$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer File: 2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer (raw, json) Hash identifier: sNEsYSBPj/m4qjy4dBA2fXGUE0XytSKx8uBF3mPnIqY= Subject key identifier: 2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2034FDB463096E997EB00E0B3E1A4BABF4532BD6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft caRepository: rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 01:27:34 +0000 Certificate not after: Wed 07 Apr 2027 01:32:34 +0000 Subordinate resources: AS: 274529 IP: 2804:958c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 10:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:34:fd:b4:63:09:6e:99:7e:b0:0e:0b:3e:1a:4b:ab:f4:53:2b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 01:27:34 2026 GMT Not After : Apr 7 01:32:34 2027 GMT Subject: CN=2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:05:0f:30:e4:4b:77:21:b9:a3:81:54:0d: 80:38:b1:42:24:43:ab:f9:ce:2e:bc:15:fb:87:0b: ea:24:5d:0b:d4:db:be:55:ca:be:dd:2c:28:07:b3: a3:65:20:08:be:36:ee:d6:dd:6b:8d:b5:ca:64:f1: 45:00:7b:2b:7c:85:21:24:86:f0:72:ad:50:70:33: f6:f7:56:06:26:ff:f3:35:ef:44:ac:73:c5:a4:e0: e9:25:19:b7:2d:e1:a8:e5:e6:56:14:b1:84:fc:6f: 93:a0:65:69:9b:f9:79:f1:7d:43:a1:e4:d8:b0:1f: a8:21:3e:ea:e5:84:2e:6f:a0:83:a5:c3:39:a0:57: db:6b:bd:0b:f3:e0:5f:78:f1:80:e9:9e:b6:84:30: ae:36:ae:c5:49:53:05:2f:2f:00:e1:45:02:b3:13: 7c:ae:95:1f:75:05:1c:57:4d:f2:77:16:70:d0:34: f1:d3:56:c3:f9:37:ae:a3:5f:56:dc:40:14:3b:0e: 52:91:7c:51:df:c3:b4:5b:46:6f:b5:e0:07:3b:92: f6:53:33:ea:4b:e1:b9:6e:4f:33:9c:6d:cb:0c:54: 6b:a0:d0:bb:f7:3e:b2:dd:dd:c6:08:2c:d9:b9:ff: 37:0d:9d:51:59:1b:d0:d0:d7:96:89:e2:c6:f3:89: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:958c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274529 Signature Algorithm: sha256WithRSAEncryption 59:e4:57:98:14:5c:7d:4f:9f:aa:a1:f7:e1:13:65:92:2c:5b: b9:67:27:d9:11:71:d6:15:e1:d9:4a:6b:ac:88:d3:e4:95:7b: 3c:f2:9e:b5:15:98:5b:00:f7:d6:16:d5:84:ea:92:e5:82:19: 14:73:41:f8:69:99:30:1d:39:9d:1f:c2:6d:2e:b6:6f:28:3f: 13:06:46:55:9e:bd:6d:20:2a:05:da:0a:0f:fe:2e:af:49:cc: 72:f1:ce:bf:70:60:18:1a:b3:92:2c:cd:6b:b4:96:a8:31:1b: b5:dd:30:eb:ae:2f:4f:4d:b4:0a:29:cf:34:2e:98:b4:a6:59: d9:13:60:d9:21:da:e3:29:da:8b:2c:3e:25:74:4e:a7:e1:18: ea:29:d1:f3:d0:d0:e3:5f:53:05:74:2d:7b:f4:df:15:63:8c: 8c:c9:0d:75:ae:05:e7:5e:ea:29:a9:51:0a:e7:07:b5:a7:14: c2:2b:84:b7:a0:37:40:b4:83:1d:c4:b8:c1:f8:25:18:12:2a: 2f:98:05:2c:17:94:78:b5:43:07:e2:45:8e:6e:5c:fc:84:1a: fc:f5:46:56:42:af:08:13:7c:86:12:49:a1:7e:0a:43:d4:3b: f9:0a:f7:ba:a5:ac:24:22:c3:60:0e:35:67:33:87:06:68:5b: 96:a7:70:bd -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUIDT9tGMJbpl+sA4LPhpLq/RTK9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MDgwMTI3MzRaFw0yNzA0MDcwMTMyMzRaMDMxMTAvBgNV BAMTKDJBM0Y3NTU2QUYyQjEyOEE3NUNGOTg2RTg3RTFBQ0JDQUZGRTMxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjNAUPMORLdyG5o4FUDYA4sUIk Q6v5zi68FfuHC+okXQvU275Vyr7dLCgHs6NlIAi+Nu7W3WuNtcpk8UUAeyt8hSEk hvByrVBwM/b3VgYm//M170Ssc8Wk4OklGbct4ajl5lYUsYT8b5OgZWmb+XnxfUOh 5NiwH6ghPurlhC5voIOlwzmgV9trvQvz4F948YDpnraEMK42rsVJUwUvLwDhRQKz E3yulR91BRxXTfJ3FnDQNPHTVsP5N66jX1bcQBQ7DlKRfFHfw7RbRm+14Ac7kvZT M+pL4bluTzOcbcsMVGug0Lv3PrLd3cYILNm5/zcNnVFZG9DQ15aJ4sbziXl/AgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqP3VWrysSinXP mG6H4ay8r/4xlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdm9n R0d0YXRmcXJydjZxNW1BUlIzZ0gybUhLZnJSNVkzclJZbzFNNlBtMy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdm9n R0d0YXRmcXJydjZxNW1BUlIzZ0gybUhLZnJSNVkzclJZbzFNNlBtMy8wLzJBM0Y3 NTU2QUYyQjEyOEE3NUNGOTg2RTg3RTFBQ0JDQUZGRTMxOTQubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgElYwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBDBh MA0GCSqGSIb3DQEBCwUAA4IBAQBZ5FeYFFx9T5+qoffhE2WSLFu5ZyfZEXHWFeHZ SmusiNPklXs88p61FZhbAPfWFtWE6pLlghkUc0H4aZkwHTmdH8JtLrZvKD8TBkZV nr1tICoF2goP/i6vScxy8c6/cGAYGrOSLM1rtJaoMRu13TDrri9PTbQKKc80Lpi0 plnZE2DZIdrjKdqLLD4ldE6n4RjqKdHz0NDjX1MFdC179N8VY4yMyQ11rgXnXuop qVEK5we1pxTCK4S3oDdAtIMdxLjB+CUYEiovmAUsF5R4tUMH4kWOblz8hBr89UZW Qq8IE3yGEkmhfgpD1Dv5Cve6pawkIsNgDjVnM4cGaFuWp3C9 -----END CERTIFICATE-----Generated at Thu Apr 9 11:07:34 2026 by rpki-client