$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer File: 1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer (raw, json) Hash identifier: 9OgK1G58yigq49BP7N98E4oOKLeo6gWzXOy2Vp/KW38= Subject key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 280A8756E9B41BF1DD63412A670093366DE58884 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft caRepository: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 27 Jun 2026 03:12:52 +0000 Certificate not after: Sat 26 Jun 2027 03:17:52 +0000 Subordinate resources: AS: 11802 IP: 200.19.192.0/19 IP: 200.192.64.0/20 IP: 2801:80:50::/48 IP: 2804:1f00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 12:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0a:87:56:e9:b4:1b:f1:dd:63:41:2a:67:00:93:36:6d:e5:88:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 27 03:12:52 2026 GMT Not After : Jun 26 03:17:52 2027 GMT Subject: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:64:b4:e3:17:89:30:c0:cc:d6:92:e7:fe: f0:14:69:b5:60:08:e3:fd:f6:eb:de:c8:0e:79:32: a6:70:01:4c:b1:64:0e:00:7a:71:a3:ff:49:20:8d: 6d:bf:58:55:4b:e6:1e:93:5d:be:ec:c8:6d:09:91: c4:59:50:15:93:79:74:45:84:f6:db:16:25:0d:42: f3:c0:f0:1f:d9:ae:45:b0:dc:ec:b6:e5:26:41:ba: 89:54:99:a2:3b:ee:eb:18:ed:93:25:5f:03:ca:39: bf:c2:52:58:88:62:3c:61:ad:75:2c:80:07:f7:f3: 4e:ff:9e:a0:24:36:69:01:62:5a:f1:b4:0f:01:d9: 88:6a:bb:c8:00:db:fe:11:83:5a:e1:4e:13:c6:51: 19:44:d5:b6:0e:c9:c0:5b:5a:ac:c5:a5:79:22:91: b0:3c:83:6b:8a:51:52:7e:32:e9:93:7f:db:3e:f4: ff:a8:ef:2d:66:ef:a1:22:96:ea:e8:1f:67:4e:c2: d8:b1:31:38:c6:bd:eb:f2:ff:7e:ae:90:44:89:41: fa:1a:47:23:72:c2:d1:b7:d0:3e:15:8b:b6:51:9e: 16:68:7b:e6:ee:cb:17:d5:70:8b:34:e0:43:84:a6: ea:6f:35:dd:77:bc:64:ff:7d:49:67:3d:f6:83:ec: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.19.192.0/19 200.192.64.0/20 IPv6: 2801:80:50::/48 2804:1f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11802 Signature Algorithm: sha256WithRSAEncryption 0e:60:89:da:63:63:f6:49:7d:3c:75:3d:9a:73:3d:87:69:09: 89:65:25:54:7d:a8:06:ec:ee:34:72:3c:7b:00:82:71:9d:49: 01:c7:cd:33:dd:7a:d2:e7:bb:95:f5:b1:3c:0b:78:13:47:e0: 09:00:07:81:71:cd:a7:1d:1d:7b:ba:79:39:27:65:dd:99:38: fd:02:0e:79:51:ae:73:63:e5:64:6c:cd:a8:2f:bf:99:56:a4: 5f:f8:6d:93:09:01:39:7f:38:d7:c3:15:f5:c3:af:9e:74:15: a9:0a:62:d6:d3:9d:98:18:2f:96:d2:42:0e:cf:a3:25:5e:32: b7:1e:d7:37:2d:b7:01:b7:b3:1f:c1:4c:e2:f0:7e:ee:1e:27: ee:ae:cf:9c:d8:75:36:2f:77:1b:ee:23:c0:e1:9b:f8:4d:b2: 22:b6:e9:a9:f6:07:af:b1:76:24:aa:61:25:c4:0e:ec:8c:8f: af:ee:ef:ef:ee:72:4a:8d:cf:23:c4:55:b2:be:c0:79:9f:4b: 21:54:37:d2:c9:56:37:67:97:02:7b:87:60:47:99:34:47:c9: 37:dc:82:18:18:32:6e:8c:6c:48:c6:d9:e2:2e:26:9c:cf:1d: 16:06:e4:5c:1c:91:6e:9d:c8:86:cd:cf:b4:19:01:e1:fa:a9: 8c:ac:0d:a1 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUKAqHVum0G/HdY0EqZwCTNm3liIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjcwMzEyNTJaFw0yNzA2MjYwMzE3NTJaMDMxMTAvBgNV BAMTKDE1MjJCM0YxQUM2REJEQkEwMzYzODFDMUEzMzc2M0I3QTUzQjI5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdWS04xeJMMDM1pLn/vAUabVg COP99uveyA55MqZwAUyxZA4AenGj/0kgjW2/WFVL5h6TXb7syG0JkcRZUBWTeXRF hPbbFiUNQvPA8B/ZrkWw3Oy25SZBuolUmaI77usY7ZMlXwPKOb/CUliIYjxhrXUs gAf3807/nqAkNmkBYlrxtA8B2Yhqu8gA2/4Rg1rhThPGURlE1bYOycBbWqzFpXki kbA8g2uKUVJ+MumTf9s+9P+o7y1m76EiluroH2dOwtixMTjGvevy/36ukESJQfoa RyNywtG30D4Vi7ZRnhZoe+buyxfVcIs04EOEpupvNd13vGT/fUlnPfaD7CZ/AgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVIrPxrG29ugNj gcGjN2O3pTspozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGFr dTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUyWmIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rh a3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAvMTUy MkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdBNTNCMjlBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH AQH/BC4wLDASBAIAATAMAwQFyBPAAwQEyMBAMBYEAgACMBADBwAoAQCAAFADBQAo BB8AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAi4aMA0GCSqGSIb3DQEBCwUAA4IB AQAOYInaY2P2SX08dT2acz2HaQmJZSVUfagG7O40cjx7AIJxnUkBx80z3XrS57uV 9bE8C3gTR+AJAAeBcc2nHR17unk5J2XdmTj9Ag55Ua5zY+VkbM2oL7+ZVqRf+G2T CQE5fzjXwxX1w6+edBWpCmLW052YGC+W0kIOz6MlXjK3Htc3LbcBt7MfwUzi8H7u Hifurs+c2HU2L3cb7iPA4Zv4TbIitump9gevsXYkqmElxA7sjI+v7u/v7nJKjc8j xFWyvsB5n0shVDfSyVY3Z5cCe4dgR5k0R8k33IIYGDJujGxIxtniLiaczx0WBuRc HJFunciGzc+0GQHh+qmMrA2h -----END CERTIFICATE-----Generated at Sat Jun 27 11:06:14 2026 by rpki-client