$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer File: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer (raw, json) Hash identifier: XCEk5Vf7pm0vJdStEmxJf50shn8Fa1U3Omu1ppRZl6U= Subject key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36443E11B3893A0F0FC7B1C41EFBAD7CA7D715F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft caRepository: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 21 Feb 2026 10:42:48 +0000 Certificate not after: Sat 20 Feb 2027 10:47:48 +0000 Subordinate resources: AS: 271573 IP: 200.0.179.0/24 IP: 200.6.134.0/23 IP: 201.131.106.0/24 IP: 2804:7da0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 08:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:44:3e:11:b3:89:3a:0f:0f:c7:b1:c4:1e:fb:ad:7c:a7:d7:15:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 10:42:48 2026 GMT Not After : Feb 20 10:47:48 2027 GMT Subject: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:b0:e6:f2:69:b1:c7:cb:76:5c:8d:0c:36: 04:8b:09:17:6d:41:b1:4c:0c:f6:01:af:82:0a:99: f4:cb:12:0f:75:82:62:d6:b8:8d:b5:a5:9e:5d:be: 39:64:09:dc:22:8d:0e:8e:21:71:02:a8:01:1e:e8: c8:f9:b2:f6:71:db:74:47:80:3c:d7:8a:d1:f8:13: 74:db:54:79:d8:cb:25:34:51:50:e7:91:8d:b7:fd: 17:bc:ec:54:7e:2e:35:7a:d0:b4:0b:77:80:59:59: 43:63:c9:16:c8:18:dd:bb:80:7d:d8:08:3c:7a:b7: 8b:27:4a:23:fd:35:4a:30:5f:15:5a:61:7d:05:84: 5f:9a:e2:0a:e6:32:a4:ea:54:6e:1f:98:16:76:da: c7:2c:0a:f9:36:44:a0:f5:e0:c9:fd:ae:05:6b:d5: 8f:cc:e5:ab:3f:b3:cf:26:8c:eb:f9:8a:98:be:04: 0d:af:c2:20:b8:cc:b0:87:c5:5e:6e:2e:46:0e:28: 3c:6d:0c:df:c7:e1:c3:3f:0f:07:19:91:5e:41:51: 96:0e:5c:f2:d1:c7:10:4b:f9:0d:1c:41:f7:87:5d: 6e:c1:5d:38:82:bd:69:29:66:5b:88:61:38:68:7a: 3d:e6:53:a0:0e:72:e8:bd:6c:31:76:75:ce:6e:49: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.179.0/24 200.6.134.0/23 201.131.106.0/24 IPv6: 2804:7da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271573 Signature Algorithm: sha256WithRSAEncryption db:74:29:7a:16:54:ec:d9:49:b0:fb:13:01:fe:21:98:38:58: 30:c4:e2:8e:11:cd:46:7d:09:e8:5e:28:bb:54:b7:b6:ca:26: 7d:45:a9:5b:2d:8e:88:52:f8:9d:de:d6:96:a6:7e:ce:2d:75: 4e:e6:cc:f1:00:44:46:9f:bc:f3:9b:9c:ec:6f:e4:78:c4:f7: 0b:75:cc:ac:3e:fd:4e:a1:9c:d9:70:c1:46:75:fb:52:8e:8f: 0b:12:72:ff:2f:f4:7d:c6:88:1a:97:43:42:7a:4c:b8:4b:1d: c3:78:fe:46:4e:2c:f0:bb:8a:4e:45:bd:c6:29:93:a7:37:b6: 05:3c:ff:32:89:07:2f:10:28:1c:67:13:96:a1:01:62:bd:75: 23:18:eb:a0:d4:1a:53:35:c0:4f:e2:16:16:5e:4a:e6:08:b4: 8e:64:5c:9a:e2:cc:7e:ec:c2:8a:c7:66:4a:37:cc:82:b3:47: 86:2e:8c:42:c3:40:ed:73:db:59:f7:b6:aa:f2:43:b2:1f:64: e9:71:6d:2c:54:f5:6d:27:c0:f5:08:43:60:d4:ae:60:e5:cc: 7b:be:a4:06:32:5d:7d:c2:e1:87:54:fe:1a:7d:62:e0:c7:a8: f1:0b:8b:64:23:d3:35:2d:bd:7c:aa:5e:0c:9d:fa:98:41:11: 57:83:3b:89 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUNkQ+EbOJOg8Px7HEHvutfKfXFfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjExMDQyNDhaFw0yNzAyMjAxMDQ3NDhaMDMxMTAvBgNV BAMTKEVDM0E5QjZDMUY2QTY5NDQ5Q0EyMUZENzgwRjRGODAxRjZDRTZCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWbDm8mmxx8t2XI0MNgSLCRdt QbFMDPYBr4IKmfTLEg91gmLWuI21pZ5dvjlkCdwijQ6OIXECqAEe6Mj5svZx23RH gDzXitH4E3TbVHnYyyU0UVDnkY23/Re87FR+LjV60LQLd4BZWUNjyRbIGN27gH3Y CDx6t4snSiP9NUowXxVaYX0FhF+a4grmMqTqVG4fmBZ22scsCvk2RKD14Mn9rgVr 1Y/M5as/s88mjOv5ipi+BA2vwiC4zLCHxV5uLkYOKDxtDN/H4cM/DwcZkV5BUZYO XPLRxxBL+Q0cQfeHXW7BXTiCvWkpZluIYThoej3mU6AOcui9bDF2dc5uSWF1AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsOptsH2ppRJyi H9eA9PgB9s5rBjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmhC c3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1M3AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zo QnNxVVRLVTdWS3prQmNKUVJwRE5DaWdyVGdjYlZYWnB2V3pOM25hNTNwLzAvRUMz QTlCNkMxRjZBNjk0NDlDQTIxRkQ3ODBGNEY4MDFGNkNFNkIwNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQAyACzAwQByAaGAwQAyYNqMA0EAgACMAcDBQAoBH2g MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQk1TANBgkqhkiG9w0BAQsFAAOCAQEA 23QpehZU7NlJsPsTAf4hmDhYMMTijhHNRn0J6F4ou1S3tsomfUWpWy2OiFL4nd7W lqZ+zi11TubM8QBERp+885uc7G/keMT3C3XMrD79TqGc2XDBRnX7Uo6PCxJy/y/0 fcaIGpdDQnpMuEsdw3j+Rk4s8LuKTkW9ximTpze2BTz/MokHLxAoHGcTlqEBYr11 IxjroNQaUzXAT+IWFl5K5gi0jmRcmuLMfuzCisdmSjfMgrNHhi6MQsNA7XPbWfe2 qvJDsh9k6XFtLFT1bSfA9QhDYNSuYOXMe76kBjJdfcLhh1T+Gn1i4Meo8QuLZCPT NS29fKpeDJ36mEERV4M7iQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:49 2026 by rpki-client