$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer File: 3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer (raw, json) Hash identifier: k6s37Mh0/glGixoee6XKWYI4K8ujAArt6kM/SwzI5Pw= Subject key identifier: 36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66E63E82B78E67D9C26173D6A1B2936748D12AC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft caRepository: rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 20 May 2026 04:37:43 +0000 Certificate not after: Wed 19 May 2027 04:42:43 +0000 Subordinate resources: AS: 267523 IP: 201.182.160.0/22 IP: 2804:42c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e6:3e:82:b7:8e:67:d9:c2:61:73:d6:a1:b2:93:67:48:d1:2a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 04:37:43 2026 GMT Not After : May 19 04:42:43 2027 GMT Subject: CN=3677611ACB73CA9DA1F182DA9AE4935FAE5A8751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:0c:00:71:94:2c:76:8c:92:3b:11:9a:74: cc:0d:90:df:ca:fc:98:58:89:eb:c1:e7:be:ef:ec: 06:98:27:a9:42:66:ae:bc:56:cf:8d:91:b6:6c:b8: 93:3b:b0:fb:70:b2:20:21:7f:60:cd:25:e6:85:c6: 33:16:0d:54:cc:2d:71:cf:1c:68:bd:b5:42:c1:87: e3:50:64:a7:15:41:48:f8:63:5a:34:18:49:53:d7: 81:a5:b4:41:e8:5d:77:e5:65:10:26:85:e7:ee:e2: 31:9d:90:25:1f:9a:64:39:a9:f8:fa:b6:9a:e6:06: c0:1e:71:83:2a:d2:43:0c:3f:52:ba:19:74:54:bf: fb:e5:7f:1b:41:ea:c6:db:00:c4:06:0a:59:26:28: a4:fd:1a:5b:1b:9b:3f:e9:43:9a:52:34:2c:a4:67: 03:f7:a3:0e:97:fd:ae:6e:cf:12:31:d2:c6:c3:43: 47:60:36:60:23:9d:9c:d1:62:ec:cd:6e:f9:f9:81: 8c:6e:53:3d:4e:9f:cb:98:91:a2:94:7c:8f:d4:55: c3:27:b5:12:be:a7:29:d1:88:ef:c9:f2:1b:ea:2b: 29:04:54:37:5d:ae:ba:76:6f:d3:ef:f3:b4:a2:25: 8d:6e:a4:1e:31:89:8c:18:3f:35:c8:07:02:66:bf: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.160.0/22 IPv6: 2804:42c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267523 Signature Algorithm: sha256WithRSAEncryption 39:f8:9b:f8:5f:8d:7c:17:42:80:45:94:e0:7e:fb:59:cf:1f: 84:18:c5:0a:97:13:d2:7c:47:52:dc:33:17:02:9f:b2:a8:8e: 22:76:3b:3f:87:24:bb:2b:eb:b0:c2:da:81:89:21:78:28:cf: a1:f3:34:41:63:08:a7:53:c5:47:3e:b9:9a:dd:9b:1b:b7:7e: 1c:64:a9:13:17:38:62:50:fa:02:86:cf:55:84:c1:f9:ae:4c: 82:5b:54:15:a8:59:86:a8:87:c9:1e:2d:6a:f1:59:bd:e2:98: 78:63:6e:a6:ab:65:97:e7:d7:ca:95:4c:e7:bc:21:8d:34:16: ec:72:3a:ff:2a:60:02:37:49:0b:e6:e4:36:8b:46:6a:1a:1b: ff:1c:d1:f2:45:33:9f:7e:9b:43:40:7b:b1:c0:a2:e4:85:44: c1:ab:37:9d:a7:27:55:86:8b:c9:13:43:7d:53:eb:25:d1:87: e2:b5:af:10:e2:88:7e:2d:14:17:dd:1a:2c:1e:dc:37:50:4b: 3e:70:aa:dd:6c:80:b8:db:8c:03:23:e2:85:5a:90:72:01:bc: 73:bd:8d:c6:21:4f:ca:43:b9:11:61:03:96:63:cf:37:c0:d1: 61:e7:91:c0:ae:e2:2d:d9:55:ea:3d:1e:e7:d4:25:89:f8:96: 8c:1f:c4:75 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUZuY+greOZ9nCYXPWobKTZ0jRKsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjAwNDM3NDNaFw0yNzA1MTkwNDQyNDNaMDMxMTAvBgNV BAMTKDM2Nzc2MTFBQ0I3M0NBOURBMUYxODJEQTlBRTQ5MzVGQUU1QTg3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yQwAcZQsdoySOxGadMwNkN/K /JhYievB577v7AaYJ6lCZq68Vs+NkbZsuJM7sPtwsiAhf2DNJeaFxjMWDVTMLXHP HGi9tULBh+NQZKcVQUj4Y1o0GElT14GltEHoXXflZRAmhefu4jGdkCUfmmQ5qfj6 tprmBsAecYMq0kMMP1K6GXRUv/vlfxtB6sbbAMQGClkmKKT9Glsbmz/pQ5pSNCyk ZwP3ow6X/a5uzxIx0sbDQ0dgNmAjnZzRYuzNbvn5gYxuUz1On8uYkaKUfI/UVcMn tRK+pynRiO/J8hvqKykEVDddrrp2b9Pv87SiJY1upB4xiYwYPzXIBwJmv53RAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2d2Eay3PKnaHx gtqa5JNfrlqHUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1E3 RldlRVphOU5ZTFdKNWRreERNVEpzbXFUTmVHZ3VtRHJXNmR4WHlYTVMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1E3 RldlRVphOU5ZTFdKNWRreERNVEpzbXFUTmVHZ3VtRHJXNmR4WHlYTVMvMC8zNjc3 NjExQUNCNzNDQTlEQTFGMTgyREE5QUU0OTM1RkFFNUE4NzUxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALJtqAwDQQCAAIwBwMFACgEQsAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBUDMA0GCSqGSIb3DQEBCwUAA4IBAQA5+Jv4X418F0KARZTg fvtZzx+EGMUKlxPSfEdS3DMXAp+yqI4idjs/hyS7K+uwwtqBiSF4KM+h8zRBYwin U8VHPrma3Zsbt34cZKkTFzhiUPoChs9VhMH5rkyCW1QVqFmGqIfJHi1q8Vm94ph4 Y26mq2WX59fKlUznvCGNNBbscjr/KmACN0kL5uQ2i0ZqGhv/HNHyRTOffptDQHux wKLkhUTBqzedpydVhovJE0N9U+sl0Yfita8Q4oh+LRQX3RosHtw3UEs+cKrdbIC4 24wDI+KFWpByAbxzvY3GIU/KQ7kRYQOWY883wNFh55HAruIt2VXqPR7n1CWJ+JaM H8R1 -----END CERTIFICATE-----Generated at Sun May 24 17:58:17 2026 by rpki-client