$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer File: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer (raw, json) Hash identifier: M4OFS5qQiQzQWaWbOTj0YB8ch+WZN18TO+wuZJsi/Ko= Subject key identifier: 2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 65539DF352DC7B33262185ADB39D5A8ACCC92C0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft caRepository: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 30 Mar 2026 14:44:18 +0000 Certificate not after: Mon 29 Mar 2027 14:49:18 +0000 Subordinate resources: AS: 264518 IP: 131.255.76.0/22 IP: 2804:20e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:53:9d:f3:52:dc:7b:33:26:21:85:ad:b3:9d:5a:8a:cc:c9:2c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 30 14:44:18 2026 GMT Not After : Mar 29 14:49:18 2027 GMT Subject: CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:73:0f:93:ec:67:07:bf:fb:57:b1:0d:f2: 57:8b:e4:5b:ff:71:98:06:ac:ca:59:42:69:b7:dd: 55:b3:f6:26:0e:ad:2a:62:70:4e:e6:68:7d:d0:70: 03:c7:4e:e6:c8:90:2d:e1:fa:fd:cf:10:90:8c:f1: 74:b1:9d:7b:23:d7:6f:32:e6:0c:4e:80:d8:c0:a8: 94:ba:ba:28:7e:87:12:93:68:69:cc:da:84:1a:90: f2:d4:97:74:de:c9:db:2f:37:b8:a4:75:2b:3c:b2: 8d:af:3b:48:c4:6f:10:47:d8:b5:55:bd:5e:c1:33: 81:a2:6c:aa:72:64:6e:6e:18:3a:8f:95:04:99:60: 65:f4:49:bb:7c:8f:51:c3:b7:6f:50:1a:5b:4e:4f: ec:6a:8f:23:25:52:af:59:a9:59:70:a0:9e:a2:84: 4a:e3:de:ec:70:22:22:bd:97:eb:14:44:0f:00:ec: 74:8e:48:ab:54:9c:ca:58:f8:c2:1f:d5:73:10:4d: 47:6f:bc:42:fa:8a:b0:d3:70:e9:3c:9c:e9:14:fa: a5:04:be:70:b0:e2:51:7a:8c:24:12:8e:e6:9c:3a: ef:8d:86:d8:3f:60:9e:c9:e7:e0:fd:16:9b:c2:ac: 55:c1:da:75:a6:32:5f:54:28:46:00:a3:2f:34:02: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.76.0/22 IPv6: 2804:20e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264518 Signature Algorithm: sha256WithRSAEncryption 2c:61:d1:bd:13:64:9e:6b:c2:a9:08:83:fb:0e:87:fb:c3:60: 1e:17:18:6d:05:c7:12:76:f9:59:39:42:c4:d5:eb:0f:df:aa: 40:1a:28:3c:fc:d7:ed:1c:ef:82:ec:87:4c:09:60:b9:ee:8f: 57:70:56:3f:74:18:9e:70:8c:74:94:fc:f3:34:bf:a7:44:28: bd:49:ea:76:5a:aa:1c:78:9c:8f:fb:79:bb:b5:91:10:40:2a: a2:c0:37:e9:04:bb:7b:56:f8:0a:a1:bf:50:d6:2c:5d:e0:8f: f0:c8:24:02:de:b5:94:19:82:2c:ec:38:c6:2c:25:68:18:44: 34:33:2b:7a:77:f4:1f:ce:25:e7:aa:2b:c7:73:ce:0f:5b:71: 1f:10:b7:c1:4e:54:07:ea:03:b5:13:34:5a:2f:11:38:c5:9c: f5:92:f3:6f:a6:dd:55:15:be:8e:70:72:79:70:4d:bb:7a:b0: 0c:75:85:9c:95:3e:02:67:da:01:65:31:d5:68:26:4f:eb:84: 41:4c:1b:1f:95:25:dd:14:66:ab:d9:cc:5c:f5:a7:d3:2c:20: 9a:03:f4:d0:1d:02:d8:1b:3d:f4:eb:d0:cc:1c:ad:9a:86:d1: ff:32:8e:33:9b:32:2c:c4:d8:b3:a3:4f:62:78:3d:bc:0e:45: 12:16:2b:2c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZVOd81LcezMmIYWts51aiszJLAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMzAxNDQ0MThaFw0yNzAzMjkxNDQ5MThaMDMxMTAvBgNV BAMTKDJGM0ZCRkVERTY3NjNFMjREREQyQzNBNEI5RTZFNUFBOUU0NTNCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xnMPk+xnB7/7V7EN8leL5Fv/ cZgGrMpZQmm33VWz9iYOrSpicE7maH3QcAPHTubIkC3h+v3PEJCM8XSxnXsj128y 5gxOgNjAqJS6uih+hxKTaGnM2oQakPLUl3TeydsvN7ikdSs8so2vO0jEbxBH2LVV vV7BM4GibKpyZG5uGDqPlQSZYGX0Sbt8j1HDt29QGltOT+xqjyMlUq9ZqVlwoJ6i hErj3uxwIiK9l+sURA8A7HSOSKtUnMpY+MIf1XMQTUdvvEL6irDTcOk8nOkU+qUE vnCw4lF6jCQSjuacOu+Nhtg/YJ7J5+D9FpvCrFXB2nWmMl9UKEYAoy80AoXXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvP7/t5nY+JN3S w6S55uWqnkU70DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Nw Uk1WR3hlRGZnY0VqOXBVZU1TOE1QOVlybW9TaW9lSjhiSmJIcFdjTGUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdj cFJNVkd4ZURmZ2NFajlwVWVNUzhNUDlZcm1vU2lvZUo4YkpiSHBXY0xlLzAvMkYz RkJGRURFNjc2M0UyNERERDJDM0E0QjlFNkU1QUE5RTQ1M0JEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg/9MMA0EAgACMAcDBQAoBCDgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQJRjANBgkqhkiG9w0BAQsFAAOCAQEALGHRvRNknmvCqQiD +w6H+8NgHhcYbQXHEnb5WTlCxNXrD9+qQBooPPzX7RzvguyHTAlgue6PV3BWP3QY nnCMdJT88zS/p0QovUnqdlqqHHicj/t5u7WREEAqosA36QS7e1b4CqG/UNYsXeCP 8MgkAt61lBmCLOw4xiwlaBhENDMrenf0H84l56orx3POD1txHxC3wU5UB+oDtRM0 Wi8ROMWc9ZLzb6bdVRW+jnByeXBNu3qwDHWFnJU+AmfaAWUx1WgmT+uEQUwbH5Ul 3RRmq9nMXPWn0ywgmgP00B0C2Bs99OvQzBytmobR/zKOM5syLMTYs6NPYng9vA5F EhYrLA== -----END CERTIFICATE-----Generated at Wed Apr 8 21:18:06 2026 by rpki-client