$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer File: CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer (raw, json) Hash identifier: Dt9k/A4wnshzBybnHVDW/nLis/t1mJjJOjfCGPA398s= Subject key identifier: CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 07D4343EF81210820B3ACC60694A79680B1530D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft caRepository: rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 31 Mar 2026 20:40:49 +0000 Certificate not after: Tue 30 Mar 2027 20:45:49 +0000 Subordinate resources: AS: 270514 IP: 177.11.128.0/22 IP: 2804:6d20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 18:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d4:34:3e:f8:12:10:82:0b:3a:cc:60:69:4a:79:68:0b:15:30:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 31 20:40:49 2026 GMT Not After : Mar 30 20:45:49 2027 GMT Subject: CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:be:1b:69:6b:a9:a2:73:bb:82:0f:42:85: 22:49:49:cd:ad:fd:e1:7f:67:b7:93:e4:e7:93:9c: a8:38:d1:2c:2f:63:30:b0:bd:9d:05:31:90:2f:b6: 0c:fb:97:ad:62:c2:fc:a7:d0:1c:d1:c8:2a:6b:e7: f4:45:2a:4e:53:c8:2e:77:0a:c8:d9:e8:ee:93:34: d0:5d:d9:59:aa:5e:fd:83:dd:a9:78:e3:c5:81:aa: 47:84:11:38:0a:a2:62:4a:23:2c:95:ec:88:63:85: bd:a9:cf:54:a2:d4:bf:ae:b7:b8:e3:8f:8e:04:90: 73:92:2b:2b:48:62:fa:61:b3:0b:3a:21:a0:c9:d3: c7:1e:8a:51:93:7f:e1:6f:9e:2e:4f:78:0a:d3:14: 8b:75:1b:f9:4a:d7:06:f6:a4:f9:ae:78:c8:9d:f1: 32:db:82:de:da:3f:1b:45:ac:b4:9a:4b:e2:08:65: cb:d1:88:44:39:df:08:0b:fd:e0:9f:cd:5c:0d:28: 7c:2e:b5:3c:c8:ca:8a:16:5a:42:67:a5:e3:69:5b: 78:43:11:e4:5c:45:29:97:74:1c:b0:f5:80:47:36: 8f:5c:23:af:c3:c4:f9:a5:0f:37:5f:73:09:90:9b: fd:36:8c:48:a3:c2:28:e5:a5:8d:91:7a:a6:cf:ca: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.128.0/22 IPv6: 2804:6d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270514 Signature Algorithm: sha256WithRSAEncryption 14:02:94:d9:b4:7c:4c:f5:45:da:97:e1:4f:4e:4b:39:e3:90: 8c:9c:45:11:57:b7:4e:65:b8:b3:de:5e:25:aa:75:29:1b:de: 7f:40:f7:54:81:30:e2:f3:36:bb:4c:59:10:c1:7f:47:10:24: 47:ef:5f:39:cc:f9:38:61:9f:c6:3d:95:f9:e5:33:ba:b1:71: c8:36:e8:d6:9a:f9:f6:40:84:ae:c8:98:cc:d5:f9:95:c0:ae: 9e:45:31:6b:cc:b3:1f:fc:c8:df:4d:31:30:d7:06:ae:29:68: f3:5d:2f:23:1d:93:b8:25:60:b0:3e:6e:04:98:7b:f7:fa:0e: ed:97:6d:45:ec:ee:9a:8b:96:71:63:1c:bb:35:08:05:32:3e: 71:63:36:1a:4e:89:48:80:7b:f6:9e:dd:41:0e:54:ee:f1:5a: 2c:d7:dd:94:9c:26:7c:30:c5:17:6e:7b:de:6c:e4:77:ed:4b: 0a:24:c8:08:00:3f:83:b3:0b:a4:1f:93:b4:7b:20:fb:c7:a6: a8:75:89:1e:e3:c8:3b:b0:ac:db:45:11:81:8f:99:e8:1d:8f: 75:95:6c:66:af:b7:56:d2:e4:33:7a:6d:7c:e5:81:b2:79:18: f4:d0:9c:d5:61:c2:81:e9:3f:5f:b4:d6:c6:fd:20:87:9d:13: c5:92:da:f4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUB9Q0PvgSEIILOsxgaUp5aAsVMNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMzEyMDQwNDlaFw0yNzAzMzAyMDQ1NDlaMDMxMTAvBgNV BAMTKENBNUI0MkY5OThFQUUyRTc3QjNDQTM4N0U5QjZENDg0RUIzOTUyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP674baWuponO7gg9ChSJJSc2t /eF/Z7eT5OeTnKg40SwvYzCwvZ0FMZAvtgz7l61iwvyn0BzRyCpr5/RFKk5TyC53 CsjZ6O6TNNBd2VmqXv2D3al448WBqkeEETgKomJKIyyV7Ihjhb2pz1Si1L+ut7jj j44EkHOSKytIYvphsws6IaDJ08ceilGTf+Fvni5PeArTFIt1G/lK1wb2pPmueMid 8TLbgt7aPxtFrLSaS+IIZcvRiEQ53wgL/eCfzVwNKHwutTzIyooWWkJnpeNpW3hD EeRcRSmXdByw9YBHNo9cI6/DxPmlDzdfcwmQm/02jEijwijlpY2ReqbPyqGdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKW0L5mOri53s8 o4fpttSE6zlS3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWFS c2VITVQ3Ykh0TlBpYVB2OFJGYUN3NWtSRTFXRzl5c2pDR0tORWJ3dHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVh UnNlSE1UN2JIdE5QaWFQdjhSRmFDdzVrUkUxV0c5eXNqQ0dLTkVid3RwLzAvQ0E1 QjQyRjk5OEVBRTJFNzdCM0NBMzg3RTlCNkQ0ODRFQjM5NTJERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsQuAMA0EAgACMAcDBQAoBG0gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgsjANBgkqhkiG9w0BAQsFAAOCAQEAFAKU2bR8TPVF2pfh T05LOeOQjJxFEVe3TmW4s95eJap1KRvef0D3VIEw4vM2u0xZEMF/RxAkR+9fOcz5 OGGfxj2V+eUzurFxyDbo1pr59kCErsiYzNX5lcCunkUxa8yzH/zI300xMNcGrilo 810vIx2TuCVgsD5uBJh79/oO7ZdtRezumouWcWMcuzUIBTI+cWM2Gk6JSIB79p7d QQ5U7vFaLNfdlJwmfDDFF2573mzkd+1LCiTICAA/g7MLpB+TtHsg+8emqHWJHuPI O7Cs20URgY+Z6B2PdZVsZq+3VtLkM3ptfOWBsnkY9NCc1WHCgek/X7TWxv0gh50T xZLa9A== -----END CERTIFICATE-----Generated at Wed Apr 8 18:58:56 2026 by rpki-client