$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer File: D3E3B64C2CD0703CA658C2222A71EB5157345180.cer (raw, json) Hash identifier: fSOOFUNBShro8u6GMGKVbClNIp+jJoPgofAUVnFoZm0= Subject key identifier: D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0FEE525A9080EC52FCA968DFB618452A3DBD56B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft caRepository: rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Feb 2026 17:09:27 +0000 Certificate not after: Mon 22 Feb 2027 17:14:27 +0000 Subordinate resources: AS: 271312 IP: 187.94.236.0/24 IP: 187.94.238.0/23 IP: 2804:798c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ee:52:5a:90:80:ec:52:fc:a9:68:df:b6:18:45:2a:3d:bd:56:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 23 17:09:27 2026 GMT Not After : Feb 22 17:14:27 2027 GMT Subject: CN=D3E3B64C2CD0703CA658C2222A71EB5157345180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:39:90:05:c9:13:ba:87:3e:d1:7e:ce:7e: 04:f3:f2:fd:bb:64:31:07:b1:bf:b8:d5:ab:1b:67: cc:f4:76:6c:a1:2e:27:d9:fa:ab:71:ed:2b:ee:72: 78:25:04:33:d2:15:d7:99:96:ab:bf:1c:6e:5b:9b: fc:fe:23:00:9a:ec:ce:f1:7e:51:3c:4e:cb:16:df: 35:3e:04:df:ed:9f:d8:8e:c7:8e:1d:72:7a:2c:16: 56:81:33:84:5d:af:81:86:d2:86:3d:cf:33:21:e7: c4:b1:1a:f2:c7:00:04:2a:62:29:99:ee:6e:6a:f0: 9e:1a:9e:6f:3e:04:d0:16:70:45:bf:6b:98:09:32: 01:70:1d:d3:64:88:60:d2:11:c5:43:0d:c9:70:a8: 5f:3a:35:3d:a7:0b:7b:61:eb:ed:d9:14:0d:02:fb: dc:07:33:e8:de:08:05:9f:0e:a3:60:3a:11:c4:25: 5c:1a:31:2c:47:ac:36:0a:fd:b9:72:b2:be:5a:9e: cd:a2:0b:3a:2a:f5:03:04:ad:0b:1f:d0:d6:8f:72: 29:84:31:4d:ac:1e:a4:ff:26:a1:0c:a6:43:40:c1: fe:b0:70:8d:70:72:05:04:ab:6c:eb:fb:47:d6:b7: 2d:0a:a7:ab:96:66:84:c5:e3:74:91:8a:91:e6:ed: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.94.236.0/24 187.94.238.0/23 IPv6: 2804:798c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271312 Signature Algorithm: sha256WithRSAEncryption d4:53:e9:00:0a:16:cb:42:db:64:7c:c1:66:a4:34:fd:3a:5d: 57:bb:44:3a:59:44:47:c4:28:43:d6:06:f7:65:bf:f1:fc:45: 2d:b5:c5:40:09:c9:5f:cd:ed:6f:ae:6c:88:56:e6:b4:95:aa: 67:24:ce:35:e2:64:41:29:d0:ce:2a:3d:7f:a7:6d:3a:af:b1: a3:60:b1:0d:bf:68:3d:4a:3b:cd:5b:37:c6:5e:57:8c:85:2d: 19:80:6c:72:97:5b:61:3d:8d:83:53:8a:8d:92:d4:57:87:5e: d9:ef:0c:95:bc:b1:03:d2:ce:05:73:f8:c4:c1:a2:71:d1:7d: 0a:83:48:37:20:e2:42:e3:bd:c2:13:4f:48:24:81:08:a5:91: 13:f9:f1:d4:05:18:5e:9e:c9:37:1e:98:2c:dd:d6:38:b4:e0: 4f:7e:af:25:df:0f:7d:d2:ea:32:28:95:d3:af:c7:db:24:ba: 45:96:6c:5e:77:b7:0c:2f:fc:d6:cf:04:8e:21:99:46:7b:a7: 24:68:f4:9f:67:5a:85:2d:a2:13:e6:4e:d4:3b:dd:4c:75:81: 1b:8c:20:20:d5:94:cf:4f:25:5b:e8:ad:20:af:b2:6a:4a:35: 4d:84:dc:85:1e:cb:fb:57:f0:fc:f9:94:5d:53:b3:1a:5d:18: 29:7b:18:38 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUD+5SWpCA7FL8qWjfthhFKj29VrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjMxNzA5MjdaFw0yNzAyMjIxNzE0MjdaMDMxMTAvBgNV BAMTKEQzRTNCNjRDMkNEMDcwM0NBNjU4QzIyMjJBNzFFQjUxNTczNDUxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvzmQBckTuoc+0X7OfgTz8v27 ZDEHsb+41asbZ8z0dmyhLifZ+qtx7SvucnglBDPSFdeZlqu/HG5bm/z+IwCa7M7x flE8TssW3zU+BN/tn9iOx44dcnosFlaBM4Rdr4GG0oY9zzMh58SxGvLHAAQqYimZ 7m5q8J4anm8+BNAWcEW/a5gJMgFwHdNkiGDSEcVDDclwqF86NT2nC3th6+3ZFA0C +9wHM+jeCAWfDqNgOhHEJVwaMSxHrDYK/blysr5ans2iCzoq9QMErQsf0NaPcimE MU2sHqT/JqEMpkNAwf6wcI1wcgUEq2zr+0fWty0Kp6uWZoTF43SRipHm7XoPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT47ZMLNBwPKZY wiIqcetRVzRRgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJm Yllic1RndVVlTUt3cVY1VEFpaXhZZXRSQUtlbWl6aUNZaVBUeEFDTmcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hy ZmJZYnNUZ3VVZU1Ld3FWNVRBaWl4WWV0UkFLZW1pemlDWWlQVHhBQ05nLzAvRDNF M0I2NEMyQ0QwNzAzQ0E2NThDMjIyMkE3MUVCNTE1NzM0NTE4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQAu17sAwQBu17uMA0EAgACMAcDBQAoBHmMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQj0DANBgkqhkiG9w0BAQsFAAOCAQEA1FPpAAoW y0LbZHzBZqQ0/TpdV7tEOllER8QoQ9YG92W/8fxFLbXFQAnJX83tb65siFbmtJWq ZyTONeJkQSnQzio9f6dtOq+xo2CxDb9oPUo7zVs3xl5XjIUtGYBscpdbYT2Ng1OK jZLUV4de2e8MlbyxA9LOBXP4xMGicdF9CoNINyDiQuO9whNPSCSBCKWRE/nx1AUY Xp7JNx6YLN3WOLTgT36vJd8PfdLqMiiV06/H2yS6RZZsXne3DC/81s8EjiGZRnun JGj0n2dahS2iE+ZO1DvdTHWBG4wgINWUz08lW+itIK+yako1TYTchR7L+1fw/PmU XVOzGl0YKXsYOA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:31 2026 by rpki-client