$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D084A50319358D8E4D37836EB1B3245C20A75F44.cer File: D084A50319358D8E4D37836EB1B3245C20A75F44.cer (raw, json) Hash identifier: +GKY30MM1SxEoepHDWhkd+yyNEcgRdVv6AqOhZ8LH0c= Subject key identifier: D0:84:A5:03:19:35:8D:8E:4D:37:83:6E:B1:B3:24:5C:20:A7:5F:44 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: EFE8A997E27371B3F0A2B07D7D9E107DF8C087 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/D084A50319358D8E4D37836EB1B3245C20A75F44.mft caRepository: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 18:13:50 +0000 Certificate not after: Mon 22 Mar 2027 18:18:50 +0000 Subordinate resources: AS: 265151 IP: 143.255.188.0/22 IP: 2804:2b64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ef:e8:a9:97:e2:73:71:b3:f0:a2:b0:7d:7d:9e:10:7d:f8:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 18:13:50 2026 GMT Not After : Mar 22 18:18:50 2027 GMT Subject: CN=D084A50319358D8E4D37836EB1B3245C20A75F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:1b:4d:4e:69:6d:ee:62:37:28:7a:59:0a: ff:5e:99:85:f1:db:83:01:df:78:4d:a1:0e:45:1e: fe:53:d3:7f:42:2b:1d:70:f4:32:3e:65:09:b4:1f: f8:61:5c:59:c3:78:9c:74:2b:4e:18:45:69:cf:d9: d4:77:e1:85:bb:df:b9:4c:fd:fb:a9:5f:f1:23:4f: 3c:e7:c5:3e:15:cf:dd:39:09:0a:a5:ca:69:da:ad: 23:7a:f9:9c:e5:eb:9d:7e:66:7d:3e:e5:68:ec:ab: 55:b9:8e:c9:b3:69:32:95:d0:bd:c7:6c:48:52:48: e7:90:7e:fa:ae:da:fa:0e:55:36:08:cc:4e:01:58: 09:5d:8b:3f:6f:c9:9e:ea:37:d9:cb:85:28:bf:23: f3:c8:27:59:2e:a3:26:3a:3f:32:cf:2b:26:b3:90: a0:5d:10:54:82:eb:92:f4:fb:44:17:8c:0f:5c:c3: 58:64:57:4a:d4:34:b0:d3:51:a7:43:72:a8:19:cc: 93:21:64:85:28:81:1b:bb:16:21:97:a0:ce:71:2f: 8a:69:db:f9:b1:a0:44:92:db:ee:68:47:48:24:0a: ac:89:d1:dd:e7:78:4a:71:78:fc:3d:0c:ad:67:d7: b0:31:3a:f1:ff:66:61:86:15:65:d5:6d:81:0a:52: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:84:A5:03:19:35:8D:8E:4D:37:83:6E:B1:B3:24:5C:20:A7:5F:44 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/D084A50319358D8E4D37836EB1B3245C20A75F44.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.188.0/22 IPv6: 2804:2b64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265151 Signature Algorithm: sha256WithRSAEncryption 40:0b:6a:dc:04:9f:d6:b5:9d:ab:e9:58:ce:f2:08:59:c9:26: b6:db:ff:e3:3b:52:29:9d:4b:08:46:54:a3:ed:c6:c0:30:3c: d5:92:bb:63:e0:3a:5f:90:3d:4f:0b:0a:b8:08:fb:ad:11:cd: db:21:b9:60:51:fa:c7:ef:99:96:d1:3a:fb:88:97:65:91:e3: 46:2c:f7:bd:ea:d3:8f:d4:4c:f6:a4:8e:b6:2e:33:22:c9:25: 84:24:6d:0a:2a:65:dc:03:e2:0a:38:44:d3:9b:36:f5:7e:9b: 25:bd:6e:6e:0b:0e:dc:4d:67:15:9d:4e:9c:f1:cb:62:ff:71: a3:57:3c:42:fc:f0:04:db:de:0b:33:a3:d8:67:b0:7b:5b:df: af:1d:ef:aa:8b:74:77:4d:63:fa:65:93:02:f3:3c:9e:84:99: 56:00:1a:7f:4c:ea:a6:62:4f:1b:de:3a:a2:56:05:ce:c0:ab: 54:22:93:07:16:bc:b5:4c:19:7c:a6:2f:48:72:c7:78:83:db: 84:43:6e:18:43:e7:54:4e:f3:f7:ac:d0:07:02:5c:6a:14:01: f6:42:7b:9b:a2:00:41:1f:10:e9:b4:46:d7:6f:db:53:1b:b4: 47:54:4b:6b:5f:ef:1b:2d:21:7c:a8:eb:e7:0e:53:84:76:e0: bf:fb:d5:85 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAO/oqZfic3Gz8KKwfX2eEH34wIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxODEzNTBaFw0yNzAzMjIxODE4NTBaMDMxMTAvBgNV BAMTKEQwODRBNTAzMTkzNThEOEU0RDM3ODM2RUIxQjMyNDVDMjBBNzVGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9htNTmlt7mI3KHpZCv9emYXx 24MB33hNoQ5FHv5T039CKx1w9DI+ZQm0H/hhXFnDeJx0K04YRWnP2dR34YW737lM /fupX/EjTzznxT4Vz905CQqlymnarSN6+Zzl651+Zn0+5Wjsq1W5jsmzaTKV0L3H bEhSSOeQfvqu2voOVTYIzE4BWAldiz9vyZ7qN9nLhSi/I/PIJ1kuoyY6PzLPKyaz kKBdEFSC65L0+0QXjA9cw1hkV0rUNLDTUadDcqgZzJMhZIUogRu7FiGXoM5xL4pp 2/mxoESS2+5oR0gkCqyJ0d3neEpxePw9DK1n17AxOvH/ZmGGFWXVbYEKUl4PAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQhKUDGTWNjk03 g26xsyRcIKdfRDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2hN REtpNUpTbkZmcTVScTQ4NDdxcURrVWRiMkUxU3JwWWdtdWFGR3l1NjQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0No TURLaTVKU25GZnE1UnE0ODQ3cXFEa1VkYjJFMVNycFlnbXVhRkd5dTY0LzAvRDA4 NEE1MDMxOTM1OEQ4RTREMzc4MzZFQjFCMzI0NUMyMEE3NUY0NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj/+8MA0EAgACMAcDBQAoBCtkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLvzANBgkqhkiG9w0BAQsFAAOCAQEAQAtq3ASf1rWdq+lY zvIIWckmttv/4ztSKZ1LCEZUo+3GwDA81ZK7Y+A6X5A9TwsKuAj7rRHN2yG5YFH6 x++ZltE6+4iXZZHjRiz3verTj9RM9qSOti4zIsklhCRtCipl3APiCjhE05s29X6b Jb1ubgsO3E1nFZ1OnPHLYv9xo1c8QvzwBNveCzOj2Gewe1vfrx3vqot0d01j+mWT AvM8noSZVgAaf0zqpmJPG946olYFzsCrVCKTBxa8tUwZfKYvSHLHeIPbhENuGEPn VE7z96zQBwJcahQB9kJ7m6IAQR8Q6bRG12/bUxu0R1RLa1/vGy0hfKjr5w5ThHbg v/vVhQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:51 2026 by rpki-client