$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer File: D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer (raw, json) Hash identifier: gbQVtOuNV7EuusXQeywv2+qOcLsKOAAlRVQdNUCXIcw= Subject key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6EFAC5EE47D9856525432CE402114D8A3FC3B1B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft caRepository: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Mar 2026 19:02:24 +0000 Certificate not after: Mon 15 Mar 2027 19:07:24 +0000 Subordinate resources: AS: 265181 IP: 167.249.132.0/22 IP: 170.233.36.0/22 IP: 2804:2bdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fa:c5:ee:47:d9:85:65:25:43:2c:e4:02:11:4d:8a:3f:c3:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 16 19:02:24 2026 GMT Not After : Mar 15 19:07:24 2027 GMT Subject: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:0c:e0:1f:6a:c2:1d:c2:c9:89:78:f1:6c: 8b:9e:a8:be:ca:45:f4:40:cb:49:31:02:9b:a6:47: 4e:a4:89:50:29:3c:36:07:d4:6e:ea:05:5f:76:4e: cf:ac:58:dc:a5:ea:42:83:71:9b:1d:3c:db:67:b1: f8:10:fd:e4:a6:30:d1:97:23:30:dd:d5:f7:61:ab: 60:f8:07:c0:1a:e5:23:49:6a:57:ba:19:11:c2:a6: 4a:ef:8f:fe:3f:13:ab:b9:e7:11:93:7a:57:f0:09: 6e:a0:46:00:54:8c:c2:9a:83:55:9d:de:bd:17:4a: 50:bb:76:01:3f:14:20:77:13:31:99:75:a2:b6:9f: 06:f5:66:7b:ef:70:ba:ce:9d:a7:b3:17:c8:ba:51: a0:5c:2c:e2:58:20:f7:65:e7:5e:7f:43:da:17:7e: 76:70:ff:55:87:08:53:6a:eb:65:3c:95:01:c0:dc: 06:27:3a:3d:fa:bf:b1:b9:19:f5:70:a6:6e:89:b3: 1e:38:49:90:30:34:ac:7a:36:07:6d:db:3b:5b:83: 33:fd:34:ce:09:1a:55:58:c7:f1:5f:0b:c8:99:fc: d0:5c:35:32:f3:e8:f8:07:42:46:1f:8d:2a:b6:94: 9f:b3:49:33:8a:73:84:30:df:55:1c:a9:f3:e0:02: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.132.0/22 170.233.36.0/22 IPv6: 2804:2bdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265181 Signature Algorithm: sha256WithRSAEncryption 45:d3:8f:c5:e7:07:36:18:81:dc:f1:a6:9c:9b:ff:5e:cb:f5: 67:82:e6:0b:a0:10:60:ed:d4:7a:ac:ae:2f:b2:9c:30:35:eb: 01:26:d5:fa:90:c1:cc:95:ba:60:23:75:f2:af:61:ba:12:42: 3b:e3:83:e4:27:cf:87:65:b1:93:b6:4a:c6:1c:99:c6:97:42: 79:a1:6e:14:e8:78:74:ec:83:fd:71:d1:99:81:a2:a5:9c:2f: b8:ff:dd:21:1c:7c:b9:59:8a:3e:87:ba:ad:4c:a7:3e:82:2a: e8:35:dd:74:80:8b:fc:3c:7a:65:7f:a4:67:be:88:dd:09:92: 64:f8:e9:6e:2c:e7:a9:bd:79:70:91:5d:4a:be:5b:01:ec:07: f6:64:9d:d7:21:d3:b9:58:cb:2f:e0:28:80:3e:b8:b4:b6:0f: 80:0b:6b:bc:83:8f:3e:e9:bc:b3:60:18:b8:ed:b4:eb:d4:1f: 0e:e5:d5:5f:6f:d5:47:22:f1:dd:51:51:db:81:f8:dd:eb:da: 4f:ea:89:3c:04:77:16:02:30:2a:6c:b9:7e:bd:61:66:a2:a8: 04:27:8f:fd:b1:40:a8:03:a6:d5:ce:41:f4:4f:65:9a:5d:fa: b3:2e:c1:1a:ec:13:8d:0b:d8:5d:43:91:f0:e1:41:63:0d:9c: 46:59:fb:2e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbvrF7kfZhWUlQyzkAhFNij/DsbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTYxOTAyMjRaFw0yNzAzMTUxOTA3MjRaMDMxMTAvBgNV BAMTKEQxNUNGRjZGQUM4OTQ0QzI0NUM3NzI5OEFCMTVEMThDNDA2RDRGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUwzgH2rCHcLJiXjxbIueqL7K RfRAy0kxApumR06kiVApPDYH1G7qBV92Ts+sWNyl6kKDcZsdPNtnsfgQ/eSmMNGX IzDd1fdhq2D4B8Aa5SNJale6GRHCpkrvj/4/E6u55xGTelfwCW6gRgBUjMKag1Wd 3r0XSlC7dgE/FCB3EzGZdaK2nwb1ZnvvcLrOnaezF8i6UaBcLOJYIPdl515/Q9oX fnZw/1WHCFNq62U8lQHA3AYnOj36v7G5GfVwpm6Jsx44SZAwNKx6Ngdt2ztbgzP9 NM4JGlVYx/FfC8iZ/NBcNTLz6PgHQkYfjSq2lJ+zSTOKc4Qw31UcqfPgAjrfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRXP9vrIlEwkXH cpirFdGMQG1P3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGto NG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5d3cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr aDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzAvRDE1 Q0ZGNkZBQzg5NDRDMjQ1Qzc3Mjk4QUIxNUQxOEM0MDZENEZEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCp/mEAwQCqukkMA0EAgACMAcDBQAoBCvcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQL3TANBgkqhkiG9w0BAQsFAAOCAQEARdOPxecH NhiB3PGmnJv/Xsv1Z4LmC6AQYO3UeqyuL7KcMDXrASbV+pDBzJW6YCN18q9huhJC O+OD5CfPh2Wxk7ZKxhyZxpdCeaFuFOh4dOyD/XHRmYGipZwvuP/dIRx8uVmKPoe6 rUynPoIq6DXddICL/Dx6ZX+kZ76I3QmSZPjpbiznqb15cJFdSr5bAewH9mSd1yHT uVjLL+AogD64tLYPgAtrvIOPPum8s2AYuO2069QfDuXVX2/VRyLx3VFR24H43eva T+qJPAR3FgIwKmy5fr1hZqKoBCeP/bFAqAOm1c5B9E9lml36sy7BGuwTjQvYXUOR 8OFBYw2cRln7Lg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:04 2026 by rpki-client