$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/442198FEAAB20265DB83C6776695C4F42ABBF5BE.cer File: 442198FEAAB20265DB83C6776695C4F42ABBF5BE.cer (raw, json) Hash identifier: oZFTEJ1GW2Fx7EGyreFtbOb9nLhsL4uLnruYS62YHIk= Subject key identifier: 44:21:98:FE:AA:B2:02:65:DB:83:C6:77:66:95:C4:F4:2A:BB:F5:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03F7F499F1AA0A3CC94EB152D4A4E37DF9723BCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/442198FEAAB20265DB83C6776695C4F42ABBF5BE.mft caRepository: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 15 May 2026 21:22:03 +0000 Certificate not after: Fri 14 May 2027 21:27:03 +0000 Subordinate resources: AS: 268605 IP: 45.164.60.0/22 IP: 45.168.120.0/22 IP: 2804:53c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f7:f4:99:f1:aa:0a:3c:c9:4e:b1:52:d4:a4:e3:7d:f9:72:3b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 15 21:22:03 2026 GMT Not After : May 14 21:27:03 2027 GMT Subject: CN=442198FEAAB20265DB83C6776695C4F42ABBF5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:18:95:21:e8:8b:41:33:63:d4:16:c5:b1: 10:4c:f3:67:e7:53:54:59:5e:88:3f:64:08:d4:59: 4d:3e:fd:26:88:88:92:05:49:08:b9:ba:08:96:b1: 9c:03:ed:c1:a5:34:f3:aa:81:d8:bc:66:32:f9:a9: 9d:bf:0e:b1:36:76:76:29:5c:5e:e4:68:1c:e1:22: 19:04:3d:c4:3c:ef:44:52:bf:02:da:23:a5:e3:71: 63:c1:86:11:aa:80:25:e6:06:46:44:1d:6f:40:8f: 15:12:ad:a4:60:79:b6:42:a5:47:33:fb:4f:a2:06: f7:34:48:c1:44:66:6b:72:a6:c2:66:32:41:15:a8: a5:9a:39:8a:91:94:9d:af:d4:01:a5:f0:8a:df:e9: bc:4c:a4:e1:58:7f:20:9d:9e:e3:b1:0f:f7:93:49: 4b:6b:76:34:28:c3:9f:ea:2f:97:a4:40:46:d4:3a: 3f:48:d4:82:ee:4f:61:87:92:32:78:22:20:e5:0a: 5f:ed:68:5a:38:0e:47:7b:5a:f1:1a:a9:17:0c:89: da:80:c4:b9:81:f4:0c:63:90:be:a9:e1:6e:b4:9e: e1:5a:4e:c2:e7:8a:af:f7:5d:c2:2e:0c:01:a3:55: 87:2c:d9:6b:ff:27:62:8d:78:26:4f:c2:33:3c:d4: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:21:98:FE:AA:B2:02:65:DB:83:C6:77:66:95:C4:F4:2A:BB:F5:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/442198FEAAB20265DB83C6776695C4F42ABBF5BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.60.0/22 45.168.120.0/22 IPv6: 2804:53c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268605 Signature Algorithm: sha256WithRSAEncryption 89:87:38:bb:f9:1b:6f:a0:12:f3:55:58:03:60:94:91:af:37: c9:61:dd:57:29:3b:61:37:dc:b4:a5:ac:31:b1:67:54:8c:7e: 35:33:de:1c:cc:9a:7a:b6:b4:83:dc:27:16:28:ea:d3:b0:f6: 6a:c9:ba:59:ae:10:45:97:bc:cb:65:4b:18:22:b9:52:82:c8: 66:73:2f:8d:a7:30:33:52:e6:53:d6:ef:ff:3e:d4:df:c0:e6: 51:2c:a6:98:2f:90:c6:54:cf:bf:ef:64:2b:1e:c5:72:2a:25: 63:de:21:5e:fa:bd:2d:c3:8f:db:8c:66:25:e9:8f:8b:6c:23: 3d:70:3e:33:03:15:b3:17:93:f2:63:0a:83:85:6f:43:6c:82: 8d:8f:28:df:e0:74:c9:5a:85:28:e9:df:8f:7f:88:4b:84:88: f2:99:b2:8e:9f:a8:b8:9e:c6:9b:05:a7:dc:0d:b7:4f:f8:d5: 18:ea:d2:56:53:56:6d:3e:13:1e:a0:1b:c7:2f:db:6d:cf:fb: e8:bf:ea:f3:5f:a1:2d:89:75:05:71:b2:30:94:e4:33:ac:16: 3c:19:0c:41:df:bb:0c:65:24:d7:ee:b6:69:a9:30:96:2c:af: f2:b4:85:34:8d:ef:2d:8a:65:8c:ac:d6:20:18:71:5d:35:60: 82:8b:de:ac -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUA/f0mfGqCjzJTrFS1KTjfflyO8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTUyMTIyMDNaFw0yNzA1MTQyMTI3MDNaMDMxMTAvBgNV BAMTKDQ0MjE5OEZFQUFCMjAyNjVEQjgzQzY3NzY2OTVDNEY0MkFCQkY1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGxiVIeiLQTNj1BbFsRBM82fn U1RZXog/ZAjUWU0+/SaIiJIFSQi5ugiWsZwD7cGlNPOqgdi8ZjL5qZ2/DrE2dnYp XF7kaBzhIhkEPcQ870RSvwLaI6XjcWPBhhGqgCXmBkZEHW9AjxUSraRgebZCpUcz +0+iBvc0SMFEZmtypsJmMkEVqKWaOYqRlJ2v1AGl8Irf6bxMpOFYfyCdnuOxD/eT SUtrdjQow5/qL5ekQEbUOj9I1ILuT2GHkjJ4IiDlCl/taFo4Dkd7WvEaqRcMidqA xLmB9AxjkL6p4W60nuFaTsLniq/3XcIuDAGjVYcs2Wv/J2KNeCZPwjM81At5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREIZj+qrICZduD xndmlcT0Krv1vjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODJj RVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRyM1cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgy Y0VVQ0JCOGNrV3JFaWJtdUxoQWozYkViUmRKV3ZQbkV6ekdwTFM0cjNXLzAvNDQy MTk4RkVBQUIyMDI2NURCODNDNjc3NjY5NUM0RjQyQUJCRjVCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaQ8AwQCLah4MA0EAgACMAcDBQAoBFPEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZPTANBgkqhkiG9w0BAQsFAAOCAQEAiYc4u/kb b6AS81VYA2CUka83yWHdVyk7YTfctKWsMbFnVIx+NTPeHMyaera0g9wnFijq07D2 asm6Wa4QRZe8y2VLGCK5UoLIZnMvjacwM1LmU9bv/z7U38DmUSymmC+QxlTPv+9k Kx7FciolY94hXvq9LcOP24xmJemPi2wjPXA+MwMVsxeT8mMKg4VvQ2yCjY8o3+B0 yVqFKOnfj3+IS4SI8pmyjp+ouJ7GmwWn3A23T/jVGOrSVlNWbT4THqAbxy/bbc/7 6L/q81+hLYl1BXGyMJTkM6wWPBkMQd+7DGUk1+62aakwliyv8rSFNI3vLYpljKzW IBhxXTVggoverA== -----END CERTIFICATE-----Generated at Sun May 24 11:55:32 2026 by rpki-client