$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer File: F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer (raw, json) Hash identifier: dty+/fm1ZeFOPSZh7uRzej4lMC/MgBMuaD7kvcTCtso= Subject key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 354C57AE7492E2A9E6F24BDD2DEC50E468B97B86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft caRepository: rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Feb 2026 23:13:20 +0000 Certificate not after: Wed 24 Feb 2027 23:18:20 +0000 Subordinate resources: AS: 267396 IP: 45.233.200.0/22 IP: 2804:4cd8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 18:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:57:ae:74:92:e2:a9:e6:f2:4b:dd:2d:ec:50:e4:68:b9:7b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 25 23:13:20 2026 GMT Not After : Feb 24 23:18:20 2027 GMT Subject: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:05:af:71:65:ef:05:81:f5:75:f1:be:b0: 3e:28:61:46:50:49:bd:61:54:7e:ef:09:79:bf:11: 4a:40:68:5b:35:d4:af:29:ce:3c:03:c5:08:54:68: b1:a7:ed:d0:16:43:dd:d6:c7:7e:33:ce:5a:64:7b: d7:25:39:de:cc:d1:f4:87:c1:36:8b:84:20:de:64: fa:a7:d4:e7:4e:91:56:b3:91:2c:4f:77:40:9f:5a: da:87:94:d7:82:8d:c5:e4:ca:ec:81:69:cb:bb:c8: 68:03:78:44:4c:00:ce:1a:3d:fc:22:97:64:c5:c7: 07:7f:2b:bc:a2:68:16:6b:e3:e3:ac:88:be:98:1e: 70:4c:c9:46:24:12:76:3f:a1:a9:38:f1:98:a0:f7: b2:45:63:12:0f:c2:88:45:96:93:35:12:95:2f:61: e7:7a:03:0b:1a:a6:1d:c5:30:03:c4:58:cc:99:c0: fb:6f:e2:38:4e:fb:7c:ed:54:f9:19:b4:ba:16:b9: b0:db:d0:6e:18:1a:cd:32:90:88:9f:a8:6f:b6:50: 2c:20:9a:99:b4:2c:67:c0:1d:be:86:bf:59:8f:13: 41:bb:e9:b4:88:40:24:f1:32:b4:f6:c1:d2:d4:c9: b7:a9:8d:9a:76:ae:d3:b2:00:aa:f7:b6:68:d4:fa: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.200.0/22 IPv6: 2804:4cd8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267396 Signature Algorithm: sha256WithRSAEncryption b7:0f:a9:8c:36:1f:06:62:fe:92:03:cc:e3:b2:93:6e:05:05: ce:8a:25:5e:f6:01:c2:1a:a4:21:12:2f:8c:4c:02:21:68:2e: 8b:de:1b:bf:7f:96:9d:58:9c:6e:3d:e3:97:86:0d:85:be:eb: 42:23:cc:b7:62:3c:87:69:48:1f:d5:34:c3:95:77:38:22:7e: 95:09:46:f5:9d:40:ad:49:d6:28:67:b0:45:f9:bc:64:c6:f9: d9:42:69:44:02:4e:fb:e1:9c:2a:a3:23:41:6a:35:6f:b0:a2: bc:9e:4f:98:b4:93:24:3f:3b:e5:64:24:18:5c:b0:d1:72:83: a5:fd:b7:8a:86:f5:d6:f1:35:0c:80:9d:5f:8a:9a:33:68:59: 40:39:e5:dd:39:71:26:e7:82:87:44:2a:d3:57:e9:70:2d:ff: 9d:70:ed:dd:e1:c4:a8:b4:e7:9d:ae:37:f4:74:d8:33:9f:6c: 1d:c1:b6:04:71:59:00:3b:53:f6:38:f9:cb:49:0d:14:7c:40: fc:ec:b0:0e:20:5d:26:6d:92:bd:c5:c8:48:0f:5d:50:5e:c7: 6f:41:9e:62:de:eb:24:23:50:5d:19:89:00:66:c3:e9:ce:20: 7e:51:d3:f2:9f:fc:c5:4e:8a:9e:fe:52:17:7e:30:3d:99:13: b7:a7:ca:ee -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNUxXrnSS4qnm8kvdLexQ5Gi5e4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAyMjUyMzEzMjBaFw0yNzAyMjQyMzE4MjBaMDMxMTAvBgNV BAMTKEYzREJGRjJGRTAyMUIzNjgzQzBFODA2REUwMTdDNkUzMTA0MEM2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5QWvcWXvBYH1dfG+sD4oYUZQ Sb1hVH7vCXm/EUpAaFs11K8pzjwDxQhUaLGn7dAWQ93Wx34zzlpke9clOd7M0fSH wTaLhCDeZPqn1OdOkVazkSxPd0CfWtqHlNeCjcXkyuyBacu7yGgDeERMAM4aPfwi l2TFxwd/K7yiaBZr4+OsiL6YHnBMyUYkEnY/oak48Zig97JFYxIPwohFlpM1EpUv Yed6Awsaph3FMAPEWMyZwPtv4jhO+3ztVPkZtLoWubDb0G4YGs0ykIifqG+2UCwg mpm0LGfAHb6Gv1mPE0G76bSIQCTxMrT2wdLUybepjZp2rtOyAKr3tmjU+sUdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTz2/8v4CGzaDwO gG3gF8bjEEDG0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEdq TVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xVM1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hH ak1TMjJwNEhCbnhLcUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAvRjNE QkZGMkZFMDIxQjM2ODNDMEU4MDZERTAxN0M2RTMxMDQwQzZEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLenIMA0EAgACMAcDBQAoBEzYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUhDANBgkqhkiG9w0BAQsFAAOCAQEAtw+pjDYfBmL+kgPM 47KTbgUFzoolXvYBwhqkIRIvjEwCIWgui94bv3+WnVicbj3jl4YNhb7rQiPMt2I8 h2lIH9U0w5V3OCJ+lQlG9Z1ArUnWKGewRfm8ZMb52UJpRAJO++GcKqMjQWo1b7Ci vJ5PmLSTJD875WQkGFyw0XKDpf23iob11vE1DICdX4qaM2hZQDnl3TlxJueCh0Qq 01fpcC3/nXDt3eHEqLTnna439HTYM59sHcG2BHFZADtT9jj5y0kNFHxA/OywDiBd Jm2SvcXISA9dUF7Hb0GeYt7rJCNQXRmJAGbD6c4gflHT8p/8xU6Knv5SF34wPZkT t6fK7g== -----END CERTIFICATE-----Generated at Sun Mar 1 19:26:15 2026 by rpki-client