$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer File: DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer (raw, json) Hash identifier: 6iofWa6u2NPf7DG3svpK1Y7/5XFc0VTV89ukzGAMzKA= Subject key identifier: DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 455B4C87BE69A0C6B1D7D53D82E7896E081EF469 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.mft caRepository: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 14:54:01 +0000 Certificate not after: Thu 25 Mar 2027 14:59:01 +0000 Subordinate resources: AS: 268943 IP: 45.176.136.0/22 IP: 45.177.4.0/23 IP: 2804:5cf8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5b:4c:87:be:69:a0:c6:b1:d7:d5:3d:82:e7:89:6e:08:1e:f4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 14:54:01 2026 GMT Not After : Mar 25 14:59:01 2027 GMT Subject: CN=DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:3e:b6:f0:60:df:af:bf:ea:09:ef:04:09: c2:56:a3:78:7f:e4:ba:e5:49:f0:a0:74:2e:69:af: 24:6e:fa:33:09:44:70:fc:db:79:ed:a1:1a:56:e7: bc:b7:2c:fe:c5:17:f2:85:3e:a0:6e:5d:e1:1b:c3: 1a:10:f3:90:8c:1a:c5:95:8f:66:3e:2b:ce:a2:53: ce:60:fb:07:c0:a2:e3:a0:52:d9:f0:3a:84:39:7c: 6f:bc:c0:07:c8:88:da:c2:96:37:da:b3:28:d3:f6: 23:02:d6:62:20:00:f5:2e:c4:f3:10:93:28:90:cc: e6:eb:e9:5f:96:3f:e3:a8:62:c0:58:62:8e:b7:2a: 25:13:82:4f:52:9e:d9:4c:66:b4:6f:76:29:9e:4b: ea:f4:79:e8:75:a6:48:a7:a6:41:8c:59:9d:c4:26: 06:fa:b8:ef:cd:46:8e:d6:08:42:ef:35:b1:0c:be: ab:e7:c9:e2:6d:46:5d:d0:cd:13:d7:56:84:2a:20: 7a:fb:d8:05:cc:84:0d:c8:41:cd:05:a6:da:43:f0: 8b:8f:ec:d1:cb:a9:d1:64:53:f6:3e:65:01:5e:ea: 8f:28:2e:68:e2:fb:36:bf:28:b5:54:d8:c8:67:78: 57:11:8b:aa:78:d9:29:00:ce:c6:1c:9b:13:cb:bc: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.136.0/22 45.177.4.0/23 IPv6: 2804:5cf8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268943 Signature Algorithm: sha256WithRSAEncryption 69:29:69:b7:5d:26:08:19:49:cd:95:ae:14:bf:20:c5:73:df: 6b:9d:f4:74:7c:14:87:71:15:ea:b9:1e:41:84:21:ed:f2:e4: 02:cd:4b:fa:29:c9:5b:0b:0f:e6:94:e2:7e:cd:1f:d4:2d:50: 17:3d:8a:8f:c3:55:2e:97:f0:8f:cd:02:1b:0a:e3:bb:e9:cc: 70:0a:d2:7e:26:02:65:c6:d0:46:ab:86:cc:95:f0:2a:df:ca: da:8c:4e:2d:dd:54:e1:6d:c0:8c:8b:a1:88:c7:5d:f0:b1:dc: af:ab:9c:db:78:88:9f:b7:38:4b:c5:29:a6:04:c1:19:ed:86: 62:cb:c8:fa:57:52:22:53:43:a5:82:5e:8f:26:c4:21:0e:21: 18:20:51:eb:46:62:7c:24:09:5f:de:f7:40:04:d6:5b:cc:9e: 37:73:38:40:c6:40:f7:cb:d4:4c:6b:46:ef:76:a2:87:47:c5: 80:e7:bc:5c:f3:fe:44:35:c7:17:06:51:fc:54:01:30:65:cf: 25:7d:76:56:1e:d1:2b:1c:b8:2e:fb:53:4b:5a:0c:c9:25:a6: 12:80:b2:10:a4:47:ad:70:b8:cd:15:8a:e0:d4:a3:01:19:7c: d7:84:fb:35:79:7b:4e:31:7d:a2:ba:bc:0d:de:21:00:e9:a2: c8:f6:38:55 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIURVtMh75poMax19U9gueJbgge9GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjYxNDU0MDFaFw0yNzAzMjUxNDU5MDFaMDMxMTAvBgNV BAMTKERBOEU0M0EwMEM5MkRFNUJBMjIwMzI2MEEzN0JFMzhFMTlGMUMyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsz628GDfr7/qCe8ECcJWo3h/ 5LrlSfCgdC5pryRu+jMJRHD823ntoRpW57y3LP7FF/KFPqBuXeEbwxoQ85CMGsWV j2Y+K86iU85g+wfAouOgUtnwOoQ5fG+8wAfIiNrCljfasyjT9iMC1mIgAPUuxPMQ kyiQzObr6V+WP+OoYsBYYo63KiUTgk9SntlMZrRvdimeS+r0eeh1pkinpkGMWZ3E Jgb6uO/NRo7WCELvNbEMvqvnyeJtRl3QzRPXVoQqIHr72AXMhA3IQc0FptpD8IuP 7NHLqdFkU/Y+ZQFe6o8oLmji+za/KLVU2MhneFcRi6p42SkAzsYcmxPLvFh7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTajkOgDJLeW6Ig MmCje+OOGfHCojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjY1 aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZzQzQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY2 NWhrdldSbVBBZ1U2RmlNbkwxd2kxMkZrbWVDa2V5UUFkQzNEb1JGc0M0LzAvREE4 RTQzQTAwQzkyREU1QkEyMjAzMjYwQTM3QkUzOEUxOUYxQzJBMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbCIAwQBLbEEMA0EAgACMAcDBQAoBFz4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQajzANBgkqhkiG9w0BAQsFAAOCAQEAaSlpt10m CBlJzZWuFL8gxXPfa530dHwUh3EV6rkeQYQh7fLkAs1L+inJWwsP5pTifs0f1C1Q Fz2Kj8NVLpfwj80CGwrju+nMcArSfiYCZcbQRquGzJXwKt/K2oxOLd1U4W3AjIuh iMdd8LHcr6uc23iIn7c4S8UppgTBGe2GYsvI+ldSIlNDpYJejybEIQ4hGCBR60Zi fCQJX973QATWW8yeN3M4QMZA98vUTGtG73aih0fFgOe8XPP+RDXHFwZR/FQBMGXP JX12Vh7RKxy4LvtTS1oMySWmEoCyEKRHrXC4zRWK4NSjARl814T7NXl7TjF9orq8 Dd4hAOmiyPY4VQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:40:56 2026 by rpki-client