$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4219E0CADFA22FDCF2F0E259849E63189F2617A.cer File: E4219E0CADFA22FDCF2F0E259849E63189F2617A.cer (raw, json) Hash identifier: ywzO2tQkauqup3q/k0Kb93ODpf/Xhx+rRJS4+1UAzOQ= Subject key identifier: E4:21:9E:0C:AD:FA:22:FD:CF:2F:0E:25:98:49:E6:31:89:F2:61:7A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CF5683A8D00B6BB0E2B09493677BE8EA24017EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/E4219E0CADFA22FDCF2F0E259849E63189F2617A.mft caRepository: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 10:20:16 +0000 Certificate not after: Thu 25 Mar 2027 10:25:16 +0000 Subordinate resources: AS: 266931 IP: 45.5.32.0/22 IP: 45.225.84.0/22 IP: 2804:4580::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f5:68:3a:8d:00:b6:bb:0e:2b:09:49:36:77:be:8e:a2:40:17:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 10:20:16 2026 GMT Not After : Mar 25 10:25:16 2027 GMT Subject: CN=E4219E0CADFA22FDCF2F0E259849E63189F2617A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:1b:38:ab:03:3f:30:16:9f:0e:8d:fd:99: f2:f5:65:ea:60:da:b9:a0:c9:35:76:5d:02:47:38: da:b2:5d:63:6b:f7:46:3d:0d:72:09:5b:af:cc:7f: 37:83:3d:40:00:b7:ef:42:8c:42:66:4d:5a:09:e5: 2c:58:df:51:07:4b:de:a7:9c:a4:15:b5:6c:dd:69: 22:ad:ea:85:60:59:d0:63:31:a1:c5:46:0e:a1:25: cc:3d:f4:98:f9:bd:b1:1a:3b:8b:61:67:ec:f0:1c: 9b:2b:e2:f2:fe:b9:5f:72:ac:28:b5:bf:91:58:d9: 8d:c2:6e:45:0e:17:45:03:a4:74:8f:6d:ed:99:28: ee:f4:16:f2:6f:56:9f:44:26:c4:1e:33:cc:04:e6: 72:40:a9:01:63:78:2b:a0:17:be:93:e4:cc:97:d5: a3:5e:b9:aa:17:88:9d:0c:f6:82:f9:85:7c:d5:56: ac:50:9b:16:c1:01:b0:d8:f9:07:5c:b0:c2:e8:25: 89:b3:4d:47:ff:ce:ee:af:36:0b:1b:c9:6e:6b:db: 6a:ea:f6:09:d1:0e:51:4c:61:ba:77:49:a8:9d:6c: 99:74:48:3f:0c:c1:76:e8:44:b8:8c:ab:d4:db:dd: 9c:50:2a:93:6a:f6:9e:54:bf:0e:74:09:c1:92:3d: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:21:9E:0C:AD:FA:22:FD:CF:2F:0E:25:98:49:E6:31:89:F2:61:7A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/E4219E0CADFA22FDCF2F0E259849E63189F2617A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.32.0/22 45.225.84.0/22 IPv6: 2804:4580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266931 Signature Algorithm: sha256WithRSAEncryption 02:c8:f5:8c:4a:d9:b7:6f:b8:92:58:26:2f:03:4a:f6:7b:f1: ae:b1:fb:8f:bb:e7:46:75:e6:bd:99:c4:e6:6a:55:51:25:56: 8b:b8:e4:79:e0:5e:fe:ab:ba:77:2d:ec:ea:58:8d:0d:96:74: 32:06:7c:01:49:b0:5c:fa:5f:45:4f:9b:ef:3e:6b:1b:28:f2: 22:9f:5d:44:76:cf:60:79:a1:c5:d4:0e:2d:da:19:04:3e:11: a8:1d:a6:f4:3d:d1:c0:cc:9b:c6:05:32:36:67:bd:0d:0b:27: b5:dc:25:ab:fd:83:d6:2b:5c:ef:d3:cf:c5:d9:70:d4:c2:f9: e7:50:c1:6d:e3:df:a6:ba:ae:a9:3a:1f:dc:06:54:08:56:27: 83:8f:6a:80:ff:84:da:0d:5d:17:b7:ff:aa:f2:5b:92:af:8c: 20:f2:2c:5d:04:89:d0:27:40:41:bc:a4:23:b2:a5:65:b4:0d: e5:d1:d8:7f:78:7b:06:f4:69:2c:d5:58:e6:a9:ea:5a:da:c7: 46:ca:d1:fe:30:95:cf:b7:f5:ad:91:d3:9d:f4:6d:e1:e3:2c: ac:62:12:8c:b6:f6:6a:4e:6e:55:a7:f4:5d:58:23:8d:5b:5e: 19:e7:49:17:34:a0:3a:bc:60:2e:53:45:e3:ad:78:c2:13:49: da:da:73:a1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXPVoOo0AtrsOKwlJNne+jqJAF+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjYxMDIwMTZaFw0yNzAzMjUxMDI1MTZaMDMxMTAvBgNV BAMTKEU0MjE5RTBDQURGQTIyRkRDRjJGMEUyNTk4NDlFNjMxODlGMjYxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIBs4qwM/MBafDo39mfL1Zepg 2rmgyTV2XQJHONqyXWNr90Y9DXIJW6/MfzeDPUAAt+9CjEJmTVoJ5SxY31EHS96n nKQVtWzdaSKt6oVgWdBjMaHFRg6hJcw99Jj5vbEaO4thZ+zwHJsr4vL+uV9yrCi1 v5FY2Y3CbkUOF0UDpHSPbe2ZKO70FvJvVp9EJsQeM8wE5nJAqQFjeCugF76T5MyX 1aNeuaoXiJ0M9oL5hXzVVqxQmxbBAbDY+QdcsMLoJYmzTUf/zu6vNgsbyW5r22rq 9gnRDlFMYbp3SaidbJl0SD8MwXboRLiMq9Tb3ZxQKpNq9p5Uvw50CcGSPemXAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkIZ4Mrfoi/c8v DiWYSeYxifJhejAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREF0 TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB dExlR0VqTUczaUFRYVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAvRTQy MTlFMENBREZBMjJGRENGMkYwRTI1OTg0OUU2MzE4OUYyNjE3QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQUgAwQCLeFUMA0EAgACMAcDBQAoBEWAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQSszANBgkqhkiG9w0BAQsFAAOCAQEAAsj1jErZ t2+4klgmLwNK9nvxrrH7j7vnRnXmvZnE5mpVUSVWi7jkeeBe/qu6dy3s6liNDZZ0 MgZ8AUmwXPpfRU+b7z5rGyjyIp9dRHbPYHmhxdQOLdoZBD4RqB2m9D3RwMybxgUy Nme9DQsntdwlq/2D1itc79PPxdlw1ML551DBbePfprquqTof3AZUCFYng49qgP+E 2g1dF7f/qvJbkq+MIPIsXQSJ0CdAQbykI7KlZbQN5dHYf3h7BvRpLNVY5qnqWtrH RsrR/jCVz7f1rZHTnfRt4eMsrGISjLb2ak5uVaf0XVgjjVteGedJFzSgOrxgLlNF 4614whNJ2tpzoQ== -----END CERTIFICATE-----Generated at Wed Apr 8 21:00:08 2026 by rpki-client