$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer File: 4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer (raw, json) Hash identifier: E8SYevgrXIRRLXbhH6RqfvwHfRhMCIXvAqel5+e/4iw= Subject key identifier: 49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69 Authority key identifier: 55:16:09:20:FA:D1:52:86:84:21:54:88:1A:52:D7:10:EE:4A:BA:4A Certificate issuer: /CN=55160920FAD15286842154881A52D710EE4ABA4A Certificate serial: 57B782AB0F29053CFE68E8C9532581C6A66DDBC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer Manifest: rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.mft caRepository: rsync://rsync.nex3.com.br/repo/AS265905/0/ Notify URL: https://rpki-repo.nex3.com.br/rrdp/notification.xml Certificate not before: Wed 01 Apr 2026 12:30:20 +0000 Certificate not after: Wed 31 Mar 2027 12:35:20 +0000 Subordinate resources: AS: 265905 IP: 45.161.196.0/22 IP: 131.196.100.0/22 IP: 2804:3fa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 03:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b7:82:ab:0f:29:05:3c:fe:68:e8:c9:53:25:81:c6:a6:6d:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55160920FAD15286842154881A52D710EE4ABA4A Validity Not Before: Apr 1 12:30:20 2026 GMT Not After : Mar 31 12:35:20 2027 GMT Subject: CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:99:ab:3e:f6:11:45:9d:92:b6:a9:cb:84:ca: e2:a8:55:f1:39:44:33:84:16:4d:94:65:04:38:c6: 64:c6:b7:43:48:53:37:51:ed:59:0a:23:cf:5a:c3: 2b:a4:a5:07:b8:94:1b:3b:95:9a:17:bf:3d:bd:05: 89:73:df:bb:6a:7e:0b:72:64:89:69:1c:76:a4:e7: 1d:14:f6:9e:4d:ac:1f:20:74:21:4a:d5:75:83:16: aa:31:ab:09:c5:1d:71:6a:1b:9f:cd:a1:0e:61:88: c4:a7:67:ee:64:b7:9f:b8:68:a3:27:d0:2f:d3:f1: 05:a0:8a:ca:76:a1:84:d5:ab:a9:d8:1b:45:a8:ee: 19:67:9b:be:d8:ac:c6:79:56:4c:cc:dc:d9:85:c9: 84:3e:ef:c4:2f:d4:3b:8c:15:2e:b3:e0:95:92:fd: 03:1a:15:2c:36:c6:af:87:dd:82:a7:ef:73:c8:0e: a8:36:63:f4:94:12:39:c5:6e:b2:56:e4:1e:8e:d6: ba:3c:af:b0:1b:83:e0:22:7e:be:51:cd:87:2d:81: 45:5b:57:90:a0:79:1d:99:b4:27:7c:ad:3d:93:63: d0:85:60:d8:9a:fd:7d:32:42:25:5b:06:4d:a5:02: ff:67:5c:16:dc:a1:8a:70:40:47:b3:78:61:58:7f: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69 X509v3 Authority Key Identifier: keyid:55:16:09:20:FA:D1:52:86:84:21:54:88:1A:52:D7:10:EE:4A:BA:4A X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer Subject Information Access: CA Repository - URI:rsync://rsync.nex3.com.br/repo/AS265905/0/ RPKI Manifest - URI:rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.mft RPKI Notify - URI:https://rpki-repo.nex3.com.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.196.0/22 131.196.100.0/22 IPv6: 2804:3fa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265905 Signature Algorithm: sha256WithRSAEncryption da:8d:29:6e:d7:9a:3b:57:be:f2:e0:7d:bf:59:ff:43:03:43: 67:b4:5e:87:61:46:5d:93:54:bc:9c:4f:6b:40:8a:85:b5:ab: c5:56:df:02:b7:c7:87:18:e6:61:5c:f7:55:64:6d:8a:9c:be: f9:22:9e:ab:bf:ba:ed:5d:e6:0d:18:d9:61:1c:36:01:4b:54: 1c:df:31:a6:ad:39:11:31:3f:14:a9:c6:60:f1:7a:04:82:db: 8d:9f:48:5b:0c:3d:6b:de:59:1e:30:3f:9d:b8:21:37:6f:db: e8:16:9b:6b:43:bb:89:e6:24:73:a2:9e:ed:19:2b:6f:fe:13: 52:d4:4f:bb:16:4f:12:9f:9d:fc:ff:5a:53:62:22:f9:30:82: 9d:f5:8d:e9:2a:01:67:7b:8e:f0:2b:e2:e1:44:37:a7:16:84: 4f:8b:e7:77:fc:72:6f:b2:2a:53:c5:62:7f:71:6c:64:f4:f0: e5:32:64:68:ec:d5:3c:19:16:53:7e:d3:94:6c:5e:95:5b:ff: 96:cc:74:f3:de:ec:97:ff:c2:22:c2:b4:5e:9c:4c:49:59:d9: aa:3e:a6:ea:14:3f:3e:c4:72:a5:94:09:3e:ca:27:b6:e3:1d: 6a:92:75:ed:88:08:94:b4:23:fc:03:6f:9c:81:47:61:50:6e: 9e:7b:27:c6 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUV7eCqw8pBTz+aOjJUyWBxqZt28kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUxNjA5MjBGQUQxNTI4Njg0MjE1NDg4MUE1MkQ3MTBF RTRBQkE0QTAeFw0yNjA0MDExMjMwMjBaFw0yNzAzMzExMjM1MjBaMDMxMTAvBgNV BAMTKDQ5OTJFQUJDNEM4RkQwOUE4QUQxQjk2MjBERUQzQTZFNUM1NTFDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkmas+9hFFnZK2qcuEyuKoVfE5 RDOEFk2UZQQ4xmTGt0NIUzdR7VkKI89awyukpQe4lBs7lZoXvz29BYlz37tqfgty ZIlpHHak5x0U9p5NrB8gdCFK1XWDFqoxqwnFHXFqG5/NoQ5hiMSnZ+5kt5+4aKMn 0C/T8QWgisp2oYTVq6nYG0Wo7hlnm77YrMZ5VkzM3NmFyYQ+78Qv1DuMFS6z4JWS /QMaFSw2xq+H3YKn73PIDqg2Y/SUEjnFbrJW5B6O1ro8r7Abg+Aifr5RzYctgUVb V5CgeR2ZtCd8rT2TY9CFYNia/X0yQiVbBk2lAv9nXBbcoYpwQEezeGFYfwXXAgMB AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJkuq8TI/QmorR uWIN7TpuXFUcaTAfBgNVHSMEGDAWgBRVFgkg+tFShoQhVIgaUtcQ7kq6SjAOBgNV HQ8BAf8EBAMCAQYwgZQGA1UdHwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtp LXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BZkMxWVVQdjVqOEU4a25jN0NZdER3cG52 WDM1bkt3RVNQZkRteFN1Q3VGSi8wLzU1MTYwOTIwRkFEMTUyODY4NDIxNTQ4ODFB NTJENzEwRUU0QUJBNEEuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZc cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEv NTUxNjA5MjBGQUQxNTI4Njg0MjE1NDg4MUE1MkQ3MTBFRTRBQkE0QS5jZXIwge0G CCsGAQUFBwELBIHgMIHdMDYGCCsGAQUFBzAFhipyc3luYzovL3JzeW5jLm5leDMu Y29tLmJyL3JlcG8vQVMyNjU5MDUvMC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnN5 bmMubmV4My5jb20uYnIvcmVwby9BUzI2NTkwNS8wLzQ5OTJFQUJDNEM4RkQwOUE4 QUQxQjk2MjBERUQzQTZFNUM1NTFDNjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczov L3Jwa2ktcmVwby5uZXgzLmNvbS5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEw DAMEAi2hxAMEAoPEZDANBAIAAjAHAwUAKAQ/qDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMEDrEwDQYJKoZIhvcNAQELBQADggEBANqNKW7XmjtXvvLgfb9Z/0MDQ2e0 XodhRl2TVLycT2tAioW1q8VW3wK3x4cY5mFc91VkbYqcvvkinqu/uu1d5g0Y2WEc NgFLVBzfMaatORExPxSpxmDxegSC242fSFsMPWveWR4wP524ITdv2+gWm2tDu4nm JHOinu0ZK2/+E1LUT7sWTxKfnfz/WlNiIvkwgp31jekqAWd7jvAr4uFEN6cWhE+L 53f8cm+yKlPFYn9xbGT08OUyZGjs1TwZFlN+05RsXpVb/5bMdPPe7Jf/wiLCtF6c TElZ2ao+puoUPz7EcqWUCT7KJ7bjHWqSde2ICJS0I/wDb5yBR2FQbp57J8Y= -----END CERTIFICATE-----Generated at Wed Apr 8 14:29:30 2026 by rpki-client