$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer File: B20E70F81B422B7960B3939928B1B16370431917.cer (raw, json) Hash identifier: vNo+xwlIr/a8kGp85Z4nep4QX16vBfWuIhp/Rqn6FFc= Subject key identifier: B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67DB411CA225AE24437426C2B36DC23EE52EFB85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.mft caRepository: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 04 Apr 2026 01:55:31 +0000 Certificate not after: Sat 03 Apr 2027 02:00:31 +0000 Subordinate resources: AS: 268729 IP: 45.171.248.0/22 IP: 2804:59d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:db:41:1c:a2:25:ae:24:43:74:26:c2:b3:6d:c2:3e:e5:2e:fb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 01:55:31 2026 GMT Not After : Apr 3 02:00:31 2027 GMT Subject: CN=B20E70F81B422B7960B3939928B1B16370431917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:ad:ae:a7:8a:ff:4c:b3:56:b8:82:b9:a5: fa:83:47:c2:f0:20:76:d6:d7:f2:44:34:03:6e:fe: 89:55:5a:2d:a6:66:fe:09:0c:33:f6:bc:06:95:07: a0:1e:d1:19:18:a0:5a:a9:0a:90:00:f4:39:24:f1: 33:a5:ea:44:62:56:9d:d9:35:02:96:4d:9a:07:27: 16:79:4c:7b:06:10:06:b6:2e:ae:3c:7e:08:7c:a7: d2:41:19:a9:93:54:b2:52:b3:a9:6f:fb:ed:44:c5: 98:62:24:84:6e:d2:bb:c4:06:e6:94:2a:69:18:c4: 8c:21:ca:ff:52:57:9b:b8:c5:26:44:4b:c7:13:98: f2:b6:e5:ad:17:00:b2:0f:32:5d:33:f0:c9:53:01: b6:93:9e:56:2b:47:2b:d6:86:87:3b:9f:3e:30:45: ba:58:ea:7f:f3:d1:c8:c9:00:de:c3:94:c7:59:32: bc:b4:ed:13:05:9f:c2:8e:8e:00:96:a1:d0:e2:c1: 30:0b:a6:47:69:08:4a:c2:a3:8c:e5:90:11:8b:c5: 87:d3:31:dd:87:ac:a4:be:0b:81:13:82:3f:0f:9b: 24:aa:f6:b1:5e:7e:7f:b1:7b:48:ac:ce:31:e4:97: 70:d5:ec:af:87:12:2e:8c:b5:33:51:cf:ee:04:cf: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.248.0/22 IPv6: 2804:59d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268729 Signature Algorithm: sha256WithRSAEncryption 8f:15:0e:5d:b7:c9:7a:f0:d9:19:2c:c2:a1:51:d3:71:2f:ef: 14:83:6d:01:ad:98:a1:56:e7:e7:26:d7:48:37:3e:07:fc:c5: 71:2f:5a:54:20:f0:2c:c4:1d:ba:da:88:66:9d:b0:07:bc:e5: a9:ba:90:68:4e:72:cd:f5:b4:a7:10:f2:7f:c0:ff:5d:c3:fb: 64:8c:6c:26:d6:f0:16:83:53:a9:d8:61:c0:eb:33:60:ac:5c: 0f:8b:9a:1c:1a:da:54:0f:39:f2:27:31:31:e7:44:a9:77:e9: de:dc:31:d0:88:85:73:3f:dd:82:13:dd:2f:c8:b7:d1:a6:19: 83:45:6d:46:ec:9a:18:f2:84:1a:31:6c:01:f4:ed:dc:7d:55: 81:c0:24:a3:91:57:61:f5:8a:6b:ef:96:7c:c8:f1:67:4e:af: 8b:8a:28:ad:88:d5:7f:59:ac:e7:84:18:a0:e6:37:7f:89:f8: fc:61:dc:0c:d9:6f:10:42:cc:b7:51:c6:08:c4:51:79:87:6b: 49:b6:b1:1b:9d:1b:83:9a:21:1d:5e:b9:ad:c6:49:5d:ff:d9: 92:ba:a1:77:58:69:b2:aa:31:da:b4:23:75:af:0e:66:40:28: cc:84:b7:11:55:61:35:d9:b1:3e:e4:97:45:4e:e3:b9:0d:53: 26:2a:66:69 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZ9tBHKIlriRDdCbCs23CPuUu+4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDQwMTU1MzFaFw0yNzA0MDMwMjAwMzFaMDMxMTAvBgNV BAMTKEIyMEU3MEY4MUI0MjJCNzk2MEIzOTM5OTI4QjFCMTYzNzA0MzE5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZK2up4r/TLNWuIK5pfqDR8Lw IHbW1/JENANu/olVWi2mZv4JDDP2vAaVB6Ae0RkYoFqpCpAA9Dkk8TOl6kRiVp3Z NQKWTZoHJxZ5THsGEAa2Lq48fgh8p9JBGamTVLJSs6lv++1ExZhiJIRu0rvEBuaU KmkYxIwhyv9SV5u4xSZES8cTmPK25a0XALIPMl0z8MlTAbaTnlYrRyvWhoc7nz4w RbpY6n/z0cjJAN7DlMdZMry07RMFn8KOjgCWodDiwTALpkdpCErCo4zlkBGLxYfT Md2HrKS+C4ETgj8PmySq9rFefn+xe0iszjHkl3DV7K+HEi6MtTNRz+4Ez1hzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyDnD4G0IreWCz k5kosbFjcEMZFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEZT Z3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2YXkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhG U2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzAvQjIw RTcwRjgxQjQyMkI3OTYwQjM5Mzk5MjhCMUIxNjM3MDQzMTkxNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLav4MA0EAgACMAcDBQAoBFnYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZuTANBgkqhkiG9w0BAQsFAAOCAQEAjxUOXbfJevDZGSzC oVHTcS/vFINtAa2YoVbn5ybXSDc+B/zFcS9aVCDwLMQdutqIZp2wB7zlqbqQaE5y zfW0pxDyf8D/XcP7ZIxsJtbwFoNTqdhhwOszYKxcD4uaHBraVA858icxMedEqXfp 3twx0IiFcz/dghPdL8i30aYZg0VtRuyaGPKEGjFsAfTt3H1VgcAko5FXYfWKa++W fMjxZ06vi4oorYjVf1ms54QYoOY3f4n4/GHcDNlvEELMt1HGCMRReYdrSbaxG50b g5ohHV65rcZJXf/Zkrqhd1hpsqox2rQjda8OZkAozIS3EVVhNdmxPuSXRU7juQ1T JipmaQ== -----END CERTIFICATE-----Generated at Wed Apr 8 07:39:45 2026 by rpki-client