$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer File: 2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer (raw, json) Hash identifier: vrXgtzwmcXRz3sVv67ugedn9S0S1sq5LdAjVm7JFU4M= Subject key identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 79FCFB42176A7F5A20030AA0717E2F96F9050939 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft caRepository: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 21 Jan 2026 23:57:20 +0000 Certificate not after: Thu 21 Jan 2027 00:02:20 +0000 Subordinate resources: AS: 268803 IP: 45.173.92.0/22 IP: 2804:5ae4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 23:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fc:fb:42:17:6a:7f:5a:20:03:0a:a0:71:7e:2f:96:f9:05:09:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 21 23:57:20 2026 GMT Not After : Jan 21 00:02:20 2027 GMT Subject: CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:54:5f:db:10:dc:23:be:41:bb:32:b4:4d: 3b:67:6f:5c:1a:86:a8:46:84:de:56:a0:ae:0c:aa: 9c:e5:09:32:bc:29:22:3d:39:cd:f6:72:52:2b:ea: dc:91:14:ea:e5:a5:f7:ab:2a:f0:cb:ed:0f:74:b7: ca:28:3f:01:34:3b:40:2f:51:1a:b5:90:3e:ea:3c: 90:66:db:3c:72:c6:67:6e:b7:cd:5f:c2:0a:2d:67: 3a:ce:7a:c9:ef:94:2c:03:d4:e7:8c:89:08:43:0b: e1:72:31:a6:96:0e:13:3e:a9:b1:65:45:37:e0:ff: 6f:f7:5e:11:a0:a6:c8:62:4f:fa:cc:98:f0:a4:8d: 02:ba:9f:ca:f7:b4:f0:cf:d2:40:8b:0d:11:89:73: 3b:39:b7:62:db:32:55:25:0e:80:cb:c2:7d:6d:ab: 37:d8:69:83:95:59:8a:96:af:33:4b:32:94:dc:0f: b1:d9:ae:d3:ca:4e:86:fd:11:de:d8:d1:f9:db:a0: fd:ea:83:d1:9e:8d:21:f9:2b:b7:76:bc:3e:0f:df: 5c:4f:82:82:b8:bf:7b:69:cf:34:02:74:76:d8:4c: b9:05:74:bd:df:82:67:ab:6e:86:ec:3e:2a:31:e3: 9d:d6:bd:a2:33:68:7d:99:d7:09:cb:e1:cf:ba:54: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.92.0/22 IPv6: 2804:5ae4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268803 Signature Algorithm: sha256WithRSAEncryption c7:69:d9:8a:be:0b:dd:42:4e:4f:b2:00:02:42:81:04:f5:d5: 99:85:09:b0:22:8d:8f:bb:f6:cf:cc:37:b1:dc:ff:05:86:d2: 97:a6:06:74:6a:c1:f5:34:32:d6:9a:ae:6e:51:09:6d:41:17: 98:5e:6d:40:31:d3:6b:91:e5:17:34:43:42:05:db:06:b6:39: 22:ee:e7:b4:94:82:e2:ad:59:cc:8e:74:57:14:f8:1d:b5:a9: 4a:d5:7a:73:00:4b:e7:ad:4e:93:6e:1b:fe:81:26:75:e6:14: d2:22:a3:8a:17:26:ac:78:77:5b:7b:54:09:4f:54:93:37:6e: 09:ee:45:5d:9f:72:9a:5b:c3:b8:55:a5:48:9e:a7:a0:ce:2e: 81:10:ee:da:5c:92:db:12:61:56:8c:bd:29:dd:e3:40:b6:bc: 1c:ba:c5:1e:12:b9:59:ad:f8:b3:86:6e:88:32:c5:6d:cb:9a: db:6c:5f:59:77:a8:36:ac:5d:c8:bf:ee:06:3f:ca:9f:62:87: fb:d5:f7:d8:fc:38:5c:13:f6:6f:69:6b:86:06:a7:80:c2:c5: 69:e8:ab:8e:26:a3:b3:f7:90:d8:70:e0:bc:e5:d8:5f:c7:06: 10:10:7b:af:1f:9f:13:12:4c:cc:ab:e8:63:4c:ac:63:44:72: 2a:58:0a:fb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUefz7Qhdqf1ogAwqgcX4vlvkFCTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMjEyMzU3MjBaFw0yNzAxMjEwMDAyMjBaMDMxMTAvBgNV BAMTKDJGQzdCQTVFQUY4ODMyRDNFNDI3MzZDNjQxRjA2MDdFNTBFQzZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8lRf2xDcI75BuzK0TTtnb1wa hqhGhN5WoK4MqpzlCTK8KSI9Oc32clIr6tyRFOrlpferKvDL7Q90t8ooPwE0O0Av URq1kD7qPJBm2zxyxmdut81fwgotZzrOesnvlCwD1OeMiQhDC+FyMaaWDhM+qbFl RTfg/2/3XhGgpshiT/rMmPCkjQK6n8r3tPDP0kCLDRGJczs5t2LbMlUlDoDLwn1t qzfYaYOVWYqWrzNLMpTcD7HZrtPKTob9Ed7Y0fnboP3qg9GejSH5K7d2vD4P31xP goK4v3tpzzQCdHbYTLkFdL3fgmerbobsPiox453WvaIzaH2Z1wnL4c+6VI0lAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvx7per4gy0+Qn NsZB8GB+UOxtLTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHhN QTI2WFZwUnBndVVTUVdpVXdhbTEyZW5ObjVBNG5NQUxWQWZqMlBCQnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh4 TUEyNlhWcFJwZ3VVU1FXaVV3YW0xMmVuTm41QTRuTUFMVkFmajJQQkJ5LzAvMkZD N0JBNUVBRjg4MzJEM0U0MjczNkM2NDFGMDYwN0U1MEVDNkQyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa1cMA0EAgACMAcDBQAoBFrkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaAzANBgkqhkiG9w0BAQsFAAOCAQEAx2nZir4L3UJOT7IA AkKBBPXVmYUJsCKNj7v2z8w3sdz/BYbSl6YGdGrB9TQy1pqublEJbUEXmF5tQDHT a5HlFzRDQgXbBrY5Iu7ntJSC4q1ZzI50VxT4HbWpStV6cwBL561Ok24b/oEmdeYU 0iKjihcmrHh3W3tUCU9UkzduCe5FXZ9ymlvDuFWlSJ6noM4ugRDu2lyS2xJhVoy9 Kd3jQLa8HLrFHhK5Wa34s4ZuiDLFbcua22xfWXeoNqxdyL/uBj/Kn2KH+9X32Pw4 XBP2b2lrhgangMLFaeirjiajs/eQ2HDgvOXYX8cGEBB7rx+fExJMzKvoY0ysY0Ry KlgK+w== -----END CERTIFICATE-----Generated at Mon Feb 23 00:22:24 2026 by rpki-client