$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer (raw, json) Hash identifier: eH1T0VDTfGeqjpB4uCeQf73lduJ0MNNRROS+Il81+GU= Subject key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4EDB955CE8AB13D188858B860C9C5406F38A592D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft caRepository: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 05:03:30 +0000 Certificate not after: Tue 06 Apr 2027 05:08:30 +0000 Subordinate resources: AS: 266387 IP: 170.81.20.0/22 IP: 191.37.140.0/22 IP: 2804:3710::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:db:95:5c:e8:ab:13:d1:88:85:8b:86:0c:9c:54:06:f3:8a:59:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 05:03:30 2026 GMT Not After : Apr 6 05:08:30 2027 GMT Subject: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:f0:66:21:d7:63:40:b4:8e:20:ce:4d:62: 3e:60:45:76:22:5a:09:07:bb:b9:dc:ac:a3:1e:f8: 4b:36:b3:0f:88:07:3d:e6:c4:ac:23:4c:4a:29:97: bf:7a:4e:a5:a3:ad:af:d7:03:0c:e6:61:ba:ae:ff: 51:04:87:23:a8:58:81:d3:2e:2e:c7:5a:a5:bb:d9: c1:7d:25:24:45:ee:64:a9:4a:5c:66:c1:59:e5:9f: 25:ef:8b:09:8e:cb:9a:fb:72:7c:be:23:9b:18:12: 52:06:6c:b4:25:b9:a0:37:d0:cb:51:c2:6a:27:d6: be:0f:07:b9:e0:bf:f1:7d:d3:31:aa:8e:d9:8a:d0: 58:e2:05:66:61:89:27:91:ac:bd:12:c9:d4:b9:2c: 58:63:8e:3a:27:bc:27:e7:47:d9:8d:ee:0c:ba:2a: 28:a0:5e:c4:2b:e7:fe:03:37:91:f0:39:24:81:8e: 39:f9:5a:a6:ef:46:14:92:d7:7e:5b:4e:7e:e9:0e: 36:ef:db:05:e5:23:2a:22:c4:b9:c9:27:27:3d:1b: 93:9c:a1:a1:ad:b0:1e:af:bf:74:ee:20:a3:c7:d8: 85:35:59:85:3c:ca:94:c3:e7:62:bc:8e:da:7b:f2: 66:04:82:4c:b6:f6:14:7b:2a:7c:07:49:de:5d:1b: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.20.0/22 191.37.140.0/22 IPv6: 2804:3710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266387 Signature Algorithm: sha256WithRSAEncryption 1c:c2:cd:78:db:87:8a:a6:72:e8:47:af:bb:9e:b6:a8:ea:d3: 86:59:7d:2f:55:52:18:7e:b7:0a:fa:aa:2a:60:8f:d7:6b:c5: 50:62:c1:79:e7:73:a3:3e:89:f2:10:52:fd:94:32:57:34:f3: a2:36:9a:85:13:5a:48:cb:e3:f0:6a:82:61:ae:cf:26:af:8a: df:d1:54:c6:d3:70:90:89:e5:90:14:fe:47:8e:05:60:92:a3: bd:84:83:96:b6:6b:d5:bf:d9:9b:69:6b:37:34:e9:3b:84:df: 0b:df:74:9b:32:81:0b:8f:e9:6d:c3:9b:ad:b7:60:6c:1f:68: 4f:00:cd:fa:e1:b6:32:7e:b0:d4:cc:ac:a1:82:6f:7e:da:2e: d0:63:a5:cc:74:1d:3c:64:81:b8:3d:9f:52:df:67:9b:e2:3d: 0f:ea:2a:c7:17:5b:b1:77:51:e2:a9:cb:df:08:72:e4:12:09: e8:62:68:85:89:b3:93:38:69:26:8c:86:fd:e1:15:e8:c0:8d: 6f:ed:06:b3:4d:7d:48:a1:6a:81:f9:ca:0a:0a:3b:04:1f:77: 80:ee:25:ab:26:6b:8a:cc:ec:0d:42:07:a7:56:1e:de:ab:f1: 4c:ad:b3:d9:9a:40:75:f1:79:55:c9:c9:ca:9b:d3:a5:b9:a0: d7:8b:93:bb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTtuVXOirE9GIhYuGDJxUBvOKWS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcwNTAzMzBaFw0yNzA0MDYwNTA4MzBaMDMxMTAvBgNV BAMTKEEyOEYwQzFFRDE4RjQ4QTY2OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8PBmIddjQLSOIM5NYj5gRXYi WgkHu7ncrKMe+Es2sw+IBz3mxKwjTEopl796TqWjra/XAwzmYbqu/1EEhyOoWIHT Li7HWqW72cF9JSRF7mSpSlxmwVnlnyXviwmOy5r7cny+I5sYElIGbLQluaA30MtR wmon1r4PB7ngv/F90zGqjtmK0FjiBWZhiSeRrL0SydS5LFhjjjonvCfnR9mN7gy6 KiigXsQr5/4DN5HwOSSBjjn5WqbvRhSS135bTn7pDjbv2wXlIyoixLnJJyc9G5Oc oaGtsB6vv3TuIKPH2IU1WYU8ypTD52K8jtp78mYEgky29hR7KnwHSd5dG3BBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijwwe0Y9IpmnH a6NM1y8qFFakGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZH alJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2 R2pSWHJtYTdqTkdhanM2bUFDU2I1a0JmWXM2a3VHdDVyVFYzZXhqdkg5LzEvQTI4 RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkExNDU2QTQxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlEUAwQCvyWMMA0EAgACMAcDBQAoBDcQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQkzANBgkqhkiG9w0BAQsFAAOCAQEAHMLNeNuH iqZy6Eevu562qOrThll9L1VSGH63CvqqKmCP12vFUGLBeedzoz6J8hBS/ZQyVzTz ojaahRNaSMvj8GqCYa7PJq+K39FUxtNwkInlkBT+R44FYJKjvYSDlrZr1b/Zm2lr NzTpO4TfC990mzKBC4/pbcObrbdgbB9oTwDN+uG2Mn6w1MysoYJvftou0GOlzHQd PGSBuD2fUt9nm+I9D+oqxxdbsXdR4qnL3why5BIJ6GJohYmzkzhpJoyG/eEV6MCN b+0Gs019SKFqgfnKCgo7BB93gO4lqyZriszsDUIHp1Ye3qvxTK2z2ZpAdfF5VcnJ ypvTpbmg14uTuw== -----END CERTIFICATE-----Generated at Wed Apr 8 15:59:45 2026 by rpki-client