$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer File: 3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer (raw, json) Hash identifier: ZbYsM65Y0SYAqkvqLNmCZelgyweEH1ixhQCPHV146O4= Subject key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 44F28F5C106B3E97814C296F6D054C6D0984E7CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft caRepository: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 May 2026 09:31:18 +0000 Certificate not after: Sat 22 May 2027 09:36:18 +0000 Subordinate resources: AS: 28143 IP: 187.49.96.0/20 IP: 2804:5ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f2:8f:5c:10:6b:3e:97:81:4c:29:6f:6d:05:4c:6d:09:84:e7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 23 09:31:18 2026 GMT Not After : May 22 09:36:18 2027 GMT Subject: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:20:6d:2f:91:d1:01:7f:61:be:39:7f:4a: 35:15:67:ca:b0:38:53:e8:b1:6b:59:d6:da:20:bc: cd:28:04:c1:de:0c:44:1e:f3:7c:c9:ee:62:c5:26: 0c:c7:83:c3:ad:11:1d:20:9c:98:55:79:26:62:43: 70:4b:9c:6a:fa:a1:7e:78:83:af:75:a0:1d:3e:b2: 90:45:e0:3c:3f:9d:df:e8:6c:50:71:82:ae:d9:5c: 57:95:8b:5a:20:ec:b3:f3:77:ba:4c:e0:01:f7:3c: db:38:94:3e:bd:ee:86:b2:4c:d5:c9:a7:ee:6d:f7: 3a:4d:da:b5:ef:34:d4:94:9a:82:13:3b:4d:82:7c: 7e:68:e1:af:10:f9:36:17:fe:40:84:ec:76:3d:e3: 1a:92:55:09:7b:cc:28:cb:a5:8e:f7:cb:be:de:99: 2e:82:37:3a:a5:ce:67:d2:36:4b:db:85:0c:79:31: 23:46:ef:56:40:73:ab:0a:a6:09:14:7c:7f:13:0d: a5:e8:83:4c:df:03:1c:3f:ff:e5:5d:a0:41:19:1d: a4:cb:62:08:1e:1c:b0:49:8a:29:24:f9:45:29:a1: 04:f3:cc:ee:ea:7f:11:55:e1:a6:52:8b:4f:be:cf: ca:2e:8f:cf:bf:06:4d:71:1f:a5:9e:82:ea:00:8b: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.96.0/20 IPv6: 2804:5ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28143 Signature Algorithm: sha256WithRSAEncryption 07:27:27:d9:a4:88:b2:6d:14:8d:83:c9:7e:ac:85:5a:5d:14: bb:cd:75:64:43:e0:f2:99:a4:7a:83:a7:68:24:c9:04:e2:d3: cb:e3:fb:42:51:b7:ab:c4:47:93:a7:26:b5:5a:7b:29:d5:83: 84:e0:4c:da:d6:30:17:80:64:0d:dc:da:4e:c0:f8:63:de:6e: 4c:31:3d:95:53:be:6b:78:b8:60:c4:81:d5:b0:35:fc:a1:4a: cf:a6:32:d3:a5:d3:d1:a4:3a:f6:eb:c8:a7:4a:dd:b6:d4:5f: 77:c0:ca:f1:3a:90:91:30:ff:58:83:82:f4:a8:f3:53:5d:51: df:91:e2:f2:0e:7b:46:92:30:97:d0:65:e9:cb:96:3d:cc:29: 19:0e:9e:19:5d:b5:54:cb:fe:cf:31:80:db:6e:59:65:e0:16: b8:57:f3:70:2c:ac:ef:fb:e0:4e:f4:03:cd:59:dc:75:9f:60: d9:ff:11:09:80:2f:e2:e5:b7:42:c9:fc:4c:ba:bc:4a:08:d8: fb:fa:1b:e4:19:5c:47:ab:53:28:77:bb:cd:ac:2f:24:99:66: ed:7e:9c:47:fc:b5:ac:5a:98:e3:2e:0f:04:02:cc:c4:d8:f4: 52:56:6c:5f:fd:bb:18:d6:1e:34:7b:47:b9:d1:15:70:ef:e1: ce:72:66:d2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURPKPXBBrPpeBTClvbQVMbQmE584wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjMwOTMxMThaFw0yNzA1MjIwOTM2MThaMDMxMTAvBgNV BAMTKDNCNkZBQTJBREIzMDQzM0QxQzFCMkY1QTg0QzRFNTlERDQyQ0U0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruSBtL5HRAX9hvjl/SjUVZ8qw OFPosWtZ1togvM0oBMHeDEQe83zJ7mLFJgzHg8OtER0gnJhVeSZiQ3BLnGr6oX54 g691oB0+spBF4Dw/nd/obFBxgq7ZXFeVi1og7LPzd7pM4AH3PNs4lD697oayTNXJ p+5t9zpN2rXvNNSUmoITO02CfH5o4a8Q+TYX/kCE7HY94xqSVQl7zCjLpY73y77e mS6CNzqlzmfSNkvbhQx5MSNG71ZAc6sKpgkUfH8TDaXog0zfAxw//+VdoEEZHaTL YggeHLBJiikk+UUpoQTzzO7qfxFV4aZSi0++z8ouj8+/Bk1xH6WeguoAi4PXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7b6oq2zBDPRwb L1qExOWd1CzkcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQllp UkVCRGFmS0VtUDVZd1g2MVppSGE3dzhhM1JFbkh3RjJMMWhvbXJSa2UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JZ aVJFQkRhZktFbVA1WXdYNjFaaUhhN3c4YTNSRW5Id0YyTDFob21yUmtlLzAvM0I2 RkFBMkFEQjMwNDMzRDFDMUIyRjVBODRDNEU1OURENDJDRTQ3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEuzFgMA0EAgACMAcDBQAoBAXsMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm3vMA0GCSqGSIb3DQEBCwUAA4IBAQAHJyfZpIiybRSNg8l+ rIVaXRS7zXVkQ+DymaR6g6doJMkE4tPL4/tCUberxEeTpya1Wnsp1YOE4Eza1jAX gGQN3NpOwPhj3m5MMT2VU75reLhgxIHVsDX8oUrPpjLTpdPRpDr268inSt221F93 wMrxOpCRMP9Yg4L0qPNTXVHfkeLyDntGkjCX0GXpy5Y9zCkZDp4ZXbVUy/7PMYDb blll4Ba4V/NwLKzv++BO9APNWdx1n2DZ/xEJgC/i5bdCyfxMurxKCNj7+hvkGVxH q1Mod7vNrC8kmWbtfpxH/LWsWpjjLg8EAszE2PRSVmxf/bsY1h40e0e50RVw7+HO cmbS -----END CERTIFICATE-----Generated at Sun May 24 12:48:57 2026 by rpki-client