$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer File: D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer (raw, json) Hash identifier: 6jFqBlbgHW1tm1VXvJmEUTXkI8o6R5sWV8u1aI7lPUU= Subject key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 50B42DBE6E74174421348DF408D95BB419ED1D21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft caRepository: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 28 Feb 2026 19:51:00 +0000 Certificate not after: Sat 27 Feb 2027 19:56:00 +0000 Subordinate resources: AS: 267563 IP: 45.70.128.0/22 IP: 181.233.104.0/22 IP: 2804:4354::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b4:2d:be:6e:74:17:44:21:34:8d:f4:08:d9:5b:b4:19:ed:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 19:51:00 2026 GMT Not After : Feb 27 19:56:00 2027 GMT Subject: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:4a:bb:b1:2b:ec:25:8f:cb:c4:99:46:00: 6d:7c:ce:cb:dd:b7:57:36:7a:1c:9b:46:08:52:6e: de:5e:7c:f8:f2:73:cc:29:71:f1:3f:02:ac:d7:b7: 66:78:0c:f9:ff:95:7f:1c:2e:76:cc:2f:ac:01:cb: f1:96:fa:2c:f6:b5:e6:ed:34:0f:53:a5:f2:03:0f: c6:7e:cf:59:ee:93:b6:48:c4:26:79:f4:00:b8:cd: 92:79:db:65:a4:39:81:20:68:53:09:52:65:d9:03: 72:ec:56:0a:94:58:dc:07:bc:3f:67:67:9f:0d:d4: d1:a0:0c:f4:97:25:ee:84:30:2e:88:37:4d:8a:dd: 27:43:3d:2c:43:4c:c4:11:36:de:10:db:76:31:0e: ce:14:29:6d:18:88:62:66:8e:a9:64:2d:5d:83:29: 61:a1:57:34:80:92:19:02:89:d5:9c:a2:9b:c6:a7: 59:bc:22:fc:63:ba:54:c5:82:9a:da:1e:e7:bc:de: 4a:f5:94:07:5a:00:45:c5:a4:5b:b6:c5:fa:61:14: 44:14:5a:b0:82:9b:a9:4d:82:fd:70:03:77:df:fd: ae:f0:d7:3b:0a:f1:2e:e7:1d:31:6b:34:1f:91:ce: 1f:c7:0c:2e:e2:f5:d6:cb:b5:e4:85:9d:da:48:79: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.128.0/22 181.233.104.0/22 IPv6: 2804:4354::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267563 Signature Algorithm: sha256WithRSAEncryption 96:c9:5a:d9:7e:e9:d9:af:3e:b0:dc:f9:d6:38:e3:15:63:53: 01:5e:9f:c6:a0:a8:93:b0:62:96:9d:72:a1:b9:2f:e5:d6:1f: cd:a3:b4:f2:43:b2:72:bf:0f:72:cd:4f:1c:2d:97:9f:e3:49: 0f:8e:b6:b4:55:a8:e3:53:0a:3d:4c:f9:d4:15:b3:e6:0c:5d: 81:3d:42:17:5b:bf:c5:13:1b:46:8a:3b:f6:59:9c:6b:40:3f: 11:4d:0f:20:b8:a7:5d:14:b7:6f:a1:55:e5:62:c9:ce:27:c1: 5d:07:6e:cb:b9:98:ad:c0:b0:80:49:4b:60:0b:48:50:0e:2c: 1a:53:b9:cd:51:f5:15:9a:24:7a:fa:ec:d1:1c:ab:4b:b3:6a: 89:26:b9:13:9f:1b:ad:a3:24:c6:c0:ae:1f:ab:df:b7:ad:ac: 33:4a:13:e4:ce:4f:ae:6c:e7:df:9b:fa:61:58:02:c8:34:7f: 43:4e:74:dc:06:aa:7d:1c:cb:83:e0:93:f4:45:79:c9:11:c5: 27:e1:c1:42:a6:77:55:2c:d4:33:06:d4:d4:b7:c3:1c:40:30: 80:92:25:75:5e:fc:35:02:f9:c6:ea:f7:f7:43:d5:0f:75:e0: 64:e1:f2:f8:55:f5:e5:86:6f:21:eb:61:95:3a:b0:48:03:0f: 1e:56:31:f9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUULQtvm50F0QhNI30CNlbtBntHSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjgxOTUxMDBaFw0yNzAyMjcxOTU2MDBaMDMxMTAvBgNV BAMTKEQxNThDM0JGMDVCMjlFQjlGNTM5MzYxOEI5N0NENTEwRDFEQTIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK0q7sSvsJY/LxJlGAG18zsvd t1c2ehybRghSbt5efPjyc8wpcfE/AqzXt2Z4DPn/lX8cLnbML6wBy/GW+iz2tebt NA9TpfIDD8Z+z1nuk7ZIxCZ59AC4zZJ522WkOYEgaFMJUmXZA3LsVgqUWNwHvD9n Z58N1NGgDPSXJe6EMC6IN02K3SdDPSxDTMQRNt4Q23YxDs4UKW0YiGJmjqlkLV2D KWGhVzSAkhkCidWcopvGp1m8IvxjulTFgpraHue83kr1lAdaAEXFpFu2xfphFEQU WrCCm6lNgv1wA3ff/a7w1zsK8S7nHTFrNB+Rzh/HDC7i9dbLteSFndpIeUYJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRWMO/BbKeufU5 Nhi5fNUQ0dojVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMno4 VEhKMzZENlBqbURTWnJLRHN3ODVDZ0Nuckg3bnNranpZaGJ4ZmdHTTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6 OFRISjM2RDZQam1EU1pyS0Rzdzg1Q2dDbnJIN25za2p6WWhieGZnR005LzAvRDE1 OEMzQkYwNUIyOUVCOUY1MzkzNjE4Qjk3Q0Q1MTBEMURBMjM1NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUaAAwQCteloMA0EAgACMAcDBQAoBENUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQVKzANBgkqhkiG9w0BAQsFAAOCAQEAlsla2X7p 2a8+sNz51jjjFWNTAV6fxqCok7Bilp1yobkv5dYfzaO08kOycr8Pcs1PHC2Xn+NJ D462tFWo41MKPUz51BWz5gxdgT1CF1u/xRMbRoo79lmca0A/EU0PILinXRS3b6FV 5WLJzifBXQduy7mYrcCwgElLYAtIUA4sGlO5zVH1FZokevrs0RyrS7NqiSa5E58b raMkxsCuH6vft62sM0oT5M5Prmzn35v6YVgCyDR/Q0503AaqfRzLg+CT9EV5yRHF J+HBQqZ3VSzUMwbU1LfDHEAwgJIldV78NQL5xur390PVD3XgZOHy+FX15YZvIeth lTqwSAMPHlYx+Q== -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:34 2026 by rpki-client