a:76: d0:b1:f5:9b:46:17:43:6e:0e:d9:65:7a:ea:e0:16: b1:bc:a6:75:84:ca:ad:1a:48:7d:25:60:e7:b6:53: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.8.0/22 170.80.236.0/22 IPv6: 2804:2f94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264900 Signature Algorithm: sha256WithRSAEncryption 20:52:a2:a5:c0:0d:1b:d8:fc:9d:68:77:5f:c3:f2:58:ea:55: 18:0a:2f:b1:a6:cc:b4:e9:7f:b2:08:93:a4:20:09:e4:de:c2: b5:6e:98:98:84:0e:9b:43:d8:fd:ad:a8:5f:b7:f9:a5:02:7b: f0:6e:ca:bd:ef:69:6c:0a:2d:cf:4c:d6:ab:f1:d9:12:04:7f: cb:cc:d9:79:59:d4:06:cb:a3:7b:d1:3f:71:97:09:35:d1:0e: df:ab:50:75:8a:e0:f8:1a:43:82:3b:d6:8f:3b:10:e3:82:3e: 46:85:c5:42:b3:f3:2b:bd:fd:ac:9b:35:9b:00:0d:d9:e4:b8: f9:bd:3d:c4:20:d8:22:68:fc:f3:64:29:e9:c9:e3:50:2c:e7: 4e:d5:fb:e2:1b:58:e0:68:1b:f1:d6:28:83:9d:c9:57:c9:66: f1:e0:ba:b0:1f:eb:b0:35:8d:60:27:9a:1d:6d:cd:91:67:75: 26:dc:07:d6:b8:1d:3d:a9:bb:c1:d4:3c:2b:be:70:04:0d:19: 08:3e:63:d7:81:67:36:06:f7:d4:8c:2f:82:37:5f:28:29:05: e9:0d:da:39:22:af:0d:5a:16:1b:8d:21:30:3f:99:95:9c:57: 39:db:2a:7c:28:77:9f:06:31:a2:09:80:95:28:0c:37:b2:6d: 31:ea:e0:2b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFoG1ahAtfq9PdyyZeVElW07f1ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxODU4MDJaFw0yNzAzMjIxOTAzMDJaMDMxMTAvBgNV BAMTKEI5MTg0REJBQjEzMUVDQTg1RjhGOTE1NDlCM0I1MkMxMjQ1OEFGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iiKIB6zfA95U8wPKqZahjQqv Re7sOAW0BzT41T90+dNIyWka3l+AQiKbRc2+bAq3Dz0qnXoNL0I0M008JGozT07P MoUacjkRl/tTcBQK9kmV2xJgmKVxvg4FrJALQAFsEMdyAy/7u5GOF1teg+Xi+xTf qvOFt184hOz1GxHDY6WSQCS4zOLW2Eu/Q2pdMzwOuNggd1GNnzSUhjcAyNhsnfmt WyLsX35s0/KW1Cs0HvQtf10te3c2tVwtpZLB5ts6kGLVJ/6nI2+z9tND/gS9OU8Q v9wTP0ZUr21vc2RadtCx9ZtGF0NuDtlleurgFrG8pnWEyq0aSH0lYOe2U8SbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5GE26sTHsqF+P kVSbO1LBJFivDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnNS NHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJz UjR1YVVtZXFTTmIyYnU0UTFNeUtucExBVEVMS1ppUTV0V3R3Zjh4VEZxLzAvQjkx ODREQkFCMTMxRUNBODVGOEY5MTU0OUIzQjUyQzEyNDU4QUYwQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOQIAwQCqlDsMA0EAgACMAcDBQAoBC+UMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQKxDANBgkqhkiG9w0BAQsFAAOCAQEAIFKipcAN G9j8nWh3X8PyWOpVGAovsabMtOl/sgiTpCAJ5N7CtW6YmIQOm0PY/a2oX7f5pQJ7 8G7Kve9pbAotz0zWq/HZEgR/y8zZeVnUBsuje9E/cZcJNdEO36tQdYrg+BpDgjvW jzsQ44I+RoXFQrPzK739rJs1mwAN2eS4+b09xCDYImj882Qp6cnjUCznTtX74htY 4Ggb8dYog53JV8lm8eC6sB/rsDWNYCeaHW3NkWd1JtwH1rgdPam7wdQ8K75wBA0Z CD5j14FnNgb31IwvgjdfKCkF6Q3aOSKvDVoWG40hMD+ZlZxXOdsqfCh3nwYxogmA lSgMN7JtMergKw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:54:56 2026 by rpki-client