$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer (raw, json) Hash identifier: ljll6N15RTogKrCEXejj6LslBHKhmaC02D7cNCV8pPs= Subject key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 50D6CF246B9004DD5093D66075AA2B13409492C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft caRepository: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 07:02:06 +0000 Certificate not after: Tue 06 Apr 2027 07:07:06 +0000 Subordinate resources: AS: 268945 IP: 45.176.144.0/22 IP: 45.190.0.0/22 IP: 2804:5d00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d6:cf:24:6b:90:04:dd:50:93:d6:60:75:aa:2b:13:40:94:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 07:02:06 2026 GMT Not After : Apr 6 07:07:06 2027 GMT Subject: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:eb:08:60:c0:ac:6c:53:4a:9f:aa:97:c5: ab:72:c0:5f:5d:0b:f1:f2:a4:66:ee:21:8d:07:78: 97:18:d1:33:a1:03:15:74:9b:82:20:e8:85:20:4c: 31:17:a2:95:fd:f8:94:e4:b9:4d:06:d4:6e:db:d1: 59:c2:77:5a:ed:37:98:21:7b:4f:80:74:e4:46:13: 63:b4:7e:71:94:e8:48:f8:ee:ed:09:0f:14:0c:24: 5e:50:99:e9:5b:e4:e0:8c:38:4a:04:58:65:eb:0d: 08:3d:96:50:92:14:58:e2:7c:02:67:53:bf:a1:b6: 59:44:ed:42:ac:d8:b0:e5:da:e5:42:7a:8f:d6:a1: 8d:d8:8b:3f:36:90:1c:8a:2f:9a:f4:da:7a:b8:81: 7d:a9:6f:eb:61:b3:4a:2f:30:91:2d:55:9b:c7:8f: 4b:9f:ec:a7:63:db:cb:7a:51:ef:e7:42:3a:d4:ea: 51:ae:90:df:82:60:f1:17:af:d0:ae:a5:03:ad:6b: 12:aa:bc:b1:af:62:25:af:d3:38:0d:7b:a1:93:fd: 66:e2:8e:de:39:85:52:f7:c8:91:4f:c9:69:99:45: 9c:0c:dc:c8:14:40:24:50:3e:a0:58:d8:6a:39:cf: 45:68:a4:a5:e2:88:09:0e:9a:a0:b3:d2:06:13:45: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.144.0/22 45.190.0.0/22 IPv6: 2804:5d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268945 Signature Algorithm: sha256WithRSAEncryption 2e:e7:69:d6:2d:c1:ad:27:db:e8:7f:0a:0c:29:b7:a5:64:09: 06:b8:bb:53:3d:57:d0:6b:99:2a:be:bb:d5:e9:ed:d0:85:03: 23:1c:ab:3d:b0:a6:19:72:62:ce:fb:71:0d:23:7f:74:6d:76: 7f:4c:a9:78:f5:5f:d0:c0:a3:aa:11:d8:d7:1d:0f:04:a3:46: 40:b9:4c:96:8d:0c:ac:49:45:1d:83:42:1c:9d:28:8f:b1:29: 0e:ba:47:ca:2e:58:09:e0:01:fd:48:57:a4:f1:e2:c7:34:1b: 18:2c:ea:9d:bb:29:2c:88:bb:9f:58:62:c2:9c:20:d9:1d:a5: 7f:37:d0:3a:19:d5:80:02:74:24:f9:92:33:58:c5:16:cd:98: 52:b7:56:b3:c0:2d:e3:eb:b4:ea:06:a8:93:5a:f6:16:88:e0: fe:06:8d:42:85:4d:ec:13:c5:5f:cf:0e:c9:8f:3e:e7:1c:2d: 1d:d7:be:78:e8:f3:d8:af:fb:37:bf:29:fe:6e:1f:8a:29:79: d3:14:fa:6a:34:fb:87:53:c3:9e:2a:0d:36:15:87:80:50:73: d3:3b:1e:f7:38:eb:c2:0b:f4:a8:b6:fc:cc:fe:9c:c4:5c:dc: 93:c8:df:76:b2:00:3c:61:eb:2b:c8:15:81:0e:ca:d9:b6:33: 45:b5:23:3e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUNbPJGuQBN1Qk9ZgdaorE0CUksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDcwNzAyMDZaFw0yNzA0MDYwNzA3MDZaMDMxMTAvBgNV BAMTKDJCNUY4NEYzOUNBNkEyODQ1NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XOsIYMCsbFNKn6qXxatywF9d C/HypGbuIY0HeJcY0TOhAxV0m4Ig6IUgTDEXopX9+JTkuU0G1G7b0VnCd1rtN5gh e0+AdORGE2O0fnGU6Ej47u0JDxQMJF5Qmelb5OCMOEoEWGXrDQg9llCSFFjifAJn U7+htllE7UKs2LDl2uVCeo/WoY3Yiz82kByKL5r02nq4gX2pb+ths0ovMJEtVZvH j0uf7Kdj28t6Ue/nQjrU6lGukN+CYPEXr9CupQOtaxKqvLGvYiWv0zgNe6GT/Wbi jt45hVL3yJFPyWmZRZwM3MgUQCRQPqBY2Go5z0VopKXiiAkOmqCz0gYTRX0JAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrX4TznKaihFXe l08s9hR6Xh085jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFZ5 Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRW eUNEaVhIc1Axakc5aEFVS0prSkU0amN4eVpHSmhYdWozc3ZhUFYyenVlLzAvMkI1 Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1RTFEM0NFNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbCQAwQCLb4AMA0EAgACMAcDBQAoBF0AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQakTANBgkqhkiG9w0BAQsFAAOCAQEALudp1i3B rSfb6H8KDCm3pWQJBri7Uz1X0GuZKr671ent0IUDIxyrPbCmGXJizvtxDSN/dG12 f0ypePVf0MCjqhHY1x0PBKNGQLlMlo0MrElFHYNCHJ0oj7EpDrpHyi5YCeAB/UhX pPHixzQbGCzqnbspLIi7n1hiwpwg2R2lfzfQOhnVgAJ0JPmSM1jFFs2YUrdWs8At 4+u06gaok1r2Fojg/gaNQoVN7BPFX88OyY8+5xwtHde+eOjz2K/7N78p/m4fiil5 0xT6ajT7h1PDnioNNhWHgFBz0zse9zjrwgv0qLb8zP6cxFzck8jfdrIAPGHrK8gV gQ7K2bYzRbUjPg== -----END CERTIFICATE-----Generated at Thu Apr 9 12:50:05 2026 by rpki-client