$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer File: 3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer (raw, json) Hash identifier: ksam2/G+n1o8AJhvprVSBHYFkLobVC1Exh97Lo55yYA= Subject key identifier: 3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 324AA500FDC09F41C163D9BAD2F27576C632D9E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft caRepository: rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 11:19:17 +0000 Certificate not after: Thu 25 Mar 2027 11:24:17 +0000 Subordinate resources: AS: 271003 IP: 177.129.100.0/22 IP: 2804:74c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4a:a5:00:fd:c0:9f:41:c1:63:d9:ba:d2:f2:75:76:c6:32:d9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 11:19:17 2026 GMT Not After : Mar 25 11:24:17 2027 GMT Subject: CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:4c:d4:9c:df:4a:70:33:b2:3f:35:5d:db: d4:8e:a1:b5:0e:6f:b4:68:35:83:61:0d:f9:6c:55: 99:a0:51:a0:54:38:73:f1:03:20:27:36:33:cc:54: 34:5c:9e:17:53:36:42:a3:b6:07:84:18:66:1f:ff: 8b:58:94:4e:94:61:9e:69:2b:5e:58:c4:67:95:b3: bf:0f:8f:a1:73:ae:4d:56:d3:57:83:5d:5a:b0:66: 9f:64:a1:c8:96:d8:85:35:0d:09:88:61:82:7f:3f: 74:31:62:0f:25:2c:94:bf:b2:0c:bc:27:27:25:e8: bf:44:1e:f0:0e:6b:cb:f6:ab:33:d7:26:b7:86:1a: c8:47:6d:64:d2:e3:1e:59:c6:ef:c9:2e:c7:ed:ba: 0b:f7:93:5a:a2:7c:90:f2:84:4e:27:18:da:a0:d5: 06:7d:7e:5f:bc:f5:4c:a3:86:e7:68:c4:db:d4:06: dc:df:97:43:43:1a:a3:c5:04:10:df:93:58:9f:a9: df:e8:74:e3:60:a5:dc:38:eb:ad:2d:6d:f2:24:15: 76:92:4c:d3:07:33:60:51:1e:1a:4c:35:68:3a:05: 50:ba:3c:d3:c5:54:d9:60:8d:7b:87:e5:26:08:6b: d2:88:f5:5f:c8:32:19:1b:d6:0a:f8:93:91:60:de: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.100.0/22 IPv6: 2804:74c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271003 Signature Algorithm: sha256WithRSAEncryption 57:f1:d1:e9:cc:f3:5f:fc:1b:cb:a7:8e:64:6c:c7:95:29:73: 80:19:1f:bc:e9:b3:de:1e:b1:b8:4d:67:e4:d0:f4:63:b1:17: fa:46:b8:7e:85:e4:48:b9:cd:a4:0a:3f:52:b3:3c:ef:06:b2: 9d:98:02:67:f9:fc:f9:f5:59:d1:39:55:c1:40:35:54:8a:90: b3:95:9f:3b:23:98:a9:da:5c:94:d5:1f:b6:90:20:1c:29:24: 07:79:ec:f4:c6:c6:45:a5:cc:66:5c:ab:ee:73:30:10:4f:14: 03:77:98:2a:33:45:cc:cb:07:45:cc:8a:fe:a7:c1:58:da:70: af:e9:ad:34:8b:49:94:7f:3c:fe:31:01:b1:88:60:bb:6e:eb: 7f:a4:c1:ee:7f:80:42:98:2b:3e:25:e3:bf:8a:c0:b3:ef:ae: 2d:b2:db:3e:dd:42:f3:ba:94:b5:f1:e2:5f:9a:4a:61:64:32: a8:36:aa:ca:14:71:46:13:61:77:18:7d:bf:9a:47:c6:6c:6d: b6:0b:09:61:46:9b:4d:ed:3c:e0:1a:5f:c9:58:82:e9:c9:ad: 10:41:89:25:1f:15:c7:e8:0d:70:d0:02:68:6e:b0:60:ea:21: 3b:43:1a:73:30:43:45:f0:b6:9c:b5:27:86:f2:50:b6:04:81: a3:56:ba:22 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMkqlAP3An0HBY9m60vJ1dsYy2eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjYxMTE5MTdaFw0yNzAzMjUxMTI0MTdaMDMxMTAvBgNV BAMTKDNERTFGOTZDRjBBOUU3NTBERDU0QjI4Q0U2NkU1MjFCQzMwMUMxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW0zUnN9KcDOyPzVd29SOobUO b7RoNYNhDflsVZmgUaBUOHPxAyAnNjPMVDRcnhdTNkKjtgeEGGYf/4tYlE6UYZ5p K15YxGeVs78Pj6Fzrk1W01eDXVqwZp9kociW2IU1DQmIYYJ/P3QxYg8lLJS/sgy8 Jycl6L9EHvAOa8v2qzPXJreGGshHbWTS4x5Zxu/JLsftugv3k1qifJDyhE4nGNqg 1QZ9fl+89UyjhudoxNvUBtzfl0NDGqPFBBDfk1ifqd/odONgpdw4660tbfIkFXaS TNMHM2BRHhpMNWg6BVC6PNPFVNlgjXuH5SYIa9KI9V/IMhkb1gr4k5Fg3q1ZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ94fls8KnnUN1U sozmblIbwwHBBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0Jk YkI0WEpBRzVLOWZVa3RwM3IzN3A5ek5lN0xpSnpYNVFwblZMN3hjYmcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dC ZGJCNFhKQUc1SzlmVWt0cDNyMzdwOXpOZTdMaUp6WDVRcG5WTDd4Y2JnLzAvM0RF MUY5NkNGMEE5RTc1MERENTRCMjhDRTY2RTUyMUJDMzAxQzEwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsYFkMA0EAgACMAcDBQAoBHTIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQimzANBgkqhkiG9w0BAQsFAAOCAQEAV/HR6czzX/wby6eO ZGzHlSlzgBkfvOmz3h6xuE1n5ND0Y7EX+ka4foXkSLnNpAo/UrM87waynZgCZ/n8 +fVZ0TlVwUA1VIqQs5WfOyOYqdpclNUftpAgHCkkB3ns9MbGRaXMZlyr7nMwEE8U A3eYKjNFzMsHRcyK/qfBWNpwr+mtNItJlH88/jEBsYhgu27rf6TB7n+AQpgrPiXj v4rAs++uLbLbPt1C87qUtfHiX5pKYWQyqDaqyhRxRhNhdxh9v5pHxmxttgsJYUab Te084BpfyViC6cmtEEGJJR8Vx+gNcNACaG6wYOohO0MaczBDRfC2nLUnhvJQtgSB o1a6Ig== -----END CERTIFICATE-----Generated at Thu Apr 9 14:10:44 2026 by rpki-client