$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer File: 5EF817C4D35ABBC698DD971253BD6455131E483B.cer (raw, json) Hash identifier: N1CPON9EQeS84RoKO1fIAjzC4cVQLmD+2J0aprjcRgc= Subject key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31A2F99072D6DF8F22BD46821CE7C1543C1CF792 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft caRepository: rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 18 Apr 2026 04:02:45 +0000 Certificate not after: Sat 17 Apr 2027 04:07:45 +0000 Subordinate resources: AS: 28213 IP: 168.181.4.0/22 IP: 189.113.112.0/20 IP: 2804:2e78::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 05:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a2:f9:90:72:d6:df:8f:22:bd:46:82:1c:e7:c1:54:3c:1c:f7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 18 04:02:45 2026 GMT Not After : Apr 17 04:07:45 2027 GMT Subject: CN=5EF817C4D35ABBC698DD971253BD6455131E483B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:ba:2e:ef:51:49:d1:a8:7c:22:57:9d:4a: 18:83:f3:89:f6:9e:d1:0d:49:11:a7:0a:ce:5a:56: 9f:04:0a:8b:66:3c:b8:1c:c5:5e:0a:b5:30:53:72: 46:2c:b7:a5:a5:63:8f:73:c0:77:4d:68:e0:ca:f5: 44:62:a3:0e:73:20:69:f2:89:7b:98:91:19:b7:ff: 6b:d0:ab:e2:0e:ff:af:c5:73:50:b4:0f:9b:04:ee: b9:92:18:c6:2f:34:f4:00:f5:67:96:f8:a6:0f:8b: 20:3a:2b:ca:a5:70:6c:da:d4:2c:85:e6:a8:98:b6: 90:7c:c2:81:e1:41:ea:81:01:30:0c:64:37:3d:4e: 6f:35:f2:ea:34:21:0f:97:41:fc:f1:62:25:17:c4: 21:be:ea:50:ce:ab:be:c9:45:3d:65:f6:c4:5a:43: f7:03:6f:75:96:d5:07:6d:b9:5e:0b:48:d8:bc:37: db:38:0a:34:dc:05:93:13:fc:b6:fd:73:0d:b5:40: 0a:28:10:ff:b8:a3:ba:df:ec:e9:00:59:48:77:50: db:37:4e:34:b8:b6:5b:f5:03:65:fc:d1:f7:20:4c: d8:2e:61:b0:4c:f9:71:9c:0f:0f:6e:87:68:bd:79: 25:3a:13:4d:81:ad:30:67:84:14:e7:52:a9:a3:cb: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.4.0/22 189.113.112.0/20 IPv6: 2804:2e78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28213 Signature Algorithm: sha256WithRSAEncryption 69:e3:c9:5b:59:7f:62:17:d7:75:0f:1c:7a:d4:17:8b:7d:7c: 40:37:8e:c6:d9:29:52:32:d0:74:0f:7b:d8:0c:51:27:3e:c8: 93:9f:c7:a3:38:fd:2a:7c:31:c6:df:5c:5c:16:20:b0:40:3a: 69:ea:2c:40:b1:5f:22:b3:b0:78:e2:1c:5b:26:c6:12:05:44: 59:11:a3:9f:b6:14:d5:03:e6:a2:d7:47:9a:9b:ee:64:d8:17: 26:8e:82:70:e0:08:48:63:8d:c9:53:80:98:72:f5:c6:c3:59: 2b:61:9f:1c:2b:20:04:59:bc:a1:57:f2:db:43:9b:e0:1d:5f: cf:cd:dd:5f:02:38:d5:54:33:9a:7c:65:22:c9:2c:89:0d:0e: e1:e8:5c:f1:29:84:4e:40:37:d2:92:2b:19:b4:f8:f6:f1:19: 95:15:14:f0:8f:7f:21:08:0d:6a:15:b2:7d:50:1b:f4:a0:f7: 76:11:93:fb:e2:a4:3a:2d:39:9c:ef:c7:84:a6:2e:c4:0f:3d: 4e:14:68:e4:9a:82:21:d0:7d:94:24:0a:94:2e:59:22:bd:23: 96:c7:a1:66:4e:6b:3d:1e:42:c5:9d:d7:c9:16:85:f7:2c:98: 1c:3a:5c:c6:38:38:ff:d9:53:b9:50:fb:6c:e0:3c:66:4c:d7: 28:41:45:d1 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUMaL5kHLW348ivUaCHOfBVDwc95IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTgwNDAyNDVaFw0yNzA0MTcwNDA3NDVaMDMxMTAvBgNV BAMTKDVFRjgxN0M0RDM1QUJCQzY5OEREOTcxMjUzQkQ2NDU1MTMxRTQ4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtw7ou71FJ0ah8IledShiD84n2 ntENSRGnCs5aVp8ECotmPLgcxV4KtTBTckYst6WlY49zwHdNaODK9URiow5zIGny iXuYkRm3/2vQq+IO/6/Fc1C0D5sE7rmSGMYvNPQA9WeW+KYPiyA6K8qlcGza1CyF 5qiYtpB8woHhQeqBATAMZDc9Tm818uo0IQ+XQfzxYiUXxCG+6lDOq77JRT1l9sRa Q/cDb3WW1QdtuV4LSNi8N9s4CjTcBZMT/Lb9cw21QAooEP+4o7rf7OkAWUh3UNs3 TjS4tlv1A2X80fcgTNguYbBM+XGcDw9uh2i9eSU6E02BrTBnhBTnUqmjyx8HAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRe+BfE01q7xpjd lxJTvWRVEx5IOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0wx NTh6VW5HQ0JDTml0b1FZYVpHakRydzJqcW5zcUQ3TnlTeDlUZ2VMUnUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NM MTU4elVuR0NCQ05pdG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzEvNUVG ODE3QzREMzVBQkJDNjk4REQ5NzEyNTNCRDY0NTUxMzFFNDgzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqLUEAwQEvXFwMA0EAgACMAcDBQAoBC54MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm41MA0GCSqGSIb3DQEBCwUAA4IBAQBp48lbWX9i F9d1Dxx61BeLfXxAN47G2SlSMtB0D3vYDFEnPsiTn8ejOP0qfDHG31xcFiCwQDpp 6ixAsV8is7B44hxbJsYSBURZEaOfthTVA+ai10eam+5k2BcmjoJw4AhIY43JU4CY cvXGw1krYZ8cKyAEWbyhV/LbQ5vgHV/Pzd1fAjjVVDOafGUiySyJDQ7h6FzxKYRO QDfSkisZtPj28RmVFRTwj38hCA1qFbJ9UBv0oPd2EZP74qQ6LTmc78eEpi7EDz1O FGjkmoIh0H2UJAqULlkivSOWx6FmTms9HkLFndfJFoX3LJgcOlzGODj/2VO5UPts 4DxmTNcoQUXR -----END CERTIFICATE-----Generated at Sat Apr 18 07:33:58 2026 by rpki-client