$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/33F8345BB74F91476B50EA732AFA26517A01DFA6.cer File: 33F8345BB74F91476B50EA732AFA26517A01DFA6.cer (raw, json) Hash identifier: 7rIMzgzyUY1Wo7C40eNH4Nhx37KfV3ec3w9GKGOb4Tg= Subject key identifier: 33:F8:34:5B:B7:4F:91:47:6B:50:EA:73:2A:FA:26:51:7A:01:DF:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19A36B4CE0FBC332A830996CB83501E0B7F6DDFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/33F8345BB74F91476B50EA732AFA26517A01DFA6.mft caRepository: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Aug 2026 17:56:57 +0000 Certificate not after: Tue 17 Aug 2027 18:01:57 +0000 Subordinate resources: AS: 265356 IP: 168.181.124.0/22 IP: 2804:2ea0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 23:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a3:6b:4c:e0:fb:c3:32:a8:30:99:6c:b8:35:01:e0:b7:f6:dd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 18 17:56:57 2026 GMT Not After : Aug 17 18:01:57 2027 GMT Subject: CN=33F8345BB74F91476B50EA732AFA26517A01DFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:1d:7e:65:17:32:67:99:b3:9a:d1:1f:a1: 71:70:b4:03:3c:69:eb:b9:f1:b5:70:6c:27:0a:f0: 4c:ca:ce:a2:fc:d9:23:b8:51:f8:d3:38:4a:c0:80: 06:9a:4f:21:a3:7a:29:df:9f:3c:4b:46:94:08:0c: f5:ac:b2:4f:64:8a:58:92:28:62:8f:fd:12:c0:20: f2:37:c7:1e:94:f7:52:8a:9c:0e:9f:70:f6:5e:8b: 0b:1a:14:85:36:62:24:9e:0d:a4:e2:03:19:39:37: 84:7f:53:27:63:dc:ab:73:51:5a:8d:f5:49:82:aa: 0c:de:78:f9:ca:38:7c:df:69:bf:fe:04:e6:77:30: fd:58:7d:20:a1:43:b5:59:4d:83:6b:20:8f:b6:5b: 6b:04:17:3c:14:c5:72:1e:34:79:9c:4a:1c:cc:81: 31:65:59:f4:6d:16:28:f4:6c:c2:c2:d8:95:ae:a4: 2c:a3:2b:be:d1:92:e2:23:4d:51:c2:ff:cf:17:e0: 38:8e:58:26:be:8c:1e:5a:f6:25:88:bc:6b:c8:00: d0:5d:ca:03:be:e2:fb:b3:35:a6:be:53:33:75:9c: 3a:c9:81:3a:98:5a:04:10:78:f9:57:65:2a:84:63: 80:e8:d0:fe:15:fd:09:6d:41:fe:d0:3a:14:dd:76: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:F8:34:5B:B7:4F:91:47:6B:50:EA:73:2A:FA:26:51:7A:01:DF:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/33F8345BB74F91476B50EA732AFA26517A01DFA6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.124.0/22 IPv6: 2804:2ea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265356 Signature Algorithm: sha256WithRSAEncryption 8d:d7:9e:32:2a:11:75:1d:ea:41:0d:52:0a:8b:28:f7:b1:d6: 70:cc:3b:43:c9:a4:62:12:47:73:83:b7:08:4e:5b:da:bc:ad: 8b:aa:8e:f3:a2:65:db:ad:8b:c5:6d:d3:b4:d4:8f:9e:8c:ec: ff:ce:b8:84:f5:55:e2:d6:77:a8:b0:46:11:f9:2a:c5:c4:f7: 6a:4f:0a:24:db:5a:ef:90:5c:a3:52:3d:95:74:c9:79:5d:27: df:4b:36:38:d3:69:91:c4:b2:47:5f:b6:ff:85:fd:2c:0f:ae: de:9d:ca:5f:a1:2b:9c:86:e0:4a:dd:37:39:dc:04:1f:55:fe: 4b:5d:d2:9f:8d:9d:ba:d5:c6:bf:55:7a:53:3a:65:13:44:d9: b6:12:87:ec:49:98:03:b3:b4:e6:35:ac:92:4f:28:06:ba:09: 48:0d:5a:f7:25:3a:3b:3e:f6:ab:e6:46:fd:54:ec:05:0c:5b: f0:e9:72:0a:2d:0a:e8:e7:1c:d6:78:6f:5b:d6:c5:21:5d:8c: ab:fb:6f:c7:46:a7:46:46:0d:9c:4e:65:9c:5e:6b:ef:84:f4: 8f:4d:aa:c8:42:9b:09:22:81:c5:95:34:6d:33:37:40:85:fe: 45:52:87:20:40:bc:12:65:e9:b8:a6:46:1e:ae:67:aa:f9:ec: 8b:0b:ee:95 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGaNrTOD7wzKoMJlsuDUB4Lf23f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTgxNzU2NTdaFw0yNzA4MTcxODAxNTdaMDMxMTAvBgNV BAMTKDMzRjgzNDVCQjc0RjkxNDc2QjUwRUE3MzJBRkEyNjUxN0EwMURGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkB1+ZRcyZ5mzmtEfoXFwtAM8 aeu58bVwbCcK8EzKzqL82SO4UfjTOErAgAaaTyGjeinfnzxLRpQIDPWssk9kiliS KGKP/RLAIPI3xx6U91KKnA6fcPZeiwsaFIU2YiSeDaTiAxk5N4R/Uydj3KtzUVqN 9UmCqgzeePnKOHzfab/+BOZ3MP1YfSChQ7VZTYNrII+2W2sEFzwUxXIeNHmcShzM gTFlWfRtFij0bMLC2JWupCyjK77RkuIjTVHC/88X4DiOWCa+jB5a9iWIvGvIANBd ygO+4vuzNaa+UzN1nDrJgTqYWgQQePlXZSqEY4Do0P4V/QltQf7QOhTddhZ/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz+DRbt0+RR2tQ 6nMq+iZRegHfpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjJl SFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRXRXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzYy ZUhaNGZTSzZ2TlFHZE53TlhpYlpNUlhLYVVtWlZmRW10MUVyVHVUV0V6LzAvMzNG ODM0NUJCNzRGOTE0NzZCNTBFQTczMkFGQTI2NTE3QTAxREZBNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqLV8MA0EAgACMAcDBQAoBC6gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMjDANBgkqhkiG9w0BAQsFAAOCAQEAjdeeMioRdR3qQQ1S Coso97HWcMw7Q8mkYhJHc4O3CE5b2ryti6qO86Jl262LxW3TtNSPnozs/864hPVV 4tZ3qLBGEfkqxcT3ak8KJNta75Bco1I9lXTJeV0n30s2ONNpkcSyR1+2/4X9LA+u 3p3KX6ErnIbgSt03OdwEH1X+S13Sn42dutXGv1V6UzplE0TZthKH7EmYA7O05jWs kk8oBroJSA1a9yU6Oz72q+ZG/VTsBQxb8OlyCi0K6Occ1nhvW9bFIV2Mq/tvx0an RkYNnE5lnF5r74T0j02qyEKbCSKBxZU0bTM3QIX+RVKHIEC8EmXpuKZGHq5nqvns iwvulQ== -----END CERTIFICATE-----Generated at Sat Aug 22 22:44:53 2026 by rpki-client