$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer File: 154E883FCB52E91706C17788E2199491DC6E45F7.cer (raw, json) Hash identifier: BRP1AxXgC7f+xwWl+/uM7Hyl6eq76K5eVdKXynpKxGE= Subject key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D2692745BE8A7BB59035F84E8504C1444C50136 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft caRepository: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 21:55:55 +0000 Certificate not after: Wed 07 Apr 2027 22:00:55 +0000 Subordinate resources: AS: 264127 IP: 138.59.220.0/22 IP: 2804:22dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 07:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:92:74:5b:e8:a7:bb:59:03:5f:84:e8:50:4c:14:44:c5:01:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 21:55:55 2026 GMT Not After : Apr 7 22:00:55 2027 GMT Subject: CN=154E883FCB52E91706C17788E2199491DC6E45F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:f8:1f:fa:33:0d:c7:d8:3b:aa:b4:75:4e: 64:53:50:79:49:1e:c1:88:8c:c5:f8:ac:ce:bf:25: 87:2f:97:b8:86:e1:0b:63:f0:3d:f6:ef:e2:0f:d6: 35:50:24:6c:d7:29:c3:79:82:55:08:aa:87:68:5a: 1e:69:ba:54:1f:fa:51:99:14:36:c9:8d:9e:10:7f: f4:65:e6:78:89:12:b0:45:f7:9f:be:f5:a2:86:12: 6d:f9:39:16:15:64:a4:c4:95:7b:d9:22:c7:26:84: 1a:a2:b7:ff:78:a5:3a:08:1f:eb:57:c3:70:1a:9a: 94:94:85:ba:47:73:1d:30:77:24:e5:6d:43:97:ae: b0:9f:96:ac:3f:48:4c:07:9f:c8:f9:74:27:8d:b6: e8:bd:1e:5b:a2:45:3b:58:1f:da:5f:5d:a0:3a:0c: fc:a3:25:59:44:a1:9d:0c:af:7b:46:30:fc:47:46: 2e:2d:cb:87:97:0f:23:65:9d:12:50:cc:0a:42:04: af:4c:e5:3d:40:a3:5c:af:b8:0d:d8:9d:84:c8:4f: 4b:57:53:f3:9a:36:78:28:78:3a:6c:08:1e:52:21: ea:a6:4b:b0:70:a4:e2:40:cd:5d:1e:28:db:09:d8: c6:7a:aa:87:c9:2a:a2:8c:97:a9:b1:db:52:b4:39: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.220.0/22 IPv6: 2804:22dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264127 Signature Algorithm: sha256WithRSAEncryption c9:ad:f6:3e:0f:e8:0f:3a:f1:0b:8b:7a:f7:1d:ed:18:7a:d0: a3:aa:b8:b8:a0:08:8a:f9:e4:6b:6c:66:ae:01:1b:6c:fb:53: 91:8d:6b:72:89:5e:3e:f5:6c:49:c3:c6:3c:54:87:05:65:36: 86:31:3f:ac:15:af:57:f8:3b:9a:c8:51:0b:59:eb:f5:72:bc: be:dd:05:a1:15:c2:79:7a:f5:78:26:e1:e2:44:8c:a1:82:71: 1d:c2:2f:b7:b3:ca:90:a2:c0:ae:54:5d:4f:4d:b8:e8:67:0f: 2e:1b:d3:13:9a:bf:dd:70:ad:10:fc:06:1c:87:b7:22:6e:ac: 2a:d8:53:07:d0:6e:be:89:82:b8:fd:c9:54:15:e0:77:3d:1f: 3c:7f:da:88:56:fa:c5:ce:23:cc:f9:c6:9b:5c:35:70:02:97: 93:c8:82:5f:bc:33:22:26:dd:0b:0c:0c:a9:51:bf:7c:c0:1d: 59:53:d5:7f:eb:22:be:b2:fd:4c:a7:97:87:65:38:44:1e:80: e0:c1:3a:58:d2:7a:ba:cb:b3:58:dd:bf:f8:9c:83:12:3e:ee: 33:63:45:e9:10:1d:b2:76:d6:d6:df:83:88:79:e4:b9:a6:92: 68:48:09:25:f0:79:ee:c7:11:bc:45:96:23:92:9a:f9:89:63: cf:dc:af:d8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXSaSdFvop7tZA1+E6FBMFETFATYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDgyMTU1NTVaFw0yNzA0MDcyMjAwNTVaMDMxMTAvBgNV BAMTKDE1NEU4ODNGQ0I1MkU5MTcwNkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmI/gf+jMNx9g7qrR1TmRTUHlJ HsGIjMX4rM6/JYcvl7iG4Qtj8D327+IP1jVQJGzXKcN5glUIqodoWh5pulQf+lGZ FDbJjZ4Qf/Rl5niJErBF95++9aKGEm35ORYVZKTElXvZIscmhBqit/94pToIH+tX w3AampSUhbpHcx0wdyTlbUOXrrCflqw/SEwHn8j5dCeNtui9HluiRTtYH9pfXaA6 DPyjJVlEoZ0Mr3tGMPxHRi4ty4eXDyNlnRJQzApCBK9M5T1Ao1yvuA3YnYTIT0tX U/OaNngoeDpsCB5SIeqmS7BwpOJAzV0eKNsJ2MZ6qofJKqKMl6mx21K0OaWrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVTog/y1LpFwbB d4jiGZSR3G5F9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3dL SkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN3 S0pCajVVM2tOVzRoWkJLTVk0cGpuaEo4SEVqbzZEYXU4SlFNRmFnMVU2LzAvMTU0 RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFEQzZFNDVGNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCijvcMA0EAgACMAcDBQAoBCLcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHvzANBgkqhkiG9w0BAQsFAAOCAQEAya32Pg/oDzrxC4t6 9x3tGHrQo6q4uKAIivnka2xmrgEbbPtTkY1rcolePvVsScPGPFSHBWU2hjE/rBWv V/g7mshRC1nr9XK8vt0FoRXCeXr1eCbh4kSMoYJxHcIvt7PKkKLArlRdT0246GcP LhvTE5q/3XCtEPwGHIe3Im6sKthTB9BuvomCuP3JVBXgdz0fPH/aiFb6xc4jzPnG m1w1cAKXk8iCX7wzIibdCwwMqVG/fMAdWVPVf+sivrL9TKeXh2U4RB6A4ME6WNJ6 usuzWN2/+JyDEj7uM2NF6RAdsnbW1t+DiHnkuaaSaEgJJfB57scRvEWWI5Ka+Ylj z9yv2A== -----END CERTIFICATE-----Generated at Thu Apr 9 09:46:42 2026 by rpki-client