$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB2F795D27A7AD4CED5DA69532E009B45CEB459B.cer File: DB2F795D27A7AD4CED5DA69532E009B45CEB459B.cer (raw, json) Hash identifier: l/czxkCVj4kFMBp4jqj6hgUkHUY/nSBvQGPyWI8KkAU= Subject key identifier: DB:2F:79:5D:27:A7:AD:4C:ED:5D:A6:95:32:E0:09:B4:5C:EB:45:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 432DE787FC9C6BB892C5F4FD0BB1BC36E1396951 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/DB2F795D27A7AD4CED5DA69532E009B45CEB459B.mft caRepository: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 00:20:19 +0000 Certificate not after: Wed 24 Mar 2027 00:25:19 +0000 Subordinate resources: AS: 61900 IP: 138.97.32.0/22 IP: 170.247.4.0/22 IP: 177.74.172.0/22 IP: 191.243.8.0/22 IP: 2804:12a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2d:e7:87:fc:9c:6b:b8:92:c5:f4:fd:0b:b1:bc:36:e1:39:69:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 00:20:19 2026 GMT Not After : Mar 24 00:25:19 2027 GMT Subject: CN=DB2F795D27A7AD4CED5DA69532E009B45CEB459B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:63:3e:ec:73:d3:ce:5e:53:a4:8b:0d:99: bc:de:da:56:18:67:a0:a5:c4:32:7e:14:24:b2:59: c2:9e:5c:a8:77:02:4e:2d:46:15:92:a7:08:6d:10: 2d:62:a2:5e:ed:bc:d4:54:71:c2:14:1a:c2:1a:01: 32:1f:20:44:77:cb:d2:77:ee:8e:ec:3e:9d:1d:82: d5:22:49:90:fe:be:12:e7:a4:9c:96:c6:34:e8:9d: c2:51:37:7b:c5:7f:b7:fc:73:b2:c0:2a:00:2d:18: 28:66:ab:35:0a:83:6e:15:07:22:13:58:f9:f7:d0: 40:5d:ad:8a:96:3e:b3:7c:20:6c:fd:36:6f:af:9b: d0:7b:f1:44:ad:05:e8:01:f0:d3:a1:4c:5c:dd:f4: 55:04:31:f4:9c:1a:3c:e7:40:ee:da:42:7a:2b:b9: 97:b5:c9:d5:36:ca:45:0c:fa:f3:de:27:21:09:18: 43:20:15:a0:0a:5b:5c:9d:5c:ca:17:27:ea:11:3a: 63:2a:f6:84:d4:33:2e:96:e5:50:9a:1b:ee:f2:88: b6:fc:b5:b3:d5:71:d5:f1:95:89:05:61:88:74:d1: df:46:51:1a:8d:bc:1a:36:6d:45:ad:e4:61:ca:41: 27:ef:08:61:cb:92:de:8f:a1:b6:05:ec:f6:76:3e: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:2F:79:5D:27:A7:AD:4C:ED:5D:A6:95:32:E0:09:B4:5C:EB:45:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/DB2F795D27A7AD4CED5DA69532E009B45CEB459B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.32.0/22 170.247.4.0/22 177.74.172.0/22 191.243.8.0/22 IPv6: 2804:12a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61900 Signature Algorithm: sha256WithRSAEncryption 77:1a:31:9a:5f:72:6d:45:0c:f6:31:aa:61:91:61:b3:93:09: f4:9d:7f:3a:28:5d:06:34:ac:0b:68:94:ce:be:66:44:6b:e5: 27:57:05:f0:1b:a8:35:a2:a4:6b:0e:ee:77:27:c0:ec:ef:04: fc:3b:04:50:c3:ea:81:a0:68:2e:c5:8e:34:7c:da:03:82:d2: 58:30:1e:52:bf:9f:36:61:da:85:b9:78:d5:67:17:61:74:73: c3:ed:3a:f9:60:bd:37:f0:f3:05:c2:c2:d2:b8:e5:7c:eb:e3: 97:88:49:a4:41:0e:08:bd:70:28:88:49:98:86:f7:7c:87:fe: 3d:e6:2e:02:e9:37:66:e4:ce:9a:22:5f:c8:5e:d3:67:76:e8: d8:14:89:6b:85:f3:c4:73:10:bb:8f:71:e1:2a:e4:f7:dd:43: 7d:69:9d:99:45:40:e2:0f:60:db:d5:3d:6b:9f:b1:73:dc:ae: 96:da:e2:52:c5:b9:e8:92:6d:54:3e:11:ea:99:11:3a:06:20: 86:5f:ac:f6:16:0f:2e:85:11:a5:4f:25:5b:11:70:b5:6b:53: 62:c5:76:85:2a:9f:ea:70:0e:bd:c6:b4:e4:df:ef:37:4d:0d: ae:86:86:cf:b9:b2:51:62:26:ea:80:32:7d:e8:2b:96:e2:ab: ff:54:7f:3e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUQy3nh/yca7iSxfT9C7G8NuE5aVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUwMDIwMTlaFw0yNzAzMjQwMDI1MTlaMDMxMTAvBgNV BAMTKERCMkY3OTVEMjdBN0FENENFRDVEQTY5NTMyRTAwOUI0NUNFQjQ1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf6mM+7HPTzl5TpIsNmbze2lYY Z6ClxDJ+FCSyWcKeXKh3Ak4tRhWSpwhtEC1iol7tvNRUccIUGsIaATIfIER3y9J3 7o7sPp0dgtUiSZD+vhLnpJyWxjToncJRN3vFf7f8c7LAKgAtGChmqzUKg24VByIT WPn30EBdrYqWPrN8IGz9Nm+vm9B78UStBegB8NOhTFzd9FUEMfScGjznQO7aQnor uZe1ydU2ykUM+vPeJyEJGEMgFaAKW1ydXMoXJ+oROmMq9oTUMy6W5VCaG+7yiLb8 tbPVcdXxlYkFYYh00d9GURqNvBo2bUWt5GHKQSfvCGHLkt6PobYF7PZ2PsMNAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbL3ldJ6etTO1d ppUy4Am0XOtFmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG80 MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQSlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRv NDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAvREIy Rjc5NUQyN0E3QUQ0Q0VENURBNjk1MzJFMDA5QjQ1Q0VCNDU5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCimEgAwQCqvcEAwQCsUqsAwQCv/MIMA0EAgACMAcD BQAoBBKgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDxzDANBgkqhkiG9w0BAQsF AAOCAQEAdxoxml9ybUUM9jGqYZFhs5MJ9J1/OihdBjSsC2iUzr5mRGvlJ1cF8Buo NaKkaw7udyfA7O8E/DsEUMPqgaBoLsWONHzaA4LSWDAeUr+fNmHahbl41WcXYXRz w+06+WC9N/DzBcLC0rjlfOvjl4hJpEEOCL1wKIhJmIb3fIf+PeYuAuk3ZuTOmiJf yF7TZ3bo2BSJa4XzxHMQu49x4Srk991DfWmdmUVA4g9g29U9a5+xc9yultriUsW5 6JJtVD4R6pkROgYghl+s9hYPLoURpU8lWxFwtWtTYsV2hSqf6nAOvca05N/vN00N roaGz7myUWIm6oAyfegrluKr/1R/Pg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:59 2026 by rpki-client