$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer File: F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer (raw, json) Hash identifier: fDE07X1dewFzgZ7F7PkmzPHQFyYIWG/53c433H62BUc= Subject key identifier: F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B76D96313E2675FBCF3028DA81D18A2D83AA20E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft caRepository: rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Mar 2026 05:59:57 +0000 Certificate not after: Thu 11 Mar 2027 06:04:57 +0000 Subordinate resources: AS: 269185 IP: 45.181.144.0 -- 45.181.146.255 IP: 2804:60b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:76:d9:63:13:e2:67:5f:bc:f3:02:8d:a8:1d:18:a2:d8:3a:a2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 12 05:59:57 2026 GMT Not After : Mar 11 06:04:57 2027 GMT Subject: CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:90:f9:e6:d4:51:58:b0:ac:9b:64:ed:4c: c7:21:68:1e:c7:c0:38:59:53:4c:b9:80:9b:d6:ad: 64:68:21:c6:a3:68:6b:a4:fa:6a:3a:a8:dc:8d:63: 3b:c9:cf:d1:e8:c1:65:94:61:1e:cf:a7:cf:8b:1a: d0:9c:2f:66:d6:74:8b:a7:75:1a:93:00:aa:ff:45: 12:25:df:72:7f:aa:9e:11:b4:02:f3:33:04:5b:1f: 49:04:64:18:6e:52:97:a7:48:80:39:35:a0:65:99: 59:f6:b5:06:38:dd:a3:d1:94:4d:69:38:08:13:b1: fe:7c:d5:f2:48:28:8f:8e:50:0b:8d:fa:d2:b1:ff: 67:f0:5a:62:90:af:e0:1f:a2:dc:d9:62:e6:e7:2b: 02:05:e0:e3:5d:e2:8f:a9:c6:1b:15:00:10:7d:70: cb:8f:b0:a6:1c:70:e2:6b:f7:28:c2:2e:54:6c:60: 1d:d1:1f:8a:fc:a8:2b:c9:d6:20:99:16:73:63:98: 4f:08:fe:d1:0b:16:04:6d:7c:22:ac:df:9b:24:79: 96:4c:24:90:f2:10:cc:10:16:59:e9:6f:52:c9:21: 26:65:94:42:2f:09:7d:fc:c0:be:9c:6f:03:48:fb: 6a:87:73:ae:e1:ac:2b:d2:30:64:24:65:6b:66:67: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.144.0-45.181.146.255 IPv6: 2804:60b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269185 Signature Algorithm: sha256WithRSAEncryption 03:22:ea:e5:ea:3a:b0:9d:9d:a9:00:f1:57:d2:19:3d:e7:80: 6c:8d:66:a5:94:d1:57:72:1f:85:97:93:c1:1a:af:76:e2:d8: 9f:7c:3f:93:64:07:04:36:15:30:57:c1:d5:f6:1b:d4:ae:9c: f5:a5:b0:a6:b0:39:28:55:5a:45:b1:fd:3a:fe:01:b6:7e:f6: dd:ca:09:77:14:27:a0:37:9e:29:2b:7c:73:ae:82:2a:a7:2b: 2d:43:b8:b5:cb:cd:31:31:55:e8:ac:e6:e0:02:05:e4:47:98: ce:fe:5f:9f:5b:89:05:a2:82:7b:4a:48:b5:40:c4:bb:74:2b: 6e:01:29:08:21:2d:52:0f:71:55:0b:d3:52:7d:31:0a:cf:d9: 9b:8f:70:e7:3b:1f:23:d9:89:34:e0:1a:4d:5c:a9:a0:2c:9e: 56:37:92:b6:52:bf:94:c6:56:a7:c5:72:45:bd:82:d1:3e:7d: f1:49:63:e4:e6:ba:a2:6c:55:d1:bf:5d:06:c0:bf:b8:9d:f7: 66:89:9b:5a:20:f8:da:d1:51:f1:e4:fa:79:b7:44:fd:4a:ad: 7a:e4:c0:b2:41:d3:22:a7:9c:d0:c7:ed:0a:a7:1b:3d:24:ea: 09:d0:6b:85:77:3b:73:18:e7:69:ab:e5:01:a4:0f:87:cd:cb: cb:ac:a3:ba -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIUW3bZYxPiZ1+88wKNqB0Yotg6og4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTIwNTU5NTdaFw0yNzAzMTEwNjA0NTdaMDMxMTAvBgNV BAMTKEYwRUY1QUU0OTQzMTg5N0ZGREQzNzU5QUI1QUNENUQ1RjlENUNCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJpD55tRRWLCsm2TtTMchaB7H wDhZU0y5gJvWrWRoIcajaGuk+mo6qNyNYzvJz9HowWWUYR7Pp8+LGtCcL2bWdIun dRqTAKr/RRIl33J/qp4RtALzMwRbH0kEZBhuUpenSIA5NaBlmVn2tQY43aPRlE1p OAgTsf581fJIKI+OUAuN+tKx/2fwWmKQr+AfotzZYubnKwIF4ONd4o+pxhsVABB9 cMuPsKYccOJr9yjCLlRsYB3RH4r8qCvJ1iCZFnNjmE8I/tELFgRtfCKs35skeZZM JJDyEMwQFlnpb1LJISZllEIvCX38wL6cbwNI+2qHc67hrCvSMGQkZWtmZ8nRAgMB AAGjggNBMIIDPTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTw71rklDGJf/3T dZq1rNXV+dXLPjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzN3 c3N3c2pFRjFLVkVHZkVFTVF1WEVISHZNdm1DZ1hkMlhBbW05UVlWelcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzN3 c3N3c2pFRjFLVkVHZkVFTVF1WEVISHZNdm1DZ1hkMlhBbW05UVlWelcvMC9GMEVG NUFFNDk0MzE4OTdGRkREMzc1OUFCNUFDRDVENUY5RDVDQjNFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcB Af8EJzAlMBQEAgABMA4wDAMEBC21kAMEAC21kjANBAIAAjAHAwUAKARgtDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEG4EwDQYJKoZIhvcNAQELBQADggEBAAMi6uXq OrCdnakA8VfSGT3ngGyNZqWU0VdyH4WXk8Ear3bi2J98P5NkBwQ2FTBXwdX2G9Su nPWlsKawOShVWkWx/Tr+AbZ+9t3KCXcUJ6A3nikrfHOugiqnKy1DuLXLzTExVeis 5uACBeRHmM7+X59biQWigntKSLVAxLt0K24BKQghLVIPcVUL01J9MQrP2ZuPcOc7 HyPZiTTgGk1cqaAsnlY3krZSv5TGVqfFckW9gtE+ffFJY+TmuqJsVdG/XQbAv7id 92aJm1og+NrRUfHk+nm3RP1KrXrkwLJB0yKnnNDH7QqnGz0k6gnQa4V3O3MY52mr 5QGkD4fNy8uso7o= -----END CERTIFICATE-----Generated at Thu Mar 26 01:16:03 2026 by rpki-client