$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer (raw, json) Hash identifier: AwtBBPStEuuKogjeyn/hgDSCbeGs2eQmRDO4Yn+GSI0= Subject key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69CA70D778CB7DBDE0FEEF4D2B0E20D503F33F48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft caRepository: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Aug 2026 19:49:27 +0000 Certificate not after: Mon 09 Aug 2027 19:54:27 +0000 Subordinate resources: AS: 52639 IP: 168.195.112.0/22 IP: 179.96.176.0/21 IP: 2804:d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ca:70:d7:78:cb:7d:bd:e0:fe:ef:4d:2b:0e:20:d5:03:f3:3f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 10 19:49:27 2026 GMT Not After : Aug 9 19:54:27 2027 GMT Subject: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:3a:13:d2:8c:4d:d3:a6:88:4e:a4:4a:8d: 83:f1:9f:56:3e:60:1d:bd:e8:af:43:99:97:92:a2: 3d:43:65:4b:5e:77:b5:e5:e0:82:da:77:74:eb:69: 15:e8:66:8f:94:07:7b:7f:9e:66:1d:64:37:98:1f: bd:cb:86:9e:86:90:70:e5:7a:4d:df:78:0d:99:d2: bd:80:15:67:c7:42:c9:3e:18:f1:46:da:7d:16:aa: b9:de:d8:f8:7d:27:f4:fb:6b:0f:52:5d:eb:f0:54: b3:12:19:0e:7e:60:49:1c:97:4b:8a:0e:c4:92:73: 75:ce:6e:00:56:64:41:fb:54:23:8b:9f:7e:28:34: 2d:a8:1b:51:08:77:79:5f:fd:e9:91:32:9d:e2:49: ab:98:93:3a:50:3a:b6:a9:8f:53:56:85:f3:c2:ed: 1a:b9:b2:12:7a:48:d3:4f:68:26:f6:4a:d3:6a:39: 68:66:d9:63:90:e1:0e:2b:5e:d1:b3:6b:43:f7:4a: e0:1e:aa:7f:77:41:0e:a1:15:bc:75:43:52:54:4e: e1:88:27:e8:b9:4b:8a:ed:5d:32:4b:b6:5a:24:23: 32:16:f5:ab:63:8b:37:8c:9c:12:f1:55:4e:69:1f: 51:78:ec:f4:d2:29:aa:b3:04:bf:5f:ed:3b:8c:93: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.112.0/22 179.96.176.0/21 IPv6: 2804:d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52639 Signature Algorithm: sha256WithRSAEncryption 22:3c:58:f6:8f:df:e4:95:84:1f:a9:1c:94:90:e4:05:ce:d4: 80:56:db:57:f8:13:60:0d:2f:fc:83:10:4c:99:70:bf:bf:6c: 25:0b:90:b4:81:8c:34:98:9d:11:7a:8b:ea:4b:8b:7e:3a:d0: 24:46:92:ed:79:a1:7c:4d:53:af:cc:7f:cd:1f:9f:e8:69:cf: fd:9d:05:8e:1a:a7:70:69:14:a9:51:21:4a:2b:a2:d4:17:52: 99:a6:5b:5d:0d:a5:f9:6a:3e:6f:98:ff:c4:93:0c:b7:21:1b: 94:ec:b3:b1:42:45:ad:2f:39:77:ad:48:ca:b2:3e:ac:c2:6e: 23:dd:4c:3b:e9:ec:91:a4:7c:6d:79:84:f3:10:be:52:e0:81: b0:45:2a:26:a8:c1:e9:58:bc:85:26:7d:da:93:15:56:d7:7f: 9c:e1:ae:76:a0:a5:6a:84:59:87:54:da:ae:ae:af:d9:7f:09: 1a:08:6f:9c:52:4c:66:5b:27:f8:b1:56:d3:f9:5c:2a:9a:a8: 50:b9:16:0e:04:74:86:c7:2e:82:3e:d6:16:fc:e1:65:cd:0a: 38:f3:0d:24:8e:a7:f1:69:42:c1:e0:2f:0a:60:d9:a6:04:81: b9:6e:bd:b5:a9:1c:c4:65:79:d6:c6:47:ea:62:76:0f:b2:e6: 60:e9:f9:55 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUacpw13jLfb3g/u9NKw4g1QPzP0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTAxOTQ5MjdaFw0yNzA4MDkxOTU0MjdaMDMxMTAvBgNV BAMTKDRDMzMxMDk4Qjg0REM5Mjk2QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIDoT0oxN06aITqRKjYPxn1Y+ YB296K9DmZeSoj1DZUted7Xl4ILad3TraRXoZo+UB3t/nmYdZDeYH73Lhp6GkHDl ek3feA2Z0r2AFWfHQsk+GPFG2n0Wqrne2Ph9J/T7aw9SXevwVLMSGQ5+YEkcl0uK DsSSc3XObgBWZEH7VCOLn34oNC2oG1EId3lf/emRMp3iSauYkzpQOrapj1NWhfPC 7Rq5shJ6SNNPaCb2StNqOWhm2WOQ4Q4rXtGza0P3SuAeqn93QQ6hFbx1Q1JUTuGI J+i5S4rtXTJLtlokIzIW9atjizeMnBLxVU5pH1F47PTSKaqzBL9f7TuMk/MNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMMxCYuE3JKWu9 runSwFvirDzFojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80QzMz MTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKow3ADBAOzYLAwDQQCAAIwBwMFACgEDZAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM2fMA0GCSqGSIb3DQEBCwUAA4IBAQAiPFj2j9/k lYQfqRyUkOQFztSAVttX+BNgDS/8gxBMmXC/v2wlC5C0gYw0mJ0ReovqS4t+OtAk RpLteaF8TVOvzH/NH5/oac/9nQWOGqdwaRSpUSFKK6LUF1KZpltdDaX5aj5vmP/E kwy3IRuU7LOxQkWtLzl3rUjKsj6swm4j3Uw76eyRpHxteYTzEL5S4IGwRSomqMHp WLyFJn3akxVW13+c4a52oKVqhFmHVNqurq/ZfwkaCG+cUkxmWyf4sVbT+VwqmqhQ uRYOBHSGxy6CPtYW/OFlzQo48w0kjqfxaULB4C8KYNmmBIG5br21qRzEZXnWxkfq YnYPsuZg6flV -----END CERTIFICATE-----Generated at Sun Aug 23 00:34:40 2026 by rpki-client