$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer File: 3DDE2C96A736983C4145E6A74FA601EF275DE118.cer (raw, json) Hash identifier: 9bJ+3xSlxbnuAKVkUrxaH23WvYnH4qSfpV+OBsZaT1k= Subject key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 302CB08747FD8D3E16474B26998C8BB39BCB700E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft caRepository: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 21 May 2026 16:29:19 +0000 Certificate not after: Thu 20 May 2027 16:34:19 +0000 Subordinate resources: AS: 52783 IP: 131.255.116.0/22 IP: 138.122.132.0/22 IP: 138.255.192.0/22 IP: 170.78.116.0/22 IP: 170.254.76.0/22 IP: 177.52.80.0/21 IP: 177.74.184.0/21 IP: 177.200.64.0/20 IP: 2804:10f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:b0:87:47:fd:8d:3e:16:47:4b:26:99:8c:8b:b3:9b:cb:70:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 21 16:29:19 2026 GMT Not After : May 20 16:34:19 2027 GMT Subject: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:21:2b:5c:5d:75:09:3c:60:9c:15:e3:85: d4:02:17:ab:05:c6:6c:14:70:5d:0a:01:3d:29:d5: 22:43:7d:09:fb:bb:43:63:72:c9:7a:61:37:28:e5: a5:1e:ad:55:16:aa:59:21:91:4f:f3:a9:30:39:b4: 09:ad:bb:39:9a:bd:ec:c4:23:de:96:da:cf:e1:8b: 43:8b:00:8b:54:15:0a:a1:80:54:4b:49:ae:c2:8c: ce:16:78:bc:b1:81:56:8b:37:96:f7:5c:e5:ea:3f: 5a:9f:8d:ca:c8:ac:60:c4:ac:b9:ed:3f:9e:48:dd: 71:ca:27:4e:5f:01:19:f8:d6:a6:9a:98:0e:50:83: 03:c7:ba:04:1f:04:d8:07:97:af:30:cb:53:ae:c2: eb:e5:95:b3:65:03:95:3c:06:cd:7a:4e:bd:cb:87: 4c:c0:91:2c:7b:34:e4:1b:41:55:ed:44:ad:50:fb: 46:0a:88:68:3a:84:1c:21:7d:26:09:9f:30:c1:90: 2b:c5:48:2f:83:0b:bc:61:e0:ed:e5:23:71:5e:ae: be:d1:81:42:bb:cb:cd:8b:ba:6d:cf:20:8c:83:cd: 6c:0f:15:a5:ad:ef:16:76:0f:ec:81:0d:d1:b9:e5: d7:6a:55:06:52:04:57:1e:4f:58:eb:f5:fe:fa:27: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.116.0/22 138.122.132.0/22 138.255.192.0/22 170.78.116.0/22 170.254.76.0/22 177.52.80.0/21 177.74.184.0/21 177.200.64.0/20 IPv6: 2804:10f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52783 Signature Algorithm: sha256WithRSAEncryption 0e:04:00:a1:a3:55:79:2c:53:dd:3d:05:cf:5c:b5:99:dd:15: c0:35:30:c7:4a:bc:3a:b5:04:c9:50:b0:fa:91:94:04:37:53: aa:88:98:4d:a2:da:8d:31:26:59:33:df:e2:5a:6c:f4:b5:52: af:db:68:4c:eb:0b:6f:83:57:de:ff:6d:75:4f:ec:43:da:59: 47:08:7c:4a:f5:17:7c:e6:50:89:f1:15:42:8a:e8:e9:94:6f: 38:2d:51:25:e8:bc:a1:9e:23:5f:ec:ba:23:de:eb:d7:b6:a7: cf:0a:09:d6:f5:fd:8d:38:a7:44:ee:f2:83:99:ac:94:b6:1f: b6:4d:76:17:0a:8b:a1:92:96:83:1c:14:12:50:4a:21:35:50: d8:79:37:1f:60:7c:35:56:b0:59:f0:a4:c6:ef:de:96:d6:61: 9a:54:09:f9:ea:d3:51:61:ee:47:eb:cf:0a:e2:06:aa:fa:77: 8f:8d:10:60:d7:86:ff:2c:a6:db:0d:9d:a1:8f:cf:c0:95:44: fb:ab:da:b3:ae:61:c5:e8:a3:d5:3f:df:38:f4:17:ce:f1:65: 5d:21:ee:f5:32:0b:4e:a1:a9:a8:68:70:54:6a:d6:6b:8a:41: 10:8b:d1:d7:27:1c:d4:e5:4f:39:4e:97:0e:bc:51:1f:3a:c2: a1:23:e8:5c -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUMCywh0f9jT4WR0smmYyLs5vLcA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjExNjI5MTlaFw0yNzA1MjAxNjM0MTlaMDMxMTAvBgNV BAMTKDNEREUyQzk2QTczNjk4M0M0MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6iErXF11CTxgnBXjhdQCF6sF xmwUcF0KAT0p1SJDfQn7u0Njcsl6YTco5aUerVUWqlkhkU/zqTA5tAmtuzmavezE I96W2s/hi0OLAItUFQqhgFRLSa7CjM4WeLyxgVaLN5b3XOXqP1qfjcrIrGDErLnt P55I3XHKJ05fARn41qaamA5QgwPHugQfBNgHl68wy1OuwuvllbNlA5U8Bs16Tr3L h0zAkSx7NOQbQVXtRK1Q+0YKiGg6hBwhfSYJnzDBkCvFSC+DC7xh4O3lI3Ferr7R gUK7y82Lum3PIIyDzWwPFaWt7xZ2D+yBDdG55ddqVQZSBFceT1jr9f76J0+fAgMB AAGjggNkMIIDYDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ93iyWpzaYPEFF 5qdPpgHvJ13hGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRN d2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlYWUEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I0 TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEvM0RE RTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYyNzVERTExOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEH AQH/BEkwRzA2BAIAATAwAwQCg/90AwQCinqEAwQCiv/AAwQCqk50AwQCqv5MAwQD sTRQAwQDsUq4AwQEschAMA0EAgACMAcDBQAoBBD4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDOLzANBgkqhkiG9w0BAQsFAAOCAQEADgQAoaNVeSxT3T0Fz1y1md0V wDUwx0q8OrUEyVCw+pGUBDdTqoiYTaLajTEmWTPf4lps9LVSr9toTOsLb4NX3v9t dU/sQ9pZRwh8SvUXfOZQifEVQoro6ZRvOC1RJei8oZ4jX+y6I97r17anzwoJ1vX9 jTinRO7yg5mslLYftk12FwqLoZKWgxwUElBKITVQ2Hk3H2B8NVawWfCkxu/eltZh mlQJ+erTUWHuR+vPCuIGqvp3j40QYNeG/yym2w2doY/PwJVE+6vas65hxeij1T/f OPQXzvFlXSHu9TILTqGpqGhwVGrWa4pBEIvR1ycc1OVPOU6XDrxRHzrCoSPoXA== -----END CERTIFICATE-----Generated at Sun May 24 11:58:50 2026 by rpki-client