$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer File: C4A0C992AC81775846EF3EACD736353F739F7D8D.cer (raw, json) Hash identifier: o31oLLUxkUC2q928pftxMzEldEg5OLeYq0xOaX7usg4= Subject key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12B95499F34624F78E9F9A6FF6BB3C77F3BCD577 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft caRepository: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 16:21:53 +0000 Certificate not after: Wed 07 Apr 2027 16:26:53 +0000 Subordinate resources: AS: 52545 IP: 131.72.48.0/22 IP: 168.121.168.0/22 IP: 170.82.168.0/22 IP: 179.107.80.0/22 IP: 2804:e1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b9:54:99:f3:46:24:f7:8e:9f:9a:6f:f6:bb:3c:77:f3:bc:d5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 16:21:53 2026 GMT Not After : Apr 7 16:26:53 2027 GMT Subject: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:8d:47:20:f5:91:e1:38:96:fa:72:bc:95: bd:b7:0d:15:fb:df:5b:e4:85:57:37:75:5e:5f:2d: 7c:f2:d1:ec:9f:8c:51:81:b5:f7:f1:7d:39:57:cb: 08:35:53:58:38:1c:df:7f:d5:73:57:c5:4a:97:22: ec:0e:2b:3b:8f:3e:ec:28:34:08:6d:fe:5d:3b:69: f6:32:3c:1c:54:ca:5a:01:67:d4:39:9a:00:21:06: ce:99:52:ee:d7:c1:57:50:7d:54:0e:71:f4:7a:27: 37:84:ad:15:a2:32:ed:12:50:61:b1:d5:fd:7d:4b: dc:a2:d4:a2:0d:d2:21:13:51:58:be:33:2d:3d:72: e8:c3:3b:6b:4d:79:5c:49:cc:7a:0d:d8:1f:04:6f: 9d:e3:ac:5d:dd:10:f8:6f:6a:e0:90:d4:97:5b:06: 45:f8:9d:8b:68:0a:e7:fd:32:b9:4e:bd:f9:b3:b5: b3:14:54:c3:4c:b5:75:ec:8c:e0:b4:b2:a0:9b:f9: 9b:fa:63:e1:bb:29:c2:68:52:60:1c:c0:66:49:c1: 1a:19:85:b6:f9:66:0d:1d:17:8f:51:5f:5a:94:dd: 23:38:8e:52:7a:41:f0:6b:43:f1:4c:25:6f:e9:b7: 63:50:70:5c:65:54:30:2a:bc:de:f2:26:25:d5:e7: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.48.0/22 168.121.168.0/22 170.82.168.0/22 179.107.80.0/22 IPv6: 2804:e1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52545 Signature Algorithm: sha256WithRSAEncryption 54:27:b6:ce:ed:4a:f8:25:e1:68:78:a4:3b:59:0b:19:36:7a: 9a:f8:ef:5a:27:fc:27:b4:2f:fc:8f:e1:90:1e:0c:0c:8e:8d: 23:65:a7:32:37:e3:bb:a4:d0:57:77:7a:50:e6:a4:b7:5d:95: 20:a3:b3:8e:20:b6:59:3e:21:08:a7:7f:81:7c:a6:3a:e0:86: 4a:88:30:3d:24:28:94:ab:99:b7:44:45:e7:78:c5:7a:27:16: e3:70:c8:fe:7e:69:3a:8c:89:4e:eb:62:6e:41:98:86:ea:fd: 68:76:14:fd:34:f0:5a:5c:8c:af:74:97:0b:6f:55:56:98:d7: 63:0c:c4:a4:78:f6:29:2f:5f:6d:32:a7:f9:5b:e9:0c:cc:e9: 59:fa:22:57:86:73:f9:e5:1e:ce:e7:33:24:2b:7d:a6:09:41: 69:27:73:4e:bd:8e:f2:93:1a:3c:d1:94:8d:ee:78:25:9f:d1: 39:54:00:d1:ff:18:7f:19:1b:b1:07:fd:7b:c4:de:98:1f:ce: 4f:36:5f:15:68:77:89:8a:66:59:05:12:f9:ce:72:c8:8d:a5: e1:79:d9:fb:1b:87:20:d2:15:d9:88:cb:54:80:35:94:66:55: 07:65:7a:46:be:4e:b1:a7:6b:15:d0:47:6b:b2:af:24:89:5a: e6:17:74:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUErlUmfNGJPeOn5pv9rs8d/O81XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDgxNjIxNTNaFw0yNzA0MDcxNjI2NTNaMDMxMTAvBgNV BAMTKEM0QTBDOTkyQUM4MTc3NTg0NkVGM0VBQ0Q3MzYzNTNGNzM5RjdEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGo1HIPWR4TiW+nK8lb23DRX7 31vkhVc3dV5fLXzy0eyfjFGBtffxfTlXywg1U1g4HN9/1XNXxUqXIuwOKzuPPuwo NAht/l07afYyPBxUyloBZ9Q5mgAhBs6ZUu7XwVdQfVQOcfR6JzeErRWiMu0SUGGx 1f19S9yi1KIN0iETUVi+My09cujDO2tNeVxJzHoN2B8Eb53jrF3dEPhvauCQ1Jdb BkX4nYtoCuf9MrlOvfmztbMUVMNMtXXsjOC0sqCb+Zv6Y+G7KcJoUmAcwGZJwRoZ hbb5Zg0dF49RX1qU3SM4jlJ6QfBrQ/FMJW/pt2NQcFxlVDAqvN7yJiXV5+8lAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEoMmSrIF3WEbv PqzXNjU/c599jTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0FM UTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dB TFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAvQzRB MEM5OTJBQzgxNzc1ODQ2RUYzRUFDRDczNjM1M0Y3MzlGN0Q4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCg0gwAwQCqHmoAwQCqlKoAwQCs2tQMA0EAgACMAcD BQAoBA4cMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNQTANBgkqhkiG9w0BAQsF AAOCAQEAVCe2zu1K+CXhaHikO1kLGTZ6mvjvWif8J7Qv/I/hkB4MDI6NI2WnMjfj u6TQV3d6UOakt12VIKOzjiC2WT4hCKd/gXymOuCGSogwPSQolKuZt0RF53jFeicW 43DI/n5pOoyJTutibkGYhur9aHYU/TTwWlyMr3SXC29VVpjXYwzEpHj2KS9fbTKn +VvpDMzpWfoiV4Zz+eUezuczJCt9pglBaSdzTr2O8pMaPNGUje54JZ/ROVQA0f8Y fxkbsQf9e8TemB/OTzZfFWh3iYpmWQUS+c5yyI2l4XnZ+xuHINIV2YjLVIA1lGZV B2V6Rr5OsadrFdBHa7KvJIla5hd0uQ== -----END CERTIFICATE-----Generated at Wed Apr 8 18:17:48 2026 by rpki-client