$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.cer File: 307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.cer (raw, json) Hash identifier: gb09gjGkZZZayDn9v3PZShW1x1pAYVfnGODB0ihgbtM= Subject key identifier: 30:7A:C3:36:81:CD:47:BD:66:DB:7E:D3:9C:0B:E4:94:B5:EC:1E:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A5233E1B4111F52426180E4A5A7B838AF9A0D22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.mft caRepository: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Aug 2026 17:06:21 +0000 Certificate not after: Mon 16 Aug 2027 17:11:21 +0000 Subordinate resources: AS: 264091 IP: 143.208.128.0/22 IP: 2804:2abc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 04:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:52:33:e1:b4:11:1f:52:42:61:80:e4:a5:a7:b8:38:af:9a:0d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 17 17:06:21 2026 GMT Not After : Aug 16 17:11:21 2027 GMT Subject: CN=307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b6:47:7b:c3:f6:22:97:c7:59:0d:4b:eb:99: 8d:11:31:84:c7:49:a5:aa:40:31:19:78:ba:98:b0: 58:7e:b4:e0:d9:c7:06:f7:fd:ba:15:b7:a7:1a:67: f8:f4:2a:d8:36:40:d4:e1:03:66:8b:bb:4c:fc:b5: 4b:ce:0c:e2:fe:78:18:2b:94:e0:6f:54:1a:d3:04: 97:40:27:28:d5:8e:01:5d:28:20:70:2e:34:0b:48: 9d:73:9c:6e:7e:72:5c:49:4b:3f:07:2d:48:d3:66: 61:8f:24:cc:fc:20:3e:ef:d7:2e:bc:9c:07:0b:0d: f6:30:8e:4e:7c:9d:14:ad:29:d2:19:41:47:69:a0: 9b:7f:bb:59:ef:e1:ef:0f:68:9e:29:3a:61:ad:3b: 1a:6e:de:48:d2:5a:ac:49:03:61:80:7f:27:a0:fb: e0:2d:2b:8a:bb:3b:da:86:a4:ee:9f:11:6b:d7:2a: e8:7a:6a:98:5e:30:ce:0d:59:ce:ca:ba:ff:bd:ba: d6:f9:5a:e2:4c:2d:b8:b0:03:61:e8:86:75:4f:64: 4e:ce:71:32:77:24:b2:f7:ce:96:95:72:79:b5:6c: ec:df:fb:32:77:62:28:99:2e:5e:96:65:61:e9:d1: 83:6e:a4:f4:6e:29:f2:09:b9:8e:4a:cf:40:36:44: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:7A:C3:36:81:CD:47:BD:66:DB:7E:D3:9C:0B:E4:94:B5:EC:1E:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.128.0/22 IPv6: 2804:2abc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264091 Signature Algorithm: sha256WithRSAEncryption 9d:80:20:1d:3e:6b:7e:c5:e1:d3:68:f9:41:98:45:e5:51:59: 5d:df:26:2e:6a:71:71:e8:78:3a:0a:6b:ce:6d:01:14:40:49: 69:e3:43:61:25:e3:0b:1d:fa:49:0a:6b:63:a6:00:1e:60:08: fb:97:ed:92:e6:58:4f:17:8a:fc:6a:55:97:8d:cf:7d:71:03: 7a:31:b8:37:1b:3b:06:de:81:44:d4:9f:b4:ec:0c:30:b5:65: 3a:72:74:a3:7c:98:71:69:5b:c5:d7:51:25:5e:62:f1:9f:20: 35:b0:26:27:2d:45:35:df:c3:c8:e6:10:3b:ee:79:0f:ab:61: f1:76:20:08:dc:c4:52:87:73:3e:34:72:18:ed:30:a4:cf:49: fb:9e:7c:1a:65:72:e5:ef:65:32:7c:fb:e3:b6:17:ee:4f:ee: 5f:b9:27:7d:a5:99:11:46:c5:59:13:f9:2c:3f:88:c7:ec:ee: da:a0:00:0c:fd:19:03:3e:ca:15:b6:5c:f7:a1:35:06:8d:76: 3e:e4:8f:d5:89:a1:15:e3:ff:50:ec:c3:08:b7:a4:4e:72:43: 04:07:46:d2:c7:60:06:9b:76:b0:59:ea:ac:f7:e6:53:1f:ca: 7e:2e:70:96:22:24:ab:84:1b:94:6e:71:4d:cc:ae:3b:49:0f: 5d:af:d2:89 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUalIz4bQRH1JCYYDkpae4OK+aDSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTcxNzA2MjFaFw0yNzA4MTYxNzExMjFaMDMxMTAvBgNV BAMTKDMwN0FDMzM2ODFDRDQ3QkQ2NkRCN0VEMzlDMEJFNDk0QjVFQzFFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxtkd7w/Yil8dZDUvrmY0RMYTH SaWqQDEZeLqYsFh+tODZxwb3/boVt6caZ/j0Ktg2QNThA2aLu0z8tUvODOL+eBgr lOBvVBrTBJdAJyjVjgFdKCBwLjQLSJ1znG5+clxJSz8HLUjTZmGPJMz8ID7v1y68 nAcLDfYwjk58nRStKdIZQUdpoJt/u1nv4e8PaJ4pOmGtOxpu3kjSWqxJA2GAfyeg ++AtK4q7O9qGpO6fEWvXKuh6apheMM4NWc7Kuv+9utb5WuJMLbiwA2HohnVPZE7O cTJ3JLL3zpaVcnm1bOzf+zJ3YiiZLl6WZWHp0YNupPRuKfIJuY5Kz0A2RCErAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwesM2gc1HvWbb ftOcC+SUtewevjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQktI RnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdwYTUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JL SEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAvMzA3 QUMzMzY4MUNENDdCRDY2REI3RUQzOUMwQkU0OTRCNUVDMUVCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj9CAMA0EAgACMAcDBQAoBCq8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHmzANBgkqhkiG9w0BAQsFAAOCAQEAnYAgHT5rfsXh02j5 QZhF5VFZXd8mLmpxceh4Ogprzm0BFEBJaeNDYSXjCx36SQprY6YAHmAI+5ftkuZY TxeK/GpVl43PfXEDejG4Nxs7Bt6BRNSftOwMMLVlOnJ0o3yYcWlbxddRJV5i8Z8g NbAmJy1FNd/DyOYQO+55D6th8XYgCNzEUodzPjRyGO0wpM9J+558GmVy5e9lMnz7 47YX7k/uX7knfaWZEUbFWRP5LD+Ix+zu2qAADP0ZAz7KFbZc96E1Bo12PuSP1Ymh FeP/UOzDCLekTnJDBAdG0sdgBpt2sFnqrPfmUx/Kfi5wliIkq4QblG5xTcyuO0kP Xa/SiQ== -----END CERTIFICATE-----Generated at Sun Aug 23 05:12:48 2026 by rpki-client