$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer File: D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer (raw, json) Hash identifier: LN66mYWtxFfFMhwkZHlSXwHEx2aYqIWc3eMgCHROB3w= Subject key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F32AEFB60545C202F5380C748D4A5F4BE1B5FD0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft caRepository: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 28 Mar 2026 18:28:37 +0000 Certificate not after: Sat 27 Mar 2027 18:33:37 +0000 Subordinate resources: AS: 264275 IP: 45.174.152.0/22 IP: 138.121.24.0/22 IP: 168.232.188.0/22 IP: 181.233.56.0/22 IP: 2804:2558::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 14:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:32:ae:fb:60:54:5c:20:2f:53:80:c7:48:d4:a5:f4:be:1b:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 28 18:28:37 2026 GMT Not After : Mar 27 18:33:37 2027 GMT Subject: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:09:65:39:06:cc:d5:8a:23:20:d9:70:7c:65: 4f:2f:ca:ad:a4:6e:f0:8e:e4:06:4d:e9:93:f5:b6: 57:74:3f:6c:6f:af:d3:77:51:a3:7c:2c:f9:32:ad: cc:90:25:1b:ed:3f:72:32:6a:57:23:46:77:4b:25: e5:0d:ba:e2:d9:16:39:5d:c7:ed:92:61:21:18:5f: a4:d4:fa:26:5d:f3:48:51:0a:76:af:af:9b:16:90: 75:42:04:c0:e5:8f:56:c5:f3:3b:ca:f4:7a:9e:41: a5:bb:55:16:76:4b:8f:22:ed:ed:fd:55:a1:8f:ec: bd:c2:64:ed:f8:7e:e3:90:67:8a:b0:cc:d7:0c:36: 35:a5:89:6e:db:ac:dd:d1:af:d5:ed:f7:03:4b:49: ba:98:1d:b5:0c:a6:b0:d5:17:1a:87:ea:63:18:27: a5:66:6a:a9:2e:f2:42:36:df:c0:d2:f2:6f:7e:f4: 21:bd:d5:68:57:9c:6d:fa:8e:36:e6:0c:d3:1f:e3: d6:08:db:87:01:03:90:09:7a:a9:b0:4c:b0:4f:da: e6:bb:b9:b6:fe:44:ac:38:40:4a:05:3a:30:4a:2f: 5b:d3:86:2e:65:35:fc:50:d9:8b:44:ce:27:36:1b: 9b:dd:a6:9f:1e:d3:f6:b2:b7:66:60:e8:9a:fc:e8: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.152.0/22 138.121.24.0/22 168.232.188.0/22 181.233.56.0/22 IPv6: 2804:2558::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264275 Signature Algorithm: sha256WithRSAEncryption bd:2d:ed:6c:35:43:12:8f:5f:9f:6f:44:16:29:2e:45:72:0c: 89:41:10:52:d1:08:ef:b8:bf:22:bd:ea:c9:70:e4:2d:5a:4e: 28:c7:10:b5:34:70:ba:8c:69:28:b8:f8:7e:fe:86:07:db:d9: 85:ec:44:ae:b3:25:cf:84:11:6d:cd:2f:b5:d2:2c:bb:77:04: f6:5a:f0:f7:43:14:7d:e5:13:8b:c0:91:87:67:9b:b8:8b:2c: 4a:19:90:7a:5c:43:9d:5d:4c:41:fb:d2:0a:bc:94:3a:b5:07: 70:b1:5d:77:de:1c:c9:28:c5:e2:bf:aa:80:a1:4e:53:cc:dc: 9a:d1:30:97:40:39:f5:fe:18:80:a7:d9:3c:d0:58:6e:f7:bd: 92:e6:8e:37:0a:61:ce:cd:d9:62:49:db:25:80:f1:86:4d:e0: d5:ee:7d:08:b9:58:00:f6:5b:d4:76:d0:72:a4:b5:3f:2b:1d: 3c:87:e0:ff:36:6e:42:b2:8b:01:f9:e1:0d:97:65:b6:5b:31: 80:e1:0f:54:3b:e4:93:1c:f0:4b:a4:9e:06:c5:d4:87:23:16: 04:8a:5e:c7:cf:7a:34:42:d3:63:66:6f:3b:46:8c:7e:c2:ea: 1b:9d:d2:9d:a8:47:cd:d3:98:2e:9c:39:2f:c0:aa:72:8f:e0: a1:94:49:77 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUXzKu+2BUXCAvU4DHSNSl9L4bX9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjgxODI4MzdaFw0yNzAzMjcxODMzMzdaMDMxMTAvBgNV BAMTKEQ5QzRGMTdFOEZFQUE3MTE0MDMyN0ZGODM0RkMwMUU1REQ0MEU3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRCWU5BszViiMg2XB8ZU8vyq2k bvCO5AZN6ZP1tld0P2xvr9N3UaN8LPkyrcyQJRvtP3IyalcjRndLJeUNuuLZFjld x+2SYSEYX6TU+iZd80hRCnavr5sWkHVCBMDlj1bF8zvK9HqeQaW7VRZ2S48i7e39 VaGP7L3CZO34fuOQZ4qwzNcMNjWliW7brN3Rr9Xt9wNLSbqYHbUMprDVFxqH6mMY J6Vmaqku8kI238DS8m9+9CG91WhXnG36jjbmDNMf49YI24cBA5AJeqmwTLBP2ua7 ubb+RKw4QEoFOjBKL1vThi5lNfxQ2YtEzic2G5vdpp8e0/ayt2Zg6Jr86N/fAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZxPF+j+qnEUAy f/g0/AHl3UDnlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjdw VXhBYnpyS2M3Unk3aFhkbWFSRUtETmpkdHNySm5xOTJ1dk53NnMyWEwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI3 cFV4QWJ6cktjN1J5N2hYZG1hUkVLRE5qZHRzckpucTkydXZOdzZzMlhMLzAvRDlD NEYxN0U4RkVBQTcxMTQwMzI3RkY4MzRGQzAxRTVERDQwRTc5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLa6YAwQCinkYAwQCqOi8AwQCtek4MA0EAgACMAcD BQAoBCVYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQIUzANBgkqhkiG9w0BAQsF AAOCAQEAvS3tbDVDEo9fn29EFikuRXIMiUEQUtEI77i/Ir3qyXDkLVpOKMcQtTRw uoxpKLj4fv6GB9vZhexErrMlz4QRbc0vtdIsu3cE9lrw90MUfeUTi8CRh2ebuIss ShmQelxDnV1MQfvSCryUOrUHcLFdd94cySjF4r+qgKFOU8zcmtEwl0A59f4YgKfZ PNBYbve9kuaONwphzs3ZYknbJYDxhk3g1e59CLlYAPZb1HbQcqS1PysdPIfg/zZu QrKLAfnhDZdltlsxgOEPVDvkkxzwS6SeBsXUhyMWBIpex896NELTY2ZvO0aMfsLq G53SnahHzdOYLpw5L8Cqco/goZRJdw== -----END CERTIFICATE-----Generated at Thu Apr 9 12:49:13 2026 by rpki-client