$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer File: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer (raw, json) Hash identifier: ljjDrND/kt7i73qqPh+yWCbEAPgfOQxEQ06dxVz6igM= Subject key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 23A73C134127A270ABE20BFBF17171B581B12722 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft caRepository: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 22 Aug 2026 14:38:58 +0000 Certificate not after: Sat 21 Aug 2027 14:43:58 +0000 Subordinate resources: AS: 265484 IP: 168.197.152.0/22 IP: 2804:34d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 10:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:3c:13:41:27:a2:70:ab:e2:0b:fb:f1:71:71:b5:81:b1:27:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 14:38:58 2026 GMT Not After : Aug 21 14:43:58 2027 GMT Subject: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:f8:b5:46:5d:4d:4a:7a:b1:46:c3:fc:25: 46:42:2f:ff:6f:4a:d7:48:42:2f:03:fb:9c:68:c1: b5:ba:cc:28:bc:2c:88:52:97:1e:70:75:e1:e4:e1: 8b:4b:55:7d:a4:03:17:86:91:6d:38:3d:40:62:3e: 2c:db:18:e8:61:e7:6f:b8:a9:4b:a6:2b:11:3f:68: 59:17:f0:06:db:8f:ff:77:d7:d5:30:db:8c:8c:47: 69:f6:fd:1d:bf:89:28:63:e3:e7:cb:63:7a:c1:7b: 94:44:34:cd:49:81:f8:26:4d:47:bd:23:48:fa:98: cd:71:e0:e2:bd:f4:77:33:f2:fd:3e:78:b9:49:23: e2:27:a0:e6:d6:39:87:6e:e6:45:a8:28:89:17:5b: ee:13:de:17:fc:11:0a:9c:e2:f3:30:d4:35:b1:40: 25:cf:a2:79:9a:51:bc:30:7e:5a:73:26:95:57:7c: a6:1b:d8:f8:fd:67:4e:b4:cf:8a:81:78:b1:7f:61: 43:e9:73:0a:ef:d1:8a:d0:8d:ad:dc:6c:f3:f9:60: a0:03:cf:82:a0:08:8f:15:af:80:c0:d1:4a:48:1f: 41:ae:e2:af:99:c6:08:a1:08:11:63:cf:94:11:ae: 1a:23:23:ba:37:89:4d:85:83:70:4f:25:87:15:61: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.152.0/22 IPv6: 2804:34d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265484 Signature Algorithm: sha256WithRSAEncryption 7c:f2:50:5a:ad:10:e2:e9:ff:43:3a:c9:10:aa:ba:cf:6e:7a: 48:1e:44:a3:8d:42:97:78:63:41:4f:39:dc:6a:5c:99:d1:79: 9b:9b:b2:f0:da:af:d2:cd:89:6f:14:6e:ec:2e:49:7d:3b:f0: 07:e0:f2:05:96:37:ea:4f:1e:d9:9f:9d:db:46:33:66:40:9b: 7e:31:f2:a0:88:0b:d8:96:5a:51:d0:1f:3b:bc:3b:28:05:13: d0:4c:62:9e:24:b8:b4:4d:74:e2:93:0b:37:19:21:70:af:82: c5:76:45:02:8c:e6:24:33:25:a0:65:df:53:80:8a:8e:54:c1: cf:d3:90:1f:c0:a4:7f:3e:3e:e9:0e:26:08:8f:71:73:02:67: 92:a6:2f:0d:7f:2f:27:1b:f6:8b:f4:1c:56:ad:48:b3:0c:9d: 1b:ea:c3:32:3a:bf:7f:4b:24:f1:1d:b0:7d:a9:a5:83:45:a1: 17:3b:00:59:6c:f8:90:ba:56:45:88:ac:be:29:a0:db:64:04: 75:9c:82:62:9a:47:e2:a5:f9:10:52:96:88:e5:64:f8:19:2b: c0:bf:7a:5d:a7:9b:47:f7:e3:35:95:02:f9:7b:73:08:02:a2: 87:92:dd:6f:eb:69:2e:86:7b:7f:ff:62:a0:e8:52:38:c2:ea: 6b:f5:91:d1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUI6c8E0EnonCr4gv78XFxtYGxJyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjIxNDM4NThaFw0yNzA4MjExNDQzNThaMDMxMTAvBgNV BAMTKDM4RjMzRkJGRTNDRjA4QTBENkJFN0M4QzczMEYzMkE2NkY5NzNFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHfi1Rl1NSnqxRsP8JUZCL/9v StdIQi8D+5xowbW6zCi8LIhSlx5wdeHk4YtLVX2kAxeGkW04PUBiPizbGOhh52+4 qUumKxE/aFkX8Abbj/9319Uw24yMR2n2/R2/iShj4+fLY3rBe5RENM1JgfgmTUe9 I0j6mM1x4OK99Hcz8v0+eLlJI+InoObWOYdu5kWoKIkXW+4T3hf8EQqc4vMw1DWx QCXPonmaUbwwflpzJpVXfKYb2Pj9Z060z4qBeLF/YUPpcwrv0YrQja3cbPP5YKAD z4KgCI8Vr4DA0UpIH0Gu4q+ZxgihCBFjz5QRrhojI7o3iU2Fg3BPJYcVYf2DAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ48z+/488IoNa+ fIxzDzKmb5c+1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWZN Q20zeUc2OEpia2V0OHBkaTgyOVozaUVKWDg3RjhoZVJ3TVVtb1NSbW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vm TUNtM3lHNjhKYmtldDhwZGk4MjlaM2lFSlg4N0Y4aGVSd01VbW9TUm1tLzAvMzhG MzNGQkZFM0NGMDhBMEQ2QkU3QzhDNzMwRjMyQTY2Rjk3M0VENi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMWYMA0EAgACMAcDBQAoBDTYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQNDDANBgkqhkiG9w0BAQsFAAOCAQEAfPJQWq0Q4un/QzrJ EKq6z256SB5Eo41Cl3hjQU853GpcmdF5m5uy8Nqv0s2JbxRu7C5JfTvwB+DyBZY3 6k8e2Z+d20YzZkCbfjHyoIgL2JZaUdAfO7w7KAUT0ExiniS4tE104pMLNxkhcK+C xXZFAozmJDMloGXfU4CKjlTBz9OQH8Ckfz4+6Q4mCI9xcwJnkqYvDX8vJxv2i/Qc Vq1IswydG+rDMjq/f0sk8R2wfamlg0WhFzsAWWz4kLpWRYisvimg22QEdZyCYppH 4qX5EFKWiOVk+BkrwL96XaebR/fjNZUC+XtzCAKih5Ldb+tpLoZ7f/9ioOhSOMLq a/WR0Q== -----END CERTIFICATE-----Generated at Sun Aug 23 09:26:17 2026 by rpki-client