$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer File: 3332A8C3B68FE79476953E58B1857203FA676F0F.cer (raw, json) Hash identifier: 2jFR0Bx/DLdeHkHJUanQ5kkq4L1qxRJSdsCXaudpo0I= Subject key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2656608F34A308ACADEF12103DE91B7FA0CA8774 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft caRepository: rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 20 May 2026 16:10:18 +0000 Certificate not after: Wed 19 May 2027 16:15:18 +0000 Subordinate resources: AS: 53223 IP: 132.255.140.0/22 IP: 177.67.148.0/22 IP: 186.251.80.0/21 IP: 2804:2088::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 13:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:56:60:8f:34:a3:08:ac:ad:ef:12:10:3d:e9:1b:7f:a0:ca:87:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 16:10:18 2026 GMT Not After : May 19 16:15:18 2027 GMT Subject: CN=3332A8C3B68FE79476953E58B1857203FA676F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:97:0e:80:f0:fd:8d:18:ff:de:10:ae:38:43: 17:aa:c6:6d:74:22:6a:90:33:03:8a:93:ec:b2:36: 63:96:e7:91:ec:aa:79:4d:9c:d7:78:0a:74:1e:21: 36:ed:2d:04:f0:f1:40:3a:ed:98:77:2b:a3:fd:83: 39:cc:b5:76:6f:3f:0a:27:f8:fb:dd:ca:2e:8c:da: 44:b8:83:ee:e3:ef:21:50:d2:8b:67:57:08:7b:39: e8:8e:3c:84:ef:e2:41:0e:e6:6b:b6:76:37:09:b2: 29:61:6a:38:bf:0a:4a:fd:29:84:8d:86:4b:ae:1e: 90:50:56:1a:e1:ba:8e:9d:eb:5d:11:c2:87:6c:ae: 1d:e4:b1:20:92:15:d8:bf:f6:c2:fd:d9:90:7a:99: c6:49:96:00:3b:d7:00:54:ff:f6:eb:82:4e:5f:3a: 3c:9e:eb:8c:27:76:18:80:a4:ec:3f:9f:33:60:e4: 46:22:a1:ab:33:5f:e3:4c:d4:e4:7e:2c:54:74:6e: df:96:76:d7:63:1f:3c:e9:fa:58:7c:be:2e:5c:bc: d9:27:87:08:f0:08:b6:8e:8e:8c:5a:21:40:c6:55: ef:6a:ea:ac:f5:11:3a:7c:40:3f:70:a6:ad:94:f5: 1c:34:a2:c4:c1:d4:e7:5e:52:bc:87:59:b1:14:c2: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.140.0/22 177.67.148.0/22 186.251.80.0/21 IPv6: 2804:2088::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53223 Signature Algorithm: sha256WithRSAEncryption 1f:24:7b:7f:ff:9a:b1:c6:90:29:03:34:88:0d:13:f5:cb:64: 02:b7:c3:04:f8:9e:33:a6:e6:db:22:9b:a0:ef:a4:76:f4:c9: cb:c7:a2:d5:9e:52:1e:71:39:a4:ad:54:41:13:1c:f3:ca:3c: 58:76:9a:b5:97:61:e4:49:ee:8b:a2:13:5a:cf:46:1a:08:87: 29:53:39:e9:03:41:8a:08:1d:00:dc:b7:55:f4:89:45:af:56: ca:1d:a6:6e:e6:ac:f2:9d:70:2f:8f:04:3c:90:30:af:ac:d7: 31:13:14:2d:9e:02:63:fb:b6:bf:d4:a0:6f:e4:d6:e5:50:68: fe:47:b8:f8:0e:98:a7:d7:dc:15:c4:d7:2d:95:a5:e0:4a:24: ae:92:3e:7a:6f:29:8c:ba:c8:76:f8:c6:ac:4e:56:63:66:12: a1:cb:33:f7:5a:d5:75:c5:04:6e:6e:8b:37:1b:5f:57:d8:3a: 8c:1d:14:87:e5:8a:1b:d9:5e:d1:c8:2d:62:a0:02:a4:e5:cd: 67:0b:50:c4:e1:c8:5a:e8:36:d6:51:fa:05:34:24:74:a4:1f: 91:26:69:6e:83:51:60:aa:c1:eb:a8:d8:3b:07:19:4f:02:9a: d0:5d:66:bf:80:64:77:85:4b:bc:87:d9:61:44:79:07:b5:ca: 18:d0:d8:d1 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUJlZgjzSjCKyt7xIQPekbf6DKh3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjAxNjEwMThaFw0yNzA1MTkxNjE1MThaMDMxMTAvBgNV BAMTKDMzMzJBOEMzQjY4RkU3OTQ3Njk1M0U1OEIxODU3MjAzRkE2NzZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8lw6A8P2NGP/eEK44Qxeqxm10 ImqQMwOKk+yyNmOW55HsqnlNnNd4CnQeITbtLQTw8UA67Zh3K6P9gznMtXZvPwon +Pvdyi6M2kS4g+7j7yFQ0otnVwh7OeiOPITv4kEO5mu2djcJsilhaji/Ckr9KYSN hkuuHpBQVhrhuo6d610Rwodsrh3ksSCSFdi/9sL92ZB6mcZJlgA71wBU//brgk5f Ojye64wndhiApOw/nzNg5EYioaszX+NM1OR+LFR0bt+WdtdjHzzp+lh8vi5cvNkn hwjwCLaOjoxaIUDGVe9q6qz1ETp8QD9wpq2U9Rw0osTB1OdeUryHWbEUwtxtAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzMqjDto/nlHaV PlixhXID+mdvDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGFn QXFSS3VHWHh0UWN6ejJtVVFRV2dZREhUUDZIa20zZHRzaFN6VzZRNTMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hh Z0FxUkt1R1h4dFFjenoybVVRUVdnWURIVFA2SGttM2R0c2hTelc2UTUzLzAvMzMz MkE4QzNCNjhGRTc5NDc2OTUzRTU4QjE4NTcyMDNGQTY3NkYwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQChP+MAwQCsUOUAwQDuvtQMA0EAgACMAcDBQAoBCCI MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDP5zANBgkqhkiG9w0BAQsFAAOCAQEA HyR7f/+ascaQKQM0iA0T9ctkArfDBPieM6bm2yKboO+kdvTJy8ei1Z5SHnE5pK1U QRMc88o8WHaatZdh5Enui6ITWs9GGgiHKVM56QNBiggdANy3VfSJRa9Wyh2mbuas 8p1wL48EPJAwr6zXMRMULZ4CY/u2v9Sgb+TW5VBo/ke4+A6Yp9fcFcTXLZWl4Eok rpI+em8pjLrIdvjGrE5WY2YSocsz91rVdcUEbm6LNxtfV9g6jB0Uh+WKG9le0cgt YqACpOXNZwtQxOHIWug21lH6BTQkdKQfkSZpboNRYKrB66jYOwcZTwKa0F1mv4Bk d4VLvIfZYUR5B7XKGNDY0Q== -----END CERTIFICATE-----Generated at Sun May 24 13:32:13 2026 by rpki-client