$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer File: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer (raw, json) Hash identifier: UAaqd9hgW6C9HVoByl2l7xeOZJQHbXj6LqnUCOfTZgg= Subject key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 538382A58D98920045553EE93AC9DC8489FE309C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft caRepository: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 03 Apr 2026 01:46:46 +0000 Certificate not after: Fri 02 Apr 2027 01:51:46 +0000 Subordinate resources: AS: 52916 IP: 143.255.16.0/22 IP: 177.10.20.0/22 IP: 2804:2b10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:83:82:a5:8d:98:92:00:45:55:3e:e9:3a:c9:dc:84:89:fe:30:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 01:46:46 2026 GMT Not After : Apr 2 01:51:46 2027 GMT Subject: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:df:71:f4:4a:31:3a:45:77:29:ec:62:9e: a8:a1:1b:ff:a1:67:63:7c:e8:ff:5b:bc:74:96:45: fc:35:08:f9:6b:25:b5:bf:a3:42:95:29:28:5f:90: 99:dd:4d:70:b5:b7:99:ac:42:a2:f2:4d:66:f2:63: a1:d7:c2:a4:94:5b:a2:84:a9:95:d6:47:e5:e7:59: 3b:70:cb:dc:4c:65:14:97:8b:3c:6e:42:1f:00:14: f3:41:7a:eb:0b:c5:d6:55:c7:2c:e9:40:b7:5d:5a: 18:c6:fe:fd:46:4c:03:77:50:83:19:31:36:cc:5b: f5:c5:e9:2a:85:f2:da:2d:58:08:77:9c:f4:74:43: 89:fe:04:af:a8:0c:a0:8d:91:b9:2a:2b:22:9e:ef: 9b:cf:1f:2c:fc:f0:84:c6:0e:d9:e7:66:1f:23:c7: 7b:ad:6f:7e:69:70:4b:ac:fe:98:5e:b8:cf:49:da: 14:80:58:e8:16:65:70:01:77:48:20:a6:29:6f:a1: 48:bf:ea:06:df:1b:34:9b:d7:8d:18:77:fd:c4:4b: 3e:2a:fa:f7:7e:3b:d0:e4:7e:92:84:12:e3:6a:7a: 6d:c4:54:5d:b7:57:f2:93:5c:70:dc:27:17:69:e3: 47:c0:40:05:fc:e0:f4:54:98:00:10:97:2d:05:b4: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.16.0/22 177.10.20.0/22 IPv6: 2804:2b10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52916 Signature Algorithm: sha256WithRSAEncryption 97:44:8f:f8:fd:62:9e:34:50:c4:31:e1:d3:8b:56:7e:99:51: 6a:2f:78:7c:56:ce:c7:ce:34:6a:6d:45:86:f3:72:5c:c7:62: dc:7e:c8:5e:ef:03:3f:d4:79:2b:0a:9f:9e:ef:e8:06:bc:63: 8a:5c:86:fc:c2:8f:ba:36:1d:cf:78:a9:91:41:5e:95:f4:22: 4e:af:13:a6:12:35:fb:bc:2a:97:be:0d:59:e7:e8:37:3a:72: bd:6b:1f:d7:00:fc:25:ad:76:a5:06:94:f6:8d:58:55:a2:25: 06:9c:ea:bd:e7:b6:f8:6d:1b:fb:a3:43:be:9b:a0:02:fd:4f: 57:a0:cb:00:45:38:ae:69:c0:8b:80:4d:08:f2:51:d0:50:cc: 17:62:2b:5b:f1:b9:de:7a:9e:fd:61:d0:a3:31:35:41:b3:0a: 8d:9a:75:a2:4c:cf:71:ab:94:f4:db:1e:e7:09:8a:94:82:19: 90:23:f0:06:fd:0a:c3:15:ca:b8:53:08:d7:2e:bf:9c:0d:96: f7:80:87:75:1d:50:fc:84:9a:bf:ff:1f:b7:8a:c3:fc:9f:60: 18:4e:7c:40:7a:92:76:86:cb:9e:96:b2:5a:70:aa:93:03:5a: 98:9b:9a:c4:e0:f7:87:7f:e2:e0:9b:9a:ba:6d:da:31:fd:12: ad:c5:42:0a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUU4OCpY2YkgBFVT7pOsnchIn+MJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDMwMTQ2NDZaFw0yNzA0MDIwMTUxNDZaMDMxMTAvBgNV BAMTKDEwMjhGOTNEQjczMEQ5MURDMDA5MURGOThDNkYwMjI5RURBNjlDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqt9x9EoxOkV3KexinqihG/+h Z2N86P9bvHSWRfw1CPlrJbW/o0KVKShfkJndTXC1t5msQqLyTWbyY6HXwqSUW6KE qZXWR+XnWTtwy9xMZRSXizxuQh8AFPNBeusLxdZVxyzpQLddWhjG/v1GTAN3UIMZ MTbMW/XF6SqF8totWAh3nPR0Q4n+BK+oDKCNkbkqKyKe75vPHyz88ITGDtnnZh8j x3utb35pcEus/pheuM9J2hSAWOgWZXABd0ggpilvoUi/6gbfGzSb140Yd/3ESz4q +vd+O9DkfpKEEuNqem3EVF23V/KTXHDcJxdp40fAQAX84PRUmAAQly0FtO8jAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQKPk9tzDZHcAJ HfmMbwIp7aac7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMS8xMDI4 RjkzREI3MzBEOTFEQzAwOTFERjk4QzZGMDIyOUVEQTY5Q0VFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP/xADBAKxChQwDQQCAAIwBwMFACgEKxAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM60MA0GCSqGSIb3DQEBCwUAA4IBAQCXRI/4/WKe NFDEMeHTi1Z+mVFqL3h8Vs7HzjRqbUWG83Jcx2Lcfshe7wM/1HkrCp+e7+gGvGOK XIb8wo+6Nh3PeKmRQV6V9CJOrxOmEjX7vCqXvg1Z5+g3OnK9ax/XAPwlrXalBpT2 jVhVoiUGnOq957b4bRv7o0O+m6AC/U9XoMsARTiuacCLgE0I8lHQUMwXYitb8bne ep79YdCjMTVBswqNmnWiTM9xq5T02x7nCYqUghmQI/AG/QrDFcq4UwjXLr+cDZb3 gId1HVD8hJq//x+3isP8n2AYTnxAepJ2hsuelrJacKqTA1qYm5rE4PeHf+Lgm5q6 bdox/RKtxUIK -----END CERTIFICATE-----Generated at Wed Apr 8 17:46:31 2026 by rpki-client