$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.cer File: D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.cer (raw, json) Hash identifier: nJutiJofCaTGdR405f/FKFePAT+LsNIzxJiDfwn0YJA= Subject key identifier: D0:1B:7B:99:D6:6F:CD:E6:B6:DC:2C:DF:54:E7:96:A8:8E:D5:1A:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 602DC2858A10BABF58526BA42886072B59BEB9EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.mft caRepository: rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 01:39:41 +0000 Certificate not after: Fri 05 Mar 2027 01:44:41 +0000 Subordinate resources: AS: 265320 IP: 168.121.104.0/22 IP: 2804:2e10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2d:c2:85:8a:10:ba:bf:58:52:6b:a4:28:86:07:2b:59:be:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 01:39:41 2026 GMT Not After : Mar 5 01:44:41 2027 GMT Subject: CN=D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:94:ee:cd:78:5e:7e:20:c7:a8:fe:87:42: bb:7e:bc:03:f9:6d:95:cb:33:58:0f:a0:90:10:93: e8:a6:40:20:ef:1d:e4:13:28:c9:29:50:a1:f7:6d: c8:ae:a5:b9:91:1f:4c:97:1a:45:5e:c7:e4:37:33: 4d:44:c4:16:5e:48:a4:ed:36:d8:94:96:ed:53:05: ef:6e:6f:8c:a1:46:ff:57:b1:83:b2:0d:4b:80:53: 93:99:ec:f1:0f:f7:45:4e:62:11:43:07:9a:a8:23: 60:8f:bc:e2:49:0c:3e:bb:1b:a3:08:c3:d2:ba:87: 93:17:02:e8:77:0b:2f:96:b9:1d:2a:fb:9e:0c:00: f2:5a:f8:e8:4b:de:80:46:f8:95:58:d5:dd:93:53: 13:71:59:6c:69:73:b0:f1:3d:97:20:40:88:1d:e2: 5b:d0:cd:e7:97:3e:e9:2d:42:52:eb:6b:ab:cd:04: 25:d9:2d:cb:08:df:88:2e:8e:41:25:33:5d:16:a7: df:2c:c4:68:7c:d5:18:57:11:42:7c:8c:ce:c7:47: 4b:c6:03:18:6a:2e:44:99:20:b0:ad:20:c1:f6:b0: 91:96:63:5a:de:ee:fe:a7:90:0f:aa:83:b1:dd:0f: 95:ac:36:af:9f:9a:24:5d:b9:d1:eb:d7:5f:d2:fe: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:1B:7B:99:D6:6F:CD:E6:B6:DC:2C:DF:54:E7:96:A8:8E:D5:1A:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.104.0/22 IPv6: 2804:2e10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265320 Signature Algorithm: sha256WithRSAEncryption 73:ef:ed:96:45:f3:32:44:d2:7d:ea:76:81:d9:a7:6f:dc:f6: b4:10:a6:8c:f1:19:20:9c:89:ad:77:4c:de:be:f1:68:86:06: 42:db:2b:07:80:aa:5a:bf:72:44:82:49:c0:56:77:7c:c1:b2: e7:da:56:e7:73:69:bb:55:09:ef:33:5f:0a:ab:18:15:37:4b: 87:6a:d4:04:70:0e:03:59:20:88:23:c0:f1:b2:81:ab:2f:87: 14:d1:bb:73:41:8f:e5:83:e6:d1:76:29:6b:8a:e1:29:c9:2b: 3a:3b:9a:d2:bb:18:0b:ae:5b:54:29:e5:5b:08:07:46:d7:ea: e2:5b:d1:00:2d:00:7f:e2:72:c8:14:e7:e1:1c:3a:c0:c3:2f: 3a:f0:ce:d9:a1:8b:e6:9b:cf:c6:0a:aa:2c:b3:6f:6a:49:4c: 89:d2:04:45:b8:27:5c:f1:0d:b2:14:3b:6c:12:2b:3d:93:fa: 6a:11:58:4f:d5:44:60:25:5e:db:57:38:a1:34:00:21:11:63: 9d:1f:2a:2e:aa:5f:0a:bf:b2:24:4e:7b:a5:69:9c:0d:a6:69: 7c:dc:ae:4a:b4:8f:27:d7:7f:de:6b:ac:e4:a4:4b:39:36:8c: 46:a7:e0:65:0e:20:4b:e3:e6:d8:da:24:e0:3f:51:81:43:63: d3:00:18:7f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYC3ChYoQur9YUmukKIYHK1m+ue4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDYwMTM5NDFaFw0yNzAzMDUwMTQ0NDFaMDMxMTAvBgNV BAMTKEQwMUI3Qjk5RDY2RkNERTZCNkRDMkNERjU0RTc5NkE4OEVENTFBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpZTuzXhefiDHqP6HQrt+vAP5 bZXLM1gPoJAQk+imQCDvHeQTKMkpUKH3bciupbmRH0yXGkVex+Q3M01ExBZeSKTt NtiUlu1TBe9ub4yhRv9XsYOyDUuAU5OZ7PEP90VOYhFDB5qoI2CPvOJJDD67G6MI w9K6h5MXAuh3Cy+WuR0q+54MAPJa+OhL3oBG+JVY1d2TUxNxWWxpc7DxPZcgQIgd 4lvQzeeXPuktQlLra6vNBCXZLcsI34gujkElM10Wp98sxGh81RhXEUJ8jM7HR0vG AxhqLkSZILCtIMH2sJGWY1re7v6nkA+qg7HdD5WsNq+fmiRdudHr11/S/rcdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQG3uZ1m/N5rbc LN9U55aojtUarjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGZL VFM2MmF0SGlHaUFDVHZNSkRCUkNLVmFWdFExRm5oMmI2YjhXR1Z2dnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhm S1RTNjJhdEhpR2lBQ1R2TUpEQlJDS1ZhVnRRMUZuaDJiNmI4V0dWdnZyLzAvRDAx QjdCOTlENjZGQ0RFNkI2REMyQ0RGNTRFNzk2QTg4RUQ1MUFBRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqHloMA0EAgACMAcDBQAoBC4QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMaDANBgkqhkiG9w0BAQsFAAOCAQEAc+/tlkXzMkTSfep2 gdmnb9z2tBCmjPEZIJyJrXdM3r7xaIYGQtsrB4CqWr9yRIJJwFZ3fMGy59pW53Np u1UJ7zNfCqsYFTdLh2rUBHAOA1kgiCPA8bKBqy+HFNG7c0GP5YPm0XYpa4rhKckr Ojua0rsYC65bVCnlWwgHRtfq4lvRAC0Af+JyyBTn4Rw6wMMvOvDO2aGL5pvPxgqq LLNvaklMidIERbgnXPENshQ7bBIrPZP6ahFYT9VEYCVe21c4oTQAIRFjnR8qLqpf Cr+yJE57pWmcDaZpfNyuSrSPJ9d/3mus5KRLOTaMRqfgZQ4gS+Pm2Nok4D9RgUNj 0wAYfw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:47 2026 by rpki-client