$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7421AA9C848BD1993F6F020940DA6CEAC288AED5.cer File: 7421AA9C848BD1993F6F020940DA6CEAC288AED5.cer (raw, json) Hash identifier: S7Lj5wlEg7TZ2xqTRp1AGsDPv4eOgOBvxrubLX8S3JI= Subject key identifier: 74:21:AA:9C:84:8B:D1:99:3F:6F:02:09:40:DA:6C:EA:C2:88:AE:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38A43D548605D960D67DD71E89DF0A368AE2ABD8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/7421AA9C848BD1993F6F020940DA6CEAC288AED5.mft caRepository: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 13:03:06 +0000 Certificate not after: Thu 25 Mar 2027 13:08:06 +0000 Subordinate resources: AS: 268216 IP: 45.235.248.0/22 IP: 2804:4dbc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a4:3d:54:86:05:d9:60:d6:7d:d7:1e:89:df:0a:36:8a:e2:ab:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 13:03:06 2026 GMT Not After : Mar 25 13:08:06 2027 GMT Subject: CN=7421AA9C848BD1993F6F020940DA6CEAC288AED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:73:3f:2a:e7:b9:d4:37:b4:d1:18:23:65: 8c:da:3b:b4:8b:e2:66:e7:41:18:7f:4d:28:35:17: 11:8d:2d:0b:00:b7:7c:a8:98:ad:49:f5:75:31:70: 62:3d:46:8d:85:c4:6a:7e:ad:4c:55:24:81:ca:2f: 65:37:75:f7:12:ca:e1:7d:da:73:64:63:b3:cb:ce: 41:1b:03:18:47:40:95:71:af:59:a0:c4:8d:7b:71: f9:03:5e:cf:57:4d:50:69:17:88:34:3d:88:cc:dd: 8f:e1:e4:0e:bd:b9:16:4c:de:8f:55:e4:70:0e:78: 15:38:1b:4b:ce:86:23:f0:f7:d9:ae:2a:0a:ff:8c: 28:c6:1d:32:39:31:da:34:78:d1:36:a6:f6:6a:d0: 26:9d:21:35:aa:cd:77:1b:a6:15:21:73:00:96:4a: 9d:2b:df:e3:30:b4:75:51:56:2c:ad:8c:b1:b5:9d: 76:64:d8:ec:a5:a0:1d:d4:bb:94:bf:74:2d:d7:fd: 67:84:1b:36:f1:87:54:6c:f2:b2:44:4b:bf:28:48: 8f:83:a1:01:1d:ef:a1:15:21:61:88:de:59:1d:93: 2e:b0:d9:5b:15:4b:aa:cb:09:be:d9:7a:2f:bd:05: cb:ba:dd:9c:46:fa:64:1a:9f:a7:11:48:80:7e:7f: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:21:AA:9C:84:8B:D1:99:3F:6F:02:09:40:DA:6C:EA:C2:88:AE:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/7421AA9C848BD1993F6F020940DA6CEAC288AED5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.248.0/22 IPv6: 2804:4dbc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268216 Signature Algorithm: sha256WithRSAEncryption 82:af:0e:dd:e7:81:36:1b:46:e2:38:3f:cc:79:7d:40:77:09: d3:28:e9:30:ab:96:97:36:21:ad:6c:39:14:3b:ea:b4:5e:4e: 95:3b:c1:7f:d7:47:15:4b:69:8a:fd:4b:e1:92:0d:28:39:d5: b1:60:15:38:5e:c0:d6:45:14:c0:d4:c0:22:b5:ee:25:74:86: fc:f4:9b:bb:a8:d3:16:91:13:63:55:e3:af:60:d4:f1:36:c6: 47:0f:9e:c0:de:f9:79:01:20:14:24:5c:62:70:b4:c7:61:cb: af:c8:84:f8:50:17:87:61:a8:4e:22:84:33:ab:76:13:77:be: 09:13:df:0d:48:ac:6a:b8:13:97:5e:c4:03:2d:ba:8c:81:fa: 72:d1:52:e1:c7:a0:37:21:ab:ab:42:5d:5c:33:5e:df:75:25: be:b1:be:32:db:f0:8c:16:20:14:2f:f8:06:61:df:9a:a3:b5: 99:1f:21:85:d7:e4:53:98:72:88:8d:13:78:76:9b:30:ed:fb: f3:3f:65:a2:3d:66:a5:53:f5:1f:1f:09:ba:a0:b8:df:37:1d: 41:f7:08:cd:7f:b8:d0:43:d3:5f:e6:17:93:81:51:22:58:28: 28:c7:2f:4b:1c:ae:2c:e9:c8:88:5c:eb:b6:42:1f:18:a0:0f: d3:eb:a5:35 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOKQ9VIYF2WDWfdceid8KNoriq9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjYxMzAzMDZaFw0yNzAzMjUxMzA4MDZaMDMxMTAvBgNV BAMTKDc0MjFBQTlDODQ4QkQxOTkzRjZGMDIwOTQwREE2Q0VBQzI4OEFFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEnM/Kue51De00RgjZYzaO7SL 4mbnQRh/TSg1FxGNLQsAt3yomK1J9XUxcGI9Ro2FxGp+rUxVJIHKL2U3dfcSyuF9 2nNkY7PLzkEbAxhHQJVxr1mgxI17cfkDXs9XTVBpF4g0PYjM3Y/h5A69uRZM3o9V 5HAOeBU4G0vOhiPw99muKgr/jCjGHTI5Mdo0eNE2pvZq0CadITWqzXcbphUhcwCW Sp0r3+MwtHVRViytjLG1nXZk2OyloB3Uu5S/dC3X/WeEGzbxh1Rs8rJES78oSI+D oQEd76EVIWGI3lkdky6w2VsVS6rLCb7Zei+9Bcu63ZxG+mQan6cRSIB+f6bpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0IaqchIvRmT9v AglA2mzqwoiu1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmFy bjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJDaXkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZh cm41UmdDR1lYM0hBMVZUNmN0bTYxNmpoNDc2cGdpcmduTlM0bVJyQ2l5LzAvNzQy MUFBOUM4NDhCRDE5OTNGNkYwMjA5NDBEQTZDRUFDMjg4QUVENS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLev4MA0EAgACMAcDBQAoBE28MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXuDANBgkqhkiG9w0BAQsFAAOCAQEAgq8O3eeBNhtG4jg/ zHl9QHcJ0yjpMKuWlzYhrWw5FDvqtF5OlTvBf9dHFUtpiv1L4ZINKDnVsWAVOF7A 1kUUwNTAIrXuJXSG/PSbu6jTFpETY1Xjr2DU8TbGRw+ewN75eQEgFCRcYnC0x2HL r8iE+FAXh2GoTiKEM6t2E3e+CRPfDUisargTl17EAy26jIH6ctFS4cegNyGrq0Jd XDNe33UlvrG+MtvwjBYgFC/4BmHfmqO1mR8hhdfkU5hyiI0TeHabMO378z9loj1m pVP1Hx8JuqC43zcdQfcIzX+40EPTX+YXk4FRIlgoKMcvSxyuLOnIiFzrtkIfGKAP 0+ulNQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:40:58 2026 by rpki-client