$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer File: D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer (raw, json) Hash identifier: APjFGAhH3TKGbgT9W/snKr9qjz4swQlexghecOIfC1U= Subject key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 78312FF392D2C7F6ADE05B0A36379E44AFE47B82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft caRepository: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Mar 2026 20:29:36 +0000 Certificate not after: Mon 01 Mar 2027 20:34:36 +0000 Subordinate resources: AS: 53062 IP: 45.7.128.0/22 IP: 168.90.168.0/22 IP: 170.150.236.0/22 IP: 177.36.176.0/20 IP: 177.75.160.0/20 IP: 177.155.128.0/20 IP: 186.211.96.0/20 IP: 187.85.144.0/20 IP: 2804:3b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:31:2f:f3:92:d2:c7:f6:ad:e0:5b:0a:36:37:9e:44:af:e4:7b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 2 20:29:36 2026 GMT Not After : Mar 1 20:34:36 2027 GMT Subject: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:78:eb:88:bf:00:30:6c:b1:5c:70:7c:99: 89:48:84:58:03:0e:6d:62:f7:23:2a:9a:3f:75:0b: d8:dd:6c:d9:92:ad:5d:18:32:55:cf:ba:6b:c1:d0: 67:af:50:a3:d6:69:79:a0:88:65:97:cf:f4:a6:80: 7f:c5:b1:fb:d8:54:6e:a2:15:03:9e:c3:14:6e:2e: e4:64:26:92:43:e2:9f:e9:31:47:c6:9b:7f:31:d5: e8:66:9f:74:b2:b4:d8:c7:01:f8:12:e3:b5:af:cd: e6:7d:c7:09:a1:8a:91:8e:2b:0f:15:eb:15:fa:1a: f5:e5:18:20:64:63:62:c9:5d:8d:b7:8b:e9:be:12: 3b:62:cd:a9:aa:46:1c:5a:a8:d8:55:a6:d3:07:d6: 2c:00:05:f4:2d:a7:28:44:5a:06:bf:6b:96:8b:da: e6:97:93:59:21:20:2c:65:0e:00:1c:cd:0e:f5:80: 24:45:a9:89:e7:d2:9d:55:be:6b:7e:af:13:b7:bf: 3a:25:5b:c1:9c:1e:e7:0f:e5:9c:dd:8b:c6:6f:da: ff:07:01:64:5f:00:87:49:48:e1:00:1e:48:18:5c: 79:06:87:49:fe:cc:c2:44:74:d6:16:1f:70:fa:06: 28:cf:b8:63:c0:3e:03:9c:4c:ce:07:31:3c:25:c8: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.128.0/22 168.90.168.0/22 170.150.236.0/22 177.36.176.0/20 177.75.160.0/20 177.155.128.0/20 186.211.96.0/20 187.85.144.0/20 IPv6: 2804:3b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53062 Signature Algorithm: sha256WithRSAEncryption 5a:e9:a8:9e:21:d0:a5:d0:af:43:a7:bb:36:21:cb:e0:1a:8a: 85:6c:ad:8b:b0:a6:8a:d3:46:18:2c:c8:be:09:09:0b:0d:11: 95:0c:d8:a1:a2:0a:95:a7:ad:85:f2:4c:36:97:2a:00:52:88: 98:7e:a4:c9:bb:90:6e:f6:ac:38:c7:29:b0:93:85:92:33:21: dd:ed:4e:71:c7:8e:02:c4:95:a3:0b:5d:65:ac:73:1c:31:ac: b1:6b:f2:48:83:72:ee:15:0d:76:bc:f8:d0:d6:ed:5a:8d:25: 24:1e:c5:c2:4a:e8:eb:93:a5:3c:bc:8c:40:6f:fd:bb:7c:2e: 1b:90:ac:43:42:c5:dd:bd:a9:2d:e2:ab:3d:07:f4:19:8c:ba: 72:29:12:f8:c9:ae:5d:89:19:7c:71:d5:47:0f:b5:ba:21:c5: ea:90:3d:17:3d:9d:8a:4d:d3:29:fc:a6:c9:f8:e6:bc:99:e0: 4e:10:9c:3a:95:9c:77:45:6a:d9:d6:69:4c:2a:ca:4c:74:8c: 17:ea:9c:e0:9d:5f:9c:72:d6:42:7e:0f:1c:2f:e4:0c:c0:75: 43:64:ee:5b:de:7a:92:7a:df:ef:2b:1c:ea:64:f6:76:ef:ba: 3b:a6:4d:5f:6f:a8:c9:05:ca:55:9d:30:bb:0f:d5:df:ad:14: 5b:23:b2:ba -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUeDEv85LSx/at4FsKNjeeRK/ke4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDIyMDI5MzZaFw0yNzAzMDEyMDM0MzZaMDMxMTAvBgNV BAMTKEQyM0E5QUI3NDM4MjE2OEI0QjBFMEY1NzcyQjRGMjVBNDYxRjhCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJHjriL8AMGyxXHB8mYlIhFgD Dm1i9yMqmj91C9jdbNmSrV0YMlXPumvB0GevUKPWaXmgiGWXz/SmgH/FsfvYVG6i FQOewxRuLuRkJpJD4p/pMUfGm38x1ehmn3SytNjHAfgS47WvzeZ9xwmhipGOKw8V 6xX6GvXlGCBkY2LJXY23i+m+EjtizamqRhxaqNhVptMH1iwABfQtpyhEWga/a5aL 2uaXk1khICxlDgAczQ71gCRFqYnn0p1Vvmt+rxO3vzolW8GcHucP5Zzdi8Zv2v8H AWRfAIdJSOEAHkgYXHkGh0n+zMJEdNYWH3D6BijPuGPAPgOcTM4HMTwlyIXZAgMB AAGjggNiMIIDXjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSOpq3Q4IWi0sO D1dytPJaRh+LYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWhn RFdBQVo3NGpZaDE5TFU2djdBUnFTeE5WNGp2ZEVpREZXOTI5d3V2cC80LzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWhn RFdBQVo3NGpZaDE5TFU2djdBUnFTeE5WNGp2ZEVpREZXOTI5d3V2cC80L0QyM0E5 QUI3NDM4MjE2OEI0QjBFMEY1NzcyQjRGMjVBNDYxRjhCNjAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB /wRJMEcwNgQCAAEwMAMEAi0HgAMEAqhaqAMEAqqW7AMEBLEksAMEBLFLoAMEBLGb gAMEBLrTYAMEBLtVkDANBAIAAjAHAwUAKAQDsDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAz0YwDQYJKoZIhvcNAQELBQADggEBAFrpqJ4h0KXQr0OnuzYhy+AaioVs rYuwporTRhgsyL4JCQsNEZUM2KGiCpWnrYXyTDaXKgBSiJh+pMm7kG72rDjHKbCT hZIzId3tTnHHjgLElaMLXWWscxwxrLFr8kiDcu4VDXa8+NDW7VqNJSQexcJK6OuT pTy8jEBv/bt8LhuQrENCxd29qS3iqz0H9BmMunIpEvjJrl2JGXxx1UcPtbohxeqQ PRc9nYpN0yn8psn45ryZ4E4QnDqVnHdFatnWaUwqykx0jBfqnOCdX5xy1kJ+Dxwv 5AzAdUNk7lveepJ63+8rHOpk9nbvujumTV9vqMkFylWdMLsP1d+tFFsjsro= -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:56 2026 by rpki-client