$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer File: D495C627858363377EC2F78374A56D2330185EC0.cer (raw, json) Hash identifier: HgUfXmVfiyOa4FB/jEmiNEvP+iA1sf+foixkH4TmKcc= Subject key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 57EFC0DFE7B05EF20CA10D3F75FFF48BAEA83CF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft caRepository: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 19:05:09 +0000 Certificate not after: Tue 23 Mar 2027 19:10:09 +0000 Subordinate resources: AS: 269684 IP: 45.191.204.0/22 IP: 2804:6850::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ef:c0:df:e7:b0:5e:f2:0c:a1:0d:3f:75:ff:f4:8b:ae:a8:3c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 19:05:09 2026 GMT Not After : Mar 23 19:10:09 2027 GMT Subject: CN=D495C627858363377EC2F78374A56D2330185EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:9d:8f:67:54:d4:16:a9:d9:6f:d7:1b:cc: 7f:6d:c1:f1:3c:34:41:45:4a:25:34:29:1b:18:de: 11:46:89:f6:a5:92:9a:b1:c6:f9:d6:a8:3c:24:d9: ca:e5:db:26:37:9b:e2:08:3f:30:99:fd:a2:fa:54: b9:27:92:e0:e2:8c:4a:f1:53:85:a1:f4:8f:a3:40: 50:1e:3d:43:31:0c:50:ed:c3:b7:96:20:87:c9:3b: f1:55:39:20:4d:68:b2:eb:0b:fa:fa:40:6b:6b:72: 4e:b9:10:43:76:e3:2f:d7:53:5a:a9:a4:72:88:aa: 1f:95:ae:52:79:3a:3f:e7:d0:a1:d9:ab:a2:4b:b4: 90:28:eb:68:c1:09:5a:ad:33:7a:a0:8a:83:b9:69: 01:44:8f:5b:d9:63:f5:bc:f2:40:5b:8b:dd:93:ff: 7b:99:6e:a5:25:43:e6:6e:ee:69:13:3a:6c:13:30: 9e:38:f2:5f:f4:b9:77:cf:56:e4:5c:38:b5:f6:e9: 53:d7:45:7f:9c:28:ef:ee:27:91:78:7a:f0:ea:3a: ca:5d:b8:4c:de:8d:f7:45:c5:1a:2c:81:f1:1a:c6: 23:b3:9a:b5:cc:6f:63:bd:4c:d3:61:d7:f2:32:b0: b9:5b:ab:59:ed:3f:77:9e:53:53:b1:e1:01:55:46: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.204.0/22 IPv6: 2804:6850::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269684 Signature Algorithm: sha256WithRSAEncryption b9:b7:30:5d:40:38:ee:b6:72:ba:20:0f:9f:9a:66:8c:53:13: 67:8c:61:32:65:a5:49:b4:70:a7:ce:53:35:ce:09:bc:7d:ae: 73:51:24:fc:37:c5:14:ce:b5:d7:d9:0a:4b:f5:47:4f:eb:ca: ca:f5:63:36:58:ff:04:ba:a6:94:bf:31:bb:18:e8:93:3a:47: 10:ec:70:1c:0a:16:72:b7:a8:10:69:5d:0b:f2:2a:a5:41:c1: 0b:d4:22:b3:8c:8b:4a:1a:a2:a5:7a:56:4c:9e:69:5c:22:1d: de:09:b2:66:4f:97:8c:93:42:ff:59:2f:8f:65:a8:93:fd:4f: 9b:b8:44:d7:f1:9a:45:dd:67:d0:f2:dd:c9:b6:66:a7:6a:35: 70:f8:a7:9f:99:25:4d:92:0d:2e:51:81:55:82:d7:96:9f:37: b7:0a:28:19:63:cb:98:9c:aa:f0:fb:85:a2:34:0d:f1:6a:66: 3d:a4:fa:4d:17:0c:5d:69:71:53:5b:df:ac:10:16:a8:83:66: ad:06:f4:a9:d3:1e:2f:5c:52:c0:fc:69:39:5c:fe:ab:b4:6b: aa:1d:1c:7a:17:14:c4:7f:22:7a:ac:4e:70:0e:55:f4:53:2a: 10:f0:47:98:5c:e2:8f:63:91:24:96:6f:58:66:74:de:17:15: 84:65:c1:01 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUV+/A3+ewXvIMoQ0/df/0i66oPPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxOTA1MDlaFw0yNzAzMjMxOTEwMDlaMDMxMTAvBgNV BAMTKEQ0OTVDNjI3ODU4MzYzMzc3RUMyRjc4Mzc0QTU2RDIzMzAxODVFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6Z2PZ1TUFqnZb9cbzH9twfE8 NEFFSiU0KRsY3hFGifalkpqxxvnWqDwk2crl2yY3m+IIPzCZ/aL6VLknkuDijErx U4Wh9I+jQFAePUMxDFDtw7eWIIfJO/FVOSBNaLLrC/r6QGtrck65EEN24y/XU1qp pHKIqh+VrlJ5Oj/n0KHZq6JLtJAo62jBCVqtM3qgioO5aQFEj1vZY/W88kBbi92T /3uZbqUlQ+Zu7mkTOmwTMJ448l/0uXfPVuRcOLX26VPXRX+cKO/uJ5F4evDqOspd uEzejfdFxRosgfEaxiOzmrXMb2O9TNNh1/IysLlbq1ntP3eeU1Ox4QFVRl8pAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUlcYnhYNjN37C 94N0pW0jMBhewDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE1h dmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJoUzgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hN YXZmWG84amd2d3NGeTUzazRFTHF4R3lZYUNYZWhwOUp6bjlRclQyaFM4LzEvRDQ5 NUM2Mjc4NTgzNjMzNzdFQzJGNzgzNzRBNTZEMjMzMDE4NUVDMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb/MMA0EAgACMAcDBQAoBGhQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQddDANBgkqhkiG9w0BAQsFAAOCAQEAubcwXUA47rZyuiAP n5pmjFMTZ4xhMmWlSbRwp85TNc4JvH2uc1Ek/DfFFM6119kKS/VHT+vKyvVjNlj/ BLqmlL8xuxjokzpHEOxwHAoWcreoEGldC/IqpUHBC9Qis4yLShqipXpWTJ5pXCId 3gmyZk+XjJNC/1kvj2Wok/1Pm7hE1/GaRd1n0PLdybZmp2o1cPinn5klTZINLlGB VYLXlp83twooGWPLmJyq8PuFojQN8WpmPaT6TRcMXWlxU1vfrBAWqINmrQb0qdMe L1xSwPxpOVz+q7Rrqh0cehcUxH8ieqxOcA5V9FMqEPBHmFzij2ORJJZvWGZ03hcV hGXBAQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:35 2026 by rpki-client