$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.cer File: 21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.cer (raw, json) Hash identifier: vpDoa8JRV5AVOtGqwBHXeNyNxoOae6jdfSiDm5GvEIM= Subject key identifier: 21:CF:7E:0E:D7:A2:E1:9C:75:24:08:F5:A2:82:F7:C9:37:D9:D5:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 52180F74ADE23BF84496B294D1CF593D9FB3B358 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft caRepository: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Feb 2026 17:42:13 +0000 Certificate not after: Tue 09 Feb 2027 17:47:13 +0000 Subordinate resources: AS: 268665 IP: 45.165.0.0/22 IP: 2804:54b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 23:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:18:0f:74:ad:e2:3b:f8:44:96:b2:94:d1:cf:59:3d:9f:b3:b3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 17:42:13 2026 GMT Not After : Feb 9 17:47:13 2027 GMT Subject: CN=21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b9:6e:cd:b0:e3:c4:e2:dc:5e:2d:ca:b9:15: a1:9e:52:35:53:7a:1c:a9:19:69:8a:96:96:d1:11: 91:b6:80:eb:2a:49:9f:b3:a8:f3:cd:62:48:26:51: a0:ae:ac:95:8a:62:42:55:56:70:e2:e9:57:42:9f: 81:cb:91:a6:ec:b1:fa:31:a9:03:ae:2e:0d:b2:30: 43:1b:5c:51:ec:32:96:a7:47:9d:be:7b:b5:59:78: c6:b0:0a:5f:fb:12:35:5e:53:9f:47:62:77:50:bc: c9:a6:fb:30:bf:c3:fe:60:f0:c7:e2:38:5a:37:8b: 6d:59:1c:93:60:3f:3c:55:d3:58:61:e7:12:71:9e: 6c:11:d4:2f:5a:78:03:90:01:68:c9:76:1d:13:4d: a2:17:b6:7c:c0:7f:bd:76:15:d0:1c:03:63:96:b5: ad:a5:56:a1:59:b2:ff:f2:22:21:37:29:39:ac:bf: c1:ba:1f:ba:46:92:5d:7e:6a:41:b0:b5:62:d6:21: f8:97:a9:67:88:14:fc:05:28:09:b5:ab:68:7f:fe: 3a:9c:35:4c:b7:22:f4:d2:2b:1f:ce:4e:0c:00:2a: 7c:18:3b:e9:49:0e:2d:9b:1f:6f:fa:9a:49:b2:24: 4e:bb:8e:8a:42:bc:19:c6:d6:04:e1:ec:31:36:52: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:CF:7E:0E:D7:A2:E1:9C:75:24:08:F5:A2:82:F7:C9:37:D9:D5:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.0.0/22 IPv6: 2804:54b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268665 Signature Algorithm: sha256WithRSAEncryption 78:cd:5d:b0:13:d5:d5:16:13:27:ff:98:90:c6:09:76:8d:db: f2:c9:aa:0f:43:8a:25:62:8a:94:5c:5e:d6:f7:51:39:37:50: 4a:31:77:93:79:7b:af:db:81:a4:2a:7c:58:cd:94:52:b7:ef: b7:bc:84:93:5a:6f:b0:e5:80:1b:91:b7:c2:eb:e4:40:c9:b2: 34:ff:dc:20:6d:18:cc:73:a4:17:dc:c7:ce:ee:9c:12:58:38: 7e:2c:86:99:44:09:bc:59:c6:46:13:2e:8d:05:48:c5:bc:9b: 1a:0f:ed:40:45:7f:1e:0d:76:32:9c:a4:ac:52:9f:d2:1b:34: fd:0c:d7:16:e0:1b:76:46:02:78:01:69:ef:fb:9f:c2:67:64: 8e:1b:46:5d:af:f2:77:e3:cf:74:46:7d:f3:38:e1:2f:90:c3: fe:d4:1d:19:3a:bc:64:49:85:07:f7:5e:89:53:ae:dd:61:fb: 17:76:4d:73:c7:6d:81:9f:2d:da:d1:5c:bd:87:1e:65:c6:00: a6:89:c9:24:7f:b6:92:1f:77:15:55:4a:0b:01:f1:f3:dd:3d: 13:ea:85:29:99:46:f4:fb:07:61:43:cb:00:c7:f9:4f:5b:1c: 81:1c:da:79:03:7e:f8:54:e0:d4:4a:47:66:b5:af:34:d0:0c: 63:9d:1e:40 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUhgPdK3iO/hElrKU0c9ZPZ+zs1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMTAxNzQyMTNaFw0yNzAyMDkxNzQ3MTNaMDMxMTAvBgNV BAMTKDIxQ0Y3RTBFRDdBMkUxOUM3NTI0MDhGNUEyODJGN0M5MzdEOUQ1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwuW7NsOPE4txeLcq5FaGeUjVT ehypGWmKlpbREZG2gOsqSZ+zqPPNYkgmUaCurJWKYkJVVnDi6VdCn4HLkabssfox qQOuLg2yMEMbXFHsMpanR52+e7VZeMawCl/7EjVeU59HYndQvMmm+zC/w/5g8Mfi OFo3i21ZHJNgPzxV01hh5xJxnmwR1C9aeAOQAWjJdh0TTaIXtnzAf712FdAcA2OW ta2lVqFZsv/yIiE3KTmsv8G6H7pGkl1+akGwtWLWIfiXqWeIFPwFKAm1q2h//jqc NUy3IvTSKx/OTgwAKnwYO+lJDi2bH2/6mkmyJE67jopCvBnG1gTh7DE2Um0fAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhz34O16LhnHUk CPWigvfJN9nVtTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVT UkFyVmNockx4cnVCWEZMV3ZVWllwbWJyWnlYa21rVldnaDlBWjJWNFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzll U1JBclZjaHJMeHJ1QlhGTFd2VVpZcG1iclp5WGtta1ZXZ2g5QVoyVjRXLzAvMjFD RjdFMEVEN0EyRTE5Qzc1MjQwOEY1QTI4MkY3QzkzN0Q5RDVCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaUAMA0EAgACMAcDBQAoBFSwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZeTANBgkqhkiG9w0BAQsFAAOCAQEAeM1dsBPV1RYTJ/+Y kMYJdo3b8smqD0OKJWKKlFxe1vdROTdQSjF3k3l7r9uBpCp8WM2UUrfvt7yEk1pv sOWAG5G3wuvkQMmyNP/cIG0YzHOkF9zHzu6cElg4fiyGmUQJvFnGRhMujQVIxbyb Gg/tQEV/Hg12MpykrFKf0hs0/QzXFuAbdkYCeAFp7/ufwmdkjhtGXa/yd+PPdEZ9 8zjhL5DD/tQdGTq8ZEmFB/deiVOu3WH7F3ZNc8dtgZ8t2tFcvYceZcYAponJJH+2 kh93FVVKCwHx8909E+qFKZlG9PsHYUPLAMf5T1scgRzaeQN++FTg1EpHZrWvNNAM Y50eQA== -----END CERTIFICATE-----Generated at Mon Feb 23 00:21:08 2026 by rpki-client