$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer File: 2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer (raw, json) Hash identifier: 3GKQgDgEdZd/AaMNJnLh4kzKy4m4mfxI3oip+GZ0OiY= Subject key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4068FF02FAE16A52C95A8F43001390D7C5D3884E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft caRepository: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 18:23:36 +0000 Certificate not after: Fri 05 Feb 2027 18:28:36 +0000 Subordinate resources: AS: 264996 IP: 45.179.128.0/22 IP: 170.84.84.0/22 IP: 2804:3124::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 20:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:68:ff:02:fa:e1:6a:52:c9:5a:8f:43:00:13:90:d7:c5:d3:88:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 6 18:23:36 2026 GMT Not After : Feb 5 18:28:36 2027 GMT Subject: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:59:ea:fe:da:f2:59:40:95:33:bc:79:10: 93:10:83:9b:42:a4:22:b9:68:d0:f1:80:7a:e4:b3: a1:4c:b7:b9:69:83:26:4e:a8:4d:8a:32:da:c4:8e: 19:e6:36:29:70:bb:28:a6:e0:68:9d:1c:20:24:cf: c5:e0:82:55:74:03:e8:c5:ec:16:c1:d8:bd:c5:0f: 62:dd:f9:ca:b6:7a:64:57:2b:f7:94:a4:07:e0:41: 57:a4:70:b1:d5:46:eb:30:f2:6c:37:9a:f6:3b:a2: c8:ce:0a:d4:b8:6b:5d:fb:09:70:02:a8:46:13:b8: bb:09:77:c1:21:34:26:04:9f:f6:0c:30:7f:d8:56: 69:a7:a5:96:ef:38:50:84:13:8b:be:ed:7b:7d:4c: ef:39:e3:f1:0c:c8:dc:43:e1:fb:d3:19:ae:d1:54: 98:3e:f1:00:77:14:1d:d4:a9:8f:de:6d:d3:0a:29: 39:62:08:aa:88:7c:52:5f:9a:f5:a5:b1:8e:fa:32: 62:b2:19:d9:d6:94:ba:82:30:89:00:bf:7a:8f:54: d6:3b:75:da:e1:be:d7:5f:06:d0:0c:be:36:52:24: 28:45:9e:e0:60:ab:bc:85:77:a8:df:ac:fd:da:89: 86:7b:e4:44:13:30:43:71:6a:cf:69:1e:17:9a:ca: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.128.0/22 170.84.84.0/22 IPv6: 2804:3124::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264996 Signature Algorithm: sha256WithRSAEncryption 87:be:d2:39:39:20:9a:af:5a:80:b0:21:1f:a9:85:62:f8:73: dd:46:c2:8c:42:fd:56:a3:94:b3:64:21:f0:1c:6b:38:54:3b: 0e:94:02:31:75:f1:bf:85:ed:cf:d2:15:cf:3e:ec:4c:51:a9: 14:f0:16:c8:35:12:0c:9e:ac:a4:f3:99:37:77:f1:22:e8:96: cd:4a:a5:f4:aa:20:52:e3:b7:09:0b:2a:67:ca:27:8a:dc:4e: 0b:4d:8a:e5:4e:d2:8f:0c:25:6e:3c:34:08:b6:25:13:54:e2: c6:06:fb:c1:f3:ff:a5:7a:0b:3a:a1:e8:6a:77:97:1f:ad:c8: 50:b2:3e:3d:a0:f2:80:f9:7c:47:a1:1a:25:99:01:ac:af:c2: 66:2f:51:c8:04:fe:b8:a6:ae:21:12:5c:c1:0a:4b:c4:23:4a: 6d:cf:5c:6e:37:f5:89:6c:3f:07:ec:9d:d8:69:6a:67:e9:02: a5:dd:bb:0c:4c:79:4a:94:9c:ea:9e:70:3b:54:ee:41:61:ea: 67:51:f4:a8:2d:64:24:d8:b1:0f:55:85:89:5f:0b:6a:a2:6b: a0:66:8d:09:94:a0:be:f8:10:42:dd:3a:5e:a5:af:7f:04:8d: 08:3d:17:f1:7d:25:fd:ff:36:4a:3d:a1:02:40:91:3e:9c:0d: 5b:b6:b5:12 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUQGj/AvrhalLJWo9DABOQ18XTiE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDYxODIzMzZaFw0yNzAyMDUxODI4MzZaMDMxMTAvBgNV BAMTKDJGM0YxMkU5NDQ3MTlGMjRBOEQxQTRCM0M3OTgwRjcwQTZEOTlENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVplnq/tryWUCVM7x5EJMQg5tC pCK5aNDxgHrks6FMt7lpgyZOqE2KMtrEjhnmNilwuyim4GidHCAkz8XgglV0A+jF 7BbB2L3FD2Ld+cq2emRXK/eUpAfgQVekcLHVRusw8mw3mvY7osjOCtS4a137CXAC qEYTuLsJd8EhNCYEn/YMMH/YVmmnpZbvOFCEE4u+7Xt9TO854/EMyNxD4fvTGa7R VJg+8QB3FB3UqY/ebdMKKTliCKqIfFJfmvWlsY76MmKyGdnWlLqCMIkAv3qPVNY7 ddrhvtdfBtAMvjZSJChFnuBgq7yFd6jfrP3aiYZ75EQTMENxas9pHheayo2/AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvPxLpRHGfJKjR pLPHmA9wptmdaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMS8yRjNG MTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIts4ADBAKqVFQwDQQCAAIwBwMFACgEMSQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAskMA0GCSqGSIb3DQEBCwUAA4IBAQCHvtI5OSCa r1qAsCEfqYVi+HPdRsKMQv1Wo5SzZCHwHGs4VDsOlAIxdfG/he3P0hXPPuxMUakU 8BbINRIMnqyk85k3d/Ei6JbNSqX0qiBS47cJCypnyieK3E4LTYrlTtKPDCVuPDQI tiUTVOLGBvvB8/+legs6oehqd5cfrchQsj49oPKA+XxHoRolmQGsr8JmL1HIBP64 pq4hElzBCkvEI0ptz1xuN/WJbD8H7J3YaWpn6QKl3bsMTHlKlJzqnnA7VO5BYepn UfSoLWQk2LEPVYWJXwtqomugZo0JlKC++BBC3Tpepa9/BI0IPRfxfSX9/zZKPaEC QJE+nA1btrUS -----END CERTIFICATE-----Generated at Thu Feb 19 18:54:15 2026 by rpki-client