$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer File: 2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer (raw, json) Hash identifier: 8y4VNKTgQkrHeWgw4dHhUE7kVVqVZc2qBdV6SPB5U4k= Subject key identifier: 2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71634AE647DAAB2C6A8CBF428ACBE168DA916CF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft caRepository: rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 18 May 2026 14:35:43 +0000 Certificate not after: Mon 17 May 2027 14:40:43 +0000 Subordinate resources: AS: 274542 IP: 2804:95bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:63:4a:e6:47:da:ab:2c:6a:8c:bf:42:8a:cb:e1:68:da:91:6c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 18 14:35:43 2026 GMT Not After : May 17 14:40:43 2027 GMT Subject: CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:97:7c:7b:7f:2a:b8:d7:a8:bd:51:5f:8e: 9d:fd:3a:89:39:41:91:3a:48:dc:25:2a:41:d4:d8: 74:a5:92:cb:57:90:ad:82:9e:36:c4:ae:32:4d:31: 52:57:9d:7f:19:f2:32:01:8e:06:bb:b2:62:01:84: a2:a2:a5:c2:41:67:38:19:44:b6:c5:15:6c:75:08: d9:fc:50:95:5f:9d:42:00:fb:62:b5:17:7e:f5:04: 00:83:cc:39:26:22:2b:22:38:c5:6e:9a:2e:5c:06: a2:de:36:13:ce:fe:18:e5:f1:51:ea:7a:a4:7c:8f: 16:18:c1:25:fc:65:77:91:ba:2a:e3:fd:67:a3:c1: 25:d3:49:7b:11:05:1c:ec:4d:54:80:12:42:d4:ed: 21:54:f7:2a:06:63:06:6b:3c:2b:a0:29:a3:55:61: 22:ce:4b:84:49:b7:d0:ff:2a:af:d0:2e:06:aa:b5: 6f:34:63:cb:03:86:af:90:f9:c4:59:33:f8:00:e1: ae:b7:52:c2:36:b5:11:77:6a:8a:a0:c1:34:a1:44: ee:c0:60:c9:37:0d:ed:f7:2f:dc:5b:ac:8a:2f:78: 67:09:0b:92:49:93:70:88:dd:3a:bf:5b:54:3a:07: 91:9e:40:f4:28:6e:0b:d6:8a:17:bb:61:53:28:cf: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:95bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274542 Signature Algorithm: sha256WithRSAEncryption 2c:b4:fb:21:3f:06:0e:29:db:1e:82:10:f5:54:e3:db:30:d4: 68:05:8a:29:4d:7e:54:51:07:3f:34:8a:55:a2:dc:5e:40:45: e8:55:c5:8b:f3:3c:28:7e:23:89:ef:26:32:c1:5c:7f:04:f8: 61:5d:fb:40:07:57:5f:ef:f5:37:15:3b:29:a1:82:1d:63:eb: 68:8c:d5:c4:d8:d4:36:2a:52:3a:44:6f:c4:76:87:b6:32:2e: 2e:34:e3:66:2d:3f:70:fa:ba:ae:95:2b:1c:b3:64:9c:27:41: 95:60:7d:e9:65:f3:81:4a:1d:92:0a:0c:31:2b:d9:dd:03:67: fe:e4:b0:11:dd:b7:41:da:b6:ff:8a:f3:9d:14:7a:ed:96:e6: 6f:07:12:e2:62:41:5b:ea:0c:0b:85:cd:a9:ca:2b:4b:50:1c: 9d:fe:ea:42:cc:57:69:9f:d6:4a:3c:50:02:d6:05:4d:dd:18: 94:d7:41:7d:cf:e4:b2:b6:d7:9a:01:d1:14:7b:28:be:9c:78: 48:1f:67:dd:98:bb:a9:92:66:f6:7b:6b:bf:ce:fb:63:4c:ed: 50:a8:e9:ce:55:de:1e:d2:8d:8f:55:c0:fa:05:c2:d7:4d:5c: 38:48:94:a2:7f:64:bf:28:5c:0b:a3:d7:66:9c:56:11:78:63: 08:81:50:af -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUcWNK5kfaqyxqjL9CisvhaNqRbPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTgxNDM1NDNaFw0yNzA1MTcxNDQwNDNaMDMxMTAvBgNV BAMTKDJBMTdCQTQ1NDVCRTFGMkQyRUFDRTExNTQ2QUI0MDk3NEU0M0MzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/J5d8e38quNeovVFfjp39Ook5 QZE6SNwlKkHU2HSlkstXkK2CnjbErjJNMVJXnX8Z8jIBjga7smIBhKKipcJBZzgZ RLbFFWx1CNn8UJVfnUIA+2K1F371BACDzDkmIisiOMVumi5cBqLeNhPO/hjl8VHq eqR8jxYYwSX8ZXeRuirj/WejwSXTSXsRBRzsTVSAEkLU7SFU9yoGYwZrPCugKaNV YSLOS4RJt9D/Kq/QLgaqtW80Y8sDhq+Q+cRZM/gA4a63UsI2tRF3aoqgwTShRO7A YMk3De33L9xbrIoveGcJC5JJk3CI3Tq/W1Q6B5GeQPQobgvWihe7YVMoz6W/AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqF7pFRb4fLS6s 4RVGq0CXTkPDcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFy UDdmVkVhNjhZazkybWZSem5wOGdZdmVxUTdielROWldvZ2g4YXNHd2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx clA3ZlZFYTY4WWs5Mm1mUnpucDhnWXZlcVE3YnpUTlpXb2doOGFzR3dkLzAvMkEx N0JBNDU0NUJFMUYyRDJFQUNFMTE1NDZBQjQwOTc0RTQzQzM3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASVvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MG4wDQYJKoZIhvcNAQELBQADggEBACy0+yE/Bg4p2x6CEPVU49sw1GgFiilNflRR Bz80ilWi3F5ARehVxYvzPCh+I4nvJjLBXH8E+GFd+0AHV1/v9TcVOymhgh1j62iM 1cTY1DYqUjpEb8R2h7YyLi4042YtP3D6uq6VKxyzZJwnQZVgfell84FKHZIKDDEr 2d0DZ/7ksBHdt0Hatv+K850Ueu2W5m8HEuJiQVvqDAuFzanKK0tQHJ3+6kLMV2mf 1ko8UALWBU3dGJTXQX3P5LK215oB0RR7KL6ceEgfZ92Yu6mSZvZ7a7/O+2NM7VCo 6c5V3h7SjY9VwPoFwtdNXDhIlKJ/ZL8oXAuj12acVhF4YwiBUK8= -----END CERTIFICATE-----Generated at Sun May 24 17:57:55 2026 by rpki-client