$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer File: 5668EE81C8705A595C00BF220C5BB48B38682B81.cer (raw, json) Hash identifier: 4AvQrERdhmo8X7tTVKZYBzoH4M0jJgCU+Zsf/p4uucg= Subject key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 630CD289C02C27044D90436150BDDACCA5BE443E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft caRepository: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 22 Feb 2026 07:55:11 +0000 Certificate not after: Sun 21 Feb 2027 08:00:11 +0000 Subordinate resources: AS: 263558 IP: 143.255.196.0/22 IP: 186.237.216.0/21 IP: 2804:ef0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0c:d2:89:c0:2c:27:04:4d:90:43:61:50:bd:da:cc:a5:be:44:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 22 07:55:11 2026 GMT Not After : Feb 21 08:00:11 2027 GMT Subject: CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1b:62:36:72:02:ca:02:d5:6b:8b:d7:7b:0e: 0a:5a:70:a4:a4:26:a7:aa:3c:52:6a:1b:d3:a8:64: 74:2d:6e:63:47:dc:b5:bd:87:09:5b:ab:1f:a8:59: 9f:8d:2d:d1:df:48:21:f0:42:d2:6e:6f:16:e3:aa: b8:9c:ff:3a:a2:2a:7f:34:8e:21:75:26:1a:3e:3f: 9a:fe:76:58:30:02:b0:11:8a:39:b1:b0:db:cc:e8: 31:15:3a:cd:01:c7:5a:fc:0d:c3:6a:8f:de:43:df: e4:36:cd:a6:bd:d2:69:d8:b5:5c:8a:6f:9f:7f:08: ef:37:11:d9:96:58:f5:bb:3d:be:c3:5e:f4:38:cc: 02:f6:6d:c4:a7:4d:c9:d8:13:fc:9d:27:21:6c:ae: a0:46:5b:d4:bb:62:a6:fe:e0:bd:d8:f9:8f:a8:03: e2:dc:50:64:19:95:fd:07:dd:83:e1:ff:a4:fa:86: 13:ac:70:35:dd:7c:7d:9f:af:a4:0a:50:d7:26:85: ba:28:82:e6:49:b7:2f:8a:46:72:ab:93:63:52:dd: a5:82:cd:ef:ee:03:04:55:da:c4:27:26:27:2c:c3: dd:f6:2e:77:86:d9:d0:13:1d:ce:e2:19:f9:03:14: e4:fe:3b:a7:69:e3:e0:3e:58:67:5a:bd:3d:e4:33: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.196.0/22 186.237.216.0/21 IPv6: 2804:ef0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263558 Signature Algorithm: sha256WithRSAEncryption 48:9f:df:77:23:a1:3d:98:13:54:43:e0:8d:23:d0:69:48:37: 8d:d4:9b:7e:d3:b0:33:97:03:ee:b2:2e:08:ef:c6:51:bf:5e: 65:ce:64:15:9b:75:a9:88:89:ee:d0:a9:12:a0:e2:20:bc:c2: ab:5b:d1:31:bb:1c:ad:ac:7a:14:58:c3:49:2a:87:6e:9c:39: be:07:5c:6e:96:22:1f:81:5d:65:17:33:8e:7e:3f:19:54:57: 92:bb:ec:8f:b5:ea:ad:04:3a:9b:f4:06:29:95:f6:16:c3:d7: 49:12:ce:70:f9:d7:ce:38:d0:4d:47:a4:cd:c3:0a:c4:cf:77: 6c:f3:91:07:78:4c:b3:aa:56:16:17:dd:15:ec:44:a4:cb:51: fc:5c:a2:d0:f3:88:b8:42:97:b0:cc:8a:e4:98:18:3e:3a:6e: 97:c3:bd:0c:7e:80:b3:a9:f9:e3:50:5a:a0:45:53:83:a3:37: 87:0f:ba:ca:ad:a9:92:6f:a7:60:92:b1:c7:09:86:d3:65:ea: 70:ad:bb:49:56:b7:21:9e:9f:22:c9:77:3d:bb:2b:e6:70:76: e0:28:5b:68:6c:b6:d4:56:5d:a3:14:51:71:11:9d:96:72:e6: c5:14:f8:99:5b:61:58:86:57:54:11:41:38:90:35:4b:98:7f: b2:37:cf:01 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYwzSicAsJwRNkENhUL3azKW+RD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjIwNzU1MTFaFw0yNzAyMjEwODAwMTFaMDMxMTAvBgNV BAMTKDU2NjhFRTgxQzg3MDVBNTk1QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnG2I2cgLKAtVri9d7DgpacKSk JqeqPFJqG9OoZHQtbmNH3LW9hwlbqx+oWZ+NLdHfSCHwQtJubxbjqric/zqiKn80 jiF1Jho+P5r+dlgwArARijmxsNvM6DEVOs0Bx1r8DcNqj95D3+Q2zaa90mnYtVyK b59/CO83EdmWWPW7Pb7DXvQ4zAL2bcSnTcnYE/ydJyFsrqBGW9S7Yqb+4L3Y+Y+o A+LcUGQZlf0H3YPh/6T6hhOscDXdfH2fr6QKUNcmhbooguZJty+KRnKrk2NS3aWC ze/uAwRV2sQnJicsw932LneG2dATHc7iGfkDFOT+O6dp4+A+WGdavT3kM9aZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWaO6ByHBaWVwA vyIMW7SLOGgrgTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFE WHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB RFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzAvNTY2 OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIzODY4MkI4MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//EAwQDuu3YMA0EAgACMAcDBQAoBA7wMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFhjANBgkqhkiG9w0BAQsFAAOCAQEASJ/fdyOh PZgTVEPgjSPQaUg3jdSbftOwM5cD7rIuCO/GUb9eZc5kFZt1qYiJ7tCpEqDiILzC q1vRMbscrax6FFjDSSqHbpw5vgdcbpYiH4FdZRczjn4/GVRXkrvsj7XqrQQ6m/QG KZX2FsPXSRLOcPnXzjjQTUekzcMKxM93bPORB3hMs6pWFhfdFexEpMtR/Fyi0POI uEKXsMyK5JgYPjpul8O9DH6As6n541BaoEVTg6M3hw+6yq2pkm+nYJKxxwmG02Xq cK27SVa3IZ6fIsl3Pbsr5nB24ChbaGy21FZdoxRRcRGdlnLmxRT4mVthWIZXVBFB OJA1S5h/sjfPAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:18:12 2026 by rpki-client