$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer (raw, json) Hash identifier: 30Pj0fGEFtG+LM/DZAnw/pYQro776CGDizmBzwQ01s8= Subject key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 74A3EF594FC8881B306C8BFA53357C01E04853A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft caRepository: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Aug 2026 06:18:08 +0000 Certificate not after: Sun 22 Aug 2027 06:23:08 +0000 Subordinate resources: AS: 53138 IP: 177.53.224.0/21 IP: 186.192.240.0/20 IP: 2804:140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 12:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a3:ef:59:4f:c8:88:1b:30:6c:8b:fa:53:35:7c:01:e0:48:53:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 06:18:08 2026 GMT Not After : Aug 22 06:23:08 2027 GMT Subject: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:cd:4d:13:23:35:f2:e3:fb:70:2a:b7:7d: 9c:29:33:30:7d:73:85:34:ab:ef:f9:00:a4:01:99: 38:15:74:47:09:39:7b:04:e7:26:e2:a4:68:92:c4: 43:09:ec:67:b8:ab:64:a5:74:98:8a:64:95:40:ec: 43:18:81:2b:8c:96:d2:4b:4c:0d:c5:db:97:e8:44: 57:7c:b8:fe:5c:43:11:02:34:d7:fd:65:0e:2d:0f: 4d:d1:e4:19:89:74:ee:a8:d5:05:9d:5e:31:14:5c: 64:e2:92:75:6d:f1:88:cd:e3:ee:95:21:61:ba:20: b7:1e:2a:2d:95:7c:db:0d:ff:fd:39:0d:4d:bf:ac: 1c:5d:23:0b:cc:73:8a:e6:f6:a2:eb:bc:94:d8:59: 33:9f:ad:60:31:a6:94:c3:33:fb:e5:67:f7:3e:d5: fe:e6:cd:a7:77:05:95:7c:a6:a3:84:d1:70:58:d9: ad:82:b3:7b:0b:f7:59:65:d0:ae:32:8d:e2:0a:61: 27:6a:1a:e3:41:e8:5e:43:84:e1:fc:6a:61:7c:fa: b8:d2:7d:6e:44:7d:5d:7c:e1:96:03:50:6a:9d:07: a4:6e:6d:fc:29:89:df:de:d3:30:71:32:f5:7a:ae: 0d:64:b4:48:85:52:05:07:98:4c:2f:d2:e3:4c:eb: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.224.0/21 186.192.240.0/20 IPv6: 2804:140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53138 Signature Algorithm: sha256WithRSAEncryption 59:02:a2:77:8e:de:f5:38:38:25:dd:16:c6:03:64:58:c7:60: da:6b:a7:ed:97:33:c2:42:8f:74:b4:f8:c8:43:6a:cf:37:a8: e3:26:1f:74:e8:af:f9:69:78:04:04:34:ca:a2:89:e5:b3:f9: e9:0b:be:52:04:45:01:a2:01:0f:9f:de:bd:02:97:c3:74:36: 22:5a:d0:d2:88:d9:53:f0:f1:8f:4e:d0:a7:7b:3f:57:b4:0e: a6:51:4c:5e:b1:f9:f0:e7:5f:5e:28:62:03:14:95:5e:b5:28: 5e:19:a5:d2:0c:f8:06:f3:6b:0b:21:b1:24:87:57:86:aa:cd: d0:fe:88:1a:68:53:10:01:e5:40:f4:ee:ba:1f:0d:e9:38:70: 30:8b:4a:96:7b:ce:ea:98:1e:f3:f7:c1:b0:7d:a6:78:ac:0e: 3f:f9:a3:6b:d0:d5:82:02:b9:92:14:14:9a:58:cc:31:5f:3f: 5e:23:6a:b5:32:ad:27:7e:92:b5:26:b9:e9:47:e7:20:76:60: b9:59:cf:d5:8c:1a:7a:12:b0:4b:d8:c3:d5:16:33:74:1b:5e: 90:1f:e9:5c:1c:4c:ab:9b:b7:53:84:f8:bb:a4:85:c7:de:a6: c2:72:cf:b0:4d:b5:88:32:69:54:31:b2:11:c5:47:c4:d4:78: b0:d3:5a:cd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdKPvWU/IiBswbIv6UzV8AeBIU6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjMwNjE4MDhaFw0yNzA4MjIwNjIzMDhaMDMxMTAvBgNV BAMTKDM5MTdFNEJCQjREMUZEOTk0MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gs1NEyM18uP7cCq3fZwpMzB9 c4U0q+/5AKQBmTgVdEcJOXsE5ybipGiSxEMJ7Ge4q2SldJiKZJVA7EMYgSuMltJL TA3F25foRFd8uP5cQxECNNf9ZQ4tD03R5BmJdO6o1QWdXjEUXGTiknVt8YjN4+6V IWG6ILceKi2VfNsN//05DU2/rBxdIwvMc4rm9qLrvJTYWTOfrWAxppTDM/vlZ/c+ 1f7mzad3BZV8pqOE0XBY2a2Cs3sL91ll0K4yjeIKYSdqGuNB6F5DhOH8amF8+rjS fW5EfV184ZYDUGqdB6Rubfwpid/e0zBxMvV6rg1ktEiFUgUHmEwv0uNM6163AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5F+S7tNH9mUAO 2YyYoyOtqrOJdzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFlY cTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RZ WHEzQ0pLMzJHaVhxR2JZU01rbWtlMkZNMnhmNEZ4VmVnbjc1b05CZGtHLzAvMzkx N0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURBQUIzODk3Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsTXgAwQEusDwMA0EAgACMAcDBQAoBAFAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPkjANBgkqhkiG9w0BAQsFAAOCAQEAWQKid47e 9Tg4Jd0WxgNkWMdg2mun7ZczwkKPdLT4yENqzzeo4yYfdOiv+Wl4BAQ0yqKJ5bP5 6Qu+UgRFAaIBD5/evQKXw3Q2IlrQ0ojZU/Dxj07Qp3s/V7QOplFMXrH58OdfXihi AxSVXrUoXhml0gz4BvNrCyGxJIdXhqrN0P6IGmhTEAHlQPTuuh8N6ThwMItKlnvO 6pge8/fBsH2meKwOP/mja9DVggK5khQUmljMMV8/XiNqtTKtJ36StSa56UfnIHZg uVnP1YwaehKwS9jD1RYzdBtekB/pXBxMq5u3U4T4u6SFx96mwnLPsE21iDJpVDGy EcVHxNR4sNNazQ== -----END CERTIFICATE-----Generated at Sun Aug 23 13:32:25 2026 by rpki-client