$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer File: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer (raw, json) Hash identifier: uDO6SuR3e+RFg52IYFGcyXFWqwaCwbWFHRuhnkOi8LM= Subject key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29428F59AF2849DEA880FF22F1929FB1682236C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft caRepository: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 15:26:27 +0000 Certificate not after: Sun 28 Feb 2027 15:31:27 +0000 Subordinate resources: AS: 270240 IP: 45.191.240.0/22 IP: 2804:68f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:42:8f:59:af:28:49:de:a8:80:ff:22:f1:92:9f:b1:68:22:36:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 1 15:26:27 2026 GMT Not After : Feb 28 15:31:27 2027 GMT Subject: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:bd:d2:8a:9f:d4:8a:d1:78:e2:18:f7:fc: 21:f6:e9:ad:9d:1a:dd:ce:19:c9:55:21:14:c2:05: cd:1c:61:0e:24:2b:6e:1d:f3:b4:cd:8a:c4:8e:56: dd:d7:d7:80:4c:ef:ea:98:2b:c5:8a:df:0a:07:79: e8:5c:d3:91:78:0a:d2:e0:30:bc:5d:26:89:52:0f: 7d:9b:4f:be:99:a7:ca:a3:9e:df:2a:3f:89:e1:61: 06:64:c1:4d:74:fa:33:1b:20:1c:cc:d2:65:a1:7b: bc:87:a0:d6:0d:af:69:fe:23:58:dd:10:6f:bf:46: 07:b3:41:f1:34:f3:02:7a:93:14:f0:c2:0c:56:e1: 60:0d:cb:79:ea:aa:d3:30:6e:9a:43:31:8e:c6:cc: 5a:ac:6e:b4:a6:67:d7:cf:24:72:27:5a:be:8d:17: 4c:8a:af:58:8c:3f:a6:3b:10:8f:fa:26:d6:b4:ac: 31:42:48:2b:d3:64:3f:03:a9:41:20:d8:47:7d:6f: d3:9a:f3:c4:91:51:1d:1d:06:f6:a0:1b:84:a4:7c: 73:0a:f4:e3:fc:94:83:83:76:a7:01:ac:78:d7:f6: dd:9d:cd:cc:af:8c:d3:51:ab:9c:06:d3:a0:5c:07: 88:5c:8a:09:59:c5:45:4b:f7:ab:3f:9c:bb:af:1d: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.240.0/22 IPv6: 2804:68f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270240 Signature Algorithm: sha256WithRSAEncryption d9:f4:e0:9d:13:2b:6f:90:cf:34:ed:a1:0b:2e:4e:e8:03:90: b8:7d:14:9b:39:8b:d4:5b:07:a4:3a:d5:7a:15:05:6b:f9:3c: 6c:c5:0b:35:7b:b5:2c:c4:3d:7f:5d:29:6d:00:b6:46:4d:4a: 03:74:b8:92:a4:fe:58:86:c4:be:e4:fc:03:80:6a:3c:31:79: 5f:2a:7f:c2:d4:45:50:15:16:09:25:34:41:0b:56:29:e5:88: 93:48:92:15:1f:96:7b:d7:b4:41:45:c3:92:c1:77:5a:d1:d3: 17:37:d5:dc:97:0c:4d:6c:a4:1d:73:c3:db:5e:a0:07:a8:12: ce:70:e0:65:b4:70:4d:08:13:ce:8e:7d:5a:b1:2b:5a:6e:d9: 71:24:65:c9:6c:6e:5d:e0:a2:43:bf:0b:4a:05:6a:8e:e8:37: e7:6b:31:6f:55:2b:54:1d:3f:bf:2f:b7:44:b8:1b:9d:15:c7: aa:30:ba:d3:91:93:15:8b:0a:a7:b9:9e:b4:06:96:fb:7f:6f: 36:c8:c4:69:5c:2f:f5:6a:04:a1:72:77:20:fa:58:fa:da:2d: c5:40:14:ab:4c:a7:2f:3a:bf:ca:0f:7c:5f:05:63:11:10:14: ec:5c:03:04:36:8a:20:bf:1d:8b:f6:0e:56:d0:62:d4:ab:a0: 16:39:c5:37 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUKUKPWa8oSd6ogP8i8ZKfsWgiNsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDExNTI2MjdaFw0yNzAyMjgxNTMxMjdaMDMxMTAvBgNV BAMTKDNEQkVDNzcxRjVCM0IxRTE5NTA5MzQ2MjNBRUVDNTUxOUNFNzFBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQb3Sip/UitF44hj3/CH26a2d Gt3OGclVIRTCBc0cYQ4kK24d87TNisSOVt3X14BM7+qYK8WK3woHeehc05F4CtLg MLxdJolSD32bT76Zp8qjnt8qP4nhYQZkwU10+jMbIBzM0mWhe7yHoNYNr2n+I1jd EG+/RgezQfE08wJ6kxTwwgxW4WANy3nqqtMwbppDMY7GzFqsbrSmZ9fPJHInWr6N F0yKr1iMP6Y7EI/6Jta0rDFCSCvTZD8DqUEg2Ed9b9Oa88SRUR0dBvagG4SkfHMK 9OP8lIODdqcBrHjX9t2dzcyvjNNRq5wG06BcB4hciglZxUVL96s/nLuvHQeHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9vsdx9bOx4ZUJ NGI67sVRnOcaBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcTZn VU5tcUgxY2hxdlRKYmRSQ0xVQlR3UWMzSno2cExtSDZGbm9lTURCby8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcTZn VU5tcUgxY2hxdlRKYmRSQ0xVQlR3UWMzSno2cExtSDZGbm9lTURCby8xLzNEQkVD NzcxRjVCM0IxRTE5NTA5MzQ2MjNBRUVDNTUxOUNFNzFBMDUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2/8DANBAIAAjAHAwUAKARo+DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEH6AwDQYJKoZIhvcNAQELBQADggEBANn04J0TK2+QzzTtoQsu TugDkLh9FJs5i9RbB6Q61XoVBWv5PGzFCzV7tSzEPX9dKW0AtkZNSgN0uJKk/liG xL7k/AOAajwxeV8qf8LURVAVFgklNEELVinliJNIkhUflnvXtEFFw5LBd1rR0xc3 1dyXDE1spB1zw9teoAeoEs5w4GW0cE0IE86OfVqxK1pu2XEkZclsbl3gokO/C0oF ao7oN+drMW9VK1QdP78vt0S4G50Vx6owutORkxWLCqe5nrQGlvt/bzbIxGlcL/Vq BKFydyD6WPraLcVAFKtMpy86v8oPfF8FYxEQFOxcAwQ2iiC/HYv2DlbQYtSroBY5 xTc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:24 2026 by rpki-client