$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer File: 4B836A085E4555E9F264F4EFC7779BD8D1259101.cer (raw, json) Hash identifier: mSLR9+HwTT4hqIS4/mXn1ZdkEmwQdVssC5pDa0rM8cY= Subject key identifier: 4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B2FC4BBDEDDEE9AAC5C145E59B8110A9EFA001D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.mft caRepository: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Feb 2026 21:53:30 +0000 Certificate not after: Mon 08 Feb 2027 21:58:30 +0000 Subordinate resources: AS: 28572 IP: 200.192.144.0/21 IP: 200.192.156.0/22 IP: 2804:6e3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 22:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2f:c4:bb:de:dd:ee:9a:ac:5c:14:5e:59:b8:11:0a:9e:fa:00:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 9 21:53:30 2026 GMT Not After : Feb 8 21:58:30 2027 GMT Subject: CN=4B836A085E4555E9F264F4EFC7779BD8D1259101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:a1:5d:47:c6:2b:fb:46:ca:da:a7:65:5c: 5a:c8:6a:8d:82:21:23:61:c8:a5:99:5f:d7:c8:c3: 24:ab:22:72:60:be:74:c0:2a:c1:66:94:4b:7c:e0: 41:37:ce:a0:01:01:2c:67:3e:d9:03:6e:09:4d:60: 37:1c:64:1a:f2:c6:52:65:d5:1b:a9:11:6d:20:c8: 8c:d1:d1:ad:d5:53:b4:83:d9:1b:b1:60:ea:d4:61: 50:26:05:fa:42:f6:af:bb:0d:80:98:1b:2c:4d:7b: e2:de:3a:7c:30:bf:90:14:4f:f6:bc:89:2b:ea:91: 6a:77:73:7b:c8:2a:ac:4c:b6:44:63:83:08:f2:d7: f4:3f:00:ef:84:b2:a1:ee:4b:5d:80:7f:bc:8e:ad: de:18:25:aa:59:ee:51:ba:06:86:af:be:af:4e:69: 69:f0:10:c1:7f:6d:bf:a6:58:82:b8:24:a8:43:eb: 1c:2d:50:92:9a:a5:89:9f:cd:d1:1c:32:b8:31:bd: 54:a5:26:9c:66:ef:73:3e:1c:47:0f:ba:c6:2f:19: e4:22:a3:dc:6a:4f:dd:c5:89:58:28:ab:1a:59:77: c9:15:d0:a0:06:25:45:9c:a5:1e:46:ab:00:65:e0: 54:81:fb:50:0d:eb:c9:97:ab:2a:7c:fe:8a:c2:97: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.192.144.0/21 200.192.156.0/22 IPv6: 2804:6e3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28572 Signature Algorithm: sha256WithRSAEncryption ad:56:e5:69:ef:22:d1:c8:b5:f2:53:56:90:5d:e6:72:7e:9c: f9:a0:cd:c0:2b:a3:df:4c:67:e1:73:bf:26:39:99:a9:0c:86: d3:d5:71:59:4c:4e:60:22:19:4c:f4:10:a2:98:ba:57:cd:e0: 1e:6f:b2:48:2e:2b:10:e5:90:ca:df:7c:a3:da:b1:38:08:79: e2:25:93:b1:b9:e6:15:a0:bb:5a:70:d2:22:11:af:fa:ab:82: 9d:c3:63:3a:56:c8:8f:57:2e:8b:c0:9a:2b:d3:36:87:ee:3b: 6e:69:8a:61:99:82:30:a1:17:8a:6d:45:a7:5b:85:a7:5a:0d: 2d:e5:02:72:c8:ad:4d:55:7f:46:fa:f0:da:7f:8f:92:d1:ef: de:4e:a2:b1:90:67:d6:ef:fc:9c:13:06:5b:83:48:e1:21:a3: d3:96:f4:32:1b:99:44:35:91:ad:bb:bd:90:5d:01:af:09:1f: ae:16:ab:18:1f:bf:7a:b0:08:94:21:cc:ed:9e:a0:0f:4c:2e: 7a:77:0c:86:bf:6a:31:10:ee:63:ff:ef:b4:c9:f6:4d:42:8b: e4:fc:6a:64:69:4e:23:ad:c7:19:05:ef:fb:57:27:1f:65:b0: dc:94:e1:31:36:25:5a:78:40:8a:15:7e:e7:6e:f6:64:3c:c2: 42:b6:3d:2a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUWy/Eu97d7pqsXBReWbgRCp76AB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMDkyMTUzMzBaFw0yNzAyMDgyMTU4MzBaMDMxMTAvBgNV BAMTKDRCODM2QTA4NUU0NTU1RTlGMjY0RjRFRkM3Nzc5QkQ4RDEyNTkxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2KFdR8Yr+0bK2qdlXFrIao2C ISNhyKWZX9fIwySrInJgvnTAKsFmlEt84EE3zqABASxnPtkDbglNYDccZBryxlJl 1RupEW0gyIzR0a3VU7SD2RuxYOrUYVAmBfpC9q+7DYCYGyxNe+LeOnwwv5AUT/a8 iSvqkWp3c3vIKqxMtkRjgwjy1/Q/AO+EsqHuS12Af7yOrd4YJapZ7lG6Boavvq9O aWnwEMF/bb+mWIK4JKhD6xwtUJKapYmfzdEcMrgxvVSlJpxm73M+HEcPusYvGeQi o9xqT93FiVgoqxpZd8kV0KAGJUWcpR5GqwBl4FSB+1AN68mXqyp8/orCl0WvAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLg2oIXkVV6fJk 9O/Hd5vY0SWRATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQk5a bWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hBU1EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JO Wm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAvNEI4 MzZBMDg1RTQ1NTVFOUYyNjRGNEVGQzc3NzlCRDhEMTI1OTEwMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDyMCQAwQCyMCcMA0EAgACMAcDBQAoBG48MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm+cMA0GCSqGSIb3DQEBCwUAA4IBAQCtVuVp7yLR yLXyU1aQXeZyfpz5oM3AK6PfTGfhc78mOZmpDIbT1XFZTE5gIhlM9BCimLpXzeAe b7JILisQ5ZDK33yj2rE4CHniJZOxueYVoLtacNIiEa/6q4Kdw2M6VsiPVy6LwJor 0zaH7jtuaYphmYIwoReKbUWnW4WnWg0t5QJyyK1NVX9G+vDaf4+S0e/eTqKxkGfW 7/ycEwZbg0jhIaPTlvQyG5lENZGtu72QXQGvCR+uFqsYH796sAiUIcztnqAPTC56 dwyGv2oxEO5j/++0yfZNQovk/GpkaU4jrccZBe/7VycfZbDclOExNiVaeECKFX7n bvZkPMJCtj0q -----END CERTIFICATE-----Generated at Mon Feb 23 00:22:04 2026 by rpki-client