$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer File: FF5D171186C7F92AA82E56A3848B9D1390938458.cer (raw, json) Hash identifier: RBpz1UrtBEV9QweLix8eImgun9ytrrOBlphkEFnlReU= Subject key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32E30408047C00F8D2E6B71EBC3DDA30C226E87F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft caRepository: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 19:28:57 +0000 Certificate not after: Tue 06 Apr 2027 19:33:57 +0000 Subordinate resources: AS: 28635 AS: 52547 AS: 52609 AS: 52682 AS: 61794 AS: 262526 AS: 264367 AS: 264487 AS: 266130 AS: 267601 IP: 45.6.108.0/22 IP: 45.71.68.0/22 IP: 45.174.156.0/22 IP: 131.108.32.0/22 IP: 131.255.112.0/22 IP: 138.185.216.0/22 IP: 168.196.136.0/22 IP: 168.228.36.0/22 IP: 170.233.52.0/22 IP: 177.67.192.0/21 IP: 177.152.176.0/21 IP: 177.200.176.0/20 IP: 177.221.192.0/19 IP: 179.189.48.0/20 IP: 200.11.8.0/21 IP: 201.71.128.0/18 IP: 201.140.220.0/22 IP: 2804:598::/32 IP: 2804:e28::/32 IP: 2804:1408::/32 IP: 2804:196c::/32 IP: 2804:1d68::/32 IP: 2804:2058::/32 IP: 2804:2d90::/32 IP: 2804:30bc::/32 IP: 2804:3b1c::/32 IP: 2804:43f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 18:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:04:08:04:7c:00:f8:d2:e6:b7:1e:bc:3d:da:30:c2:26:e8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 19:28:57 2026 GMT Not After : Apr 6 19:33:57 2027 GMT Subject: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:d9:d2:08:3c:af:7a:a5:cd:e0:d2:62:e9: 8d:37:c6:6d:c3:6a:bb:34:1e:d8:a5:30:c1:ad:a6: 35:b2:25:7f:9e:e8:09:69:3b:be:8e:67:77:58:c6: 4e:4d:df:dd:6d:8d:47:b6:1f:01:8c:3a:5a:1b:9d: 79:86:09:ff:04:4b:09:99:08:2a:a4:bc:b5:12:cb: 5d:d4:52:21:91:8e:5e:64:3d:da:f3:06:1a:c0:45: 0c:e8:6e:da:d9:0d:5d:6e:93:e1:3a:2c:80:2e:e1: cf:7d:81:02:43:29:e7:4a:26:2c:2d:f9:40:b7:60: b9:24:32:a6:78:7b:0a:74:c6:30:7c:7f:55:2a:02: b7:e9:8d:40:f2:6a:b2:2e:a7:ab:2e:83:18:5e:86: 73:b0:93:ab:72:7b:94:03:d5:23:d2:64:54:64:da: bc:30:fd:d5:5a:6f:70:5a:d0:a8:9a:dd:7c:4f:48: 0d:2a:ed:60:f3:e0:e3:ec:50:04:1c:54:56:28:e3: c5:c4:a2:75:35:0a:ea:32:85:16:02:71:1f:8b:7c: 77:98:4b:1f:73:ea:bf:bb:5d:b8:42:0f:26:dc:9d: b2:eb:f5:fc:a5:11:e4:46:22:65:60:eb:34:eb:27: 9f:bc:da:95:48:3c:04:e2:2f:59:a0:c6:05:08:4b: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.108.0/22 45.71.68.0/22 45.174.156.0/22 131.108.32.0/22 131.255.112.0/22 138.185.216.0/22 168.196.136.0/22 168.228.36.0/22 170.233.52.0/22 177.67.192.0/21 177.152.176.0/21 177.200.176.0/20 177.221.192.0/19 179.189.48.0/20 200.11.8.0/21 201.71.128.0/18 201.140.220.0/22 IPv6: 2804:598::/32 2804:e28::/32 2804:1408::/32 2804:196c::/32 2804:1d68::/32 2804:2058::/32 2804:2d90::/32 2804:30bc::/32 2804:3b1c::/32 2804:43f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28635 52547 52609 52682 61794 262526 264367 264487 266130 267601 Signature Algorithm: sha256WithRSAEncryption 1b:6e:4c:9a:56:c2:31:33:35:f5:66:c6:5f:bb:72:11:c9:51: 56:34:e5:4b:ef:53:0a:32:92:26:3d:ba:57:92:0b:57:a5:b3: a7:9e:9a:fc:b0:45:9a:69:a3:bc:33:c3:a1:da:9f:54:d0:50: 7e:93:78:24:f2:cd:3f:a2:81:55:9d:c2:8c:87:ef:a7:b5:a7: 7d:ff:a7:77:3c:cd:f6:72:24:82:81:90:d3:f9:a5:8d:91:c4: 9c:e3:24:54:3c:07:fa:c2:61:fa:02:cd:a1:05:30:0b:2d:13: 1d:cb:84:53:30:3a:8a:5c:4c:f6:e4:9e:40:20:ef:f5:15:0e: 35:83:b6:34:76:93:ce:aa:a0:05:d6:7b:33:74:2e:d2:60:52: 60:d3:f0:39:aa:a8:90:14:75:da:5b:89:da:ae:62:03:5b:30: e7:12:c4:09:da:8a:d9:b2:dd:48:90:66:e3:68:cf:74:c1:1c: 84:83:9d:32:a9:ce:d9:46:83:08:dd:17:fc:43:ca:b4:14:60: 64:52:37:9e:5f:4e:d6:a4:ec:f9:19:86:33:68:2f:6f:2b:b4: a3:91:dc:f2:9d:b2:4c:61:05:95:05:9a:d8:50:31:ed:90:bf: 5f:93:dc:9b:2c:7d:49:82:9a:7e:74:cb:0a:84:94:2b:64:67: ef:46:51:5b -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUMuMECAR8APjS5rcevD3aMMIm6H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcxOTI4NTdaFw0yNzA0MDYxOTMzNTdaMDMxMTAvBgNV BAMTKEZGNUQxNzExODZDN0Y5MkFBODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwNnSCDyveqXN4NJi6Y03xm3D ars0HtilMMGtpjWyJX+e6AlpO76OZ3dYxk5N391tjUe2HwGMOlobnXmGCf8ESwmZ CCqkvLUSy13UUiGRjl5kPdrzBhrARQzobtrZDV1uk+E6LIAu4c99gQJDKedKJiwt +UC3YLkkMqZ4ewp0xjB8f1UqArfpjUDyarIup6sugxhehnOwk6tye5QD1SPSZFRk 2rww/dVab3Ba0Kia3XxPSA0q7WDz4OPsUAQcVFYo48XEonU1CuoyhRYCcR+LfHeY Sx9z6r+7XbhCDybcnbLr9fylEeRGImVg6zTrJ5+82pVIPATiL1mgxgUISyU5AgMB AAGjggQIMIIEBDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/XRcRhsf5Kqgu VqOEi50TkJOEWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZh Qk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0SDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RW YUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAvRkY1 RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5MDkzODQ1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHPBggrBgEFBQcB BwEB/wSBvzCBvDBsBAIAATBmAwQCLQZsAwQCLUdEAwQCLa6cAwQCg2wgAwQCg/9w AwQCirnYAwQCqMSIAwQCqOQkAwQCquk0AwQDsUPAAwQDsZiwAwQEsciwAwQFsd3A AwQEs70wAwQDyAsIAwQGyUeAAwQCyYzcMEwEAgACMEYDBQAoBAWYAwUAKAQOKAMF ACgEFAgDBQAoBBlsAwUAKAQdaAMFACgEIFgDBQAoBC2QAwUAKAQwvAMFACgEOxwD BQAoBEP0MEYGCCsGAQUFBwEIAQH/BDcwNaAzMDECAm/bAgMAzUMCAwDNgQIDAM3K AgMA8WICAwQBfgIDBAivAgMECScCAwQPkgIDBBVRMA0GCSqGSIb3DQEBCwUAA4IB AQAbbkyaVsIxMzX1ZsZfu3IRyVFWNOVL71MKMpImPbpXkgtXpbOnnpr8sEWaaaO8 M8Oh2p9U0FB+k3gk8s0/ooFVncKMh++ntad9/6d3PM32ciSCgZDT+aWNkcSc4yRU PAf6wmH6As2hBTALLRMdy4RTMDqKXEz25J5AIO/1FQ41g7Y0dpPOqqAF1nszdC7S YFJg0/A5qqiQFHXaW4narmIDWzDnEsQJ2orZst1IkGbjaM90wRyEg50yqc7ZRoMI 3Rf8Q8q0FGBkUjeeX07WpOz5GYYzaC9vK7SjkdzynbJMYQWVBZrYUDHtkL9fk9yb LH1Jgpp+dMsKhJQrZGfvRlFb -----END CERTIFICATE-----Generated at Wed Apr 8 19:50:06 2026 by rpki-client