$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5F687B8F5B603048124B7AB53575AD684F40544.cer File: D5F687B8F5B603048124B7AB53575AD684F40544.cer (raw, json) Hash identifier: lsYOpq7vHsRAy4fTI9s/JlGvgERAnJBELROpXCclkmE= Subject key identifier: D5:F6:87:B8:F5:B6:03:04:81:24:B7:AB:53:57:5A:D6:84:F4:05:44 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 174AAE61C49087068019C0393AF58793F7FACAA5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/D5F687B8F5B603048124B7AB53575AD684F40544.mft caRepository: rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 19:10:35 +0000 Certificate not after: Mon 22 Mar 2027 19:15:35 +0000 Subordinate resources: AS: 264125 IP: 138.94.44.0/22 IP: 2804:22d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4a:ae:61:c4:90:87:06:80:19:c0:39:3a:f5:87:93:f7:fa:ca:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 19:10:35 2026 GMT Not After : Mar 22 19:15:35 2027 GMT Subject: CN=D5F687B8F5B603048124B7AB53575AD684F40544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:2e:27:af:7f:1c:f0:7d:5b:76:75:c4:51: 77:e4:ea:ec:19:8c:42:07:5f:4e:19:a9:96:bc:ef: 7b:63:1f:9d:e8:5c:bf:f3:40:08:16:0a:5d:27:75: 2e:4b:81:ff:66:ec:e9:30:e0:54:4a:01:fb:be:01: bc:d3:18:8e:c7:ee:59:f9:39:1c:fd:27:01:09:3d: f1:1b:41:36:6b:1c:74:7e:dd:dc:8b:bf:11:80:7f: c2:b1:84:0c:7a:1f:44:3e:6f:07:22:ea:64:df:08: 3c:74:fb:3f:f5:3f:69:a3:92:fe:e3:d0:fa:d0:41: a2:5f:1a:5e:77:50:7e:8d:73:69:97:d2:8b:b4:de: cf:02:fe:04:ac:98:ba:4a:9a:71:1c:0e:1e:97:76: 29:d0:cf:14:44:2e:3a:50:27:db:f1:05:63:37:7f: 6f:ac:1f:cc:e5:88:97:5f:31:bd:e4:25:2c:c4:2d: 15:40:cc:1f:8f:6f:46:a9:c0:d7:57:b7:04:84:4b: 8e:a3:dc:8f:48:0b:19:7f:43:fb:00:81:96:6c:b0: b1:a1:4c:cd:5e:06:9c:01:2e:4d:8a:66:33:e3:bd: d1:6d:9c:3e:ea:a4:93:93:6f:7a:02:6a:d8:a2:51: ab:0e:33:df:cb:18:09:db:83:dd:ab:ce:4d:83:77: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:F6:87:B8:F5:B6:03:04:81:24:B7:AB:53:57:5A:D6:84:F4:05:44 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/D5F687B8F5B603048124B7AB53575AD684F40544.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.44.0/22 IPv6: 2804:22d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264125 Signature Algorithm: sha256WithRSAEncryption 26:c2:37:e2:53:0b:2f:4e:28:44:cc:dd:1b:ea:32:e0:57:b7: 8a:4f:1a:0c:43:a5:d6:ff:97:2c:6b:c5:31:b6:73:b6:31:1d: 96:d4:6e:cb:71:69:00:b3:c9:04:53:a9:fa:42:0b:0a:c9:24: c3:62:92:b5:f3:b6:2c:25:59:df:cc:d4:ba:3e:27:86:b9:c5: 73:5e:de:76:fb:95:cb:9c:7f:d2:63:50:ca:9a:7d:8c:88:b0: e8:e8:b0:13:47:60:dd:d8:e8:ae:4e:a2:1f:b6:4c:d5:df:ef: 8e:e3:25:e6:24:31:3e:b6:23:42:c6:a9:e9:03:76:59:74:88: 76:5d:7c:ac:91:41:66:aa:ac:23:55:a8:70:49:2a:b1:53:f8: 96:3a:10:68:a9:68:78:9e:c7:98:8f:7f:9c:b3:ed:fb:37:89: 71:75:b8:0e:7d:0b:c6:ca:8c:80:e5:5b:f8:15:5a:a8:fd:77: e0:88:6e:c6:3a:bc:48:bb:24:a0:ae:e5:ae:d6:a6:f7:b9:10: eb:21:ea:ef:70:c2:76:15:11:22:0a:f9:09:9d:9f:3a:bc:ce: 01:73:bc:9b:56:b5:ab:13:af:57:cb:35:0a:52:5a:fa:84:aa: 36:7a:9c:32:b6:d0:92:4b:a3:a8:ca:75:34:43:b8:6c:46:a7: 42:a5:a6:2b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUF0quYcSQhwaAGcA5OvWHk/f6yqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxOTEwMzVaFw0yNzAzMjIxOTE1MzVaMDMxMTAvBgNV BAMTKEQ1RjY4N0I4RjVCNjAzMDQ4MTI0QjdBQjUzNTc1QUQ2ODRGNDA1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2i4nr38c8H1bdnXEUXfk6uwZ jEIHX04ZqZa873tjH53oXL/zQAgWCl0ndS5Lgf9m7Okw4FRKAfu+AbzTGI7H7ln5 ORz9JwEJPfEbQTZrHHR+3dyLvxGAf8KxhAx6H0Q+bwci6mTfCDx0+z/1P2mjkv7j 0PrQQaJfGl53UH6Nc2mX0ou03s8C/gSsmLpKmnEcDh6XdinQzxRELjpQJ9vxBWM3 f2+sH8zliJdfMb3kJSzELRVAzB+Pb0apwNdXtwSES46j3I9ICxl/Q/sAgZZssLGh TM1eBpwBLk2KZjPjvdFtnD7qpJOTb3oCatiiUasOM9/LGAnbg92rzk2Dd9krAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTV9oe49bYDBIEk t6tTV1rWhPQFRDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnNU RzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZHZ0UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZz VEcyMW9Ib2RMUXF1clYxaDZXaGhOdUpvWUN1UmtMQUt2cU5RbW1mR2dFLzAvRDVG Njg3QjhGNUI2MDMwNDgxMjRCN0FCNTM1NzVBRDY4NEY0MDU0NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCil4sMA0EAgACMAcDBQAoBCLUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHvTANBgkqhkiG9w0BAQsFAAOCAQEAJsI34lMLL04oRMzd G+oy4Fe3ik8aDEOl1v+XLGvFMbZztjEdltRuy3FpALPJBFOp+kILCskkw2KStfO2 LCVZ38zUuj4nhrnFc17edvuVy5x/0mNQypp9jIiw6OiwE0dg3djork6iH7ZM1d/v juMl5iQxPrYjQsap6QN2WXSIdl18rJFBZqqsI1WocEkqsVP4ljoQaKloeJ7HmI9/ nLPt+zeJcXW4Dn0LxsqMgOVb+BVaqP134Ihuxjq8SLskoK7lrtam97kQ6yHq73DC dhURIgr5CZ2fOrzOAXO8m1a1qxOvV8s1ClJa+oSqNnqcMrbQkkujqMp1NEO4bEan QqWmKw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:15 2026 by rpki-client