$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer File: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer (raw, json) Hash identifier: zr/u1KUtB4r3Q3G0QELwhb7jKfp9uKXNpR8eGaQK8hg= Subject key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A3723EC6E0F2914BDAC52620A967FAD4B571382 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft caRepository: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Feb 2026 07:17:24 +0000 Certificate not after: Thu 25 Feb 2027 07:22:24 +0000 Subordinate resources: AS: 52573 IP: 24.152.96.0/22 IP: 45.6.228.0/22 IP: 45.65.168.0/22 IP: 45.224.48.0/22 IP: 45.226.56.0/23 IP: 131.0.12.0/22 IP: 138.118.68.0/22 IP: 138.204.32.0/22 IP: 138.255.76.0/22 IP: 143.137.176.0/22 IP: 143.255.148.0/22 IP: 168.90.20.0/22 IP: 168.197.112.0/22 IP: 170.247.68.0/22 IP: 170.254.8.0/22 IP: 177.86.72.0/22 IP: 177.86.168.0/21 IP: 177.87.40.0/22 IP: 177.91.40.0/22 IP: 177.92.176.0/21 IP: 177.125.108.0/22 IP: 179.42.96.0/22 IP: 186.250.252.0/22 IP: 191.242.32.0/22 IP: 201.182.28.0/22 IP: 2804:ce4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:37:23:ec:6e:0f:29:14:bd:ac:52:62:0a:96:7f:ad:4b:57:13:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 26 07:17:24 2026 GMT Not After : Feb 25 07:22:24 2027 GMT Subject: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:ad:73:63:0f:57:91:cb:eb:ae:20:cf:38: 06:55:a3:df:6e:11:62:f1:d7:0e:82:84:79:43:54: 65:d5:fc:9c:2f:eb:a6:88:e7:af:19:44:98:7a:36: 5d:12:9a:23:89:0e:28:17:54:2e:6b:df:d3:56:bc: 2c:d7:9d:26:78:4e:c8:83:9a:47:c8:d1:c3:20:fe: 44:39:39:9b:ee:c9:a2:44:fb:85:77:56:64:4b:95: 23:7a:16:10:34:44:03:a2:4d:f7:7f:79:7c:bc:8e: 6f:b5:d5:d3:ce:c6:ea:db:d5:e4:90:10:99:a8:35: 84:69:27:21:08:bd:19:c1:d8:5a:57:8d:9d:58:c7: 89:e4:e0:25:74:e3:8c:eb:60:d9:d7:f6:ee:15:e2: 34:10:48:e2:65:58:a4:5d:c2:e3:c4:f8:ec:6a:51: da:5c:f6:78:c1:0d:bc:26:0f:48:cc:b2:c7:e8:24: f2:47:da:b0:e8:af:bb:b0:2e:34:e1:f7:9e:d1:87: 21:3d:4c:a9:75:c5:27:73:ed:3e:38:f7:3b:68:c3: 5b:a4:54:24:ec:60:6e:32:a2:bf:b7:64:5d:c1:72: 7c:cd:10:a9:a7:bb:52:ce:9b:25:17:06:0f:bc:ed: 84:b4:5c:9a:f5:2f:98:89:3b:71:da:fa:ce:a7:70: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.96.0/22 45.6.228.0/22 45.65.168.0/22 45.224.48.0/22 45.226.56.0/23 131.0.12.0/22 138.118.68.0/22 138.204.32.0/22 138.255.76.0/22 143.137.176.0/22 143.255.148.0/22 168.90.20.0/22 168.197.112.0/22 170.247.68.0/22 170.254.8.0/22 177.86.72.0/22 177.86.168.0/21 177.87.40.0/22 177.91.40.0/22 177.92.176.0/21 177.125.108.0/22 179.42.96.0/22 186.250.252.0/22 191.242.32.0/22 201.182.28.0/22 IPv6: 2804:ce4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52573 Signature Algorithm: sha256WithRSAEncryption b6:a4:fc:c6:93:d0:61:d9:aa:67:23:4d:1e:a1:84:50:36:f4: c3:b7:d8:19:71:4b:fd:09:0a:b2:fa:3b:1f:0f:f5:f0:7a:32: bf:75:8f:28:c7:75:ba:ba:ef:e1:e3:dd:13:09:66:4e:2a:63: 7e:34:d3:31:8a:66:25:43:56:78:23:82:54:1e:4c:8e:30:53: 23:68:98:49:4d:b2:58:e5:5c:e5:93:6a:40:8e:5e:6f:78:ae: bb:fc:46:5d:8b:43:59:4f:7f:25:5b:42:c4:f1:4a:9a:57:cc: 9b:65:2e:dd:f8:b8:ef:eb:b9:97:ec:0e:be:5a:3c:0a:35:b3: 7d:b1:b4:5f:85:5d:de:31:36:95:90:c9:54:e1:be:67:0a:a6: fc:05:b5:3e:8b:d7:54:8e:18:91:ae:9e:2f:c0:e4:e7:3d:5a: 98:5b:6e:5f:66:34:e6:65:e8:9f:3d:c8:4e:e4:10:31:1a:c4: 2a:d3:3e:50:83:9a:76:99:a4:18:7d:b5:45:50:68:ba:ba:07: 12:12:b5:61:98:11:98:0e:f4:4e:1b:b6:85:a7:93:09:02:81: c3:82:80:45:e2:cb:35:00:91:9a:9d:53:55:54:bd:1e:68:45: ce:f8:51:b1:07:c8:06:22:61:16:e0:44:40:99:2d:b6:4f:30: b6:f2:2a:ac -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgIUejcj7G4PKRS9rFJiCpZ/rUtXE4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjYwNzE3MjRaFw0yNzAyMjUwNzIyMjRaMDMxMTAvBgNV BAMTKEQ2ODZGMkQxQzhENkYwRTE4MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfa1zYw9XkcvrriDPOAZVo99u EWLx1w6ChHlDVGXV/Jwv66aI568ZRJh6Nl0SmiOJDigXVC5r39NWvCzXnSZ4TsiD mkfI0cMg/kQ5OZvuyaJE+4V3VmRLlSN6FhA0RAOiTfd/eXy8jm+11dPOxurb1eSQ EJmoNYRpJyEIvRnB2FpXjZ1Yx4nk4CV044zrYNnX9u4V4jQQSOJlWKRdwuPE+Oxq Udpc9njBDbwmD0jMssfoJPJH2rDor7uwLjTh957RhyE9TKl1xSdz7T449ztow1uk VCTsYG4yor+3ZF3BcnzNEKmnu1LOmyUXBg+87YS0XJr1L5iJO3Ha+s6ncAHbAgMB AAGjggPPMIIDyzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWhvLRyNbw4YIA 17o7ThOKhn4lxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkpm eWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZFZVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJK ZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAvRDY4 NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4NjdFMjVDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHCBggrBgEFBQcB BwEB/wSBsjCBrzCBnQQCAAEwgZYDBAIYmGADBAItBuQDBAItQagDBAIt4DADBAEt 4jgDBAKDAAwDBAKKdkQDBAKKzCADBAKK/0wDBAKPibADBAKP/5QDBAKoWhQDBAKo xXADBAKq90QDBAKq/ggDBAKxVkgDBAOxVqgDBAKxVygDBAKxWygDBAOxXLADBAKx fWwDBAKzKmADBAK6+vwDBAK/8iADBALJthwwDQQCAAIwBwMFACgEDOQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM1dMA0GCSqGSIb3DQEBCwUAA4IBAQC2pPzGk9Bh 2apnI00eoYRQNvTDt9gZcUv9CQqy+jsfD/XwejK/dY8ox3W6uu/h490TCWZOKmN+ NNMximYlQ1Z4I4JUHkyOMFMjaJhJTbJY5Vzlk2pAjl5veK67/EZdi0NZT38lW0LE 8UqaV8ybZS7d+Ljv67mX7A6+WjwKNbN9sbRfhV3eMTaVkMlU4b5nCqb8BbU+i9dU jhiRrp4vwOTnPVqYW25fZjTmZeifPchO5BAxGsQq0z5Qg5p2maQYfbVFUGi6ugcS ErVhmBGYDvROG7aFp5MJAoHDgoBF4ss1AJGanVNVVL0eaEXO+FGxB8gGImEW4ERA mS22TzC28iqs -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:26 2026 by rpki-client