$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0246CC0BAF81DC6E75EFBFC49A8FFC140E6B956.cer File: D0246CC0BAF81DC6E75EFBFC49A8FFC140E6B956.cer (raw, json) Hash identifier: ZRECM7N7gafhEcP+zCiO2lVfqUHqloXE9/VfFidsZ4A= Subject key identifier: D0:24:6C:C0:BA:F8:1D:C6:E7:5E:FB:FC:49:A8:FF:C1:40:E6:B9:56 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 633D98BDB45210F64A0F4D83EB682D2F2E3B9EC7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/D0246CC0BAF81DC6E75EFBFC49A8FFC140E6B956.mft caRepository: rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 16:15:36 +0000 Certificate not after: Mon 12 Apr 2027 16:20:36 +0000 Subordinate resources: AS: 266973 IP: 45.225.228.0/22 IP: 2804:462c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3d:98:bd:b4:52:10:f6:4a:0f:4d:83:eb:68:2d:2f:2e:3b:9e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 13 16:15:36 2026 GMT Not After : Apr 12 16:20:36 2027 GMT Subject: CN=D0246CC0BAF81DC6E75EFBFC49A8FFC140E6B956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:89:48:85:01:61:52:56:12:aa:17:d7:09: 39:e7:1c:06:a5:77:a6:98:e6:f7:ec:a2:cd:dd:a8: 81:17:46:78:88:4e:05:8a:03:a1:b7:ff:2f:c2:aa: fc:7f:b0:50:7d:a1:74:4f:0f:20:f7:46:bf:22:a1: 3f:65:59:cb:44:3a:06:5f:98:09:0f:44:e6:4b:64: 03:fd:6e:c9:2c:2b:9c:2b:17:bc:b7:df:72:2b:7e: 99:2d:96:bf:57:5b:ba:f0:09:82:e9:36:c1:a4:82: e4:91:fd:73:ed:d5:9e:97:3d:f3:8c:98:7b:f5:ab: 69:d7:7e:43:57:86:6b:8c:82:e4:d1:12:c9:9d:3f: a7:91:7c:44:09:0b:7c:3d:c8:a1:00:02:be:2e:df: e0:83:49:3a:4b:6f:5a:8b:06:8d:73:55:bf:85:fd: 75:55:bf:7a:08:80:5a:cd:f7:15:07:e3:54:70:d1: c2:95:c5:f4:70:b2:58:55:4a:9c:68:95:4a:ec:9e: 25:d0:dd:e0:28:6a:87:5a:96:88:fe:ba:fc:ca:e1: 1f:ea:2d:11:a2:19:cf:f7:56:4c:d6:9d:ea:a3:bb: 33:69:a2:c1:ba:57:7d:b0:2c:7f:31:f6:7a:8b:9c: 12:9e:41:7b:e3:c7:4b:58:b3:f4:f5:19:7e:03:3c: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:24:6C:C0:BA:F8:1D:C6:E7:5E:FB:FC:49:A8:FF:C1:40:E6:B9:56 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/D0246CC0BAF81DC6E75EFBFC49A8FFC140E6B956.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.228.0/22 IPv6: 2804:462c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266973 Signature Algorithm: sha256WithRSAEncryption be:4b:94:a7:b2:42:e0:53:a1:2e:2a:59:75:27:d9:89:68:ec: e1:f4:e0:01:c4:80:d8:c7:8c:da:4c:6b:f8:ab:61:a0:b2:b7: c3:0a:56:75:c9:25:5b:41:e0:75:ba:16:92:0f:2a:19:99:23: 21:40:a9:0f:79:ad:18:14:d4:7e:ee:f0:5f:a3:24:1b:a0:fc: 4a:5f:5d:c9:be:5d:48:8e:55:17:a4:a4:28:33:4f:ef:f7:33: 10:38:68:ec:36:e6:28:73:78:46:ac:f9:cb:1e:10:51:e4:8f: e5:56:f6:c6:7e:f1:90:53:27:98:51:21:64:44:67:a6:e3:83: 40:64:18:46:a1:c5:3b:0f:51:a1:01:84:58:f4:1b:a1:ee:76: 2f:a6:c0:51:9e:e2:a7:89:c0:d1:2c:82:bf:12:5f:df:13:25: 22:de:7c:70:6b:98:10:85:d8:a8:de:76:86:85:99:f7:94:22: b9:45:4e:60:4b:ba:bf:d9:67:a6:0c:d9:5d:51:27:5d:4b:57: c6:62:cd:31:66:36:66:51:62:50:3f:d7:c0:4c:e4:10:41:00: cc:ea:c2:85:67:0f:14:5c:bd:10:b3:b2:8d:75:4c:d9:7a:ae: e3:59:f4:87:a1:a1:59:61:17:f5:47:14:6f:71:5d:4c:b4:3f: d7:ad:9c:51 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUYz2YvbRSEPZKD02D62gtLy47nscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTMxNjE1MzZaFw0yNzA0MTIxNjIwMzZaMDMxMTAvBgNV BAMTKEQwMjQ2Q0MwQkFGODFEQzZFNzVFRkJGQzQ5QThGRkMxNDBFNkI5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm4lIhQFhUlYSqhfXCTnnHAal d6aY5vfsos3dqIEXRniITgWKA6G3/y/Cqvx/sFB9oXRPDyD3Rr8ioT9lWctEOgZf mAkPROZLZAP9bsksK5wrF7y333Irfpktlr9XW7rwCYLpNsGkguSR/XPt1Z6XPfOM mHv1q2nXfkNXhmuMguTREsmdP6eRfEQJC3w9yKEAAr4u3+CDSTpLb1qLBo1zVb+F /XVVv3oIgFrN9xUH41Rw0cKVxfRwslhVSpxolUrsniXQ3eAoaodaloj+uvzK4R/q LRGiGc/3VkzWneqjuzNposG6V32wLH8x9nqLnBKeQXvjx0tYs/T1GX4DPHnvAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQJGzAuvgdxude +/xJqP/BQOa5VjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUkJj ZVVnQzNTQmd3Z2VaRldROTZpd2tIamZLRm4yemVKcDh2aXB4a3VKdi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUkJj ZVVnQzNTQmd3Z2VaRldROTZpd2tIamZLRm4yemVKcDh2aXB4a3VKdi8wL0QwMjQ2 Q0MwQkFGODFEQzZFNzVFRkJGQzQ5QThGRkMxNDBFNkI5NTYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi3h5DANBAIAAjAHAwUAKARGLDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEEt0wDQYJKoZIhvcNAQELBQADggEBAL5LlKeyQuBToS4qWXUn 2Ylo7OH04AHEgNjHjNpMa/irYaCyt8MKVnXJJVtB4HW6FpIPKhmZIyFAqQ95rRgU 1H7u8F+jJBug/EpfXcm+XUiOVRekpCgzT+/3MxA4aOw25ihzeEas+cseEFHkj+VW 9sZ+8ZBTJ5hRIWREZ6bjg0BkGEahxTsPUaEBhFj0G6Hudi+mwFGe4qeJwNEsgr8S X98TJSLefHBrmBCF2KjedoaFmfeUIrlFTmBLur/ZZ6YM2V1RJ11LV8ZizTFmNmZR YlA/18BM5BBBAMzqwoVnDxRcvRCzso11TNl6ruNZ9IehoVlhF/VHFG9xXUy0P9et nFE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:19:21 2026 by rpki-client