$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer File: 5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer (raw, json) Hash identifier: dzTgD65jDKwyXiKEGDwWn4pMnBZ1ZOC8SBr0+kIn8LE= Subject key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E9A0658D662F02FFA8A278322679F49BCADC5AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft caRepository: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 06:29:59 +0000 Certificate not after: Fri 29 Jan 2027 06:34:59 +0000 Subordinate resources: AS: 52708 IP: 138.118.100.0/22 IP: 177.84.40.0/22 IP: 2804:2504::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 12:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9a:06:58:d6:62:f0:2f:fa:8a:27:83:22:67:9f:49:bc:ad:c5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 06:29:59 2026 GMT Not After : Jan 29 06:34:59 2027 GMT Subject: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:a3:41:80:64:b0:9f:20:f2:81:23:4f:71: 54:8c:47:e4:b9:d5:f6:92:70:73:bc:36:f1:58:71: 87:41:26:ad:d0:c7:4c:2d:8f:24:56:25:4e:cb:a3: e1:e5:a1:81:2e:cf:80:6e:61:41:0d:cd:73:87:1d: 95:44:80:78:b0:16:d5:26:98:a5:d7:c4:a3:50:d7: d4:a9:c8:15:ce:c1:f5:18:60:0f:6f:e3:9d:b1:bf: 39:88:30:67:8c:ee:89:ec:c6:ee:e3:9e:23:7f:9b: 40:a0:8a:31:be:ef:7d:a1:c1:01:a0:9f:04:49:2e: ab:75:7a:69:2e:bc:1e:6b:95:3a:41:dc:00:35:75: ca:c5:3a:11:70:08:b2:b9:2e:1e:67:1b:21:29:f2: f2:c6:8b:e0:b1:a9:de:b6:62:cd:54:ea:5b:09:67: c2:c0:0d:99:96:e9:f3:30:77:1a:4d:ae:10:21:89: 31:34:6a:43:67:b1:a6:50:98:a5:1a:76:0c:2a:35: 4b:16:fe:d9:4b:34:81:d0:60:58:ca:a7:d1:5c:b4: 20:89:9c:47:c0:a2:51:8e:a8:20:f3:7b:63:bd:bc: 21:58:81:0e:30:cd:eb:7c:9e:ee:c1:70:7f:29:50: 1c:92:a7:4a:05:61:37:7a:0e:f6:f1:c0:d7:0c:99: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.100.0/22 177.84.40.0/22 IPv6: 2804:2504::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52708 Signature Algorithm: sha256WithRSAEncryption 7c:91:40:4e:5b:53:a4:81:56:ff:99:4d:44:c1:27:49:81:1b: f6:45:5f:03:6f:0c:2c:a2:71:cf:4a:35:ba:43:c5:1f:23:9d: 2f:66:c8:dc:4d:8d:2d:42:c9:3f:a8:e5:1c:8b:73:6e:01:45: 8c:3f:e1:32:19:8c:95:e8:88:e7:3c:9c:df:43:be:f8:a3:09: 47:b8:db:9c:df:9f:6a:f4:7f:8d:80:11:86:9e:cf:5c:3b:98: 52:ca:6b:e6:94:5a:8c:22:d2:58:07:7f:ee:a8:06:58:f1:0f: 84:87:46:6c:fb:2a:3d:cd:6f:35:70:66:ec:5b:5f:e4:0d:03: 83:8f:01:10:d2:a0:96:b2:88:ad:e4:2a:dd:82:78:4b:03:3a: 8f:34:ba:27:56:34:60:60:0c:db:ef:8b:b6:85:42:d3:f1:dc: e6:38:d0:eb:a1:ea:68:5b:65:6e:06:fe:15:2e:86:95:6b:66: 16:a0:ea:7f:4a:16:c6:98:d8:c9:17:26:9b:5a:8c:12:26:8b: 96:6e:5a:c0:a5:fa:71:88:53:81:ca:f3:ff:c5:5a:fe:20:8b: 89:69:50:60:ba:38:ce:c7:9e:cd:02:b6:f0:f3:b3:3f:eb:b8: 11:74:23:ca:83:8a:5d:da:97:7a:69:a4:e6:d6:28:fe:19:be: 52:91:77:e3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPpoGWNZi8C/6iieDImefSbytxa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMzAwNjI5NTlaFw0yNzAxMjkwNjM0NTlaMDMxMTAvBgNV BAMTKDVBQjY0MDkxOTFCQzI1REE5M0E4NkNCMUI3OUYyM0E1QjQ3RkFBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzKNBgGSwnyDygSNPcVSMR+S5 1faScHO8NvFYcYdBJq3Qx0wtjyRWJU7Lo+HloYEuz4BuYUENzXOHHZVEgHiwFtUm mKXXxKNQ19SpyBXOwfUYYA9v452xvzmIMGeM7onsxu7jniN/m0CgijG+732hwQGg nwRJLqt1emkuvB5rlTpB3AA1dcrFOhFwCLK5Lh5nGyEp8vLGi+Cxqd62Ys1U6lsJ Z8LADZmW6fMwdxpNrhAhiTE0akNnsaZQmKUadgwqNUsW/tlLNIHQYFjKp9FctCCJ nEfAolGOqCDze2O9vCFYgQ4wzet8nu7BcH8pUBySp0oFYTd6DvbxwNcMmV8nAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRatkCRkbwl2pOo bLG3nyOltH+qvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXE2 dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhVZ00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlx NnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzAvNUFC NjQwOTE5MUJDMjVEQTkzQTg2Q0IxQjc5RjIzQTVCNDdGQUFCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinZkAwQCsVQoMA0EAgACMAcDBQAoBCUEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN5DANBgkqhkiG9w0BAQsFAAOCAQEAfJFATltT pIFW/5lNRMEnSYEb9kVfA28MLKJxz0o1ukPFHyOdL2bI3E2NLULJP6jlHItzbgFF jD/hMhmMleiI5zyc30O++KMJR7jbnN+favR/jYARhp7PXDuYUspr5pRajCLSWAd/ 7qgGWPEPhIdGbPsqPc1vNXBm7Ftf5A0Dg48BENKglrKIreQq3YJ4SwM6jzS6J1Y0 YGAM2++LtoVC0/Hc5jjQ66HqaFtlbgb+FS6GlWtmFqDqf0oWxpjYyRcmm1qMEiaL lm5awKX6cYhTgcrz/8Va/iCLiWlQYLo4zseezQK28POzP+u4EXQjyoOKXdqXemmk 5tYo/hm+UpF34w== -----END CERTIFICATE-----Generated at Thu Feb 19 11:50:40 2026 by rpki-client