$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer File: 85990FF5D49C5109F060F455F3B6EBC79F362861.cer (raw, json) Hash identifier: 6/9+WGlfoXv6tAelqk8QmVL2zXfJU5965bXybpG0A38= Subject key identifier: 85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55D165267B2FE45D4AB58616440697AF5FC753F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft caRepository: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 20:02:40 +0000 Certificate not after: Fri 26 Mar 2027 20:07:40 +0000 Subordinate resources: AS: 263991 IP: 143.0.28.0/22 IP: 170.245.16.0/22 IP: 2804:28fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d1:65:26:7b:2f:e4:5d:4a:b5:86:16:44:06:97:af:5f:c7:53:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 20:02:40 2026 GMT Not After : Mar 26 20:07:40 2027 GMT Subject: CN=85990FF5D49C5109F060F455F3B6EBC79F362861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:ff:39:90:cd:1d:b6:25:31:2b:7c:33:d6: 5d:3a:4f:8e:8c:30:48:74:a6:e9:0e:ea:c3:6e:77: 11:3f:db:8e:92:ba:37:0f:0e:fc:5d:b0:27:77:ab: 2f:3e:1e:c7:7a:37:5e:4a:98:e6:7e:1e:96:3e:fc: f8:de:77:42:ed:c5:f3:8e:93:37:8e:a9:bb:7e:ca: a6:92:60:f6:61:d2:7f:45:58:d4:61:d1:84:4a:12: a0:5e:9b:79:a6:41:df:81:71:64:07:f7:d0:c4:cf: e6:cc:ad:93:e8:af:38:06:66:1a:56:ae:fd:29:9a: 1c:9f:2e:10:48:54:22:98:46:4a:d0:5b:3c:74:13: 4c:04:8f:89:05:8d:33:60:af:ab:3d:5b:20:9d:0e: a4:86:4a:67:27:6a:9e:8b:66:84:cb:70:ae:6e:c2: 7c:9a:5e:39:8f:22:60:96:71:11:b1:03:62:d5:b8: 67:4a:bc:0b:d9:8e:6b:e7:6f:0a:c9:39:5a:14:fa: 35:a7:a6:8e:ae:02:c9:cf:12:91:a6:b0:77:29:7c: 4a:ec:19:10:fe:aa:54:47:05:74:b5:83:d1:71:93: e5:b6:35:ed:47:4c:21:88:86:b5:84:ef:c0:02:58: 97:eb:13:33:d7:7d:c5:f2:8b:b0:dd:2b:71:82:90: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.28.0/22 170.245.16.0/22 IPv6: 2804:28fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263991 Signature Algorithm: sha256WithRSAEncryption 20:c9:f2:d7:cd:3a:e3:d4:fc:ac:8f:41:f7:d6:57:e6:81:7c: e9:5e:55:1f:d9:34:fc:56:37:1b:a0:2f:ca:80:37:66:53:6a: 9b:45:a6:2b:c5:f8:95:85:4b:37:fd:06:ea:43:5c:df:ab:55: 13:45:67:a8:a6:4b:c9:80:97:00:6f:3a:04:69:08:98:b8:44: fb:86:ed:ce:3b:73:10:f7:34:9c:91:14:e5:dd:21:82:85:08: d2:6a:11:03:13:36:58:12:5c:52:8d:43:33:93:9f:c5:60:0b: 83:2f:93:61:b3:38:aa:a6:27:70:b9:36:44:60:d9:6a:dd:e6: be:c1:af:ce:64:61:9c:48:69:79:4e:2a:47:de:bc:1c:64:29: cb:6f:c4:45:f3:a9:c3:53:fc:0d:e7:3e:b0:ba:08:f8:3b:76: c2:34:a5:71:1b:62:db:9a:7a:b1:1a:0d:63:7f:2b:dc:48:6a: 34:bd:f5:05:e3:9b:e6:ab:d7:db:c3:64:6d:43:6d:96:94:2e: 2b:6f:ad:47:98:89:d1:c2:3b:dc:1f:eb:6c:ab:41:25:f5:8d: 2d:73:11:92:18:02:80:fa:0d:60:89:f1:3b:df:2c:8d:26:fa: 3d:28:17:e4:ca:ec:21:de:4f:20:da:6a:d6:28:f7:e2:96:d4: d4:cb:06:1a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVdFlJnsv5F1KtYYWRAaXr1/HU/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjcyMDAyNDBaFw0yNzAzMjYyMDA3NDBaMDMxMTAvBgNV BAMTKDg1OTkwRkY1RDQ5QzUxMDlGMDYwRjQ1NUYzQjZFQkM3OUYzNjI4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgf85kM0dtiUxK3wz1l06T46M MEh0pukO6sNudxE/246SujcPDvxdsCd3qy8+Hsd6N15KmOZ+HpY+/Pjed0LtxfOO kzeOqbt+yqaSYPZh0n9FWNRh0YRKEqBem3mmQd+BcWQH99DEz+bMrZPorzgGZhpW rv0pmhyfLhBIVCKYRkrQWzx0E0wEj4kFjTNgr6s9WyCdDqSGSmcnap6LZoTLcK5u wnyaXjmPImCWcRGxA2LVuGdKvAvZjmvnbwrJOVoU+jWnpo6uAsnPEpGmsHcpfErs GRD+qlRHBXS1g9Fxk+W2Ne1HTCGIhrWE78ACWJfrEzPXfcXyi7DdK3GCkK+FAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFmQ/11JxRCfBg 9FXztuvHnzYoYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGhw YnRBSjdyblBXTENyejJNTUtHSFU3WEdab1VxV0o5cHUxSkdDZkR2QmYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ho cGJ0QUo3cm5QV0xDcnoyTU1LR0hVN1hHWm9VcVdKOXB1MUpHQ2ZEdkJmLzAvODU5 OTBGRjVENDlDNTEwOUYwNjBGNDU1RjNCNkVCQzc5RjM2Mjg2MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCjwAcAwQCqvUQMA0EAgACMAcDBQAoBCj8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHNzANBgkqhkiG9w0BAQsFAAOCAQEAIMny1806 49T8rI9B99ZX5oF86V5VH9k0/FY3G6AvyoA3ZlNqm0WmK8X4lYVLN/0G6kNc36tV E0VnqKZLyYCXAG86BGkImLhE+4btzjtzEPc0nJEU5d0hgoUI0moRAxM2WBJcUo1D M5OfxWALgy+TYbM4qqYncLk2RGDZat3mvsGvzmRhnEhpeU4qR968HGQpy2/ERfOp w1P8Dec+sLoI+Dt2wjSlcRti25p6sRoNY38r3EhqNL31BeOb5qvX28NkbUNtlpQu K2+tR5iJ0cI73B/rbKtBJfWNLXMRkhgCgPoNYInxO98sjSb6PSgX5MrsId5PINpq 1ij34pbU1MsGGg== -----END CERTIFICATE-----Generated at Wed Apr 8 15:26:06 2026 by rpki-client