$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer File: 21CD91C985E580029306365FB6A119DAEFE368C7.cer (raw, json) Hash identifier: pyibsjjnOVauss4RZz2HZxbDDPoANtI4jkxYjMt7b30= Subject key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60EDF9F3D4AB21DE03F92ADD0009ACE8F51988E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft caRepository: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Jun 2026 12:58:20 +0000 Certificate not after: Tue 22 Jun 2027 13:03:20 +0000 Subordinate resources: AS: 267222 IP: 45.229.68.0/22 IP: 2804:4a2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 15:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ed:f9:f3:d4:ab:21:de:03:f9:2a:dd:00:09:ac:e8:f5:19:88:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 23 12:58:20 2026 GMT Not After : Jun 22 13:03:20 2027 GMT Subject: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:74:13:ab:01:89:b2:44:ef:86:d3:0c:a8: 2d:d9:f9:2f:ac:c4:d6:92:3e:ba:f7:44:cf:35:35: ce:bf:0d:b2:c5:a2:9d:ed:60:95:59:b8:59:b1:cf: cd:37:f1:5b:8d:8d:53:b3:ab:1e:b7:19:7c:20:55: c9:cb:d6:8b:30:63:8c:d0:8a:b3:d3:a6:89:ab:a1: b4:22:59:ac:04:85:8a:7a:0d:0e:b1:c8:b8:e8:52: 58:96:36:50:c8:f9:9d:14:8c:48:0d:8e:c0:1f:0f: 1c:fc:f1:a6:8c:1f:5f:65:b4:0a:6c:0a:ce:9d:cb: 0e:1b:94:51:84:2f:10:09:22:1c:db:82:9f:36:ac: 8a:10:9b:f7:b9:ac:07:20:97:91:2f:c4:87:9f:87: 29:20:4a:83:4b:4e:95:46:f4:3c:af:2a:0b:8d:cb: ff:73:86:11:c1:1b:43:c6:b7:c0:e0:0a:5a:52:7c: 11:ba:fd:7b:9b:32:c7:42:b5:14:a2:83:24:45:db: aa:5c:3c:f7:09:4a:d1:b8:8b:82:97:31:f3:51:94: 28:d0:81:ed:a7:70:86:36:53:b1:aa:2b:b4:4e:f9: d1:75:9e:a7:27:07:95:7f:50:ce:97:a7:36:c6:e9: ce:11:4d:87:d3:8e:3c:33:7c:b6:f4:01:e2:1f:58: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.68.0/22 IPv6: 2804:4a2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267222 Signature Algorithm: sha256WithRSAEncryption 9d:d5:c9:f2:74:94:67:c5:73:92:36:6b:d5:d7:e5:e5:4d:51: 9e:3e:c4:75:e7:c1:28:39:6b:3f:b0:62:ba:0d:e0:43:d9:b1: bf:06:2f:70:00:52:bd:6e:b3:d9:6d:83:6b:ef:66:5c:e6:da: 2a:2c:4d:30:ea:9f:82:66:50:31:9d:a5:86:d0:87:13:2c:8a: fe:e3:19:ef:36:60:94:d7:72:d6:34:a1:03:5a:6b:cd:d5:ca: ec:4a:49:d0:87:c2:51:92:d3:e5:ba:71:1f:5b:7c:68:b5:6c: b3:f9:b7:c0:ed:23:a6:43:98:c7:30:18:3f:c9:ff:51:55:8d: 77:8e:11:fb:cb:40:70:31:cc:18:ad:b5:95:32:2f:af:96:8c: 8d:4e:41:36:62:89:c3:9a:87:53:be:84:90:75:27:c2:37:ea: d7:60:05:3d:7c:28:74:f9:8f:a0:2e:74:c1:9d:68:1c:a9:8f: e3:9c:8a:93:32:ef:68:49:1f:88:06:bb:d5:93:5f:75:1c:e5: c5:25:a8:2d:14:7d:2e:17:94:88:e0:84:88:2d:df:28:8d:8f: 9c:f8:4e:4d:4b:39:ff:7f:3c:d2:50:86:dd:64:ef:ab:7a:09: ae:85:f7:49:fa:73:36:97:f7:3d:b5:1d:71:43:f7:b8:e9:07: f0:aa:9f:cd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYO3589SrId4D+SrdAAms6PUZiOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjMxMjU4MjBaFw0yNzA2MjIxMzAzMjBaMDMxMTAvBgNV BAMTKDIxQ0Q5MUM5ODVFNTgwMDI5MzA2MzY1RkI2QTExOURBRUZFMzY4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDde3QTqwGJskTvhtMMqC3Z+S+s xNaSPrr3RM81Nc6/DbLFop3tYJVZuFmxz8038VuNjVOzqx63GXwgVcnL1oswY4zQ irPTpomrobQiWawEhYp6DQ6xyLjoUliWNlDI+Z0UjEgNjsAfDxz88aaMH19ltAps Cs6dyw4blFGELxAJIhzbgp82rIoQm/e5rAcgl5EvxIefhykgSoNLTpVG9DyvKguN y/9zhhHBG0PGt8DgClpSfBG6/XubMsdCtRSigyRF26pcPPcJStG4i4KXMfNRlCjQ ge2ncIY2U7GqK7RO+dF1nqcnB5V/UM6XpzbG6c4RTYfTjjwzfLb0AeIfWH4xAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhzZHJheWAApMG Nl+2oRna7+NoxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Uz cVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdl M3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzMvMjFD RDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFFRkUzNjhDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeVEMA0EAgACMAcDBQAoBEosMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQT1jANBgkqhkiG9w0BAQsFAAOCAQEAndXJ8nSUZ8VzkjZr 1dfl5U1Rnj7EdefBKDlrP7Biug3gQ9mxvwYvcABSvW6z2W2Da+9mXObaKixNMOqf gmZQMZ2lhtCHEyyK/uMZ7zZglNdy1jShA1przdXK7EpJ0IfCUZLT5bpxH1t8aLVs s/m3wO0jpkOYxzAYP8n/UVWNd44R+8tAcDHMGK21lTIvr5aMjU5BNmKJw5qHU76E kHUnwjfq12AFPXwodPmPoC50wZ1oHKmP45yKkzLvaEkfiAa71ZNfdRzlxSWoLRR9 LheUiOCEiC3fKI2PnPhOTUs5/3880lCG3WTvq3oJroX3SfpzNpf3PbUdcUP3uOkH 8KqfzQ== -----END CERTIFICATE-----Generated at Wed Jul 8 14:23:26 2026 by rpki-client