$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer (raw, json) Hash identifier: e/Ie5v4WdIGi+xhG9VfAXMFoXLLRfLLw0xLXXy4/pz0= Subject key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E8B195D2B24264615C734678E95F23D4B9494E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft caRepository: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 May 2026 01:37:12 +0000 Certificate not after: Sat 22 May 2027 01:42:12 +0000 Subordinate resources: AS: 52694 IP: 177.73.36.0/22 IP: 200.6.128.0/22 IP: 2804:c58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 13:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8b:19:5d:2b:24:26:46:15:c7:34:67:8e:95:f2:3d:4b:94:94:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 23 01:37:12 2026 GMT Not After : May 22 01:42:12 2027 GMT Subject: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:45:bf:2d:ad:9c:19:85:9e:c1:a4:8b:86: 57:a5:2b:3d:55:ae:19:f6:14:bc:c1:f0:aa:a3:24: 7e:f1:56:5b:1c:85:4f:1b:4b:d1:7e:a8:9d:bc:b9: 8d:6b:5c:47:9f:8c:5f:f9:53:2c:2c:0a:04:10:e5: e0:12:8b:8b:d0:97:ca:08:99:c8:51:ac:46:9b:56: 00:24:22:da:0a:8f:82:cb:16:b2:80:49:6e:df:5d: 27:8e:45:32:ad:8a:6a:28:68:50:69:d8:47:b4:7a: 15:53:2e:88:19:b6:87:62:16:5b:ea:56:b1:e5:04: 00:c3:67:bb:9f:79:90:24:04:c3:19:d1:67:69:67: fe:02:65:f9:16:76:e1:54:0c:aa:ac:34:41:5d:67: 27:d0:d7:b6:32:c1:19:94:a1:cb:be:80:4e:b2:9c: 8e:48:7a:37:ec:62:4e:fa:7e:49:fb:07:af:eb:ef: eb:61:ae:2c:07:aa:c2:02:c5:11:f9:6f:93:b1:c1: 2c:2a:4a:54:f6:1e:d4:2e:a8:c1:fb:6c:05:0f:c9: 37:4f:60:1b:0f:e0:58:0d:e1:4a:a2:35:c7:ee:08: 53:cb:3f:a1:88:bd:42:ca:5d:a3:14:e4:04:d9:c9: dd:fb:3c:12:54:86:c4:b2:46:f8:40:e8:1d:ff:5b: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.36.0/22 200.6.128.0/22 IPv6: 2804:c58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52694 Signature Algorithm: sha256WithRSAEncryption 4d:68:88:17:69:00:9b:c1:9d:3b:ee:68:b6:c1:60:6d:94:dd: 34:19:cd:00:7e:8f:03:76:6c:1c:84:3d:81:d0:84:51:d7:d2: c7:72:76:ce:53:3a:33:d7:cf:25:43:b3:e4:c8:97:c5:32:84: a7:0b:b1:35:39:7c:17:e8:c8:f0:e0:f0:5d:e3:62:f9:d5:ad: 15:36:43:bb:18:71:85:3c:ac:bd:fc:95:3a:5b:c0:77:af:15: 93:4b:49:5a:db:91:6c:51:c5:f1:ff:90:4c:5f:fe:4c:c4:51: a6:6b:ea:dc:f5:1e:95:bd:59:90:de:8d:57:70:e5:79:14:43: 48:0b:74:ad:b4:b7:27:82:4e:a8:2e:29:9a:8d:a0:ab:a2:df: 00:14:8f:f9:f1:f7:59:5a:2a:cc:51:99:20:51:99:a2:31:33: 4f:37:19:e8:90:79:0c:ac:b1:64:c0:8e:d3:57:7b:c0:24:26: cd:8c:34:b6:37:64:25:6b:4e:75:c3:48:f6:47:f4:8f:2d:15: 02:bc:18:a6:39:d7:67:a0:7f:7d:5e:f9:a6:6a:ec:3a:81:ab: 4a:83:a6:1c:e3:10:79:4d:a8:0a:85:b6:1b:41:b1:23:1a:c0: 4b:bc:b3:3d:f6:de:a3:03:da:4b:fa:c7:e8:14:af:10:72:01: 33:76:9a:77 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTosZXSskJkYVxzRnjpXyPUuUlOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjMwMTM3MTJaFw0yNzA1MjIwMTQyMTJaMDMxMTAvBgNV BAMTKDNEQUYxQ0E0ODYzM0Q0MkYzODk1NUM0N0M4QkEwRkFEQTczRDcwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKUW/La2cGYWewaSLhlelKz1V rhn2FLzB8KqjJH7xVlschU8bS9F+qJ28uY1rXEefjF/5UywsCgQQ5eASi4vQl8oI mchRrEabVgAkItoKj4LLFrKASW7fXSeORTKtimooaFBp2Ee0ehVTLogZtodiFlvq VrHlBADDZ7ufeZAkBMMZ0WdpZ/4CZfkWduFUDKqsNEFdZyfQ17YywRmUocu+gE6y nI5IejfsYk76fkn7B6/r7+thriwHqsICxRH5b5OxwSwqSlT2HtQuqMH7bAUPyTdP YBsP4FgN4UqiNcfuCFPLP6GIvULKXaMU5ATZyd37PBJUhsSyRvhA6B3/W7LrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9rxykhjPULziV XEfIug+tpz1wBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjk2 OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvM0RB RjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURBNzNENzAwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUkkAwQCyAaAMA0EAgACMAcDBQAoBAxYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1jANBgkqhkiG9w0BAQsFAAOCAQEATWiIF2kA m8GdO+5otsFgbZTdNBnNAH6PA3ZsHIQ9gdCEUdfSx3J2zlM6M9fPJUOz5MiXxTKE pwuxNTl8F+jI8ODwXeNi+dWtFTZDuxhxhTysvfyVOlvAd68Vk0tJWtuRbFHF8f+Q TF/+TMRRpmvq3PUelb1ZkN6NV3DleRRDSAt0rbS3J4JOqC4pmo2gq6LfABSP+fH3 WVoqzFGZIFGZojEzTzcZ6JB5DKyxZMCO01d7wCQmzYw0tjdkJWtOdcNI9kf0jy0V ArwYpjnXZ6B/fV75pmrsOoGrSoOmHOMQeU2oCoW2G0GxIxrAS7yzPfbeowPaS/rH 6BSvEHIBM3aadw== -----END CERTIFICATE-----Generated at Sun May 24 14:07:17 2026 by rpki-client