$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/92D1F1AD45A893D4DF7655D7AABD3070EE6DE4DD.cer File: 92D1F1AD45A893D4DF7655D7AABD3070EE6DE4DD.cer (raw, json) Hash identifier: ht+oWNmrjtcf3Ob3ALPgYozsNAwjlHXYRIeC+YgI/rc= Subject key identifier: 92:D1:F1:AD:45:A8:93:D4:DF:76:55:D7:AA:BD:30:70:EE:6D:E4:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0FA67B9226E272E7FEC7E959FD8F93223D5840 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HH1UfecEZsBgL5xa7BCaJgRcLFZEaj3eqMXwrDyAk4dw/0/92D1F1AD45A893D4DF7655D7AABD3070EE6DE4DD.mft caRepository: rsync://rpki-repo.registro.br/repo/HH1UfecEZsBgL5xa7BCaJgRcLFZEaj3eqMXwrDyAk4dw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Mar 2026 12:28:43 +0000 Certificate not after: Mon 01 Mar 2027 12:33:43 +0000 Subordinate resources: AS: 264935 IP: 168.232.64.0/22 IP: 2804:3030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a6:7b:92:26:e2:72:e7:fe:c7:e9:59:fd:8f:93:22:3d:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 2 12:28:43 2026 GMT Not After : Mar 1 12:33:43 2027 GMT Subject: CN=92D1F1AD45A893D4DF7655D7AABD3070EE6DE4DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:7c:13:f0:d6:7f:5b:8e:b5:eb:33:92:66: be:fe:85:f8:ab:25:f8:9d:52:60:31:10:dc:53:41: b3:1f:9e:60:54:d4:ce:f5:cb:cd:c9:58:1f:ae:6f: 3a:17:ec:82:76:f4:c1:46:9f:22:72:59:83:13:6d: 0f:8d:49:33:78:8b:b9:bd:9f:dd:04:91:0a:cc:4f: 91:a8:b1:49:bc:de:66:88:92:0e:2b:95:16:35:37: 46:32:f5:95:08:bf:84:40:a1:86:ea:02:dd:61:89: 10:b9:94:37:40:66:e5:fe:04:07:8e:1e:46:92:f1: 55:b6:1e:22:07:00:bd:6f:a6:c0:81:51:6e:08:b8: cb:7c:8e:0b:5a:6d:ad:3f:78:77:b9:2b:af:95:11: 5e:da:54:65:98:71:66:8c:da:bf:c8:07:1b:32:65: 9c:4a:4b:65:5d:ee:5c:d3:00:68:42:01:bb:41:03: 4d:3d:a7:7d:f5:91:3c:8f:fa:24:cf:da:df:96:56: e8:15:cc:70:46:24:f0:90:c9:97:cc:35:1d:02:f1: 18:72:c4:4c:b7:b2:be:73:96:9f:d2:af:f0:0b:e0: 9d:ab:88:1e:59:f0:d0:c5:e0:60:bc:83:74:d9:77: 5a:59:9d:f7:44:b2:52:91:73:1e:e6:87:b7:b5:5b: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:D1:F1:AD:45:A8:93:D4:DF:76:55:D7:AA:BD:30:70:EE:6D:E4:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HH1UfecEZsBgL5xa7BCaJgRcLFZEaj3eqMXwrDyAk4dw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HH1UfecEZsBgL5xa7BCaJgRcLFZEaj3eqMXwrDyAk4dw/0/92D1F1AD45A893D4DF7655D7AABD3070EE6DE4DD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.64.0/22 IPv6: 2804:3030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264935 Signature Algorithm: sha256WithRSAEncryption 91:1c:9f:b4:a7:f1:11:01:54:8a:25:08:72:98:a2:b9:94:aa: 67:e1:5b:b1:5d:b1:65:3a:95:b6:87:4d:c4:f5:b2:31:c4:ea: 21:d2:44:24:68:21:e5:91:ff:f6:66:b9:0b:a8:4c:5d:01:48: 9d:e9:ef:f1:bb:5d:55:10:3d:50:81:8d:d4:77:82:40:8d:e2: 53:81:0c:4f:ce:ff:f8:6e:c8:57:37:4f:35:cf:ce:82:97:a6: 23:55:e1:89:69:15:eb:f9:d8:17:8d:b5:6f:20:ab:41:0f:20: f5:68:2a:3f:d0:47:9f:6a:43:b6:d7:f4:6f:be:07:a9:7e:55: be:cf:2f:48:6c:44:21:05:4e:e2:c3:8a:4f:42:3f:9b:a5:e8: c9:6d:65:33:36:37:6e:50:b8:12:9c:a1:44:f2:38:90:f4:1e: a1:e2:79:6d:6c:64:5b:02:6f:33:e4:ad:57:7a:4a:09:b9:59: a2:30:90:72:ee:14:3d:f5:44:5a:28:4d:b7:93:db:99:1f:ae: f2:47:48:a9:28:5c:60:74:f3:6d:0d:a6:bd:88:32:54:4f:22: d5:9d:1f:a4:02:eb:28:2a:36:10:8d:87:67:fd:33:d5:d2:fd: df:4f:a8:e0:37:bc:14:dc:9b:a1:69:f8:eb:35:cf:d7:c6:4f: 3f:82:2a:8a -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgITD6Z7kibicuf+x+lZ/Y+TIj1YQDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI2MDMwMjEyMjg0M1oXDTI3MDMwMTEyMzM0M1owMzExMC8GA1UE AxMoOTJEMUYxQUQ0NUE4OTNENERGNzY1NUQ3QUFCRDMwNzBFRTZERTRERDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2lfBPw1n9bjrXrM5Jmvv6F+Ksl +J1SYDEQ3FNBsx+eYFTUzvXLzclYH65vOhfsgnb0wUafInJZgxNtD41JM3iLub2f 3QSRCsxPkaixSbzeZoiSDiuVFjU3RjL1lQi/hEChhuoC3WGJELmUN0Bm5f4EB44e RpLxVbYeIgcAvW+mwIFRbgi4y3yOC1ptrT94d7krr5URXtpUZZhxZozav8gHGzJl nEpLZV3uXNMAaEIBu0EDTT2nffWRPI/6JM/a35ZW6BXMcEYk8JDJl8w1HQLxGHLE TLeyvnOWn9Kv8AvgnauIHlnw0MXgYLyDdNl3Wlmd90SyUpFzHuaHt7Vbzj0CAwEA AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFJLR8a1FqJPU33ZV 16q9MHDubeTdMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ISDFV ZmVjRVpzQmdMNXhhN0JDYUpnUmNMRlpFYWozZXFNWHdyRHlBazRkdy8wLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEgx VWZlY0Vac0JnTDV4YTdCQ2FKZ1JjTEZaRWFqM2VxTVh3ckR5QWs0ZHcvMC85MkQx RjFBRDQ1QTg5M0Q0REY3NjU1RDdBQUJEMzA3MEVFNkRFNERELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKo6EAwDQQCAAIwBwMFACgEMDAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBArnMA0GCSqGSIb3DQEBCwUAA4IBAQCRHJ+0p/ERAVSKJQhy mKK5lKpn4VuxXbFlOpW2h03E9bIxxOoh0kQkaCHlkf/2ZrkLqExdAUid6e/xu11V ED1QgY3Ud4JAjeJTgQxPzv/4bshXN081z86Cl6YjVeGJaRXr+dgXjbVvIKtBDyD1 aCo/0EefakO21/RvvgepflW+zy9IbEQhBU7iw4pPQj+bpejJbWUzNjduULgSnKFE 8jiQ9B6h4nltbGRbAm8z5K1XekoJuVmiMJBy7hQ99URaKE23k9uZH67yR0ipKFxg dPNtDaa9iDJUTyLVnR+kAusoKjYQjYdn/TPV0v3fT6jgN7wU3JuhafjrNc/Xxk8/ giqK -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:19 2026 by rpki-client