$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer File: 6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer (raw, json) Hash identifier: pt4i/SL6BGzgOmTeYPmBkux+Yagh1HobzFFXfqQiNso= Subject key identifier: 61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 79934C2244A27B083A95DBA5D90A9D6E299EEC21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.mft caRepository: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 15:49:31 +0000 Certificate not after: Thu 01 Apr 2027 15:54:31 +0000 Subordinate resources: AS: 263384 IP: 138.185.40.0/22 IP: 177.87.28.0/22 IP: 2804:1554::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:93:4c:22:44:a2:7b:08:3a:95:db:a5:d9:0a:9d:6e:29:9e:ec:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 2 15:49:31 2026 GMT Not After : Apr 1 15:54:31 2027 GMT Subject: CN=6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:da:36:fd:60:a1:b0:2f:31:2f:60:4e:22: bb:21:7b:e2:27:c8:0e:88:f8:5f:36:4f:bd:cf:ba: 61:34:24:ac:e0:f6:75:57:5f:26:4d:48:79:1f:c7: c9:85:35:9e:91:b3:d1:66:49:a8:f2:78:28:5a:d5: 6e:c9:e0:35:e3:fd:60:33:1e:3e:89:60:af:05:62: 3e:d5:66:87:62:b0:91:d8:03:84:20:4a:35:46:a7: 83:bd:cb:ef:88:bc:ef:bf:a6:1d:dc:eb:8e:b9:41: 1e:7a:21:e5:97:a4:bb:ce:77:36:a2:d0:bd:33:3d: 4d:7a:fa:e2:1b:93:05:61:36:52:e2:68:ae:d2:a7: 05:6d:89:06:37:b7:71:9d:55:03:3d:5c:63:0b:af: 67:07:89:78:eb:07:97:11:bd:18:fd:cc:e6:f4:02: 11:8b:f2:e7:fa:07:32:1b:69:eb:7a:f3:d0:27:b5: f2:86:b8:79:c0:73:fe:b0:19:42:9f:fc:ed:cd:fc: 8a:ca:72:e9:00:ec:6f:ee:76:9c:09:1f:23:b5:32: b6:75:aa:e2:cf:e2:c5:a2:02:b8:c0:da:a5:fe:03: 7c:61:ba:c5:b1:dc:bc:66:77:ab:cd:d5:72:b1:ec: 43:d4:eb:b1:6f:58:a3:0b:33:0a:e5:50:05:84:44: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.40.0/22 177.87.28.0/22 IPv6: 2804:1554::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263384 Signature Algorithm: sha256WithRSAEncryption ae:bc:06:9d:08:b3:3a:93:e3:79:d1:09:ce:86:88:88:cf:c9: e8:67:87:f4:da:e3:2a:e0:63:89:00:60:60:28:c4:15:f6:f0: d1:4c:54:ba:50:d0:f3:52:86:1d:62:25:48:10:c8:7a:cb:26: 4d:a8:bd:4e:1a:e5:6b:9c:b7:72:92:0a:a4:c5:e7:cf:73:3f: 7e:d6:5d:87:63:51:3f:c6:d0:8d:d3:23:0e:2d:1d:01:a5:4b: c7:74:e9:21:94:90:df:f6:fc:4a:5e:f1:bb:9b:49:62:93:7b: ef:7c:fa:ae:c9:f6:81:e6:16:94:18:27:25:f1:a9:62:28:1d: b9:70:c1:b0:0d:4d:48:a5:79:9f:65:a6:16:9e:ef:06:4e:1e: da:7e:57:7f:37:f1:ee:c1:2d:16:ab:e3:76:a2:ca:89:02:bd: 93:1a:e1:d2:cf:dc:6d:6b:52:cc:86:eb:09:b0:15:40:65:59: a3:84:5f:64:8e:0b:f0:5e:d1:92:8e:d2:b2:85:a7:80:52:e0: 11:e4:49:45:e0:2b:4a:b9:f4:a0:a6:36:f9:90:00:15:27:94: 26:16:60:78:a7:b4:85:d2:b8:89:84:54:75:59:03:74:de:f7: 1c:4f:7e:a2:12:7e:65:32:be:ee:aa:69:2a:55:bc:dd:21:e6: 77:86:a7:eb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUeZNMIkSiewg6ldul2Qqdbime7CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDIxNTQ5MzFaFw0yNzA0MDExNTU0MzFaMDMxMTAvBgNV BAMTKDYxNTNBNTJCOERGRDJDRTgxRDI0OEE3Njk0NUIzQUU1QUMyQThBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgdo2/WChsC8xL2BOIrshe+In yA6I+F82T73PumE0JKzg9nVXXyZNSHkfx8mFNZ6Rs9FmSajyeCha1W7J4DXj/WAz Hj6JYK8FYj7VZodisJHYA4QgSjVGp4O9y++IvO+/ph3c6465QR56IeWXpLvOdzai 0L0zPU16+uIbkwVhNlLiaK7SpwVtiQY3t3GdVQM9XGMLr2cHiXjrB5cRvRj9zOb0 AhGL8uf6BzIbaet689AntfKGuHnAc/6wGUKf/O3N/IrKcukA7G/udpwJHyO1MrZ1 quLP4sWiArjA2qX+A3xhusWx3Lxmd6vN1XKx7EPU67FvWKMLMwrlUAWERAmzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhU6Urjf0s6B0k inaUWzrlrCqK+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlBX VzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZQ V1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAvNjE1 M0E1MkI4REZEMkNFODFEMjQ4QTc2OTQ1QjNBRTVBQzJBOEFGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirkoAwQCsVccMA0EAgACMAcDBQAoBBVUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQE2DANBgkqhkiG9w0BAQsFAAOCAQEArrwGnQiz OpPjedEJzoaIiM/J6GeH9NrjKuBjiQBgYCjEFfbw0UxUulDQ81KGHWIlSBDIessm Tai9Thrla5y3cpIKpMXnz3M/ftZdh2NRP8bQjdMjDi0dAaVLx3TpIZSQ3/b8Sl7x u5tJYpN773z6rsn2geYWlBgnJfGpYigduXDBsA1NSKV5n2WmFp7vBk4e2n5Xfzfx 7sEtFqvjdqLKiQK9kxrh0s/cbWtSzIbrCbAVQGVZo4RfZI4L8F7Rko7SsoWngFLg EeRJReArSrn0oKY2+ZAAFSeUJhZgeKe0hdK4iYRUdVkDdN73HE9+ohJ+ZTK+7qpp KlW83SHmd4an6w== -----END CERTIFICATE-----Generated at Wed Apr 8 17:45:37 2026 by rpki-client