$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer File: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer (raw, json) Hash identifier: 4jqcwc/LmPSLioWjSoWvr6QmdKP/a6FdqTiYnefA3X8= Subject key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64A4F773CFED54469A7D4EA24E34FDA929967BE0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft caRepository: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Apr 2026 00:15:30 +0000 Certificate not after: Wed 31 Mar 2027 00:20:30 +0000 Subordinate resources: AS: 271190 IP: 179.42.120.0/22 IP: 2804:77a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 07:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a4:f7:73:cf:ed:54:46:9a:7d:4e:a2:4e:34:fd:a9:29:96:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 1 00:15:30 2026 GMT Not After : Mar 31 00:20:30 2027 GMT Subject: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:e4:db:21:e3:cc:54:41:aa:9f:06:52:bd: 3f:31:89:63:53:5f:59:0c:39:de:e8:39:80:a5:15: 59:2f:25:44:8c:fc:2a:9a:da:b2:28:45:e2:c0:9f: bb:b1:fb:40:ce:13:d9:a5:a4:ab:d6:f3:1b:04:10: db:0a:6c:01:a9:1d:05:74:2a:0f:65:55:36:90:e7: c1:df:3d:fa:ae:f1:eb:c6:94:ed:c3:12:55:61:63: 0f:e2:9d:9e:84:f4:46:31:39:85:4e:dc:36:19:96: f8:04:9b:6b:54:b9:d5:d3:8c:dd:3b:c0:71:30:62: 5c:a7:0a:67:4c:f3:12:8d:a8:3c:34:98:4e:9c:88: ba:5f:08:8e:54:86:dd:74:cf:d0:c2:24:7c:5d:92: 7a:a2:c9:59:a8:31:58:45:a1:e2:5d:9c:5d:99:6b: 9e:90:b2:64:88:47:43:20:17:ab:bd:a9:c9:a9:36: ca:97:9c:d7:9b:56:48:ae:60:76:db:40:2b:c1:df: ba:a4:18:72:9d:49:fb:47:5e:eb:17:b7:8b:21:73: 2c:1b:7a:34:c4:d2:4d:34:57:83:c0:d4:9f:2a:b0: f4:f2:df:84:75:51:f3:28:6e:dc:ef:b9:2e:1d:ad: 6f:9f:d0:4d:5e:0e:16:d3:d3:8d:0e:9f:7f:6c:7f: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.120.0/22 IPv6: 2804:77a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271190 Signature Algorithm: sha256WithRSAEncryption 17:cd:a7:79:74:e2:b0:f2:44:9c:9c:04:cc:8b:6d:4d:71:a0: 34:90:2b:ca:e4:a0:91:72:31:56:f0:46:07:c6:68:2d:07:17: c2:9e:e5:f4:6c:35:48:40:24:fd:f0:79:a1:ef:31:69:e2:8d: b8:2d:c2:ca:a2:bc:f4:82:fc:d7:60:86:1e:38:d0:39:97:d8: 3c:f1:75:3f:fc:d8:a2:74:56:ce:aa:d2:bb:eb:11:93:9e:c0: 6b:25:04:ef:54:4c:42:a2:d3:f2:71:d3:2d:b5:e7:33:07:d7: e2:d1:33:a6:4f:84:f6:9f:f2:53:6b:8c:d3:57:83:09:c3:6f: 51:81:50:ae:4d:79:5d:7c:8f:fd:63:f6:6b:28:47:43:77:f0: 6b:fb:54:ef:05:bc:53:de:d0:0d:0e:40:78:1c:2d:f8:fd:19: 64:14:5d:aa:9a:f9:a5:38:94:fd:08:27:a3:46:af:ba:19:5d: b0:2d:cb:02:57:39:e1:af:5a:dc:e9:36:d2:90:6b:35:03:18: 24:90:90:3c:ee:54:0b:fe:f6:ea:d2:57:9d:0f:32:35:4e:b7: 88:51:04:e3:d0:23:b8:4d:d1:66:3a:f8:8a:9f:84:70:70:57: 6e:e7:65:d2:95:07:91:9b:46:6b:83:c6:f9:20:b3:6b:83:ea: eb:4b:99:27 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZKT3c8/tVEaafU6iTjT9qSmWe+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDEwMDE1MzBaFw0yNzAzMzEwMDIwMzBaMDMxMTAvBgNV BAMTKDJEOUM1M0Q2NEQ5QzEyQUIxN0FDQTg2RURCM0U4RDM0OEIwNzI3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkOTbIePMVEGqnwZSvT8xiWNT X1kMOd7oOYClFVkvJUSM/Cqa2rIoReLAn7ux+0DOE9mlpKvW8xsEENsKbAGpHQV0 Kg9lVTaQ58HfPfqu8evGlO3DElVhYw/inZ6E9EYxOYVO3DYZlvgEm2tUudXTjN07 wHEwYlynCmdM8xKNqDw0mE6ciLpfCI5Uht10z9DCJHxdknqiyVmoMVhFoeJdnF2Z a56QsmSIR0MgF6u9qcmpNsqXnNebVkiuYHbbQCvB37qkGHKdSftHXusXt4shcywb ejTE0k00V4PA1J8qsPTy34R1UfMobtzvuS4drW+f0E1eDhbT040On39sf8n7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtnFPWTZwSqxes qG7bPo00iwcnUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHF6 Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVabncvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rx ekI3NlJBR3BjUWZ2cEw4SmJUSkpQWXN5QWU2VXB4Um1oU2M0RUpVWm53LzAvMkQ5 QzUzRDY0RDlDMTJBQjE3QUNBODZFREIzRThEMzQ4QjA3Mjc1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsyp4MA0EAgACMAcDBQAoBHekMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjVjANBgkqhkiG9w0BAQsFAAOCAQEAF82neXTisPJEnJwE zIttTXGgNJAryuSgkXIxVvBGB8ZoLQcXwp7l9Gw1SEAk/fB5oe8xaeKNuC3CyqK8 9IL812CGHjjQOZfYPPF1P/zYonRWzqrSu+sRk57AayUE71RMQqLT8nHTLbXnMwfX 4tEzpk+E9p/yU2uM01eDCcNvUYFQrk15XXyP/WP2ayhHQ3fwa/tU7wW8U97QDQ5A eBwt+P0ZZBRdqpr5pTiU/Qgno0avuhldsC3LAlc54a9a3Ok20pBrNQMYJJCQPO5U C/726tJXnQ8yNU63iFEE49AjuE3RZjr4ip+EcHBXbudl0pUHkZtGa4PG+SCza4Pq 60uZJw== -----END CERTIFICATE-----Generated at Thu Apr 9 09:47:23 2026 by rpki-client