$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.cer File: DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.cer (raw, json) Hash identifier: 1CDeCLnmKk0YEAJHZyMkPjFkiTnxHdTWFUFutvvErwI= Subject key identifier: DF:55:1A:89:56:CD:5E:3F:E7:3A:EA:8A:76:10:CD:2E:DE:93:50:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53A4D79B32D70AF0DB12237A16901DE39BC3C5DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.mft caRepository: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 25 Apr 2026 15:17:51 +0000 Certificate not after: Sat 24 Apr 2027 15:22:51 +0000 Subordinate resources: AS: 266502 IP: 170.244.172.0/22 IP: 2804:38cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 04:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a4:d7:9b:32:d7:0a:f0:db:12:23:7a:16:90:1d:e3:9b:c3:c5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 15:17:51 2026 GMT Not After : Apr 24 15:22:51 2027 GMT Subject: CN=DF551A8956CD5E3FE73AEA8A7610CD2EDE935060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:d4:8f:fe:e6:d5:1b:2e:85:b6:10:33:3e: 4c:06:41:24:02:3f:73:60:41:cd:ed:ed:42:fd:28: 0b:f1:ae:aa:d4:88:2a:29:70:13:45:20:87:80:81: bd:1d:6b:99:72:f0:54:ac:0f:9b:45:09:f1:db:c7: ee:69:c0:8c:39:30:c2:97:09:da:55:89:29:62:8f: 62:8a:27:cd:ac:52:b7:fb:76:9d:e4:f7:24:61:d7: db:75:1e:88:f0:ad:5f:11:dc:27:6e:bc:a9:70:aa: 9b:68:60:9f:2e:c5:9e:a1:84:cb:75:8a:1c:6d:3d: d1:e2:30:7b:d4:06:d2:84:42:bc:a4:4f:a8:ba:bd: f1:32:f2:54:99:f9:08:c8:50:d6:01:6c:f1:91:f7: 24:2b:40:5a:49:5b:6d:e0:59:1d:68:07:99:a9:d2: 25:4d:fc:68:79:45:06:55:35:31:61:c1:34:48:2a: fe:30:97:42:55:c7:79:54:d4:9e:08:3a:7c:8e:1d: e1:e3:0b:7f:62:c3:eb:b3:d2:72:e7:13:3d:3b:05: 5b:90:5c:67:cd:f5:cc:f3:8e:a4:3e:5d:a2:de:6f: e4:6d:8a:b9:63:f5:49:89:ee:7e:1b:11:43:08:fd: 29:17:54:b5:d7:cc:dd:a3:54:ea:36:f9:ce:8e:85: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:55:1A:89:56:CD:5E:3F:E7:3A:EA:8A:76:10:CD:2E:DE:93:50:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.172.0/22 IPv6: 2804:38cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266502 Signature Algorithm: sha256WithRSAEncryption 47:63:e6:e4:a7:07:88:e0:b5:f6:26:71:26:87:24:72:ff:dd: a7:ec:e4:a7:08:f1:3c:f7:ff:19:80:de:dd:e4:2d:6b:72:58: 8e:96:56:e3:d8:61:4f:79:7c:5a:12:20:1b:20:41:44:71:58: 80:95:25:ad:7b:0b:fb:14:91:65:be:da:4a:75:eb:38:6f:9a: 34:2a:af:54:19:64:a9:40:b0:e5:13:5d:d6:6b:ac:3f:26:81: 1f:c1:fe:7f:dc:1a:86:df:b5:3e:95:ba:2d:52:45:e8:c5:74: e7:88:60:66:3b:99:89:99:06:bb:62:3c:21:6e:7f:ab:65:7c: 85:17:df:d3:8e:c0:5e:80:4b:b8:95:d4:a4:99:80:2a:b8:cd: 97:65:e7:76:fe:8b:5c:c5:bc:02:e6:d7:8b:0b:50:85:ce:44: 0d:b7:2d:ea:e2:e5:3b:12:57:09:b2:45:4f:b4:04:2f:54:92: a8:4b:c0:5f:03:cd:ef:06:9e:b8:cd:4e:8e:ed:87:f6:fd:1e: dd:38:8f:86:74:c5:00:dd:8a:11:5b:f0:f0:48:27:df:62:42: c2:7b:2b:c1:f0:63:ab:54:c3:12:a6:40:b4:5f:16:af:bf:76: 2d:a6:e4:a4:c8:a2:98:ad:54:22:cf:f7:65:ba:dc:e3:34:22: fd:b1:b7:37 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUU6TXmzLXCvDbEiN6FpAd45vDxdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjUxNTE3NTFaFw0yNzA0MjQxNTIyNTFaMDMxMTAvBgNV BAMTKERGNTUxQTg5NTZDRDVFM0ZFNzNBRUE4QTc2MTBDRDJFREU5MzUwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGadSP/ubVGy6FthAzPkwGQSQC P3NgQc3t7UL9KAvxrqrUiCopcBNFIIeAgb0da5ly8FSsD5tFCfHbx+5pwIw5MMKX CdpViSlij2KKJ82sUrf7dp3k9yRh19t1HojwrV8R3CduvKlwqptoYJ8uxZ6hhMt1 ihxtPdHiMHvUBtKEQrykT6i6vfEy8lSZ+QjIUNYBbPGR9yQrQFpJW23gWR1oB5mp 0iVN/Gh5RQZVNTFhwTRIKv4wl0JVx3lU1J4IOnyOHeHjC39iw+uz0nLnEz07BVuQ XGfN9czzjqQ+XaLeb+Rtirlj9UmJ7n4bEUMI/SkXVLXXzN2jVOo2+c6Ohb47AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfVRqJVs1eP+c6 6op2EM0u3pNQYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVhX cU5aekRZcDFBTmUza0FlZkhaZDVHWEo4QlY5ck5jQ1FNMTRzelhSb1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVY V3FOWnpEWXAxQU5lM2tBZWZIWmQ1R1hKOEJWOXJOY0NRTTE0c3pYUm9QLzAvREY1 NTFBODk1NkNENUUzRkU3M0FFQThBNzYxMENEMkVERTkzNTA2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvSsMA0EAgACMAcDBQAoBDjMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRBjANBgkqhkiG9w0BAQsFAAOCAQEAR2Pm5KcHiOC19iZx Jockcv/dp+zkpwjxPPf/GYDe3eQta3JYjpZW49hhT3l8WhIgGyBBRHFYgJUlrXsL +xSRZb7aSnXrOG+aNCqvVBlkqUCw5RNd1musPyaBH8H+f9waht+1PpW6LVJF6MV0 54hgZjuZiZkGu2I8IW5/q2V8hRff047AXoBLuJXUpJmAKrjNl2Xndv6LXMW8AubX iwtQhc5EDbct6uLlOxJXCbJFT7QEL1SSqEvAXwPN7waeuM1Oju2H9v0e3TiPhnTF AN2KEVvw8Egn32JCwnsrwfBjq1TDEqZAtF8Wr792LabkpMiimK1UIs/3Zbrc4zQi /bG3Nw== -----END CERTIFICATE-----Generated at Wed May 13 04:19:30 2026 by rpki-client