$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D142BF980C76402DB25FA5900B7CBB36D25C926.cer File: 1D142BF980C76402DB25FA5900B7CBB36D25C926.cer (raw, json) Hash identifier: 4ho0zsQ9Od+cWqvN4/jA8NQgsjVAfuZ2Sw+NHp4ofDo= Subject key identifier: 1D:14:2B:F9:80:C7:64:02:DB:25:FA:59:00:B7:CB:B3:6D:25:C9:26 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12BA21EDB7D0BD01D7411F680932E2D79D9494F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/1D142BF980C76402DB25FA5900B7CBB36D25C926.mft caRepository: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 19:33:48 +0000 Certificate not after: Tue 06 Apr 2027 19:38:48 +0000 Subordinate resources: AS: 267563 IP: 45.70.128.0/22 IP: 181.233.104.0/22 IP: 2804:4354::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 10:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ba:21:ed:b7:d0:bd:01:d7:41:1f:68:09:32:e2:d7:9d:94:94:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 19:33:48 2026 GMT Not After : Apr 6 19:38:48 2027 GMT Subject: CN=1D142BF980C76402DB25FA5900B7CBB36D25C926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e4:c4:03:57:50:9d:bb:20:fb:f6:c5:8c:31: 79:59:54:83:7a:f2:00:62:18:14:52:4c:26:84:bc: 61:bc:68:ad:6c:73:00:d1:df:93:4b:f7:d4:8a:2d: b0:06:97:73:8c:44:ed:6f:17:ca:e7:eb:d1:a9:44: a5:e6:c3:f1:8f:52:5c:f1:67:f8:33:1c:f0:ae:9a: d9:bc:22:d0:13:47:de:36:dc:4d:a8:57:03:20:42: 39:44:bd:45:11:47:43:1b:99:0b:93:0f:48:78:76: c5:31:61:04:db:04:8a:23:47:9b:db:c4:d6:d7:79: d6:00:f1:f6:1f:7b:39:c1:38:05:29:da:30:ff:48: fa:34:60:5a:a2:4e:93:80:f6:87:f8:5b:c8:82:24: 3a:94:b5:f5:7b:f1:d4:a4:85:f0:38:4f:4b:f6:aa: b5:16:5d:58:c7:21:7d:4e:08:7b:59:df:bc:37:78: 33:0d:bf:5e:26:5d:3d:53:5f:f0:2a:19:46:0e:79: 69:69:ed:76:a3:54:6f:47:46:83:93:ed:d4:24:be: 28:cf:bd:78:a9:05:d8:ac:66:5c:d4:bd:50:9a:96: 5f:f9:7e:95:c1:02:de:8b:67:38:01:67:56:01:a3: 39:e8:e8:87:d3:58:24:3d:ba:cf:35:db:1b:35:41: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:14:2B:F9:80:C7:64:02:DB:25:FA:59:00:B7:CB:B3:6D:25:C9:26 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/1D142BF980C76402DB25FA5900B7CBB36D25C926.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.128.0/22 181.233.104.0/22 IPv6: 2804:4354::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267563 Signature Algorithm: sha256WithRSAEncryption 44:cd:19:ab:95:fd:d8:69:1a:22:d4:2f:59:1d:ff:21:5a:d9: 30:54:27:69:89:06:91:75:e4:5c:9d:87:02:84:f6:17:67:fa: 68:63:ea:7b:ca:ac:ca:59:db:1e:27:fc:12:cd:1a:a0:b4:8f: 06:5e:84:de:5f:93:a5:ce:0c:2e:15:31:38:59:d4:04:68:90: 57:bd:12:a1:d1:b0:86:cd:ba:70:d5:a0:fb:46:e2:e7:45:d9: 84:24:b2:9d:3c:58:6f:01:b8:55:f1:8f:be:39:b5:23:e3:fe: b4:27:11:71:e5:d9:ea:a1:14:c7:37:09:5f:fb:14:2c:30:32: 5d:0e:8b:66:4c:b9:57:de:18:ef:40:f4:34:26:fc:ec:4d:05: d9:ac:56:98:fa:30:64:bd:0c:2d:e4:69:bb:16:e1:a3:7d:06: 62:40:20:79:59:f2:8d:e0:97:6e:b8:29:b0:f0:93:ef:36:94: 6d:dc:c4:4e:e5:dc:60:2d:75:1b:1a:84:80:68:a4:73:ab:2f: c8:03:9a:1a:ba:c1:ec:2d:cf:7b:c9:42:49:bc:16:25:b0:bf: 19:f7:d8:67:bf:30:b0:78:68:0f:89:ec:46:6f:26:51:a5:2d: d1:08:2f:a4:58:26:46:a8:f9:b5:5b:37:c7:29:77:84:6c:14: a5:62:09:3d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEroh7bfQvQHXQR9oCTLi152UlPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcxOTMzNDhaFw0yNzA0MDYxOTM4NDhaMDMxMTAvBgNV BAMTKDFEMTQyQkY5ODBDNzY0MDJEQjI1RkE1OTAwQjdDQkIzNkQyNUM5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE5MQDV1CduyD79sWMMXlZVIN6 8gBiGBRSTCaEvGG8aK1scwDR35NL99SKLbAGl3OMRO1vF8rn69GpRKXmw/GPUlzx Z/gzHPCumtm8ItATR9423E2oVwMgQjlEvUURR0MbmQuTD0h4dsUxYQTbBIojR5vb xNbXedYA8fYfeznBOAUp2jD/SPo0YFqiTpOA9of4W8iCJDqUtfV78dSkhfA4T0v2 qrUWXVjHIX1OCHtZ37w3eDMNv14mXT1TX/AqGUYOeWlp7XajVG9HRoOT7dQkvijP vXipBdisZlzUvVCall/5fpXBAt6LZzgBZ1YBozno6IfTWCQ9us812xs1QTZfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdFCv5gMdkAtsl +lkAt8uzbSXJJjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMno4 VEhKMzZENlBqbURTWnJLRHN3ODVDZ0Nuckg3bnNranpZaGJ4ZmdHTTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6 OFRISjM2RDZQam1EU1pyS0Rzdzg1Q2dDbnJIN25za2p6WWhieGZnR005LzAvMUQx NDJCRjk4MEM3NjQwMkRCMjVGQTU5MDBCN0NCQjM2RDI1QzkyNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUaAAwQCteloMA0EAgACMAcDBQAoBENUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQVKzANBgkqhkiG9w0BAQsFAAOCAQEARM0Zq5X9 2GkaItQvWR3/IVrZMFQnaYkGkXXkXJ2HAoT2F2f6aGPqe8qsylnbHif8Es0aoLSP Bl6E3l+Tpc4MLhUxOFnUBGiQV70SodGwhs26cNWg+0bi50XZhCSynTxYbwG4VfGP vjm1I+P+tCcRceXZ6qEUxzcJX/sULDAyXQ6LZky5V94Y70D0NCb87E0F2axWmPow ZL0MLeRpuxbho30GYkAgeVnyjeCXbrgpsPCT7zaUbdzETuXcYC11GxqEgGikc6sv yAOaGrrB7C3Pe8lCSbwWJbC/GffYZ78wsHhoD4nsRm8mUaUt0QgvpFgmRqj5tVs3 xyl3hGwUpWIJPQ== -----END CERTIFICATE-----Generated at Thu Apr 9 11:08:01 2026 by rpki-client