$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer File: 5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer (raw, json) Hash identifier: ktb6qyVtWGYpoJ87GIuBUYM6g+JZstq/FveW7ZTxTag= Subject key identifier: 5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2309F56A94B2C9D3F39A0BB3EC4C1DB2D9018F77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft caRepository: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 30 Mar 2026 14:56:12 +0000 Certificate not after: Mon 29 Mar 2027 15:01:12 +0000 Subordinate resources: AS: 52818 IP: 177.72.148.0/22 IP: 191.240.196.0/22 IP: 2804:111c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 14:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:09:f5:6a:94:b2:c9:d3:f3:9a:0b:b3:ec:4c:1d:b2:d9:01:8f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 30 14:56:12 2026 GMT Not After : Mar 29 15:01:12 2027 GMT Subject: CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:75:90:ac:83:03:0d:0a:b8:8b:e7:1b:e1: 97:e6:8e:80:37:39:bf:4f:20:f0:8b:1f:e2:6c:71: ef:52:82:81:98:4d:fb:80:96:0e:fd:c3:23:00:9c: 84:5a:5d:ba:a2:4d:db:9b:a6:0a:5f:92:01:83:5c: 7e:81:0d:05:1a:da:41:67:83:08:48:2f:37:95:3a: 04:9c:ac:d2:e9:98:7c:1b:8e:5f:c9:08:0b:45:48: 56:de:5a:69:3d:55:9e:c1:ee:af:e0:b2:54:41:8c: 5d:85:9c:c1:4a:f9:ca:4a:5f:d4:60:5e:57:0b:23: dc:ce:9e:6a:a7:5b:f3:8b:55:33:f7:8d:4f:53:8e: da:bb:9b:64:89:d3:62:42:3d:95:59:8a:81:3c:bf: c8:27:2b:23:19:74:4c:7c:96:2b:32:89:59:3e:f4: 8f:e7:e5:17:6f:0e:69:9c:25:02:a4:b0:bc:1e:44: 54:9e:fe:0b:bf:25:06:f8:d0:5b:da:cb:27:f0:0e: 5b:13:3c:80:7c:bf:22:cc:f8:32:2c:d4:37:19:cb: 8c:ed:93:5c:93:d1:1b:7b:1f:15:00:87:8f:1c:f3: 99:5a:d1:d1:0e:63:bf:33:94:8c:b2:ff:4c:53:39: 20:6b:67:19:32:25:1e:1a:68:14:e9:1f:a2:d2:45: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.72.148.0/22 191.240.196.0/22 IPv6: 2804:111c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52818 Signature Algorithm: sha256WithRSAEncryption d4:f3:88:09:e3:c6:48:32:d0:95:04:78:0e:02:e4:c1:4d:2a: 74:3d:db:a8:5d:e6:2d:22:70:6f:91:82:d4:dd:c2:85:c1:db: cf:fc:e4:1f:46:10:c3:c2:86:ef:b9:8b:4b:0b:da:f6:37:fe: 12:1b:26:aa:7a:bc:af:c8:90:9e:a1:cd:0e:68:ab:e2:3d:b1: 73:fa:da:f3:07:e9:60:03:1c:0e:40:4e:4e:15:dc:2e:18:d6: d9:47:77:ae:5e:5e:90:f5:67:e1:31:3a:0c:bf:03:1c:f4:c2: ac:79:c9:a6:49:cb:3a:66:5f:99:0c:4d:ab:1d:81:ed:88:5c: e1:a5:e0:a2:d0:52:ea:1b:a6:a5:c8:51:47:8d:72:28:c5:0e: 0e:b4:d2:f8:d0:fe:99:2e:39:c1:d8:ab:92:28:64:cf:de:81: 26:a6:3b:22:52:40:11:a6:d8:20:bd:ed:05:3d:88:88:63:f0: eb:d8:91:f7:91:ca:78:52:be:63:db:7f:b7:f7:00:62:28:3b: 35:71:de:1d:12:6b:f1:b3:47:ad:0a:44:2a:28:1a:e6:97:72: ea:bd:2b:48:bf:05:2a:93:12:d5:c9:ce:50:58:c9:c8:b0:d1: 43:83:6c:66:c4:f1:8c:da:70:14:86:c9:bb:87:b2:2d:8c:64: ab:b1:03:29 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIwn1apSyydPzmguz7EwdstkBj3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMzAxNDU2MTJaFw0yNzAzMjkxNTAxMTJaMDMxMTAvBgNV BAMTKDVBRjczRDVDQkQ1RUNENTRFNUI0OTQ3NDMwREFGMzU1REJBNUM0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JnWQrIMDDQq4i+cb4ZfmjoA3 Ob9PIPCLH+Jsce9SgoGYTfuAlg79wyMAnIRaXbqiTdubpgpfkgGDXH6BDQUa2kFn gwhILzeVOgScrNLpmHwbjl/JCAtFSFbeWmk9VZ7B7q/gslRBjF2FnMFK+cpKX9Rg XlcLI9zOnmqnW/OLVTP3jU9Tjtq7m2SJ02JCPZVZioE8v8gnKyMZdEx8lisyiVk+ 9I/n5RdvDmmcJQKksLweRFSe/gu/JQb40FvayyfwDlsTPIB8vyLM+DIs1DcZy4zt k1yT0Rt7HxUAh48c85la0dEOY78zlIyy/0xTOSBrZxkyJR4aaBTpH6LSRSuVAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa9z1cvV7NVOW0 lHQw2vNV26XEMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGhZ TTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ho WU01ajdZOFg3WGFvUTZzUG1yTHRGU1RaWWlaRXBQZHN6OUV6ZmNhMk1yLzAvNUFG NzNENUNCRDVFQ0Q1NEU1QjQ5NDc0MzBEQUYzNTVEQkE1QzQzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUiUAwQCv/DEMA0EAgACMAcDBQAoBBEcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOUjANBgkqhkiG9w0BAQsFAAOCAQEA1POICePG SDLQlQR4DgLkwU0qdD3bqF3mLSJwb5GC1N3ChcHbz/zkH0YQw8KG77mLSwva9jf+ Ehsmqnq8r8iQnqHNDmir4j2xc/ra8wfpYAMcDkBOThXcLhjW2Ud3rl5ekPVn4TE6 DL8DHPTCrHnJpknLOmZfmQxNqx2B7Yhc4aXgotBS6humpchRR41yKMUODrTS+ND+ mS45wdirkihkz96BJqY7IlJAEabYIL3tBT2IiGPw69iR95HKeFK+Y9t/t/cAYig7 NXHeHRJr8bNHrQpEKiga5pdy6r0rSL8FKpMS1cnOUFjJyLDRQ4NsZsTxjNpwFIbJ u4eyLYxkq7EDKQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:40:44 2026 by rpki-client