$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24AB21D92D5FBC93E95EB7958D567C9BEC4E706D.cer File: 24AB21D92D5FBC93E95EB7958D567C9BEC4E706D.cer (raw, json) Hash identifier: Hnxc9KvrAeAzjF0w5NG2nQv3DHBI5UbAM4IXQH7zYsA= Subject key identifier: 24:AB:21:D9:2D:5F:BC:93:E9:5E:B7:95:8D:56:7C:9B:EC:4E:70:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4CA1E9EF8B5E0ED4062C97C20DB720A1409499ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/24AB21D92D5FBC93E95EB7958D567C9BEC4E706D.mft caRepository: rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 18 May 2026 14:23:11 +0000 Certificate not after: Mon 17 May 2027 14:28:11 +0000 Subordinate resources: AS: 269583 IP: 45.189.124.0/22 IP: 2804:66cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a1:e9:ef:8b:5e:0e:d4:06:2c:97:c2:0d:b7:20:a1:40:94:99:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 18 14:23:11 2026 GMT Not After : May 17 14:28:11 2027 GMT Subject: CN=24AB21D92D5FBC93E95EB7958D567C9BEC4E706D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:ec:89:7b:af:ac:e9:77:9c:d5:8f:ed:97: a5:61:92:70:4b:c7:80:fa:0d:df:55:d9:1b:ea:98: 41:56:7e:15:17:60:13:b9:fa:bb:ea:6b:1d:da:76: 23:93:99:7e:e1:c1:6e:17:bb:00:da:35:64:d3:36: 51:d9:fb:84:00:87:39:a1:19:3a:b3:3b:af:c9:5a: 96:43:c7:ea:37:d2:c7:8b:a1:a5:fa:92:aa:69:0f: 6e:a6:f3:d3:04:b5:d0:ad:53:ae:43:b2:6c:65:a1: 13:18:59:53:5f:3e:3c:8f:da:13:ce:13:c7:03:06: 34:f3:df:0b:4d:a1:8d:af:cb:b6:45:77:ea:ca:44: 2b:cf:bf:01:c9:40:db:88:3d:8b:26:c9:c9:00:69: a1:9b:7a:48:09:86:af:85:2f:b8:7c:ac:b9:f1:73: fb:6f:07:95:1d:60:63:7d:89:93:4a:79:f7:3d:7a: db:34:e0:40:25:45:97:da:a8:bf:07:63:75:d5:dc: b4:31:2a:f4:ba:73:e7:91:d7:70:60:d2:a2:d2:c9: 7b:b6:20:9b:2d:50:d4:5d:8a:db:b7:5e:48:ff:c3: 9d:76:e8:2c:11:7a:8f:7e:a7:46:7a:08:bb:8c:77: ab:2d:55:42:6f:16:c1:12:d2:31:23:6a:24:42:53: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:AB:21:D9:2D:5F:BC:93:E9:5E:B7:95:8D:56:7C:9B:EC:4E:70:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/24AB21D92D5FBC93E95EB7958D567C9BEC4E706D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.124.0/22 IPv6: 2804:66cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269583 Signature Algorithm: sha256WithRSAEncryption 62:48:7b:92:c2:45:a5:e9:f8:45:42:13:8c:4f:d5:08:af:61: fa:85:01:51:bc:17:b3:78:10:a7:f1:69:66:7e:85:a0:73:bd: a2:e3:fa:b2:db:dc:d7:6c:92:d0:f0:cd:d9:0a:67:3d:df:45: 62:d8:ac:6b:8d:a7:7f:33:02:e6:15:c3:d9:25:93:b5:02:45: 79:5b:1c:fc:60:b1:3a:81:d8:97:61:6c:c1:ed:b6:f0:ac:c4: b2:59:6e:d1:85:a3:ae:f2:f9:b8:d0:1a:ea:7d:47:dc:c3:93: d7:df:2f:66:49:bf:f7:4a:98:fc:54:e5:29:6b:03:8e:13:30: 4a:36:dc:f4:24:bd:09:21:ce:73:16:0d:c7:d4:11:33:42:d7: 20:02:ec:01:e7:f4:3e:50:67:12:4d:9e:5a:f0:bf:21:48:1e: f6:b6:86:a2:e9:cf:d2:65:ae:e2:f0:e2:27:ac:fc:3e:94:fe: 6b:15:81:5f:4d:e7:80:41:cb:0a:63:20:ba:43:b6:b1:57:d6: 83:e6:0c:b8:06:1b:59:bd:4c:3a:a3:f8:23:d0:7d:5d:83:b1: cb:c4:0c:ac:4b:7d:f2:e6:e1:f7:7d:d2:dd:84:7f:c1:ec:31: 68:04:98:d6:0c:55:4d:2a:a3:6d:9e:1b:58:be:a7:6e:67:89: 72:bb:7c:21 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTKHp74teDtQGLJfCDbcgoUCUme0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTgxNDIzMTFaFw0yNzA1MTcxNDI4MTFaMDMxMTAvBgNV BAMTKDI0QUIyMUQ5MkQ1RkJDOTNFOTVFQjc5NThENTY3QzlCRUM0RTcwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViOyJe6+s6Xec1Y/tl6VhknBL x4D6Dd9V2RvqmEFWfhUXYBO5+rvqax3adiOTmX7hwW4XuwDaNWTTNlHZ+4QAhzmh GTqzO6/JWpZDx+o30seLoaX6kqppD26m89MEtdCtU65DsmxloRMYWVNfPjyP2hPO E8cDBjTz3wtNoY2vy7ZFd+rKRCvPvwHJQNuIPYsmyckAaaGbekgJhq+FL7h8rLnx c/tvB5UdYGN9iZNKefc9ets04EAlRZfaqL8HY3XV3LQxKvS6c+eR13Bg0qLSyXu2 IJstUNRditu3Xkj/w5126CwReo9+p0Z6CLuMd6stVUJvFsES0jEjaiRCU1uNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkqyHZLV+8k+le t5WNVnyb7E5wbTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnp6 WUZZVld6MVAxdThCWTI3QVZCMzFieXlwS1RpVXFrbWo1aWJuWXA3VG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z6 ellGWVZXejFQMXU4QlkyN0FWQjMxYnl5cEtUaVVxa21qNWlibllwN1RuLzAvMjRB QjIxRDkyRDVGQkM5M0U5NUVCNzk1OEQ1NjdDOUJFQzRFNzA2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb18MA0EAgACMAcDBQAoBGbMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdDzANBgkqhkiG9w0BAQsFAAOCAQEAYkh7ksJFpen4RUIT jE/VCK9h+oUBUbwXs3gQp/FpZn6FoHO9ouP6stvc12yS0PDN2QpnPd9FYtisa42n fzMC5hXD2SWTtQJFeVsc/GCxOoHYl2Fswe228KzEsllu0YWjrvL5uNAa6n1H3MOT 198vZkm/90qY/FTlKWsDjhMwSjbc9CS9CSHOcxYNx9QRM0LXIALsAef0PlBnEk2e WvC/IUge9raGounP0mWu4vDiJ6z8PpT+axWBX03ngEHLCmMgukO2sVfWg+YMuAYb Wb1MOqP4I9B9XYOxy8QMrEt98ubh933S3YR/wewxaASY1gxVTSqjbZ4bWL6nbmeJ crt8IQ== -----END CERTIFICATE-----Generated at Sun May 24 11:55:43 2026 by rpki-client