$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DE9D8C57469B4D2B91B678EECD854A7725F242D.cer File: 3DE9D8C57469B4D2B91B678EECD854A7725F242D.cer (raw, json) Hash identifier: ki79Zov57JUSByMEjz+RhRe7uqdJYMvcsWFG2Sq/RaI= Subject key identifier: 3D:E9:D8:C5:74:69:B4:D2:B9:1B:67:8E:EC:D8:54:A7:72:5F:24:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 338155ECF8D9D706BB6EF90756FFF7FA04DEA408 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/3DE9D8C57469B4D2B91B678EECD854A7725F242D.mft caRepository: rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 14:09:33 +0000 Certificate not after: Mon 05 Apr 2027 14:14:33 +0000 Subordinate resources: AS: 268157 IP: 45.170.96.0/22 IP: 2804:58e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:81:55:ec:f8:d9:d7:06:bb:6e:f9:07:56:ff:f7:fa:04:de:a4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 6 14:09:33 2026 GMT Not After : Apr 5 14:14:33 2027 GMT Subject: CN=3DE9D8C57469B4D2B91B678EECD854A7725F242D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:32:63:6c:e0:b1:d3:7c:c9:40:67:96:98: 50:d6:94:bf:36:32:5e:6c:f1:25:a9:a8:e7:f8:b8: c2:94:9e:b3:3c:e5:3d:9b:cb:f4:5b:a3:ab:f9:be: 47:56:0f:ac:e0:e7:db:68:4a:71:7d:67:78:6d:b8: 3e:e6:bd:b1:f4:d7:97:b4:6c:77:5b:01:b6:1e:fe: d0:11:10:48:8f:b1:ad:14:ae:f9:e6:b9:99:47:3e: 62:bc:a0:b2:5a:04:92:95:7d:d4:0d:3a:9b:20:5a: 88:5e:f0:b4:ff:3c:f2:76:f2:35:e3:db:dc:03:e3: 53:3b:a4:4f:d7:c8:d8:8d:f5:47:63:65:36:30:7d: 47:74:6f:72:02:64:e4:85:50:09:db:f3:89:e3:95: 22:7f:55:b3:8b:ab:73:02:05:4b:c0:d6:fb:33:54: e5:9a:a3:cb:e5:72:36:05:71:87:e2:67:23:5f:3c: 23:34:da:c9:4a:05:b2:a0:b5:69:44:1e:14:71:c4: 0d:2a:e2:99:66:e9:c4:7d:34:e9:c9:14:56:af:58: 5b:22:a0:5c:22:4f:fd:4e:95:e2:1c:a8:12:91:7c: d3:8f:7f:0b:39:d0:a1:75:42:12:86:b0:1c:73:b9: 35:b8:ee:f6:20:dc:aa:3e:a7:40:1d:65:31:19:63: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:E9:D8:C5:74:69:B4:D2:B9:1B:67:8E:EC:D8:54:A7:72:5F:24:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/3DE9D8C57469B4D2B91B678EECD854A7725F242D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.96.0/22 IPv6: 2804:58e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268157 Signature Algorithm: sha256WithRSAEncryption ac:80:33:d7:a6:00:f5:7b:38:ab:c8:9f:ae:ac:73:ad:a7:44: ba:6e:5d:63:56:c3:2c:9c:f5:1e:3d:08:be:de:e7:3e:ef:ae: 4a:55:43:12:36:fa:d3:c5:20:78:3a:7a:7d:f6:95:19:0c:25: 46:db:96:07:40:35:a6:bb:28:53:88:af:fa:e1:cf:77:da:dd: fd:39:f0:75:0a:1c:38:ee:27:4f:3f:d4:64:ee:bc:12:b1:1c: 04:7c:b3:8d:36:75:4d:79:b9:77:90:57:12:66:54:d9:40:16: a3:55:2f:5c:12:4b:58:d0:54:35:e9:4f:09:4e:2e:52:87:8d: a7:80:30:8a:6e:53:34:98:9f:52:8d:43:38:ac:a3:df:95:6d: 16:93:52:c5:f3:86:ce:6a:6f:62:87:80:6a:a6:6e:68:af:e3: 97:ee:65:00:bc:92:8a:e7:5d:5a:a9:38:34:2b:94:bd:e7:97: f1:a9:0b:01:a0:1e:fd:76:cb:c1:05:a4:43:3e:96:c0:4e:2c: 70:f9:b9:a0:97:5f:4e:b1:ce:11:0f:fb:b1:ec:d7:46:43:56: 46:3b:04:9e:5b:0d:62:8c:4f:79:ec:50:eb:b5:de:b7:75:29: fa:97:6d:91:de:28:f4:62:43:56:cc:6b:d9:2e:76:dc:57:fd: 54:6a:55:f5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM4FV7PjZ1wa7bvkHVv/3+gTepAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDYxNDA5MzNaFw0yNzA0MDUxNDE0MzNaMDMxMTAvBgNV BAMTKDNERTlEOEM1NzQ2OUI0RDJCOTFCNjc4RUVDRDg1NEE3NzI1RjI0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPTJjbOCx03zJQGeWmFDWlL82 Ml5s8SWpqOf4uMKUnrM85T2by/Rbo6v5vkdWD6zg59toSnF9Z3htuD7mvbH015e0 bHdbAbYe/tAREEiPsa0UrvnmuZlHPmK8oLJaBJKVfdQNOpsgWohe8LT/PPJ28jXj 29wD41M7pE/XyNiN9UdjZTYwfUd0b3ICZOSFUAnb84njlSJ/VbOLq3MCBUvA1vsz VOWao8vlcjYFcYfiZyNfPCM02slKBbKgtWlEHhRxxA0q4plm6cR9NOnJFFavWFsi oFwiT/1OleIcqBKRfNOPfws50KF1QhKGsBxzuTW47vYg3Ko+p0AdZTEZY6m3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ96djFdGm00rkb Z47s2FSncl8kLTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE1C NTdBR2pONTlBMzExdHRMbUVXNVNjcGFxWW5LN3JkUnEzUFZXM1dxcVkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hN QjU3QUdqTjU5QTMxMXR0TG1FVzVTY3BhcVluSzdyZFJxM1BWVzNXcXFZLzAvM0RF OUQ4QzU3NDY5QjREMkI5MUI2NzhFRUNEODU0QTc3MjVGMjQyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLapgMA0EAgACMAcDBQAoBFjoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXfTANBgkqhkiG9w0BAQsFAAOCAQEArIAz16YA9Xs4q8if rqxzradEum5dY1bDLJz1Hj0Ivt7nPu+uSlVDEjb608UgeDp6ffaVGQwlRtuWB0A1 prsoU4iv+uHPd9rd/TnwdQocOO4nTz/UZO68ErEcBHyzjTZ1TXm5d5BXEmZU2UAW o1UvXBJLWNBUNelPCU4uUoeNp4Awim5TNJifUo1DOKyj35VtFpNSxfOGzmpvYoeA aqZuaK/jl+5lALySiuddWqk4NCuUveeX8akLAaAe/XbLwQWkQz6WwE4scPm5oJdf TrHOEQ/7sezXRkNWRjsEnlsNYoxPeexQ67Xet3Up+pdtkd4o9GJDVsxr2S523Ff9 VGpV9Q== -----END CERTIFICATE-----Generated at Thu Apr 9 12:47:17 2026 by rpki-client