$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer File: D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer (raw, json) Hash identifier: NRYVwVieJ7ayYtBHwUVEu58b0KN0GP99qF6QhdgNLQM= Subject key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35027EFF238EFECC86A0EAB9982D8F73B2102DA4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft caRepository: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 19:23:54 +0000 Certificate not after: Wed 24 Mar 2027 19:28:54 +0000 Subordinate resources: AS: 267563 IP: 45.70.128.0/22 IP: 181.233.104.0/22 IP: 2804:4354::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:02:7e:ff:23:8e:fe:cc:86:a0:ea:b9:98:2d:8f:73:b2:10:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 19:23:54 2026 GMT Not After : Mar 24 19:28:54 2027 GMT Subject: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:4a:bb:b1:2b:ec:25:8f:cb:c4:99:46:00: 6d:7c:ce:cb:dd:b7:57:36:7a:1c:9b:46:08:52:6e: de:5e:7c:f8:f2:73:cc:29:71:f1:3f:02:ac:d7:b7: 66:78:0c:f9:ff:95:7f:1c:2e:76:cc:2f:ac:01:cb: f1:96:fa:2c:f6:b5:e6:ed:34:0f:53:a5:f2:03:0f: c6:7e:cf:59:ee:93:b6:48:c4:26:79:f4:00:b8:cd: 92:79:db:65:a4:39:81:20:68:53:09:52:65:d9:03: 72:ec:56:0a:94:58:dc:07:bc:3f:67:67:9f:0d:d4: d1:a0:0c:f4:97:25:ee:84:30:2e:88:37:4d:8a:dd: 27:43:3d:2c:43:4c:c4:11:36:de:10:db:76:31:0e: ce:14:29:6d:18:88:62:66:8e:a9:64:2d:5d:83:29: 61:a1:57:34:80:92:19:02:89:d5:9c:a2:9b:c6:a7: 59:bc:22:fc:63:ba:54:c5:82:9a:da:1e:e7:bc:de: 4a:f5:94:07:5a:00:45:c5:a4:5b:b6:c5:fa:61:14: 44:14:5a:b0:82:9b:a9:4d:82:fd:70:03:77:df:fd: ae:f0:d7:3b:0a:f1:2e:e7:1d:31:6b:34:1f:91:ce: 1f:c7:0c:2e:e2:f5:d6:cb:b5:e4:85:9d:da:48:79: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.128.0/22 181.233.104.0/22 IPv6: 2804:4354::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267563 Signature Algorithm: sha256WithRSAEncryption d5:80:89:63:a4:ae:3b:b8:11:2f:42:fb:2e:a0:02:3f:09:fc: bb:dc:4d:da:aa:84:31:2c:a3:98:81:76:ec:41:61:28:2a:bd: 6f:c3:19:08:91:eb:07:ce:ac:09:83:51:09:5b:3c:48:d7:7e: ba:a6:6d:b3:4c:c6:ec:09:03:16:5e:6c:3f:21:22:07:db:76: ea:13:48:bb:8f:72:c1:f8:15:4d:95:28:84:cc:da:b5:8f:b2: 86:b9:4e:6c:a2:7d:eb:5c:1a:9f:b4:41:2e:7f:f7:36:d7:31: 73:67:b6:11:44:2d:9f:77:de:df:a1:88:c7:6a:1b:fd:3c:de: ec:89:e0:98:63:41:c8:39:83:57:84:fd:34:5e:43:9c:92:6a: 0f:f8:86:fb:51:58:56:90:79:93:ba:96:ec:36:a7:36:af:b5: d9:ef:8d:30:29:37:22:48:b7:53:df:d1:13:44:76:43:d7:60: ce:fa:2c:52:62:f6:77:89:fd:7b:6a:16:5f:10:7d:9a:af:4a: 1b:89:18:3e:3a:72:e9:97:5a:cd:38:88:28:3f:19:cd:8e:d7: cc:c2:17:05:1e:e3:40:58:62:72:58:81:b0:36:73:fe:92:5f: 05:fc:7c:0e:c1:82:41:28:ae:cb:0b:95:52:76:50:2a:15:08: 9d:7d:cf:df -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNQJ+/yOO/syGoOq5mC2Pc7IQLaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxOTIzNTRaFw0yNzAzMjQxOTI4NTRaMDMxMTAvBgNV BAMTKEQxNThDM0JGMDVCMjlFQjlGNTM5MzYxOEI5N0NENTEwRDFEQTIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK0q7sSvsJY/LxJlGAG18zsvd t1c2ehybRghSbt5efPjyc8wpcfE/AqzXt2Z4DPn/lX8cLnbML6wBy/GW+iz2tebt NA9TpfIDD8Z+z1nuk7ZIxCZ59AC4zZJ522WkOYEgaFMJUmXZA3LsVgqUWNwHvD9n Z58N1NGgDPSXJe6EMC6IN02K3SdDPSxDTMQRNt4Q23YxDs4UKW0YiGJmjqlkLV2D KWGhVzSAkhkCidWcopvGp1m8IvxjulTFgpraHue83kr1lAdaAEXFpFu2xfphFEQU WrCCm6lNgv1wA3ff/a7w1zsK8S7nHTFrNB+Rzh/HDC7i9dbLteSFndpIeUYJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRWMO/BbKeufU5 Nhi5fNUQ0dojVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMno4 VEhKMzZENlBqbURTWnJLRHN3ODVDZ0Nuckg3bnNranpZaGJ4ZmdHTTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6 OFRISjM2RDZQam1EU1pyS0Rzdzg1Q2dDbnJIN25za2p6WWhieGZnR005LzAvRDE1 OEMzQkYwNUIyOUVCOUY1MzkzNjE4Qjk3Q0Q1MTBEMURBMjM1NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUaAAwQCteloMA0EAgACMAcDBQAoBENUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQVKzANBgkqhkiG9w0BAQsFAAOCAQEA1YCJY6Su O7gRL0L7LqACPwn8u9xN2qqEMSyjmIF27EFhKCq9b8MZCJHrB86sCYNRCVs8SNd+ uqZts0zG7AkDFl5sPyEiB9t26hNIu49ywfgVTZUohMzatY+yhrlObKJ961wan7RB Ln/3Ntcxc2e2EUQtn3fe36GIx2ob/Tze7IngmGNByDmDV4T9NF5DnJJqD/iG+1FY VpB5k7qW7DanNq+12e+NMCk3Iki3U9/RE0R2Q9dgzvosUmL2d4n9e2oWXxB9mq9K G4kYPjpy6ZdazTiIKD8ZzY7XzMIXBR7jQFhicliBsDZz/pJfBfx8DsGCQSiuywuV UnZQKhUInX3P3w== -----END CERTIFICATE-----Generated at Wed Mar 25 22:33:09 2026 by rpki-client