$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer File: 53D94339029316790411C8AF7BC622996BF230A8.cer (raw, json) Hash identifier: 5eFxZzO3GTfjMDpmZ9HN5EeGwLOv3OjobTK47od4QHc= Subject key identifier: 53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11CAE83811BA6ABD80B757865FB07089C0A73BDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.mft caRepository: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 12:42:39 +0000 Certificate not after: Mon 05 Apr 2027 12:47:39 +0000 Subordinate resources: AS: 28605 IP: 179.127.112.0/22 IP: 201.20.144.0/20 IP: 2804:3c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ca:e8:38:11:ba:6a:bd:80:b7:57:86:5f:b0:70:89:c0:a7:3b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 6 12:42:39 2026 GMT Not After : Apr 5 12:47:39 2027 GMT Subject: CN=53D94339029316790411C8AF7BC622996BF230A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:d0:d7:d9:c1:43:ce:6b:56:f8:40:2d:47: a3:17:82:1e:d3:10:94:b9:9b:45:40:a2:b6:da:ce: d6:3e:95:08:43:a1:f2:93:03:d4:76:84:7d:4c:cc: 95:5d:a6:b5:df:bf:c7:31:de:f4:e7:e6:a1:11:0e: 0c:f3:dc:48:3b:8b:e0:8f:09:da:03:9f:5d:02:45: 8c:79:bc:bf:89:7b:b8:b0:3b:b6:d0:44:76:41:80: 1a:51:6c:39:15:e5:10:f3:26:cf:f2:d1:07:4c:f3: ca:cc:dc:d9:0d:74:94:03:70:93:9d:e6:6f:9c:aa: ef:7a:03:28:f2:12:ae:8e:4b:d1:4c:f8:c4:75:b5: c1:a5:b7:48:5c:d8:5c:5c:7d:b5:93:c2:82:fd:ff: 5b:c4:6b:23:2e:6c:b9:bd:36:0d:f7:63:c0:76:54: 16:d0:dd:8b:2a:0f:aa:b8:e4:a9:32:37:33:54:54: 25:86:2e:3c:b0:16:62:7c:5d:dd:56:95:26:05:46: 9a:ea:cc:03:29:cb:16:28:ca:c2:80:07:bc:61:b2: 86:1a:87:ef:8d:82:a3:92:04:06:19:a8:ad:57:31: 55:65:77:7d:bd:b7:59:5a:20:4c:3d:61:88:bc:c1: a8:e0:57:69:63:45:cc:dc:cb:c9:81:98:0b:31:b2: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.127.112.0/22 201.20.144.0/20 IPv6: 2804:3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28605 Signature Algorithm: sha256WithRSAEncryption 4e:c6:71:74:0c:ff:dd:ec:f3:65:8d:3a:e8:a3:6a:02:54:a3: 76:8b:b7:92:80:d9:38:ed:7f:f2:fc:63:b4:72:c6:2a:c8:17: 88:77:cc:a4:76:84:88:b4:e6:8f:fc:79:0e:8d:2e:87:8a:1c: 74:ad:ec:35:4a:ee:2b:1a:28:7f:50:7c:c8:f9:e5:b1:5c:e1: 65:72:2d:ed:d7:9f:da:18:54:ce:28:fb:6b:a1:f9:e3:5a:1d: be:b4:69:8f:13:7d:45:4d:f4:9f:92:d5:c2:22:af:fb:2d:dc: 35:38:10:e7:de:41:0d:a4:62:3d:bc:d0:d3:57:25:42:b7:46: 1b:e4:f7:a9:1b:aa:c0:d2:0a:90:c7:4e:f1:e7:35:99:54:48: 07:b6:af:ff:ae:2b:da:d7:ce:63:7a:8e:31:58:69:69:fa:b7: 79:37:8d:51:08:bc:01:26:a2:16:b7:06:23:7e:02:ce:c2:5e: 63:85:13:27:01:56:a2:14:4d:15:c1:ec:5b:0a:63:d8:c3:70: d7:64:c9:6b:5b:b2:51:0a:b7:84:f3:68:ee:a6:54:95:36:91: c7:94:ce:d9:dc:96:72:40:63:71:98:5d:62:d0:b9:9b:c0:23: 2a:8e:a6:fd:ce:a0:f3:b0:8e:aa:ab:24:c9:e2:cc:e0:3a:dd: 22:20:23:83 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUEcroOBG6ar2At1eGX7BwicCnO94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDYxMjQyMzlaFw0yNzA0MDUxMjQ3MzlaMDMxMTAvBgNV BAMTKDUzRDk0MzM5MDI5MzE2NzkwNDExQzhBRjdCQzYyMjk5NkJGMjMwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ONDX2cFDzmtW+EAtR6MXgh7T EJS5m0VAorbaztY+lQhDofKTA9R2hH1MzJVdprXfv8cx3vTn5qERDgzz3Eg7i+CP CdoDn10CRYx5vL+Je7iwO7bQRHZBgBpRbDkV5RDzJs/y0QdM88rM3NkNdJQDcJOd 5m+cqu96AyjyEq6OS9FM+MR1tcGlt0hc2FxcfbWTwoL9/1vEayMubLm9Ng33Y8B2 VBbQ3YsqD6q45KkyNzNUVCWGLjywFmJ8Xd1WlSYFRprqzAMpyxYoysKAB7xhsoYa h++NgqOSBAYZqK1XMVVld329t1laIEw9YYi8wajgV2ljRczcy8mBmAsxsqRjAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRT2UM5ApMWeQQR yK97xiKZa/IwqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFo5 OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpIeVMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRa OTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAvNTNE OTQzMzkwMjkzMTY3OTA0MTFDOEFGN0JDNjIyOTk2QkYyMzBBOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCs39wAwQEyRSQMA0EAgACMAcDBQAoBAPAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm+9MA0GCSqGSIb3DQEBCwUAA4IBAQBOxnF0DP/d 7PNljTroo2oCVKN2i7eSgNk47X/y/GO0csYqyBeId8ykdoSItOaP/HkOjS6Hihx0 rew1Su4rGih/UHzI+eWxXOFlci3t15/aGFTOKPtrofnjWh2+tGmPE31FTfSfktXC Iq/7Ldw1OBDn3kENpGI9vNDTVyVCt0Yb5PepG6rA0gqQx07x5zWZVEgHtq//riva 185jeo4xWGlp+rd5N41RCLwBJqIWtwYjfgLOwl5jhRMnAVaiFE0VwexbCmPYw3DX ZMlrW7JRCreE82juplSVNpHHlM7Z3JZyQGNxmF1i0LmbwCMqjqb9zqDzsI6qqyTJ 4szgOt0iICOD -----END CERTIFICATE-----Generated at Wed Apr 8 10:58:52 2026 by rpki-client