$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer File: 5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer (raw, json) Hash identifier: Uo+dPJnXPZQcpTGg+ysBZdt5MEaKnzv/XKzkQcnFWXE= Subject key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7ACFBC6E444C7004D17D9375F06113C0B14AB52A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft caRepository: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 00:36:58 +0000 Certificate not after: Thu 01 Apr 2027 00:41:58 +0000 Subordinate resources: AS: 268153 IP: 45.170.72.0/22 IP: 2804:58d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:bc:6e:44:4c:70:04:d1:7d:93:75:f0:61:13:c0:b1:4a:b5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 2 00:36:58 2026 GMT Not After : Apr 1 00:41:58 2027 GMT Subject: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:64:c9:1e:85:78:4f:ab:7b:44:9d:8f:ce: 72:44:22:98:66:eb:9d:42:0e:08:f1:f8:76:2d:40: f8:4f:dc:1f:f9:fa:77:08:c1:29:ef:1a:df:0b:18: 8d:a9:08:c2:6c:5c:dd:52:4e:84:58:23:0d:cc:e1: 20:76:8d:31:75:bc:84:ef:68:ae:d9:97:57:a0:ab: e5:cf:4a:5a:20:d8:b2:c1:38:c6:8e:2a:17:1b:e2: be:17:3b:f1:15:4e:9c:db:90:48:45:38:e8:34:87: 40:d4:81:a8:02:c4:fc:30:01:b6:07:29:54:1c:a1: 11:cb:02:4d:e6:49:7e:70:83:a7:48:0b:ac:9b:29: 08:04:89:06:65:cc:0b:8c:0f:c7:a8:6e:a9:fa:74: 29:70:39:27:f1:48:41:71:80:8d:cf:58:6b:e5:21: 03:2d:86:73:11:9a:57:74:b7:77:c7:23:43:1d:7a: 17:89:f1:a4:59:c4:b6:99:c9:22:1a:fe:ce:b0:96: e2:56:dc:c3:b9:72:12:f3:0e:25:22:fe:e7:41:56: d8:ae:36:bc:61:80:1a:02:c8:77:3d:7a:62:af:86: 06:f9:4a:a7:67:2e:63:f0:61:0b:19:d8:e4:6a:8e: 1e:e1:21:9e:3d:a7:26:3d:a5:27:14:10:9e:44:0d: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.72.0/22 IPv6: 2804:58d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268153 Signature Algorithm: sha256WithRSAEncryption a7:fa:c3:52:38:cc:66:91:52:41:06:3d:ee:00:20:7e:24:7e: 37:ee:54:36:1d:49:4f:fd:1e:2e:23:32:f3:60:a0:05:78:a9: 1b:71:5f:7f:a7:14:a0:32:38:46:ee:8c:58:8a:da:9b:7a:a8: 95:f5:32:ec:f7:46:ea:d5:a0:6a:98:6d:8b:93:cd:ed:f7:d2: d4:f9:ac:ba:ce:47:97:d7:ea:33:b8:cd:46:c0:71:7e:f8:74: b1:a0:14:33:53:99:34:35:dc:f4:0f:fe:d7:30:26:d0:b2:b2: c5:bd:06:4b:0a:e1:e4:51:80:c6:71:53:d8:af:71:f7:0b:19: fb:c7:b2:d1:98:b7:b6:1a:75:fb:3b:a7:80:28:f6:39:84:b9: 7c:71:f2:e5:b3:27:df:e6:3e:f7:77:fb:67:a0:84:f1:bb:2a: ad:9e:ed:8d:9b:b7:fd:49:7e:f1:17:4f:6e:fc:12:f8:4d:0f: de:50:b6:cc:40:17:0d:6b:5f:41:19:2d:4f:fb:b4:c1:d9:30: 8e:a1:e5:fd:92:18:28:cb:d5:ef:2c:b3:81:33:1f:dc:14:45: ec:21:7c:d9:41:54:d1:33:75:c4:c8:07:70:7c:61:31:18:ca: 0b:ad:9f:06:60:50:4d:62:07:08:11:61:94:d2:fb:f6:bc:2c: 5c:62:03:43 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUes+8bkRMcATRfZN18GETwLFKtSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDIwMDM2NThaFw0yNzA0MDEwMDQxNThaMDMxMTAvBgNV BAMTKDVGQTdDQkJCRDFEMUY3OTUxM0MyRUZENTI0N0MzQUE0MkZEMEU3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4mTJHoV4T6t7RJ2PznJEIphm 651CDgjx+HYtQPhP3B/5+ncIwSnvGt8LGI2pCMJsXN1SToRYIw3M4SB2jTF1vITv aK7Zl1egq+XPSlog2LLBOMaOKhcb4r4XO/EVTpzbkEhFOOg0h0DUgagCxPwwAbYH KVQcoRHLAk3mSX5wg6dIC6ybKQgEiQZlzAuMD8eobqn6dClwOSfxSEFxgI3PWGvl IQMthnMRmld0t3fHI0MdeheJ8aRZxLaZySIa/s6wluJW3MO5chLzDiUi/udBVtiu NrxhgBoCyHc9emKvhgb5SqdnLmPwYQsZ2ORqjh7hIZ49pyY9pScUEJ5EDUT5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfp8u70dH3lRPC 79UkfDqkL9DnbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUQ2 OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4SzEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FE NjhvdlFNZ0tmUzg1QjdUNXM2S293WWNxTDM0VWRIdkVoMmNCems5OEsxLzAvNUZB N0NCQkJEMUQxRjc5NTEzQzJFRkQ1MjQ3QzNBQTQyRkQwRTc2Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLapIMA0EAgACMAcDBQAoBFjYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXeTANBgkqhkiG9w0BAQsFAAOCAQEAp/rDUjjMZpFSQQY9 7gAgfiR+N+5UNh1JT/0eLiMy82CgBXipG3Fff6cUoDI4Ru6MWIram3qolfUy7PdG 6tWgaphti5PN7ffS1Pmsus5Hl9fqM7jNRsBxfvh0saAUM1OZNDXc9A/+1zAm0LKy xb0GSwrh5FGAxnFT2K9x9wsZ+8ey0Zi3thp1+zungCj2OYS5fHHy5bMn3+Y+93f7 Z6CE8bsqrZ7tjZu3/Ul+8RdPbvwS+E0P3lC2zEAXDWtfQRktT/u0wdkwjqHl/ZIY KMvV7yyzgTMf3BRF7CF82UFU0TN1xMgHcHxhMRjKC62fBmBQTWIHCBFhlNL79rws XGIDQw== -----END CERTIFICATE-----Generated at Wed Apr 8 15:46:09 2026 by rpki-client