$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer File: 2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer (raw, json) Hash identifier: d0Evrj2gVgEFGiS6JWO8V+5Ratcy9+g7YDV1EzIi4U4= Subject key identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D7739C6C1B3B67FF92AB3FC2EBEE5562B40FEBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft caRepository: rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 16:16:10 +0000 Certificate not after: Tue 23 Feb 2027 16:21:10 +0000 Subordinate resources: AS: 271744 IP: 200.150.244.0/22 IP: 2804:8054::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:77:39:c6:c1:b3:b6:7f:f9:2a:b3:fc:2e:be:e5:56:2b:40:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 16:16:10 2026 GMT Not After : Feb 23 16:21:10 2027 GMT Subject: CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:77:e1:67:d2:6f:38:ae:f7:8d:7b:36:8d: 52:09:cd:f7:7f:eb:21:f3:f2:70:41:02:7b:70:4b: 22:24:46:f2:e8:9d:2c:a5:35:e3:8c:93:e0:8d:d1: e9:92:70:3d:cf:95:2c:5f:33:15:fb:e8:71:8e:06: db:ee:4f:ae:de:c1:bf:63:37:0e:c1:1b:29:7b:2e: 5b:41:a0:58:05:b0:16:ba:84:32:bd:cd:fa:d3:c4: 92:32:9c:da:c2:f3:8e:4a:55:3e:4b:fc:07:a5:cf: 8d:74:8c:ff:e7:fc:47:be:08:e5:5c:f2:e1:08:f6: 01:d7:09:f6:e3:8c:c2:59:bf:3e:b5:50:f1:76:3c: 13:2b:8a:80:b8:3e:b4:58:85:ca:c0:ab:81:dc:1d: d0:05:dd:25:d7:07:af:d0:ce:3a:e6:2c:6e:86:fe: 4c:2c:63:ed:fc:0f:f0:6f:16:0b:da:6c:bc:79:02: cd:81:68:4b:6c:e8:ec:76:d1:98:12:3d:6e:66:16: 44:ff:e6:41:e5:0c:d2:53:51:03:23:85:b1:a7:8e: 15:8c:5d:94:fb:7d:36:52:0e:ed:c4:79:07:73:91: 19:60:12:8a:11:ce:88:3c:ef:dc:f9:1f:08:49:6f: 41:ed:16:fc:75:70:46:3a:5e:87:a1:45:4f:8c:2f: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.150.244.0/22 IPv6: 2804:8054::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271744 Signature Algorithm: sha256WithRSAEncryption 10:6b:88:87:40:0d:70:9b:2f:40:fe:a6:b7:32:8c:b6:89:01: c2:58:90:6a:bd:86:1a:1d:a1:33:90:97:96:34:78:ec:c0:80: 72:de:3b:a8:f5:a4:05:25:71:28:42:cb:2b:bf:8a:c9:4e:49: 8d:60:d4:6b:d6:65:af:9e:04:b6:6f:87:cb:48:4b:0c:2c:14: 15:c4:ba:20:10:6a:56:7a:b8:ac:3a:63:62:03:0f:1b:d8:f6: 2b:d4:dc:f1:90:54:44:ac:75:c3:d2:d2:94:a2:01:35:1e:f9: 3d:96:12:da:18:2e:9b:c6:4c:72:84:18:cd:08:87:4e:66:e6: aa:fb:73:26:fb:00:e8:90:b3:84:9a:27:65:19:7d:fb:c0:70: 84:56:6e:75:1b:44:c7:18:fe:d1:9d:e6:84:2c:ea:18:4c:bf: 2e:20:93:6d:9c:93:84:18:46:4a:31:b8:1b:56:66:26:2a:13: f4:c3:5b:56:01:4b:95:3f:da:25:8c:c5:a9:f3:ad:8e:4c:aa: 97:62:35:39:ae:1f:53:ad:68:f9:6d:83:f2:97:82:7d:bf:c2: f2:a1:55:8a:04:c9:34:f8:e7:2f:ad:7d:8d:05:07:7c:f9:91: bc:7e:94:25:4a:fd:56:b3:10:d0:8f:c5:54:ce:3f:5b:97:4e: 35:39:3c:04 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULXc5xsGztn/5KrP8Lr7lVitA/r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjQxNjE2MTBaFw0yNzAyMjMxNjIxMTBaMDMxMTAvBgNV BAMTKDJGQjlFNTRBMDcwQkRFQjY0NzVCOEFGNkRGOUI4RTk4M0MzOTM4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR73fhZ9JvOK73jXs2jVIJzfd/ 6yHz8nBBAntwSyIkRvLonSylNeOMk+CN0emScD3PlSxfMxX76HGOBtvuT67ewb9j Nw7BGyl7LltBoFgFsBa6hDK9zfrTxJIynNrC845KVT5L/Aelz410jP/n/Ee+COVc 8uEI9gHXCfbjjMJZvz61UPF2PBMrioC4PrRYhcrAq4HcHdAF3SXXB6/QzjrmLG6G /kwsY+38D/BvFgvabLx5As2BaEts6Ox20ZgSPW5mFkT/5kHlDNJTUQMjhbGnjhWM XZT7fTZSDu3EeQdzkRlgEooRzog879z5HwhJb0HtFvx1cEY6XoehRU+MLxq/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvueVKBwvetkdb ivbfm46YPDk4ijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Fk YVdXZ0hwcDJXTDVUMlNRTmJMeDlqbnpRMWY1ejZFZ3JLTmVyRnRYUUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh ZGFXV2dIcHAyV0w1VDJTUU5iTHg5am56UTFmNXo2RWdyS05lckZ0WFFDLzAvMkZC OUU1NEEwNzBCREVCNjQ3NUI4QUY2REY5QjhFOTgzQzM5Mzg4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyJb0MA0EAgACMAcDBQAoBIBUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlgDANBgkqhkiG9w0BAQsFAAOCAQEAEGuIh0ANcJsvQP6m tzKMtokBwliQar2GGh2hM5CXljR47MCAct47qPWkBSVxKELLK7+KyU5JjWDUa9Zl r54Etm+Hy0hLDCwUFcS6IBBqVnq4rDpjYgMPG9j2K9Tc8ZBURKx1w9LSlKIBNR75 PZYS2hgum8ZMcoQYzQiHTmbmqvtzJvsA6JCzhJonZRl9+8BwhFZudRtExxj+0Z3m hCzqGEy/LiCTbZyThBhGSjG4G1ZmJioT9MNbVgFLlT/aJYzFqfOtjkyql2I1Oa4f U61o+W2D8peCfb/C8qFVigTJNPjnL619jQUHfPmRvH6UJUr9VrMQ0I/FVM4/W5dO NTk8BA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:51:26 2026 by rpki-client