$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer File: A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer (raw, json) Hash identifier: 86bECZW2i3Tu8memItnr8lSKH/5iLq+/x56+SwSst2Y= Subject key identifier: A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A1EBA3601879D76C2AA1FA8FAB3922B58BC06DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.mft caRepository: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Apr 2026 13:02:14 +0000 Certificate not after: Wed 31 Mar 2027 13:07:14 +0000 Subordinate resources: AS: 266163 IP: 186.2.248.0/22 IP: 2804:3ba8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 16:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1e:ba:36:01:87:9d:76:c2:aa:1f:a8:fa:b3:92:2b:58:bc:06:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 1 13:02:14 2026 GMT Not After : Mar 31 13:07:14 2027 GMT Subject: CN=A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:54:fd:44:8d:84:d8:5d:79:50:ea:e0:57: 71:43:02:1c:54:48:2f:00:7d:f5:3c:63:c3:42:88: e2:7b:4d:f3:35:79:9c:82:5a:4d:71:e7:b7:1e:2d: 17:82:84:05:fe:9a:38:62:d2:3c:5d:a0:a0:9d:bc: 8c:0d:6c:17:d7:69:5e:70:a8:2d:68:99:96:7a:97: 39:31:43:51:a4:0f:eb:97:2d:2a:83:7d:3d:70:1d: 58:54:56:89:1c:0c:aa:27:bd:1d:f8:2c:34:dc:2d: 9f:61:ec:c4:e2:1a:cd:5d:c1:54:c0:57:4c:29:cf: 61:2d:57:f2:29:fd:6a:7b:73:4c:7f:43:44:4d:77: 9d:84:f7:76:95:3f:14:df:1a:f0:f7:fd:a4:3c:82: ef:a8:9c:d7:44:c8:76:df:af:e2:25:4e:bf:34:13: e3:b2:78:ed:63:8e:71:23:14:42:ad:1e:27:75:7d: 51:0e:17:0c:19:8c:fd:bd:ef:df:e6:63:16:d1:51: dc:df:71:08:7e:11:ae:46:8c:31:c5:cb:c0:96:b1: 80:e5:e8:67:fa:f3:15:26:1a:94:6d:b8:1d:42:d0: 25:dd:34:95:11:e4:e2:c0:5b:95:5e:71:36:18:8f: 2f:0e:fa:9f:f9:86:82:26:46:1e:3d:0c:9a:9d:e9: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.2.248.0/22 IPv6: 2804:3ba8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266163 Signature Algorithm: sha256WithRSAEncryption 60:12:79:51:02:76:c1:ac:24:52:e8:e8:38:c4:ba:6f:6f:98: f9:45:6b:39:7c:27:bc:0a:2b:a3:42:74:f5:ac:e5:7a:28:f3: de:31:b5:b4:72:58:6e:68:7c:30:41:76:77:ae:1d:90:9a:97: bd:e5:da:2c:eb:e8:37:e6:7f:36:91:ca:92:7b:44:04:36:2e: 45:53:8c:7a:9e:08:5d:3c:db:f8:7d:82:3b:99:88:86:c0:a5: be:e5:6c:cf:36:ac:dd:c5:63:b1:54:a1:5d:b4:76:0a:28:1f: eb:bd:ac:da:c6:e0:85:da:08:8c:1b:40:66:97:4c:bb:ea:55: e9:54:10:01:06:31:d4:00:be:cf:a9:c3:50:02:27:b3:a6:b4: cc:79:95:f6:24:6d:ba:5a:c5:00:ef:dc:70:31:1f:37:a8:24: c9:c5:6d:ca:26:65:81:d2:ad:25:da:18:29:84:85:ec:ca:fb: ae:d5:fa:0a:9c:72:4e:63:19:10:11:72:81:95:d1:2f:2a:eb: 7e:8c:a2:65:ca:21:13:4d:e5:79:97:63:e5:cc:3a:00:8d:47: fc:20:5a:bb:a7:ea:46:d4:3a:77:dd:41:2b:fb:b5:64:ed:28: 60:12:ba:b8:8b:a0:bd:50:24:fe:b5:2a:e6:6c:6e:42:96:83: f1:41:b9:9c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWh66NgGHnXbCqh+o+rOSK1i8BtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDExMzAyMTRaFw0yNzAzMzExMzA3MTRaMDMxMTAvBgNV BAMTKEE0MkJGM0MyOTM4RUE3RkZFOUJFNEM2NTI0QTI5QjA1NjI2QUZFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC051T9RI2E2F15UOrgV3FDAhxU SC8AffU8Y8NCiOJ7TfM1eZyCWk1x57ceLReChAX+mjhi0jxdoKCdvIwNbBfXaV5w qC1omZZ6lzkxQ1GkD+uXLSqDfT1wHVhUVokcDKonvR34LDTcLZ9h7MTiGs1dwVTA V0wpz2EtV/Ip/Wp7c0x/Q0RNd52E93aVPxTfGvD3/aQ8gu+onNdEyHbfr+IlTr80 E+OyeO1jjnEjFEKtHid1fVEOFwwZjP2979/mYxbRUdzfcQh+Ea5GjDHFy8CWsYDl 6Gf68xUmGpRtuB1C0CXdNJUR5OLAW5VecTYYjy8O+p/5hoImRh49DJqd6XFjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkK/PCk46n/+m+ TGUkopsFYmr+NzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUpL UHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1a2IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FK S1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAvQTQy QkYzQzI5MzhFQTdGRkU5QkU0QzY1MjRBMjlCMDU2MjZBRkUzNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCugL4MA0EAgACMAcDBQAoBDuoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPszANBgkqhkiG9w0BAQsFAAOCAQEAYBJ5UQJ2wawkUujo OMS6b2+Y+UVrOXwnvAoro0J09azleijz3jG1tHJYbmh8MEF2d64dkJqXveXaLOvo N+Z/NpHKkntEBDYuRVOMep4IXTzb+H2CO5mIhsClvuVszzas3cVjsVShXbR2Cigf 672s2sbghdoIjBtAZpdMu+pV6VQQAQYx1AC+z6nDUAIns6a0zHmV9iRtulrFAO/c cDEfN6gkycVtyiZlgdKtJdoYKYSF7Mr7rtX6CpxyTmMZEBFygZXRLyrrfoyiZcoh E03leZdj5cw6AI1H/CBau6fqRtQ6d91BK/u1ZO0oYBK6uIugvVAk/rUq5mxuQpaD 8UG5nA== -----END CERTIFICATE-----Generated at Thu Apr 9 16:40:37 2026 by rpki-client