$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer File: D95738A14AD98B305087E048FD2E4821E5E2299A.cer (raw, json) Hash identifier: Sl7dryCvMsinV6vPQG/U7OtxzOxPQrIxGtPtvlhpPI0= Subject key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 424E6C8EC7FE223D7C6E4FF194EE15CB9E7DD553 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft caRepository: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 02:47:53 +0000 Certificate not after: Fri 12 Mar 2027 02:52:53 +0000 Subordinate resources: AS: 263470 IP: 170.83.200.0/22 IP: 191.242.48.0/21 IP: 2804:1254::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4e:6c:8e:c7:fe:22:3d:7c:6e:4f:f1:94:ee:15:cb:9e:7d:d5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 13 02:47:53 2026 GMT Not After : Mar 12 02:52:53 2027 GMT Subject: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:dc:51:e0:a8:59:b5:c5:c3:a0:96:73:d3: 63:ce:a0:63:78:5f:a0:55:24:29:a9:7d:ce:1d:df: 6d:50:60:b0:6a:dc:55:81:68:4e:b7:63:eb:df:ea: 6e:ae:a1:04:a2:95:e1:6f:57:7a:da:1b:1a:51:a5: 6f:f7:89:f5:df:29:2d:8f:96:6c:bb:be:e0:a5:e8: bc:e6:34:f7:5f:f2:aa:7c:2d:cd:51:61:23:bb:fc: 1b:58:8d:ad:59:a1:44:98:a2:73:68:a6:58:75:f3: 83:e1:4c:4e:f6:4a:87:1d:1b:f8:43:2c:84:fa:d1: 76:32:bf:de:d5:f8:5f:77:80:e7:58:e5:96:0d:23: 65:94:77:c2:e3:86:cb:7f:05:52:ca:f5:dd:a9:d0: ca:5f:aa:ee:49:b3:6c:81:86:11:c4:1c:c8:28:3a: d8:ca:f2:97:9b:13:8a:4d:09:af:ee:48:3c:5e:1f: 01:5a:40:10:68:f5:fd:21:5f:c4:ad:fe:8a:f8:0e: 38:61:c7:cd:13:d7:0b:6b:52:fd:6f:83:de:d8:ff: 33:ef:1d:5c:f2:7a:6f:5e:8b:75:b6:03:19:e3:74: 7f:4b:fb:d1:0d:ac:8e:3d:18:09:46:4e:fc:3d:88: d0:f0:85:b9:e0:ff:3a:89:19:d8:12:a7:85:e9:64: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.200.0/22 191.242.48.0/21 IPv6: 2804:1254::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263470 Signature Algorithm: sha256WithRSAEncryption 4d:44:85:3f:f3:c4:a2:63:5a:b2:b6:a0:61:7e:11:8a:35:8f: cb:0a:81:05:14:d5:f3:ab:50:65:9b:1d:25:4c:e6:43:c7:bb: e4:37:64:11:7d:48:88:5d:25:19:3b:35:3c:ea:f0:33:81:e7: 7a:a8:c0:79:86:cf:45:25:de:de:7d:e9:78:00:df:eb:35:44: 0e:c4:e5:06:ab:db:73:8e:f4:68:11:95:74:04:49:e0:fc:f2: b4:ca:37:2f:fc:10:9c:27:1d:47:bd:55:27:5d:42:4a:1b:1d: ff:71:fb:8e:74:87:eb:69:86:74:4b:ba:93:00:8c:a5:c9:87: 03:1d:e6:c8:95:9b:8e:08:ff:1b:82:22:3c:99:fb:a6:ff:4a: 9d:ee:23:ea:60:6a:1e:6b:e3:bf:40:6f:32:ac:8f:a7:fe:15: 43:d7:12:52:d8:d7:bf:20:84:07:4e:8e:8e:d0:2c:6d:f7:30: 76:a2:fe:65:58:1c:17:60:f0:37:a7:4c:72:40:ff:62:74:2f: 22:75:0c:9b:83:ff:db:be:5e:dc:b8:ba:06:4e:8e:94:c8:71: de:aa:ce:0e:9c:a0:c3:08:fb:4c:a6:67:22:9a:9f:ee:ba:a8: db:50:c2:67:e4:bc:0e:31:2e:73:51:fa:f3:77:65:b8:29:b3: ff:e8:3c:b8 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQk5sjsf+Ij18bk/xlO4Vy5591VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTMwMjQ3NTNaFw0yNzAzMTIwMjUyNTNaMDMxMTAvBgNV BAMTKEQ5NTczOEExNEFEOThCMzA1MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXtxR4KhZtcXDoJZz02POoGN4 X6BVJCmpfc4d321QYLBq3FWBaE63Y+vf6m6uoQSileFvV3raGxpRpW/3ifXfKS2P lmy7vuCl6LzmNPdf8qp8Lc1RYSO7/BtYja1ZoUSYonNoplh184PhTE72SocdG/hD LIT60XYyv97V+F93gOdY5ZYNI2WUd8Ljhst/BVLK9d2p0Mpfqu5Js2yBhhHEHMgo OtjK8pebE4pNCa/uSDxeHwFaQBBo9f0hX8St/or4Djhhx80T1wtrUv1vg97Y/zPv HVzyem9ei3W2AxnjdH9L+9ENrI49GAlGTvw9iNDwhbng/zqJGdgSp4XpZGhfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZVzihStmLMFCH 4Ej9Lkgh5eIpmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3hT MUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d4 UzFIa2JNVUo3NEhxYWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAvRDk1 NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFFNUUyMjk5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlPIAwQDv/IwMA0EAgACMAcDBQAoBBJUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFLjANBgkqhkiG9w0BAQsFAAOCAQEATUSFP/PE omNasragYX4RijWPywqBBRTV86tQZZsdJUzmQ8e75DdkEX1IiF0lGTs1POrwM4Hn eqjAeYbPRSXe3n3peADf6zVEDsTlBqvbc470aBGVdARJ4PzytMo3L/wQnCcdR71V J11CShsd/3H7jnSH62mGdEu6kwCMpcmHAx3myJWbjgj/G4IiPJn7pv9Kne4j6mBq Hmvjv0BvMqyPp/4VQ9cSUtjXvyCEB06OjtAsbfcwdqL+ZVgcF2DwN6dMckD/YnQv InUMm4P/275e3Li6Bk6OlMhx3qrODpygwwj7TKZnIpqf7rqo21DCZ+S8DjEuc1H6 83dluCmz/+g8uA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:27 2026 by rpki-client