$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer File: 5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer (raw, json) Hash identifier: VnGC0BuV2kaQ9owPGBxSqSxYQ/FnCm3XSpmFC4yZAoM= Subject key identifier: 5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 433498DC864FB6D2D151098760C36FEC0EA91C8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft caRepository: rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 03 Jan 2026 19:20:41 +0000 Certificate not after: Sat 02 Jan 2027 19:25:41 +0000 Subordinate resources: AS: 274680 IP: 2804:91fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 23:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:34:98:dc:86:4f:b6:d2:d1:51:09:87:60:c3:6f:ec:0e:a9:1c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 3 19:20:41 2026 GMT Not After : Jan 2 19:25:41 2027 GMT Subject: CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:8c:e2:7b:1e:57:47:1b:71:7f:f7:3a:9c: 56:b2:a8:f9:6a:29:0f:39:9a:4d:8c:00:d4:a2:82: 20:1b:49:9c:6b:f3:c6:2f:dd:b8:d3:b7:fc:a5:b4: 59:e2:00:2e:c9:10:46:a4:f7:cc:58:ca:21:b2:9b: 7c:96:a8:63:5f:2c:2b:32:79:e3:74:c0:36:f2:6a: 85:42:a0:8f:77:ec:4e:f6:99:3d:60:b9:1b:b8:16: c3:96:25:af:3a:ca:e6:97:da:f2:3c:e3:bd:ea:ae: d4:b3:81:27:09:38:9e:aa:b8:82:8c:a3:aa:1f:43: 20:e9:36:f5:1f:21:c7:fc:c7:ca:c7:43:69:86:00: 55:51:d4:5d:fd:6f:03:bd:24:4d:62:c1:06:e6:20: 75:c6:c8:5f:33:e7:e1:d4:b2:8f:01:90:b5:c1:06: 15:aa:81:87:5d:74:f6:54:b9:2a:81:20:b6:9f:3a: 46:09:2e:4e:24:59:1f:00:e4:a5:dc:67:d4:a9:59: d7:23:25:32:b4:9c:91:3a:86:7a:73:0f:b1:c3:8b: 08:db:34:25:c2:3f:29:b8:68:89:f8:a2:23:6a:00: a6:65:bb:e6:08:4d:71:04:5d:78:66:16:03:d9:08: bf:8c:3f:14:ef:a8:1d:22:5a:50:f3:36:00:fc:48: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:91fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274680 Signature Algorithm: sha256WithRSAEncryption ab:cf:48:73:c1:42:8d:a4:a9:af:77:76:6a:46:f0:2c:0d:eb: 39:99:20:f7:89:c6:0e:67:be:21:8a:7c:56:87:f8:8a:21:aa: 7c:e1:e2:58:41:e7:40:b6:72:e0:17:cb:ac:6d:5c:46:32:b2: cc:3a:a5:4d:17:5d:35:50:e6:15:75:20:b0:e7:7b:51:99:bb: 46:96:91:b4:6e:ce:09:76:51:91:e0:cf:aa:67:53:08:80:f7: b3:00:be:a6:78:c2:b4:58:c6:d9:de:39:2d:88:21:0a:4e:29: a5:d1:11:f9:c8:3c:ba:90:76:24:13:ee:0e:80:28:b4:fb:a8: 9a:71:4d:36:fb:3c:e6:5f:f3:66:45:57:d7:b1:11:5a:70:c3: e1:59:6f:25:c7:51:7c:9b:ba:21:29:8e:12:f6:cb:71:99:da: 43:34:5d:08:38:7b:5b:25:4a:eb:f3:1b:58:eb:6a:76:d4:36: 01:f0:53:20:0a:09:e2:e6:bf:d1:18:46:52:79:80:3c:36:ad: 90:a8:fd:4f:a7:5e:a9:e6:09:73:cd:22:6b:fd:eb:15:72:0d: 45:6a:82:89:63:4e:78:62:95:c7:af:31:0d:f1:69:fe:66:12: 71:5b:00:c1:58:1d:4e:6a:ab:69:22:0b:3f:92:98:40:69:d7: 24:46:cc:ac -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUQzSY3IZPttLRUQmHYMNv7A6pHI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDMxOTIwNDFaFw0yNzAxMDIxOTI1NDFaMDMxMTAvBgNV BAMTKDVEQzQwMkJBMzk3RTdFRjE1MDY5QjNBNEY3QTY2N0YwMkIxRkVBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdoziex5XRxtxf/c6nFayqPlq KQ85mk2MANSigiAbSZxr88Yv3bjTt/yltFniAC7JEEak98xYyiGym3yWqGNfLCsy eeN0wDbyaoVCoI937E72mT1guRu4FsOWJa86yuaX2vI8473qrtSzgScJOJ6quIKM o6ofQyDpNvUfIcf8x8rHQ2mGAFVR1F39bwO9JE1iwQbmIHXGyF8z5+HUso8BkLXB BhWqgYdddPZUuSqBILafOkYJLk4kWR8A5KXcZ9SpWdcjJTK0nJE6hnpzD7HDiwjb NCXCPym4aIn4oiNqAKZlu+YITXEEXXhmFgPZCL+MPxTvqB0iWlDzNgD8SIKdAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdxAK6OX5+8VBp s6T3pmfwKx/q5DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWR3 YTlGQmNhRkY1UFhjVTljSlc2MzZWUURON1hvb0NOSEFIcDQ4cjVXOW4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vk d2E5RkJjYUZGNVBYY1U5Y0pXNjM2VlFETjdYb29DTkhBSHA0OHI1VzluLzAvNURD NDAyQkEzOTdFN0VGMTUwNjlCM0E0RjdBNjY3RjAyQjFGRUFFNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASR/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MPgwDQYJKoZIhvcNAQELBQADggEBAKvPSHPBQo2kqa93dmpG8CwN6zmZIPeJxg5n viGKfFaH+Iohqnzh4lhB50C2cuAXy6xtXEYyssw6pU0XXTVQ5hV1ILDne1GZu0aW kbRuzgl2UZHgz6pnUwiA97MAvqZ4wrRYxtneOS2IIQpOKaXREfnIPLqQdiQT7g6A KLT7qJpxTTb7POZf82ZFV9exEVpww+FZbyXHUXybuiEpjhL2y3GZ2kM0XQg4e1sl SuvzG1jranbUNgHwUyAKCeLmv9EYRlJ5gDw2rZCo/U+nXqnmCXPNImv96xVyDUVq goljTnhilcevMQ3xaf5mEnFbAMFYHU5qq2kiCz+SmEBp1yRGzKw= -----END CERTIFICATE-----Generated at Mon Feb 23 00:23:44 2026 by rpki-client