$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer File: D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer (raw, json) Hash identifier: C03SWc6BsOSOg08+7WjKsiGCL52DKc0NOkU3zhkxyUY= Subject key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29581EACAF65711B2474B204DD2F11A3845FC72B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft caRepository: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 17:05:05 +0000 Certificate not after: Tue 23 Mar 2027 17:10:05 +0000 Subordinate resources: AS: 271293 IP: 170.233.240.0/22 IP: 2804:793c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:1e:ac:af:65:71:1b:24:74:b2:04:dd:2f:11:a3:84:5f:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 17:05:05 2026 GMT Not After : Mar 23 17:10:05 2027 GMT Subject: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:f4:64:47:c3:d6:45:50:74:94:fc:b8:01: bb:49:02:ae:aa:da:36:07:00:a9:86:d8:62:35:2f: c5:7d:2e:49:ea:43:01:30:41:1e:29:15:10:3d:e1: 5e:78:33:93:77:ee:81:a5:55:30:a6:c6:7c:7a:b9: 67:0c:9b:5c:55:98:e8:7f:c0:2c:f4:c7:d1:0a:4e: d2:c6:fa:b6:8d:d3:22:28:b3:35:9a:89:23:ed:e7: be:26:cb:78:60:83:c0:62:cd:a9:67:2d:ca:8d:2a: 7f:3b:52:46:7d:99:15:77:23:df:f6:b8:e9:63:51: a7:22:37:88:8b:83:8b:7a:2b:1a:34:47:e5:05:63: bc:a2:51:5f:58:e7:af:cf:2f:71:a0:51:5c:04:3f: 03:57:01:62:bb:c4:fd:89:86:82:8d:56:b5:50:e5: 2d:23:68:4f:8c:0f:18:c5:23:52:66:3d:0d:16:c7: 8b:7d:34:3d:2d:e6:5a:fd:bd:f1:f7:aa:f6:3b:b5: 29:2d:21:33:13:06:82:60:8f:17:fc:01:d3:cb:79: 9b:5e:bf:87:f6:ea:06:86:79:c8:f0:58:18:19:e3: 5a:59:65:86:6f:63:90:02:29:31:63:31:80:66:70: 25:ef:81:36:a8:26:4a:71:02:4d:a2:23:35:a9:1f: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.240.0/22 IPv6: 2804:793c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271293 Signature Algorithm: sha256WithRSAEncryption 45:18:b7:09:e1:1f:e4:3c:8c:8e:e8:1a:06:c6:c7:95:55:35: 92:3f:32:09:53:66:63:ec:d4:df:30:23:d1:81:50:b2:64:31: 05:b2:24:00:50:18:87:11:75:a6:a3:4e:b6:8a:2a:86:8b:bd: cf:03:d0:35:49:26:0e:24:bd:8e:e7:84:68:13:30:29:a4:48: 6a:02:42:d1:12:05:1b:fd:39:db:c2:e8:d9:4b:40:51:7f:24: 12:83:69:94:08:0d:f1:8a:71:c7:aa:8f:08:54:77:ee:50:a2: 81:4d:70:38:4b:26:b2:29:37:17:47:2c:ed:29:b0:3b:55:29: 1b:74:60:0d:28:f8:5c:3f:53:01:33:d6:0c:55:3e:95:a3:41: 60:36:3f:00:c9:41:21:9f:73:a2:83:28:57:db:40:c9:f1:f7: 19:43:36:71:22:4f:36:cc:7b:08:a2:fd:99:09:f1:61:62:0d: ec:04:f1:78:a1:c3:8b:7a:81:70:07:67:54:3e:ff:62:38:21: 96:ad:78:8b:f3:18:90:bc:02:3c:d9:cd:24:7a:78:86:d9:ca: 07:cc:05:e1:ea:47:77:f6:e4:74:c8:13:d1:51:7a:1e:54:a2: b9:23:a8:ac:a4:55:bd:70:e5:e0:41:4f:b3:c7:40:6b:6a:30: 08:33:35:ee -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKVgerK9lcRskdLIE3S8Ro4RfxyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjQxNzA1MDVaFw0yNzAzMjMxNzEwMDVaMDMxMTAvBgNV BAMTKEQ4NTNDNEQ1NTY4RDIwQjA5MTlDMkUyOTgwNEUyRjQ5ODNCQ0ZERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdPRkR8PWRVB0lPy4AbtJAq6q 2jYHAKmG2GI1L8V9LknqQwEwQR4pFRA94V54M5N37oGlVTCmxnx6uWcMm1xVmOh/ wCz0x9EKTtLG+raN0yIoszWaiSPt574my3hgg8BizalnLcqNKn87UkZ9mRV3I9/2 uOljUaciN4iLg4t6Kxo0R+UFY7yiUV9Y56/PL3GgUVwEPwNXAWK7xP2JhoKNVrVQ 5S0jaE+MDxjFI1JmPQ0Wx4t9ND0t5lr9vfH3qvY7tSktITMTBoJgjxf8AdPLeZte v4f26gaGecjwWBgZ41pZZYZvY5ACKTFjMYBmcCXvgTaoJkpxAk2iIzWpH8UpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYU8TVVo0gsJGc LimATi9Jg7z98zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBw VGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3VjWDgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw cFRkalAzZnZTQ1R0eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzAvRDg1 M0M0RDU1NjhEMjBCMDkxOUMyRTI5ODA0RTJGNDk4M0JDRkRGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqunwMA0EAgACMAcDBQAoBHk8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjvTANBgkqhkiG9w0BAQsFAAOCAQEARRi3CeEf5DyMjuga BsbHlVU1kj8yCVNmY+zU3zAj0YFQsmQxBbIkAFAYhxF1pqNOtooqhou9zwPQNUkm DiS9jueEaBMwKaRIagJC0RIFG/0528Lo2UtAUX8kEoNplAgN8Ypxx6qPCFR37lCi gU1wOEsmsik3F0cs7SmwO1UpG3RgDSj4XD9TATPWDFU+laNBYDY/AMlBIZ9zooMo V9tAyfH3GUM2cSJPNsx7CKL9mQnxYWIN7ATxeKHDi3qBcAdnVD7/Yjghlq14i/MY kLwCPNnNJHp4htnKB8wF4epHd/bkdMgT0VF6HlSiuSOorKRVvXDl4EFPs8dAa2ow CDM17g== -----END CERTIFICATE-----Generated at Wed Mar 25 22:30:48 2026 by rpki-client