$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E28DE12E920FDDA7023A948FE4C3DB68D7D91CEE.cer File: E28DE12E920FDDA7023A948FE4C3DB68D7D91CEE.cer (raw, json) Hash identifier: ANBD+F0+XVCOheV7AIeAjmi40GnC8Pm97jmRVvnN2TM= Subject key identifier: E2:8D:E1:2E:92:0F:DD:A7:02:3A:94:8F:E4:C3:DB:68:D7:D9:1C:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D5A1F2D62C5E05EAAC4A978BD51228C2EF54885 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/E28DE12E920FDDA7023A948FE4C3DB68D7D91CEE.mft caRepository: rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 13:38:02 +0000 Certificate not after: Mon 22 Mar 2027 13:43:02 +0000 Subordinate resources: AS: 266603 IP: 128.201.8.0/22 IP: 2804:3e88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:1f:2d:62:c5:e0:5e:aa:c4:a9:78:bd:51:22:8c:2e:f5:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 13:38:02 2026 GMT Not After : Mar 22 13:43:02 2027 GMT Subject: CN=E28DE12E920FDDA7023A948FE4C3DB68D7D91CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:7f:f7:cc:f8:bd:5e:9f:22:11:ce:18:a1: 32:67:25:0f:93:a3:aa:10:13:b0:64:f2:2c:fb:31: 1d:a7:8f:81:cf:cf:a1:96:7e:3a:27:35:fc:9f:fa: 9f:db:47:1c:6c:a1:68:14:3c:a2:9b:b5:38:e8:46: 9c:a8:e3:7f:fb:41:25:06:f5:8a:74:b0:c9:5d:9f: 98:eb:54:8b:90:ac:fa:74:e2:41:90:5e:ef:70:fa: 8b:68:66:5c:34:4e:1c:1d:92:51:4d:56:48:96:5d: 40:b8:a1:8c:4e:3f:b1:59:c1:99:89:ee:0d:f3:bd: cb:c5:78:44:55:13:4d:91:14:d5:2f:84:ff:b4:c1: a7:d9:b8:b5:04:0e:c5:51:8d:3b:34:93:69:84:fa: 7e:6e:62:79:8d:ba:5e:a6:bc:91:c1:40:84:99:a0: b8:52:06:66:b2:ca:f2:14:9d:2b:a4:8a:ef:38:87: 3a:1b:53:d8:cd:eb:bd:16:d7:fa:c7:7a:9d:25:8a: 5a:56:3a:e3:2d:99:5f:07:04:60:75:03:77:dd:66: 51:a9:13:36:0e:02:6c:43:8d:81:c4:c8:8c:62:f2: ea:54:ae:34:0f:66:f8:1c:68:7f:48:47:8a:dd:71: 27:c8:8f:03:28:a3:33:e0:79:b8:51:ff:d5:d0:d6: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:8D:E1:2E:92:0F:DD:A7:02:3A:94:8F:E4:C3:DB:68:D7:D9:1C:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/E28DE12E920FDDA7023A948FE4C3DB68D7D91CEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.8.0/22 IPv6: 2804:3e88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266603 Signature Algorithm: sha256WithRSAEncryption cd:02:49:c8:f4:7e:7e:f8:56:b3:ab:9f:e8:91:aa:63:38:6b: 38:3f:04:43:9d:88:25:05:2a:22:e8:60:eb:9e:f2:20:dd:f9: b0:8f:53:e6:a1:d6:7b:e9:dd:1f:ee:c1:5e:7e:a4:38:5d:7e: 1c:8f:c3:0a:db:18:ea:45:19:3f:40:e8:68:19:7e:9e:31:99: 73:7e:97:30:ea:a0:f7:de:28:3e:62:b0:a9:93:9c:14:f2:13: f6:8a:ee:e8:19:26:b0:de:5d:e4:37:81:09:ca:ba:e4:ba:3a: 53:91:f1:77:c9:cb:b9:dd:9b:6d:c8:6e:34:61:84:f0:4d:2e: 8e:de:8a:ff:9d:94:4d:1c:07:71:62:60:15:6e:a0:91:af:f7: 61:04:cb:99:11:61:7b:76:00:90:71:97:fa:7b:6e:15:7d:e9: cc:d7:3c:1b:f3:db:c9:39:24:2c:b5:08:ab:6f:25:dd:b8:4e: 84:2b:65:3b:f9:1c:75:9f:22:56:9a:35:79:61:f0:f9:ca:2d: 4d:5f:a7:0d:63:23:99:9e:6a:e1:9d:31:36:a8:a7:1f:c3:de: 21:3b:11:fc:63:5b:92:2a:88:2d:dd:78:b3:37:a4:49:62:61: 6f:62:1f:35:04:b4:53:f0:9e:2f:cf:fc:b7:f9:4e:fd:d4:8e: 76:a9:1f:3f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULVofLWLF4F6qxKl4vVEijC71SIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMxMzM4MDJaFw0yNzAzMjIxMzQzMDJaMDMxMTAvBgNV BAMTKEUyOERFMTJFOTIwRkREQTcwMjNBOTQ4RkU0QzNEQjY4RDdEOTFDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Xn/3zPi9Xp8iEc4YoTJnJQ+T o6oQE7Bk8iz7MR2nj4HPz6GWfjonNfyf+p/bRxxsoWgUPKKbtTjoRpyo43/7QSUG 9Yp0sMldn5jrVIuQrPp04kGQXu9w+otoZlw0ThwdklFNVkiWXUC4oYxOP7FZwZmJ 7g3zvcvFeERVE02RFNUvhP+0wafZuLUEDsVRjTs0k2mE+n5uYnmNul6mvJHBQISZ oLhSBmayyvIUnSukiu84hzobU9jN670W1/rHep0lilpWOuMtmV8HBGB1A3fdZlGp EzYOAmxDjYHEyIxi8upUrjQPZvgcaH9IR4rdcSfIjwMoozPgebhR/9XQ1ne/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTijeEukg/dpwI6 lI/kw9to19kc7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXBv dVNvQlhOdWQ2MThoOTZ1bmltWWc2VkdjcXBiWXB2VXNZNUVEOTFhN0QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVw b3VTb0JYTnVkNjE4aDk2dW5pbVlnNlZHY3FwYllwdlVzWTVFRDkxYTdELzAvRTI4 REUxMkU5MjBGRERBNzAyM0E5NDhGRTRDM0RCNjhEN0Q5MUNFRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgMkIMA0EAgACMAcDBQAoBD6IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRazANBgkqhkiG9w0BAQsFAAOCAQEAzQJJyPR+fvhWs6uf 6JGqYzhrOD8EQ52IJQUqIuhg657yIN35sI9T5qHWe+ndH+7BXn6kOF1+HI/DCtsY 6kUZP0DoaBl+njGZc36XMOqg994oPmKwqZOcFPIT9oru6BkmsN5d5DeBCcq65Lo6 U5Hxd8nLud2bbchuNGGE8E0ujt6K/52UTRwHcWJgFW6gka/3YQTLmRFhe3YAkHGX +ntuFX3pzNc8G/PbyTkkLLUIq28l3bhOhCtlO/kcdZ8iVpo1eWHw+cotTV+nDWMj mZ5q4Z0xNqinH8PeITsR/GNbkiqILd14szekSWJhb2IfNQS0U/CeL8/8t/lO/dSO dqkfPw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:56 2026 by rpki-client