$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer File: 2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer (raw, json) Hash identifier: ku4mck0A5T+MpOx7zOiKJtwfEYTW4DHcbaTiWFDSDJM= Subject key identifier: 2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 169E9175F9A8A9A3AEC3F8D21729BA46419CE7B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.mft caRepository: rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 May 2026 15:05:41 +0000 Certificate not after: Sat 22 May 2027 15:10:41 +0000 Subordinate resources: AS: 270399 IP: 190.89.4.0/22 IP: 2804:6b6c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9e:91:75:f9:a8:a9:a3:ae:c3:f8:d2:17:29:ba:46:41:9c:e7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 23 15:05:41 2026 GMT Not After : May 22 15:10:41 2027 GMT Subject: CN=2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:c7:01:01:1a:7c:0a:e4:80:72:90:f9:56: 17:dc:16:92:c7:9c:88:67:27:2c:d9:de:14:ff:c8: c2:47:1e:83:d3:94:1e:6f:ff:e3:46:0e:3c:a1:b3: c3:80:d5:58:36:98:fe:25:b8:df:bf:b5:0e:99:68: 7d:e4:f3:12:52:60:9d:c6:88:04:91:76:2b:ae:de: b2:f8:d3:6a:83:13:27:fd:f3:19:3b:35:ea:96:7c: 37:a9:19:27:d5:4b:8b:61:31:93:9b:c9:e1:ed:c8: 6a:47:77:f6:4b:3d:41:c8:29:23:74:26:c6:c3:0b: 5b:3b:58:f9:f7:14:c8:20:28:11:42:bb:b9:8a:82: b9:1b:66:7a:bd:34:70:4c:d3:ec:fc:24:58:70:17: 3d:43:80:98:db:21:e1:e3:00:92:f5:49:e6:f5:bf: 69:df:9a:b1:bd:79:fa:73:ad:8c:70:4f:3f:96:bd: e3:03:1d:6e:14:b0:de:ec:bd:98:ac:6c:d8:2c:8e: 43:2f:63:c6:5f:dd:ab:6d:63:ed:86:12:8d:1e:8e: f8:9d:59:3e:91:09:21:c8:9d:6c:d7:44:92:1f:35: f5:e9:6f:51:18:9a:3b:dd:53:0b:a8:89:02:80:d5: 65:3c:65:50:a5:fa:f8:d0:75:a2:69:92:5f:79:1d: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.4.0/22 IPv6: 2804:6b6c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270399 Signature Algorithm: sha256WithRSAEncryption 64:be:07:98:1d:94:93:2f:96:84:d4:75:22:8f:83:87:ba:31: 31:ec:44:d2:78:59:a3:28:c8:0c:ac:94:bd:e0:d4:55:39:bb: 01:f7:d4:af:66:69:8c:da:c9:16:34:42:68:c7:9e:88:f3:55: 4d:99:f3:f2:c1:35:3c:ac:8e:2b:0a:af:6a:69:45:15:74:fe: 70:2f:64:04:62:6f:ee:f8:b5:2e:94:2f:51:dd:e0:97:62:79: a4:07:22:6c:9f:11:b1:0a:93:16:a2:a7:45:88:0f:a9:d8:94: 51:5d:ee:0b:d1:a1:21:74:f0:6b:70:e0:eb:a6:fa:4d:af:42: 38:89:c3:30:54:8a:a2:01:7d:16:86:85:08:14:28:d1:02:99: 06:5a:5a:42:cc:3b:11:23:94:26:85:35:21:65:93:4c:4b:6b: 45:f0:b8:90:8d:ff:db:0e:c1:4d:92:06:2b:d0:cc:18:65:1b: b6:b7:5d:7d:94:25:c6:99:01:fd:2a:bc:d9:b3:f8:cf:d2:89: a1:0f:c2:5e:5b:d2:6c:a0:2a:fa:10:81:31:b2:b6:33:49:e3: 2d:0a:cc:1b:42:30:4c:fc:52:74:12:4a:b0:dc:d5:f2:98:66: cc:0f:83:a7:63:d4:9f:58:2e:62:b6:6c:f6:2e:f9:98:f4:e3: 23:91:00:35 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFp6RdfmoqaOuw/jSFym6RkGc57UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjMxNTA1NDFaFw0yNzA1MjIxNTEwNDFaMDMxMTAvBgNV BAMTKDJGM0Q5Qzc3RDdEMTUyMTBFQTNDNkE2Mjk1M0I1RkI1MkZFQTg3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlccBARp8CuSAcpD5VhfcFpLH nIhnJyzZ3hT/yMJHHoPTlB5v/+NGDjyhs8OA1Vg2mP4luN+/tQ6ZaH3k8xJSYJ3G iASRdiuu3rL402qDEyf98xk7NeqWfDepGSfVS4thMZObyeHtyGpHd/ZLPUHIKSN0 JsbDC1s7WPn3FMggKBFCu7mKgrkbZnq9NHBM0+z8JFhwFz1DgJjbIeHjAJL1Seb1 v2nfmrG9efpzrYxwTz+WveMDHW4UsN7svZisbNgsjkMvY8Zf3attY+2GEo0ejvid WT6RCSHInWzXRJIfNfXpb1EYmjvdUwuoiQKA1WU8ZVCl+vjQdaJpkl95HWVVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvPZx319FSEOo8 amKVO1+1L+qHbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2p5 WUFVNTJRb1lHVDJQbzNuVGFTZVRVV2hLeHZrRjhEZXRNWjlneGlWNEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dq eVlBVTUyUW9ZR1QyUG8zblRhU2VUVVdoS3h2a0Y4RGV0TVo5Z3hpVjRKLzAvMkYz RDlDNzdEN0QxNTIxMEVBM0M2QTYyOTUzQjVGQjUyRkVBODc2Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvlkEMA0EAgACMAcDBQAoBGtsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgPzANBgkqhkiG9w0BAQsFAAOCAQEAZL4HmB2Uky+WhNR1 Io+Dh7oxMexE0nhZoyjIDKyUveDUVTm7AffUr2ZpjNrJFjRCaMeeiPNVTZnz8sE1 PKyOKwqvamlFFXT+cC9kBGJv7vi1LpQvUd3gl2J5pAcibJ8RsQqTFqKnRYgPqdiU UV3uC9GhIXTwa3Dg66b6Ta9COInDMFSKogF9FoaFCBQo0QKZBlpaQsw7ESOUJoU1 IWWTTEtrRfC4kI3/2w7BTZIGK9DMGGUbtrddfZQlxpkB/Sq82bP4z9KJoQ/CXlvS bKAq+hCBMbK2M0njLQrMG0IwTPxSdBJKsNzV8phmzA+Dp2PUn1guYrZs9i75mPTj I5EANQ== -----END CERTIFICATE-----Generated at Sun May 24 12:47:51 2026 by rpki-client