$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer (raw, json) Hash identifier: Kbw6B3eWTfwwEXeLS3Prfswx6BgtPB76x4UGT9NU15Q= Subject key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D0291EF5687D4E3442DDD5EE16E83FCE6B3DE41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft caRepository: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 19:22:01 +0000 Certificate not after: Mon 12 Apr 2027 19:27:01 +0000 Subordinate resources: AS: 273414 IP: 45.182.148.0/22 IP: 2804:8e44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 20:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:02:91:ef:56:87:d4:e3:44:2d:dd:5e:e1:6e:83:fc:e6:b3:de:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 13 19:22:01 2026 GMT Not After : Apr 12 19:27:01 2027 GMT Subject: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:a4:09:f3:7d:60:cf:0e:4d:00:11:3c:c7: d5:c0:c9:ba:b8:56:4f:a3:9d:1e:f6:00:6b:ca:38: a4:6c:b8:cd:15:85:86:75:5d:ce:24:f8:f4:18:c8: f3:cc:92:73:6c:e1:43:5c:78:58:a5:b8:b6:65:96: f5:ed:4e:d7:94:26:b8:87:66:65:d9:28:e1:bd:40: 48:81:ea:f9:93:ba:bf:b4:58:7f:f0:af:84:a5:0f: c2:c2:ae:41:94:88:b7:0c:84:fb:b8:ed:fd:6c:d6: 10:96:25:2e:c8:42:7b:f0:5f:0b:e0:a3:49:60:c9: 5b:6c:b9:8b:c3:cb:53:11:91:f5:39:a9:6b:73:a0: b3:aa:9c:ae:96:3e:f1:90:96:6a:a1:f8:a3:fd:83: 93:a0:64:f8:dc:54:9b:2c:1b:60:f6:c1:5d:eb:43: 8a:6e:26:62:4a:5d:f8:a8:1f:c7:76:71:47:7f:82: a0:ee:38:1b:36:5d:58:8f:50:0e:f4:2e:ab:5b:35: b4:9f:00:ed:71:28:10:c4:53:78:e7:43:86:79:71: ef:14:bf:ec:0b:35:b7:6f:ca:e5:70:7e:19:2b:cb: cb:cb:a4:68:e9:aa:a6:99:00:9e:79:11:91:f4:c6: fb:90:6a:de:12:70:ec:9e:c2:1c:e0:ed:e7:55:93: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.148.0/22 IPv6: 2804:8e44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273414 Signature Algorithm: sha256WithRSAEncryption 1c:e5:52:b7:5e:8a:a4:e4:5d:07:e5:e3:d8:cd:62:24:65:85: 2b:d4:1b:a7:34:22:3f:36:8c:e4:54:81:1b:ca:e7:40:3c:8e: 5d:9e:50:3e:12:31:39:ae:a9:d8:b6:10:2a:03:3a:15:38:87: 73:85:82:28:cd:2d:17:85:e9:38:52:ab:bc:88:54:46:55:a6: c3:61:54:30:c3:85:7b:6a:46:d0:bc:a3:70:78:3c:f9:93:a6: 43:aa:37:d2:1e:1d:cb:05:59:fa:54:eb:88:f7:92:58:0e:04: a5:ff:92:96:2d:48:42:ed:ae:d5:df:a9:e5:4a:c1:e1:bd:f3: 08:89:2a:8e:ff:0c:13:8b:fb:a4:23:b6:94:ba:f8:9e:7b:de: 45:ca:2c:e7:ce:5e:f5:8a:e4:36:92:ff:af:b0:a7:71:0b:14: 81:90:d9:48:af:5c:f0:e3:58:94:19:31:1e:80:d4:4e:84:6a: e4:e2:48:77:3a:37:81:3c:a9:60:40:da:1c:29:0c:78:f2:42: 08:d1:00:0a:07:33:09:26:eb:fe:bb:18:b3:79:fa:fb:9f:01: 7e:4b:47:dd:31:3d:7d:c3:c6:93:1b:66:d4:6c:d2:9c:2d:a1: 7a:d5:2a:fd:81:57:a3:d1:55:26:0f:61:df:3b:64:43:9f:89: 97:39:77:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULQKR71aH1ONELd1e4W6D/Oaz3kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTMxOTIyMDFaFw0yNzA0MTIxOTI3MDFaMDMxMTAvBgNV BAMTKDFDRUZEQ0E3MDMyOUI5RENEMjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCR6QJ831gzw5NABE8x9XAybq4 Vk+jnR72AGvKOKRsuM0VhYZ1Xc4k+PQYyPPMknNs4UNceFiluLZllvXtTteUJriH ZmXZKOG9QEiB6vmTur+0WH/wr4SlD8LCrkGUiLcMhPu47f1s1hCWJS7IQnvwXwvg o0lgyVtsuYvDy1MRkfU5qWtzoLOqnK6WPvGQlmqh+KP9g5OgZPjcVJssG2D2wV3r Q4puJmJKXfioH8d2cUd/gqDuOBs2XViPUA70LqtbNbSfAO1xKBDEU3jnQ4Z5ce8U v+wLNbdvyuVwfhkry8vLpGjpqqaZAJ55EZH0xvuQat4ScOyewhzg7edVk191AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQc79ynAym53NIX YJvZzllC/hxqLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzVH OUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1 RzlIY1V6UEFEY2RheE55Q1ROSktUYU1INlNDeHljaTkxUFZYNVhhbUNYLzAvMUNF RkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJGRTFDNkEyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbaUMA0EAgACMAcDBQAoBI5EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQsBjANBgkqhkiG9w0BAQsFAAOCAQEAHOVSt16KpORdB+Xj 2M1iJGWFK9QbpzQiPzaM5FSBG8rnQDyOXZ5QPhIxOa6p2LYQKgM6FTiHc4WCKM0t F4XpOFKrvIhURlWmw2FUMMOFe2pG0LyjcHg8+ZOmQ6o30h4dywVZ+lTriPeSWA4E pf+Sli1IQu2u1d+p5UrB4b3zCIkqjv8ME4v7pCO2lLr4nnveRcos585e9YrkNpL/ r7CncQsUgZDZSK9c8ONYlBkxHoDUToRq5OJIdzo3gTypYEDaHCkMePJCCNEACgcz CSbr/rsYs3n6+58BfktH3TE9fcPGkxtm1GzSnC2hetUq/YFXo9FVJg9h3ztkQ5+J lzl3Bg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:07 2026 by rpki-client