$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer File: 0D43F36140A4C38AD745FB2C264948998A60F421.cer (raw, json) Hash identifier: J1CNfxMP7mNj/Vdafx7NeWtBnAaB6tiTndbqWU2Hwbg= Subject key identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BA45F3F041D41FC37C2D66009DC42CE42A428DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft caRepository: rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Mar 2026 05:18:11 +0000 Certificate not after: Mon 01 Mar 2027 05:23:11 +0000 Subordinate resources: AS: 271209 IP: 177.223.140.0/22 IP: 2804:77f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 16:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a4:5f:3f:04:1d:41:fc:37:c2:d6:60:09:dc:42:ce:42:a4:28:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 2 05:18:11 2026 GMT Not After : Mar 1 05:23:11 2027 GMT Subject: CN=0D43F36140A4C38AD745FB2C264948998A60F421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:8a:2f:f4:9a:c5:4f:fa:cc:b6:9a:c1:5a: 58:27:b2:ec:d4:85:c5:9d:d8:4b:51:08:a0:e7:90: 06:c4:6c:96:54:ce:40:bf:5e:72:ec:6c:8b:1b:0b: f2:57:c8:06:b8:54:5a:12:2a:b2:ef:31:21:7e:7d: 6e:54:3f:e2:ca:53:28:d3:86:05:ad:cb:fe:af:82: 41:81:eb:ae:9f:3e:86:fa:75:4c:f7:77:4c:55:28: c5:dd:91:28:e3:11:56:d2:ce:77:da:15:33:12:b5: 79:9f:d9:b0:0c:29:83:09:8e:26:31:ce:4b:d1:42: 66:44:97:90:39:62:45:73:92:78:d6:ca:85:b2:18: e0:18:54:5a:d5:c8:30:9d:62:83:96:0a:04:a9:1d: 45:46:96:e5:55:d2:3f:ec:aa:02:7d:82:b8:4c:fc: 70:1f:43:6c:8f:5c:82:51:d4:9c:1b:ce:b8:62:f3: 54:3f:d2:01:5c:b1:d3:9f:c2:25:c1:74:ed:45:0d: 34:ed:c5:42:a1:b0:97:b2:2e:51:a9:cb:13:96:05: fd:ee:59:c4:9a:4e:fb:42:08:d3:7a:a6:85:57:25: ca:45:d7:ff:e4:56:98:67:fb:c6:75:61:1a:b6:cc: e0:22:c8:34:b4:12:22:d4:24:d1:30:8b:56:5a:7e: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.223.140.0/22 IPv6: 2804:77f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271209 Signature Algorithm: sha256WithRSAEncryption 70:3e:8e:c1:0a:85:6b:22:16:6b:ce:61:28:a3:6e:22:25:54: 30:99:a9:e6:de:e9:1b:ec:1f:9b:43:ba:50:c0:a7:bd:0d:8a: 1b:f4:ec:10:e7:42:d1:ce:50:5c:85:b7:59:1f:bb:8b:61:fd: 7f:57:6c:54:95:72:a5:f9:54:8c:15:f5:fe:92:44:08:4f:70: 39:59:3f:b2:20:f7:15:29:42:be:40:91:ab:fa:91:03:37:d5: b2:6f:3a:3b:72:d2:1b:d1:0b:69:a5:22:f9:f6:72:13:4e:90: fe:8b:53:7c:0b:9c:bf:45:e0:54:81:4e:0e:09:ea:64:1a:31: 7b:3b:53:aa:06:0a:1f:e4:90:94:a5:4d:72:e8:c1:f0:69:00: d0:47:03:80:ff:f5:c9:ce:88:a1:5a:c0:0d:7f:99:83:39:37: 10:a7:ff:b4:00:92:ab:fe:f6:87:0d:34:17:75:2c:7a:2d:2b: 0a:8c:63:57:e2:74:03:d5:bd:42:5b:3c:c4:86:41:65:29:31: 9b:d8:1b:d5:2e:9f:e1:fa:d3:1d:64:5b:db:ca:f0:72:73:09: f0:23:ba:a9:f0:9b:fc:d2:63:45:9e:8f:6e:8d:5b:c2:82:78: 3e:d9:c3:2d:f5:b4:1d:49:de:0f:6e:25:98:f6:c8:3c:99:68: e6:ff:c3:e0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG6RfPwQdQfw3wtZgCdxCzkKkKN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDIwNTE4MTFaFw0yNzAzMDEwNTIzMTFaMDMxMTAvBgNV BAMTKDBENDNGMzYxNDBBNEMzOEFENzQ1RkIyQzI2NDk0ODk5OEE2MEY0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Xoov9JrFT/rMtprBWlgnsuzU hcWd2EtRCKDnkAbEbJZUzkC/XnLsbIsbC/JXyAa4VFoSKrLvMSF+fW5UP+LKUyjT hgWty/6vgkGB666fPob6dUz3d0xVKMXdkSjjEVbSznfaFTMStXmf2bAMKYMJjiYx zkvRQmZEl5A5YkVzknjWyoWyGOAYVFrVyDCdYoOWCgSpHUVGluVV0j/sqgJ9grhM /HAfQ2yPXIJR1Jwbzrhi81Q/0gFcsdOfwiXBdO1FDTTtxUKhsJeyLlGpyxOWBf3u WcSaTvtCCNN6poVXJcpF1//kVphn+8Z1YRq2zOAiyDS0EiLUJNEwi1Zafto/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNQ/NhQKTDitdF +ywmSUiZimD0ITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3VG eEUzYUtRc1NxUEhMYk11dEZRVTJTd3FMU0pyVFNMZkx3cWtiajNGb0wvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd1 RnhFM2FLUXNTcVBITGJNdXRGUVUyU3dxTFNKclRTTGZMd3FrYmozRm9MLzAvMEQ0 M0YzNjE0MEE0QzM4QUQ3NDVGQjJDMjY0OTQ4OTk4QTYwRjQyMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsd+MMA0EAgACMAcDBQAoBHfwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjaTANBgkqhkiG9w0BAQsFAAOCAQEAcD6OwQqFayIWa85h KKNuIiVUMJmp5t7pG+wfm0O6UMCnvQ2KG/TsEOdC0c5QXIW3WR+7i2H9f1dsVJVy pflUjBX1/pJECE9wOVk/siD3FSlCvkCRq/qRAzfVsm86O3LSG9ELaaUi+fZyE06Q /otTfAucv0XgVIFODgnqZBoxeztTqgYKH+SQlKVNcujB8GkA0EcDgP/1yc6IoVrA DX+Zgzk3EKf/tACSq/72hw00F3Usei0rCoxjV+J0A9W9Qls8xIZBZSkxm9gb1S6f 4frTHWRb28rwcnMJ8CO6qfCb/NJjRZ6Pbo1bwoJ4PtnDLfW0HUneD24lmPbIPJlo 5v/D4A== -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:43 2026 by rpki-client