$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer File: 843E46AA209E75F9302824E3938E138395B4B3A9.cer (raw, json) Hash identifier: uDAhLcZpKE/6UgXHVWnh9TYYeWyy2GeavUwspUalg4g= Subject key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2F6AFB76274F5E5AB784A3E65DE681E2F9FC368B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft caRepository: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Mar 2026 11:33:23 +0000 Certificate not after: Mon 01 Mar 2027 11:38:23 +0000 Subordinate resources: AS: 264912 IP: 168.228.64.0/22 IP: 2804:2fcc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:fb:76:27:4f:5e:5a:b7:84:a3:e6:5d:e6:81:e2:f9:fc:36:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 2 11:33:23 2026 GMT Not After : Mar 1 11:38:23 2027 GMT Subject: CN=843E46AA209E75F9302824E3938E138395B4B3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:a9:e3:ea:3c:80:33:04:e6:34:7c:c2:02: fa:ec:21:1e:11:51:52:53:12:cc:79:95:94:6d:17: 54:ce:32:92:ac:97:ea:d0:c5:f4:f7:64:c3:e0:48: a9:98:70:33:11:16:e0:12:13:b2:0e:6d:cc:9d:8b: 4a:18:61:c7:bf:23:a2:4d:9e:d6:86:ad:23:c7:28: 5f:78:a4:b1:06:0d:21:37:c0:ac:d6:f3:07:54:9c: f7:73:7b:40:b2:42:18:6d:5b:4e:38:88:86:53:70: eb:15:14:6b:3d:f7:95:ac:d5:fc:5a:1f:d4:a1:1e: 31:b1:a1:8f:d7:89:4c:ad:4b:95:c3:1a:a8:1b:25: 18:ac:be:0d:a7:3b:3c:73:7a:57:a0:f7:a5:86:2d: 54:63:dd:f7:44:bb:fb:86:4e:17:f7:06:c2:26:ef: 27:fc:59:44:07:c6:33:bd:70:76:0e:fc:4d:07:85: ea:bd:6b:b2:bc:65:45:4a:f9:30:bd:60:9c:e3:c2: 07:5c:7c:a6:70:7d:58:f3:31:df:06:be:ff:cb:d2: f7:bb:22:55:64:35:8f:d8:fb:42:d1:09:f0:63:63: 72:0d:bf:5b:77:b9:fc:af:d2:be:0a:8d:ad:16:4a: ad:af:67:ef:d1:4c:3c:cf:e1:84:c3:3f:ca:75:bf: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.64.0/22 IPv6: 2804:2fcc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264912 Signature Algorithm: sha256WithRSAEncryption 53:02:e6:11:5d:7f:d2:2e:44:56:c2:c4:73:71:c1:10:98:10: 3f:d0:9d:53:25:76:ba:2c:a4:b7:9a:ee:33:2c:fe:92:3d:46: a9:71:0e:8f:ed:c3:4b:81:68:a5:2a:24:2d:66:a5:03:d9:5a: 33:de:8b:53:48:d6:d4:ab:8c:92:80:e9:4e:3b:24:3e:aa:dc: 9d:86:67:8f:0a:67:7a:8d:bc:9b:3f:eb:76:f2:16:25:18:fe: 27:82:87:78:56:6e:af:48:82:ed:12:e1:81:5a:50:90:25:a4: 81:e0:ae:26:bd:a5:e1:a0:25:fc:3b:5d:96:1e:be:b7:ac:4a: 8d:e0:b6:f8:94:b2:20:7a:19:6b:a2:48:da:c8:ed:e2:b6:cd: 82:43:af:b6:09:81:23:b7:b4:5e:11:70:1c:84:ad:bc:e4:38: 30:11:91:75:7d:4a:40:8c:1c:ac:f5:08:07:43:7d:54:16:2a: d5:37:a3:3e:a6:d4:b0:4b:64:ea:c2:3c:97:0f:81:ed:b6:c7: ca:52:fb:aa:81:df:da:4c:c4:a4:20:08:fc:bb:7d:15:2b:e8: 2d:33:46:61:3c:27:a6:ea:1f:e8:33:e7:21:68:65:cd:30:63: b2:44:03:c6:02:eb:fb:55:4e:c7:48:ad:2c:ba:15:d3:d1:cc: cf:a4:2b:bd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUL2r7didPXlq3hKPmXeaB4vn8NoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDIxMTMzMjNaFw0yNzAzMDExMTM4MjNaMDMxMTAvBgNV BAMTKDg0M0U0NkFBMjA5RTc1RjkzMDI4MjRFMzkzOEUxMzgzOTVCNEIzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPtqnj6jyAMwTmNHzCAvrsIR4R UVJTEsx5lZRtF1TOMpKsl+rQxfT3ZMPgSKmYcDMRFuASE7IObcydi0oYYce/I6JN ntaGrSPHKF94pLEGDSE3wKzW8wdUnPdze0CyQhhtW044iIZTcOsVFGs995Ws1fxa H9ShHjGxoY/XiUytS5XDGqgbJRisvg2nOzxzeleg96WGLVRj3fdEu/uGThf3BsIm 7yf8WUQHxjO9cHYO/E0Hheq9a7K8ZUVK+TC9YJzjwgdcfKZwfVjzMd8Gvv/L0ve7 IlVkNY/Y+0LRCfBjY3INv1t3ufyv0r4Kja0WSq2vZ+/RTDzP4YTDP8p1v5ObAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEPkaqIJ51+TAo JOOTjhODlbSzqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjky ZFZRUEN0aXBXbmRXNDJtVWdBYVdiQW02cm9vSm5nS2c4cGtjZHR5aHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY5 MmRWUVBDdGlwV25kVzQybVVnQWFXYkFtNnJvb0puZ0tnOHBrY2R0eWhwLzAvODQz RTQ2QUEyMDlFNzVGOTMwMjgyNEUzOTM4RTEzODM5NUI0QjNBOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqORAMA0EAgACMAcDBQAoBC/MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK0DANBgkqhkiG9w0BAQsFAAOCAQEAUwLmEV1/0i5EVsLE c3HBEJgQP9CdUyV2uiykt5ruMyz+kj1GqXEOj+3DS4FopSokLWalA9laM96LU0jW 1KuMkoDpTjskPqrcnYZnjwpneo28mz/rdvIWJRj+J4KHeFZur0iC7RLhgVpQkCWk geCuJr2l4aAl/Dtdlh6+t6xKjeC2+JSyIHoZa6JI2sjt4rbNgkOvtgmBI7e0XhFw HIStvOQ4MBGRdX1KQIwcrPUIB0N9VBYq1TejPqbUsEtk6sI8lw+B7bbHylL7qoHf 2kzEpCAI/Lt9FSvoLTNGYTwnpuof6DPnIWhlzTBjskQDxgLr+1VOx0itLLoV09HM z6QrvQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:59:44 2026 by rpki-client