$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer (raw, json) Hash identifier: UURm6a34mtCdMzDBEY4ylE3XpaBK+9vUmKiWH9lcHSo= Subject key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2957BC331F38A3FDB7E5DE3235F1ABDFD907FBBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft caRepository: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 02:55:18 +0000 Certificate not after: Tue 09 Mar 2027 03:00:18 +0000 Subordinate resources: AS: 61623 IP: 138.186.16.0/22 IP: 2804:9390::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 02:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:57:bc:33:1f:38:a3:fd:b7:e5:de:32:35:f1:ab:df:d9:07:fb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 10 02:55:18 2026 GMT Not After : Mar 9 03:00:18 2027 GMT Subject: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:81:dd:68:c0:b1:dc:8a:5c:34:59:fd:c2: d7:39:fe:49:d9:f8:d3:b3:2e:3f:4a:5a:b1:e6:e0: f1:23:35:a5:de:21:50:20:89:f0:f0:fb:03:e9:5f: d6:14:2f:22:71:ad:89:a5:89:37:db:bc:7e:31:c0: f1:9e:55:06:ed:0e:79:33:cf:71:7a:09:fc:4c:7c: 5b:78:7b:ea:dd:1e:7f:90:f0:f4:30:29:5e:1f:1c: b1:96:91:9b:c5:53:2b:92:a7:84:76:ed:56:81:cd: ae:00:39:54:20:f8:b1:f6:c7:d2:2d:9c:8e:92:c2: 35:b5:d2:60:a9:12:eb:02:36:13:84:24:b4:06:9f: 4b:7c:1c:36:c8:4e:40:98:30:4b:0b:94:6a:5c:42: 1a:87:c3:b1:6f:a3:19:e4:47:fe:3e:6f:c5:7a:e3: 98:9c:61:97:98:24:74:33:4c:43:92:23:48:26:25: 66:c5:5f:b8:df:0b:4f:c9:ea:89:73:cc:36:72:ba: 2f:b1:5e:41:bd:ac:e7:dd:31:9e:bb:c9:b8:78:df: c3:84:15:12:53:95:04:56:22:22:f4:a6:37:8e:27: d9:5f:3a:91:18:7c:6f:f2:2c:43:26:02:4c:d5:f6: 2e:38:b0:92:86:65:60:86:86:18:18:51:b9:c7:b2: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.16.0/22 IPv6: 2804:9390::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61623 Signature Algorithm: sha256WithRSAEncryption 08:39:78:59:3b:fa:41:0b:29:b2:40:58:ac:55:23:ea:42:2c: 8f:c6:69:c7:b3:04:b5:e3:1c:da:b3:0d:5c:bb:88:1a:ca:dd: 25:77:5f:f5:ea:9c:36:dc:26:df:71:fa:7b:a4:b6:5a:b9:be: be:75:33:00:5c:c9:46:3c:91:12:ed:7e:05:cf:d2:f6:0e:ed: 5f:8a:4e:be:53:46:fd:70:36:11:b2:63:12:35:3d:00:f3:ac: b5:ff:b1:dc:f9:86:c6:6e:30:9d:e1:3e:ca:b7:77:7d:c5:b0: 14:5e:61:24:e2:9d:05:20:bf:4c:27:a2:69:af:d2:5a:8a:ed: 05:0e:78:a6:29:4e:2a:12:1c:36:94:49:2e:bf:06:2e:93:8a: 15:1f:ac:0c:2a:5f:e9:ac:74:74:13:9f:77:00:6b:0c:f8:d7: 49:af:98:4d:45:d3:09:67:f9:33:2d:67:7a:52:e6:91:9e:f8: 1d:e9:46:31:c0:5d:85:0d:c2:36:60:34:14:f5:2d:27:d9:7b: 46:a5:4a:e0:25:77:49:47:4a:2f:57:5b:78:b6:3a:51:b8:9c: 6d:be:bf:b6:7b:4d:a3:95:1b:a8:53:72:06:0c:75:81:6f:9d: 9d:28:99:aa:25:97:90:17:42:26:4e:1f:aa:53:d9:fc:22:38: f1:7f:cc:d4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUKVe8Mx84o/235d4yNfGr39kH+70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTAwMjU1MThaFw0yNzAzMDkwMzAwMThaMDMxMTAvBgNV BAMTKEJBNTdEMjM5RDJEQzBBQzI1NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLIHdaMCx3IpcNFn9wtc5/knZ +NOzLj9KWrHm4PEjNaXeIVAgifDw+wPpX9YULyJxrYmliTfbvH4xwPGeVQbtDnkz z3F6CfxMfFt4e+rdHn+Q8PQwKV4fHLGWkZvFUyuSp4R27VaBza4AOVQg+LH2x9It nI6SwjW10mCpEusCNhOEJLQGn0t8HDbITkCYMEsLlGpcQhqHw7FvoxnkR/4+b8V6 45icYZeYJHQzTEOSI0gmJWbFX7jfC0/J6olzzDZyui+xXkG9rOfdMZ67ybh438OE FRJTlQRWIiL0pjeOJ9lfOpEYfG/yLEMmAkzV9i44sJKGZWCGhhgYUbnHsiHlAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6V9I50twKwlc3 Onu61RiGql1MRjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGRC S2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGRC S2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9CQTU3 RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKuhAwDQQCAAIwBwMFACgEk5AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPC3MA0GCSqGSIb3DQEBCwUAA4IBAQAIOXhZO/pBCymyQFis VSPqQiyPxmnHswS14xzasw1cu4gayt0ld1/16pw23Cbfcfp7pLZaub6+dTMAXMlG PJES7X4Fz9L2Du1fik6+U0b9cDYRsmMSNT0A86y1/7Hc+YbGbjCd4T7Kt3d9xbAU XmEk4p0FIL9MJ6Jpr9Jaiu0FDnimKU4qEhw2lEkuvwYuk4oVH6wMKl/prHR0E593 AGsM+NdJr5hNRdMJZ/kzLWd6UuaRnvgd6UYxwF2FDcI2YDQU9S0n2XtGpUrgJXdJ R0ovV1t4tjpRuJxtvr+2e02jlRuoU3IGDHWBb52dKJmqJZeQF0ImTh+qU9n8Ijjx f8zU -----END CERTIFICATE-----Generated at Thu Mar 26 02:48:48 2026 by rpki-client