$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.cer File: 3095ECCF4DCDA7E651D1382D934C7147923F8C4E.cer (raw, json) Hash identifier: kTbA86ErLCTbHp3NhDEGlhiq4RzQAgJT7aht+sCtl+U= Subject key identifier: 30:95:EC:CF:4D:CD:A7:E6:51:D1:38:2D:93:4C:71:47:92:3F:8C:4E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0B395E7BCA5A27C7C2692D1B7FDCE7D4A75853A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.mft caRepository: rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Jul 2026 23:27:40 +0000 Certificate not after: Tue 06 Jul 2027 23:32:40 +0000 Subordinate resources: AS: 267178 IP: 45.230.100.0/22 IP: 179.109.120.0/22 IP: 2804:4954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:39:5e:7b:ca:5a:27:c7:c2:69:2d:1b:7f:dc:e7:d4:a7:58:53:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 23:27:40 2026 GMT Not After : Jul 6 23:32:40 2027 GMT Subject: CN=3095ECCF4DCDA7E651D1382D934C7147923F8C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:f8:86:0c:d1:bf:b4:95:cf:76:41:f6:ab: af:31:ed:f8:ba:2c:25:8c:fc:c1:7e:a9:3a:c6:04: e0:6d:e2:63:14:bb:9f:44:eb:ff:97:0e:dd:43:aa: 04:01:b6:49:7a:cb:e5:08:16:34:15:d7:bd:27:59: 66:5b:e7:dc:6f:bc:ea:ef:9a:14:f3:7f:ec:64:2f: 92:6d:e2:9c:36:12:10:3a:a6:9a:1f:8f:d2:70:c1: 49:f1:1a:76:28:a3:77:b0:30:32:21:fe:03:db:aa: d5:e3:af:0d:4c:0d:c3:9b:87:6f:fd:e0:c2:66:b3: 2f:89:9e:29:4f:ee:91:f3:15:22:66:94:2f:22:59: 31:55:2d:3c:56:23:bd:ca:65:6d:c9:ff:29:9f:11: 4e:99:1b:13:04:74:15:11:ac:06:da:ac:5b:59:74: 51:5b:49:ad:94:b5:21:31:44:c8:c7:9c:6a:67:70: 83:1d:1d:2b:16:b4:7a:c3:82:75:ab:3e:0c:a0:67: 6e:82:d7:b8:b3:ff:1a:a6:e5:f9:a7:a6:e7:c7:17: 30:0e:1c:4b:19:72:d2:66:11:43:0e:bc:54:fe:9e: 7a:09:2b:d7:06:9f:5e:2f:9c:a3:f8:a5:09:84:06: 01:8f:87:5a:17:8c:b2:4d:ed:73:67:c4:84:5e:5f: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:95:EC:CF:4D:CD:A7:E6:51:D1:38:2D:93:4C:71:47:92:3F:8C:4E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.100.0/22 179.109.120.0/22 IPv6: 2804:4954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267178 Signature Algorithm: sha256WithRSAEncryption a6:c2:57:09:d1:fb:fe:0c:c2:0d:97:19:84:f0:67:c5:0f:4a: 9b:b1:a8:38:df:34:e6:53:fa:74:44:12:b9:77:51:12:60:1c: 24:2d:4b:01:1e:b6:7b:97:b6:51:60:1c:1e:0a:bd:27:65:51: cb:ef:0c:9d:be:b2:57:e7:ee:b6:7c:3f:e9:0d:30:19:a7:ae: 5b:a4:e2:14:60:65:aa:b1:19:c0:f3:4a:3d:f6:09:5c:c0:42: 1f:62:55:aa:3f:98:b0:0e:48:3b:8a:d6:a7:68:70:29:ee:31: 36:0e:62:e1:49:8e:42:2c:d4:05:68:9e:d2:4a:d2:df:1c:b7: a9:65:99:65:88:e8:e4:fb:08:c2:c5:b2:a9:3b:ea:b8:b9:74: 2d:dc:82:a5:89:aa:6c:2c:6b:d5:61:25:03:89:33:ff:f4:72: 25:cf:6b:c0:0d:79:09:98:7b:fe:4b:07:e0:5f:8e:2f:a1:2e: df:c6:49:b0:5f:30:73:44:25:e6:71:83:93:b5:5e:f6:52:1f: d1:ff:5c:31:4a:2f:7f:74:4b:de:fb:92:ce:14:c5:75:f8:66: 31:d0:41:a8:d0:35:19:6e:c6:17:1a:f0:57:a3:a0:fd:06:39: 35:56:65:f4:46:e5:fa:1b:aa:dc:89:e2:f0:78:f7:69:cd:1a: b3:3f:79:02 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUCzlee8paJ8fCaS0bf9zn1KdYU6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDcyMzI3NDBaFw0yNzA3MDYyMzMyNDBaMDMxMTAvBgNV BAMTKDMwOTVFQ0NGNERDREE3RTY1MUQxMzgyRDkzNEM3MTQ3OTIzRjhDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3/iGDNG/tJXPdkH2q68x7fi6 LCWM/MF+qTrGBOBt4mMUu59E6/+XDt1DqgQBtkl6y+UIFjQV170nWWZb59xvvOrv mhTzf+xkL5Jt4pw2EhA6ppofj9JwwUnxGnYoo3ewMDIh/gPbqtXjrw1MDcObh2/9 4MJmsy+JnilP7pHzFSJmlC8iWTFVLTxWI73KZW3J/ymfEU6ZGxMEdBURrAbarFtZ dFFbSa2UtSExRMjHnGpncIMdHSsWtHrDgnWrPgygZ26C17iz/xqm5fmnpufHFzAO HEsZctJmEUMOvFT+nnoJK9cGn14vnKP4pQmEBgGPh1oXjLJN7XNnxIReX/EVAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwlezPTc2n5lHR OC2TTHFHkj+MTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFVz Z2ZqYUwxNjgxS3habkRmTXdvcmRQS1hjaEh3ZDlxeWZNeXhxOHg4ei8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFVz Z2ZqYUwxNjgxS3habkRmTXdvcmRQS1hjaEh3ZDlxeWZNeXhxOHg4ei8wLzMwOTVF Q0NGNERDREE3RTY1MUQxMzgyRDkzNEM3MTQ3OTIzRjhDNEUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi3mZAMEArNteDANBAIAAjAHAwUAKARJVDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEE6owDQYJKoZIhvcNAQELBQADggEBAKbCVwnR+/4M wg2XGYTwZ8UPSpuxqDjfNOZT+nREErl3URJgHCQtSwEetnuXtlFgHB4KvSdlUcvv DJ2+slfn7rZ8P+kNMBmnrluk4hRgZaqxGcDzSj32CVzAQh9iVao/mLAOSDuK1qdo cCnuMTYOYuFJjkIs1AVontJK0t8ct6llmWWI6OT7CMLFsqk76ri5dC3cgqWJqmws a9VhJQOJM//0ciXPa8ANeQmYe/5LB+Bfji+hLt/GSbBfMHNEJeZxg5O1XvZSH9H/ XDFKL390S977ks4UxXX4ZjHQQajQNRluxhca8FejoP0GOTVWZfRG5fobqtyJ4vB4 92nNGrM/eQI= -----END CERTIFICATE-----Generated at Wed Jul 8 14:21:01 2026 by rpki-client