$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer File: C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer (raw, json) Hash identifier: oyAeaHSQV/33KrzuGL2UpM1H04k9sFgwd/HHLuCDYxM= Subject key identifier: C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35069A158F6B9665D8F8E07087D42DA50925273E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft caRepository: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Mar 2026 21:34:11 +0000 Certificate not after: Wed 03 Mar 2027 21:39:11 +0000 Subordinate resources: AS: 267596 IP: 45.71.20.0/22 IP: 2804:43e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:06:9a:15:8f:6b:96:65:d8:f8:e0:70:87:d4:2d:a5:09:25:27:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 4 21:34:11 2026 GMT Not After : Mar 3 21:39:11 2027 GMT Subject: CN=C897631CE96A2A90A30DA3393E1D10F2C3AD702C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:7c:6c:92:66:d5:19:c4:fe:33:4e:29:e5: e1:7b:47:72:99:dd:6b:5d:57:bc:74:24:e6:f9:ef: 0d:3b:f4:b8:02:ee:37:33:c0:b3:d5:58:37:47:ba: 26:3d:f0:3b:46:ff:d6:6d:0b:b0:d6:6b:0d:86:03: 64:fc:91:4a:bb:62:88:6e:2e:89:f4:d0:08:dd:b8: e5:ae:21:33:be:9a:16:cd:e8:e8:be:11:62:b1:69: 4a:c3:d1:21:ad:b5:b0:f7:d3:0b:b9:89:0a:cc:7c: 9e:e6:e6:4b:7d:77:13:0f:b8:bf:04:2f:8a:91:8d: 8a:b9:6d:79:b3:37:a5:2e:72:e5:04:2a:9e:7e:24: 86:f5:10:c6:c8:5f:84:3c:66:4d:f4:4e:f7:1f:8d: ee:1e:10:77:aa:a3:12:d1:0f:ca:85:57:fb:d1:87: dd:aa:32:9e:22:9b:6a:2a:b1:b5:a4:43:d5:35:25: fa:5e:35:d7:a4:cd:10:1d:da:fb:e3:f7:e4:3e:78: 29:af:91:c5:85:d7:fc:45:e7:dc:d5:c2:d2:b9:20: 42:98:5e:b7:ab:d6:7d:d7:5b:23:90:18:86:e5:5c: 30:e9:36:c8:f3:58:3a:54:9c:19:4d:0e:45:41:c1: 87:c0:03:82:ab:69:8b:d5:94:be:da:77:a4:fd:e3: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.20.0/22 IPv6: 2804:43e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267596 Signature Algorithm: sha256WithRSAEncryption 33:2d:b4:d4:f5:41:63:f3:db:fd:dc:94:63:8f:0c:33:eb:82: 34:04:3c:1e:94:5c:55:99:5a:0f:cc:75:1b:8c:70:c6:8a:73: 2f:bf:6c:ed:85:6c:ce:9b:30:f2:be:ae:7f:da:b3:3e:88:38: 45:53:a9:4d:c7:3d:24:d3:02:84:19:f2:4f:b8:92:09:4e:37: 65:e7:80:1b:f3:8b:7b:97:81:f6:22:c4:d0:38:aa:fa:82:fb: 71:af:dd:3b:51:30:e5:54:01:45:4f:22:7e:70:3c:2d:96:65: 4a:c3:08:6c:40:55:fa:3f:31:f9:67:f5:10:77:60:ed:7f:42: f6:48:5b:92:69:97:52:31:11:93:f1:bf:de:cb:11:f2:2a:0f: 96:02:59:0c:95:77:c6:0d:14:a8:0a:7b:18:4e:05:af:65:35: 8a:0b:61:33:21:be:6a:be:2c:7e:86:6a:42:73:ea:79:b6:93: cf:e5:d8:29:f0:50:89:52:ee:4b:a5:a6:19:e2:cc:f4:a7:5d: 14:8a:14:fe:70:ad:05:08:d8:a8:14:5b:a1:06:e2:67:89:38: 1b:af:d2:fa:81:a5:4b:38:a5:15:b6:d4:17:49:b9:57:2b:28: 16:8d:fd:82:cc:ad:e9:b6:2f:24:fb:ea:d4:4a:e3:35:ee:d9: 40:0f:c1:d0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNQaaFY9rlmXY+OBwh9QtpQklJz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDQyMTM0MTFaFw0yNzAzMDMyMTM5MTFaMDMxMTAvBgNV BAMTKEM4OTc2MzFDRTk2QTJBOTBBMzBEQTMzOTNFMUQxMEYyQzNBRDcwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2HxskmbVGcT+M04p5eF7R3KZ 3WtdV7x0JOb57w079LgC7jczwLPVWDdHuiY98DtG/9ZtC7DWaw2GA2T8kUq7Yohu Lon00AjduOWuITO+mhbN6Oi+EWKxaUrD0SGttbD30wu5iQrMfJ7m5kt9dxMPuL8E L4qRjYq5bXmzN6UucuUEKp5+JIb1EMbIX4Q8Zk30Tvcfje4eEHeqoxLRD8qFV/vR h92qMp4im2oqsbWkQ9U1JfpeNdekzRAd2vvj9+Q+eCmvkcWF1/xF59zVwtK5IEKY Xrer1n3XWyOQGIblXDDpNsjzWDpUnBlNDkVBwYfAA4KraYvVlL7ad6T947YvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIl2Mc6WoqkKMN ozk+HRDyw61wLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkE1 YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3c3ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pB NWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAvQzg5 NzYzMUNFOTZBMkE5MEEzMERBMzM5M0UxRDEwRjJDM0FENzAyQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUcUMA0EAgACMAcDBQAoBEPgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVTDANBgkqhkiG9w0BAQsFAAOCAQEAMy201PVBY/Pb/dyU Y48MM+uCNAQ8HpRcVZlaD8x1G4xwxopzL79s7YVszpsw8r6uf9qzPog4RVOpTcc9 JNMChBnyT7iSCU43ZeeAG/OLe5eB9iLE0Diq+oL7ca/dO1Ew5VQBRU8ifnA8LZZl SsMIbEBV+j8x+Wf1EHdg7X9C9khbkmmXUjERk/G/3ssR8ioPlgJZDJV3xg0UqAp7 GE4Fr2U1igthMyG+ar4sfoZqQnPqebaTz+XYKfBQiVLuS6WmGeLM9KddFIoU/nCt BQjYqBRboQbiZ4k4G6/S+oGlSzilFbbUF0m5VysoFo39gsyt6bYvJPvq1ErjNe7Z QA/B0A== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:56 2026 by rpki-client