$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/941720CBD1E151BD6E82BC31A42386F291D748F1.cer File: 941720CBD1E151BD6E82BC31A42386F291D748F1.cer (raw, json) Hash identifier: WxAQ2p8c8Y35NdgBhEy5726+ePqb+xRF/nw4a4/csuQ= Subject key identifier: 94:17:20:CB:D1:E1:51:BD:6E:82:BC:31:A4:23:86:F2:91:D7:48:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6540734DE61E29E721DD9868140C3659C06447B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/941720CBD1E151BD6E82BC31A42386F291D748F1.mft caRepository: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 19:24:25 +0000 Certificate not after: Wed 14 Apr 2027 19:29:25 +0000 Subordinate resources: AS: 263470 IP: 170.83.200.0/22 IP: 191.242.48.0/21 IP: 2804:1254::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 21:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:40:73:4d:e6:1e:29:e7:21:dd:98:68:14:0c:36:59:c0:64:47:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 15 19:24:25 2026 GMT Not After : Apr 14 19:29:25 2027 GMT Subject: CN=941720CBD1E151BD6E82BC31A42386F291D748F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:d2:5e:15:11:fb:26:ab:c5:f4:e1:16:0a: b0:bf:a0:03:ac:3f:53:b8:75:04:1c:17:be:47:3f: 14:54:46:3c:18:5f:f6:f2:2a:17:63:a0:04:7f:2a: 89:60:6d:5a:fe:b1:66:25:1d:1c:ab:72:f5:50:d7: ef:5e:ac:3b:6a:dd:59:47:5f:1c:06:66:06:79:3d: b3:9f:cd:35:0a:61:35:96:b6:84:2c:23:c2:1c:39: c2:72:0f:0e:a8:34:b4:fc:84:8f:75:e9:ab:6d:31: 9a:cf:9e:7f:68:b7:73:76:11:18:37:9b:7e:b0:0b: 77:3a:34:71:45:9a:44:24:3a:cb:03:31:a0:a2:fb: 5f:af:b1:f4:a5:95:2c:b2:dd:4b:95:4a:e6:80:bb: 32:67:38:ba:d1:e9:ad:17:7e:61:c3:66:22:bd:71: e9:a9:c2:61:cf:1a:77:46:97:78:b9:88:60:a2:17: f8:5a:03:f7:d6:2b:9e:86:df:19:a7:5d:f8:f2:55: 2f:cb:c5:81:60:8d:32:d1:9c:39:97:26:bc:b8:67: 18:c9:f3:1c:3f:68:8d:0b:b7:99:d9:0f:81:70:e8: cf:96:47:18:b6:df:1d:11:72:fa:5b:90:46:c0:8f: ea:9a:14:2f:38:33:21:97:36:90:0a:15:bc:4b:1f: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:17:20:CB:D1:E1:51:BD:6E:82:BC:31:A4:23:86:F2:91:D7:48:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/941720CBD1E151BD6E82BC31A42386F291D748F1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.200.0/22 191.242.48.0/21 IPv6: 2804:1254::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263470 Signature Algorithm: sha256WithRSAEncryption 76:5b:d5:4f:7d:b4:d2:0c:48:69:06:c1:b1:b7:ba:4c:6c:a9: dc:66:ba:4a:01:26:95:69:67:02:c7:10:76:ab:cf:57:20:51: 6f:c4:19:2c:33:1b:1f:78:2d:6e:ac:59:5b:ea:6e:c3:3b:31: c3:95:1f:b0:8d:85:ba:22:cf:cc:a2:25:36:6a:6a:4f:d9:89: 87:5f:e5:a2:9e:b7:16:c0:87:e3:90:b8:f4:6d:a5:e3:2f:1c: 1a:6f:00:57:2b:ac:10:f4:1f:fb:7d:0a:e4:0d:d0:e8:2b:5a: 96:fd:a6:3f:a9:13:09:09:6f:79:ef:6f:08:78:f0:9d:27:24: b5:b3:32:87:03:60:0c:90:cb:b9:d5:98:d3:e6:99:81:77:f1: 1d:51:56:9e:51:cf:c5:1e:d3:da:0e:ac:2f:69:38:02:0c:63: 7d:40:af:b8:f4:1c:bb:fa:90:88:d9:61:1e:58:d9:a5:31:f3: 07:1e:b1:ee:f0:6a:74:61:0f:54:7a:74:af:b3:ea:b8:18:47: 29:56:fb:12:44:29:16:cc:b4:23:4a:a6:20:04:44:6f:ab:99: 68:fb:fc:e9:d3:7a:5c:0e:b8:0f:db:ca:cd:d5:eb:97:4e:eb: f6:56:92:25:d4:74:1b:b8:e1:91:2b:bb:78:11:01:a3:91:6c: c7:da:fc:74 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZUBzTeYeKech3ZhoFAw2WcBkR7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTUxOTI0MjVaFw0yNzA0MTQxOTI5MjVaMDMxMTAvBgNV BAMTKDk0MTcyMENCRDFFMTUxQkQ2RTgyQkMzMUE0MjM4NkYyOTFENzQ4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A9JeFRH7JqvF9OEWCrC/oAOs P1O4dQQcF75HPxRURjwYX/byKhdjoAR/KolgbVr+sWYlHRyrcvVQ1+9erDtq3VlH XxwGZgZ5PbOfzTUKYTWWtoQsI8IcOcJyDw6oNLT8hI916attMZrPnn9ot3N2ERg3 m36wC3c6NHFFmkQkOssDMaCi+1+vsfSllSyy3UuVSuaAuzJnOLrR6a0XfmHDZiK9 cempwmHPGndGl3i5iGCiF/haA/fWK56G3xmnXfjyVS/LxYFgjTLRnDmXJry4ZxjJ 8xw/aI0Lt5nZD4Fw6M+WRxi23x0RcvpbkEbAj+qaFC84MyGXNpAKFbxLH2YtAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUFyDL0eFRvW6C vDGkI4bykddI8TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3hT MUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d4 UzFIa2JNVUo3NEhxYWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAvOTQx NzIwQ0JEMUUxNTFCRDZFODJCQzMxQTQyMzg2RjI5MUQ3NDhGMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlPIAwQDv/IwMA0EAgACMAcDBQAoBBJUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFLjANBgkqhkiG9w0BAQsFAAOCAQEAdlvVT320 0gxIaQbBsbe6TGyp3Ga6SgEmlWlnAscQdqvPVyBRb8QZLDMbH3gtbqxZW+puwzsx w5UfsI2FuiLPzKIlNmpqT9mJh1/lop63FsCH45C49G2l4y8cGm8AVyusEPQf+30K 5A3Q6Ctalv2mP6kTCQlvee9vCHjwnScktbMyhwNgDJDLudWY0+aZgXfxHVFWnlHP xR7T2g6sL2k4AgxjfUCvuPQcu/qQiNlhHljZpTHzBx6x7vBqdGEPVHp0r7PquBhH KVb7EkQpFsy0I0qmIAREb6uZaPv86dN6XA64D9vKzdXrl07r9laSJdR0G7jhkSu7 eBEBo5Fsx9r8dA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:27 2026 by rpki-client