$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.cer File: 6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.cer (raw, json) Hash identifier: j+bc8ELqReHBsKCMbGurEq+90VP5rqr17bo8q205B9k= Subject key identifier: 6C:FF:DE:AA:D3:FF:B1:27:F9:41:EE:4A:91:42:3E:83:4E:A9:EE:E4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29F278AE403476854FA61506D89AEF31C6657394 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.mft caRepository: rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 17:43:01 +0000 Certificate not after: Fri 29 Jan 2027 17:48:01 +0000 Subordinate resources: AS: 267279 IP: 45.232.196.0/22 IP: 2804:4b08::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 22:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f2:78:ae:40:34:76:85:4f:a6:15:06:d8:9a:ef:31:c6:65:73:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 17:43:01 2026 GMT Not After : Jan 29 17:48:01 2027 GMT Subject: CN=6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:09:3c:56:4e:1c:31:4c:7a:32:ad:e8:47: ba:10:58:f0:04:5a:a1:91:19:6f:8d:88:bf:90:88: ab:8a:c9:e3:87:b6:64:88:98:07:21:26:37:65:29: 6c:02:5a:a0:1f:29:33:15:60:64:66:7f:c4:b6:2c: d4:6d:62:c0:5e:86:2c:85:36:ab:57:9b:98:e1:21: bd:b6:36:2c:de:3a:ba:2e:b0:c2:60:bf:b6:74:36: a7:aa:ba:1b:a7:8a:3c:82:4f:28:64:4c:48:b8:40: c6:3f:83:8a:61:cd:00:02:95:1a:dc:7d:af:b7:b5: 68:76:2e:0b:14:75:41:31:0c:6f:4f:92:c6:56:c3: 6a:82:69:47:03:32:d8:af:a8:a9:af:db:0e:7a:a0: c2:35:d9:36:22:fa:39:10:91:8f:cf:38:d1:2b:9f: 2b:55:e4:9d:a9:fb:35:b7:34:ce:f7:b9:fa:7a:57: 04:b3:6a:8b:7f:81:16:ce:fb:49:09:57:67:61:5a: 4a:dc:b9:5d:ed:52:48:8e:70:c7:6b:86:0d:de:8d: 37:1a:47:2a:1a:a1:c8:6a:46:95:c5:0b:98:52:45: b3:31:bb:cf:d5:f3:09:d5:b5:18:f4:a7:fa:a7:2e: 1d:c8:41:25:fe:26:cc:5c:2e:b9:e4:78:0a:f9:b1: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:FF:DE:AA:D3:FF:B1:27:F9:41:EE:4A:91:42:3E:83:4E:A9:EE:E4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.196.0/22 IPv6: 2804:4b08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267279 Signature Algorithm: sha256WithRSAEncryption 33:aa:d3:ff:40:8d:bb:87:ff:74:c6:84:82:78:42:d6:c9:c2: 0a:47:8a:6c:82:a0:31:ca:3e:ab:0d:43:d5:61:b0:a4:80:4b: 97:84:d5:9b:7e:39:36:e6:0e:c0:45:7a:b9:90:76:07:d1:be: 07:37:65:43:64:7c:a3:5b:16:cb:dd:b1:7f:9d:ca:4f:60:63: 99:7c:a4:96:59:28:59:e7:df:cd:f4:6b:2b:3d:b8:47:ca:f4: b6:03:9a:1f:c7:9b:b6:bc:7d:31:a7:45:2e:ae:4e:85:3f:7f: dc:ec:c3:f9:da:98:1a:32:10:68:24:56:d5:f7:3a:6f:70:a3: 90:df:14:8c:d2:5b:1d:da:1f:33:f5:36:07:c0:c6:68:45:a7: f7:18:80:a8:30:83:cf:fa:ce:ee:39:1f:c5:01:78:35:e1:19: c2:1a:c8:31:92:61:5a:1e:d4:29:ee:04:68:75:b5:de:b7:21: 59:6f:95:85:9d:56:59:e2:8b:8c:35:19:a4:e7:49:fd:4c:d0: 26:b3:96:6f:21:3d:0c:50:4b:7f:62:80:1b:05:8b:ba:d7:a5: 40:f4:42:f2:d7:be:81:14:9c:55:6d:c6:36:fd:ae:99:74:23: 35:0b:56:3c:61:5b:c6:0c:c4:83:7f:a9:70:ec:49:a2:a2:e1: 0e:4a:28:55 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKfJ4rkA0doVPphUG2JrvMcZlc5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMzAxNzQzMDFaFw0yNzAxMjkxNzQ4MDFaMDMxMTAvBgNV BAMTKDZDRkZERUFBRDNGRkIxMjdGOTQxRUU0QTkxNDIzRTgzNEVBOUVFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIAk8Vk4cMUx6Mq3oR7oQWPAE WqGRGW+NiL+QiKuKyeOHtmSImAchJjdlKWwCWqAfKTMVYGRmf8S2LNRtYsBehiyF NqtXm5jhIb22NizeOrousMJgv7Z0NqequhunijyCTyhkTEi4QMY/g4phzQAClRrc fa+3tWh2LgsUdUExDG9PksZWw2qCaUcDMtivqKmv2w56oMI12TYi+jkQkY/PONEr nytV5J2p+zW3NM73ufp6VwSzaot/gRbO+0kJV2dhWkrcuV3tUkiOcMdrhg3ejTca RyoaochqRpXFC5hSRbMxu8/V8wnVtRj0p/qnLh3IQSX+JsxcLrnkeAr5saR3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRs/96q0/+xJ/lB 7kqRQj6DTqnu5DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Zv RkZ2YmRnQldOWHVEcjFvN05kSjZlTmNvYUJUaGI0cXpWUDdiMjlqZUYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N2 b0ZGdmJkZ0JXTlh1RHIxbzdOZEo2ZU5jb2FCVGhiNHF6VlA3YjI5amVGLzAvNkNG RkRFQUFEM0ZGQjEyN0Y5NDFFRTRBOTE0MjNFODM0RUE5RUVFNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLejEMA0EAgACMAcDBQAoBEsIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUDzANBgkqhkiG9w0BAQsFAAOCAQEAM6rT/0CNu4f/dMaE gnhC1snCCkeKbIKgMco+qw1D1WGwpIBLl4TVm345NuYOwEV6uZB2B9G+BzdlQ2R8 o1sWy92xf53KT2BjmXykllkoWeffzfRrKz24R8r0tgOaH8ebtrx9MadFLq5OhT9/ 3OzD+dqYGjIQaCRW1fc6b3CjkN8UjNJbHdofM/U2B8DGaEWn9xiAqDCDz/rO7jkf xQF4NeEZwhrIMZJhWh7UKe4EaHW13rchWW+VhZ1WWeKLjDUZpOdJ/UzQJrOWbyE9 DFBLf2KAGwWLutelQPRC8te+gRScVW3GNv2umXQjNQtWPGFbxgzEg3+pcOxJoqLh DkooVQ== -----END CERTIFICATE-----Generated at Mon Feb 23 00:21:55 2026 by rpki-client