$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.cer File: 14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.cer (raw, json) Hash identifier: jZiv2wy6PlTXTifxM1VBgZrYPX976YWYDnYMD31uNc4= Subject key identifier: 14:DD:B4:45:EE:01:FB:DD:DE:FE:9D:CF:3A:E3:DC:4E:20:99:44:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 397A434AA99335B58161C6D104A601494E2803E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.mft caRepository: rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 12:23:34 +0000 Certificate not after: Tue 23 Feb 2027 12:28:34 +0000 Subordinate resources: AS: 52862 AS: 266246 IP: 45.6.204.0/22 IP: 45.171.172.0/22 IP: 131.72.140.0/22 IP: 177.107.64.0/20 IP: 177.128.124.0/22 IP: 186.195.224.0/20 IP: 187.111.208.0/20 IP: 200.225.120.0/22 IP: 2804:db0::/32 IP: 2804:1918::/32 IP: 2804:3cfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7a:43:4a:a9:93:35:b5:81:61:c6:d1:04:a6:01:49:4e:28:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 12:23:34 2026 GMT Not After : Feb 23 12:28:34 2027 GMT Subject: CN=14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:02:65:e8:99:93:19:67:f2:d4:b1:d3:6f: 44:c7:d1:a7:c9:5b:9f:bd:36:fd:d7:bb:f1:64:ea: 2c:c6:5f:f0:79:54:c3:d3:26:e5:ba:f3:9d:71:bd: 4a:b6:b8:1b:3f:2b:b0:b4:22:83:5f:9b:01:7e:fa: c5:85:2c:8c:2a:c1:ac:b9:ed:e6:12:e2:37:5f:49: 72:7c:c0:02:3e:f4:f7:db:33:f5:3f:c0:fc:fd:0b: 1c:9f:fe:7a:8f:ea:d2:57:c3:3f:23:78:f6:6f:5f: f7:e1:19:36:8f:26:d9:25:b8:4d:86:8e:81:26:43: 3c:82:8f:5c:7f:73:34:d1:4f:39:b5:fe:76:46:f4: 3e:55:3d:5a:68:66:30:c8:fa:41:e5:f0:06:4b:85: 37:85:18:fc:69:73:33:8d:41:5d:15:01:51:a5:4a: 42:b6:99:1f:14:69:cd:80:09:84:9b:ee:1b:c3:bd: e0:10:9f:11:10:3d:75:fb:2a:c5:e9:29:44:7c:c5: a7:9b:9f:23:88:74:8d:3b:ba:65:b7:5a:51:bf:2a: 7b:c7:e7:d3:b6:fa:4f:cf:6b:a1:7f:c4:e6:24:13: 61:cf:f2:b6:3b:80:c4:01:18:42:b9:60:98:50:8c: 30:0a:9f:7c:66:65:14:0e:8e:9f:f0:61:c1:93:63: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:DD:B4:45:EE:01:FB:DD:DE:FE:9D:CF:3A:E3:DC:4E:20:99:44:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.204.0/22 45.171.172.0/22 131.72.140.0/22 177.107.64.0/20 177.128.124.0/22 186.195.224.0/20 187.111.208.0/20 200.225.120.0/22 IPv6: 2804:db0::/32 2804:1918::/32 2804:3cfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52862 266246 Signature Algorithm: sha256WithRSAEncryption 5d:c0:e6:c1:a4:49:11:50:96:ca:8d:c3:cc:a5:9a:4e:10:94: 13:37:9d:0a:8c:9a:d6:ac:2e:24:e0:69:66:a1:17:4e:d9:09: d7:9e:f4:2d:7b:fc:e9:10:59:fe:91:b4:09:7d:9b:75:77:60: 03:95:a7:c5:1a:af:d9:27:35:51:df:2d:d3:f7:aa:c0:1f:a7: b6:98:61:59:80:63:a0:e4:25:4a:94:fa:e1:27:0d:d3:c7:c3: 20:0d:c6:1b:8f:8f:16:09:cb:68:40:cd:2d:62:3e:f9:c8:fc: d3:99:be:5b:27:ab:a2:45:6e:ca:cb:e2:1d:9a:7c:0c:d1:f0: 8f:0a:c9:4d:4a:80:6c:c5:66:aa:2b:92:e6:2d:56:62:37:65: d3:77:0a:0b:f4:69:2d:6f:69:6d:d9:d9:1f:91:02:bf:4d:ca: a7:3e:61:4b:32:db:6a:18:84:95:12:86:9d:22:99:3f:e0:fc: fb:28:d7:67:6d:e8:37:96:a5:1a:11:79:ae:f1:17:c5:4d:ee: d8:da:7f:39:b1:24:fc:ca:f9:9d:9f:a9:35:1d:9e:3b:2d:1d: 73:6b:31:f8:b0:35:4f:72:e0:2e:42:6d:aa:e6:25:d5:43:f0: af:7a:f5:0c:53:ae:1a:68:66:45:2a:70:f3:3e:3a:53:cc:65: 1a:a8:51:86 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUOXpDSqmTNbWBYcbRBKYBSU4oA+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjQxMjIzMzRaFw0yNzAyMjMxMjI4MzRaMDMxMTAvBgNV BAMTKDE0RERCNDQ1RUUwMUZCRERERUZFOURDRjNBRTNEQzRFMjA5OTQ0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1gJl6JmTGWfy1LHTb0TH0afJ W5+9Nv3Xu/Fk6izGX/B5VMPTJuW6851xvUq2uBs/K7C0IoNfmwF++sWFLIwqway5 7eYS4jdfSXJ8wAI+9PfbM/U/wPz9Cxyf/nqP6tJXwz8jePZvX/fhGTaPJtkluE2G joEmQzyCj1x/czTRTzm1/nZG9D5VPVpoZjDI+kHl8AZLhTeFGPxpczONQV0VAVGl SkK2mR8Uac2ACYSb7hvDveAQnxEQPXX7KsXpKUR8xaebnyOIdI07umW3WlG/KnvH 59O2+k/Pa6F/xOYkE2HP8rY7gMQBGEK5YJhQjDAKn3xmZRQOjp/wYcGTY+7pAgMB AAGjggN3MIIDczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU3bRF7gH73d7+ nc8649xOIJlEpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODFn bVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQNGIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgx Z21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAvMTRE REI0NDVFRTAxRkJERERFRkU5RENGM0FFM0RDNEUyMDk5NDRBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEH AQH/BFcwVTA2BAIAATAwAwQCLQbMAwQCLausAwQCg0iMAwQEsWtAAwQCsYB8AwQE usPgAwQEu2/QAwQCyOF4MBsEAgACMBUDBQAoBA2wAwUAKAQZGAMFACgEPPwwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDAM5+AgMEEAYwDQYJKoZIhvcNAQELBQADggEB AF3A5sGkSRFQlsqNw8ylmk4QlBM3nQqMmtasLiTgaWahF07ZCdee9C17/OkQWf6R tAl9m3V3YAOVp8Uar9knNVHfLdP3qsAfp7aYYVmAY6DkJUqU+uEnDdPHwyANxhuP jxYJy2hAzS1iPvnI/NOZvlsnq6JFbsrL4h2afAzR8I8KyU1KgGzFZqorkuYtVmI3 ZdN3Cgv0aS1vaW3Z2R+RAr9Nyqc+YUsy22oYhJUShp0imT/g/Pso12dt6DeWpRoR ea7xF8VN7tjafzmxJPzK+Z2fqTUdnjstHXNrMfiwNU9y4C5CbarmJdVD8K969QxT rhpoZkUqcPM+OlPMZRqoUYY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:51:35 2026 by rpki-client