$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.cer File: 4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.cer (raw, json) Hash identifier: AwdB6kXcXW/VExedjmz0x2gzByRzwYXl4bjkYodm8kw= Subject key identifier: 4D:1D:2C:51:6B:15:08:D2:BE:27:70:DA:DF:11:C0:A9:F8:59:E7:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D856CBF813F3CEA33B4CA8B0B4644604BD3E38A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.mft caRepository: rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Jun 2026 13:37:09 +0000 Certificate not after: Fri 25 Jun 2027 13:42:09 +0000 Subordinate resources: AS: 53076 IP: 187.87.160.0/20 IP: 191.241.80.0/21 IP: 2804:80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 15:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:6c:bf:81:3f:3c:ea:33:b4:ca:8b:0b:46:44:60:4b:d3:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 26 13:37:09 2026 GMT Not After : Jun 25 13:42:09 2027 GMT Subject: CN=4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:62:4b:f1:5f:67:9b:07:f1:47:d4:08:a6: 4c:a9:1c:e2:f2:fb:64:74:66:e0:63:4c:fd:d7:95: 24:7e:12:25:5b:2a:75:fa:68:35:b6:e7:1c:a7:b3: 0b:5e:99:36:4f:12:72:0d:dc:ac:a5:58:8b:b1:a2: 5f:b3:56:dc:a9:9c:0d:40:c5:72:cb:91:f4:d1:84: 52:07:58:17:ac:ba:0c:29:e4:a0:41:ad:b3:82:60: 04:d7:85:3f:9b:ac:ac:08:1d:88:cf:0e:66:d6:33: ac:2a:b7:fa:85:68:10:dc:0f:12:f3:6e:a3:60:98: d5:a0:28:53:eb:26:f9:a3:54:9b:e4:89:7e:80:fc: a3:32:91:09:02:b8:fc:1d:b9:dd:86:6b:b5:1f:a9: a6:a0:8f:84:b5:e2:d7:2c:56:27:09:9e:c1:65:05: 61:3b:df:64:b4:b3:6b:68:69:23:a0:bf:e9:0c:b0: fc:d6:7c:bd:21:96:8b:d1:9c:dc:3d:51:f9:d4:d3: cf:38:54:6f:29:fc:43:fd:af:6a:41:a3:7a:59:df: 8c:2f:d8:eb:cc:50:0f:20:27:55:e5:2d:f7:28:af: 73:16:8f:74:ff:9f:10:6a:3e:18:b8:2b:2a:cc:43: b8:86:d9:52:09:1d:08:cc:99:cd:6a:85:51:b1:73: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:1D:2C:51:6B:15:08:D2:BE:27:70:DA:DF:11:C0:A9:F8:59:E7:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.87.160.0/20 191.241.80.0/21 IPv6: 2804:80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53076 Signature Algorithm: sha256WithRSAEncryption c5:df:1a:5e:40:5f:da:70:93:ea:9c:49:0f:6f:82:5f:e8:91: 58:8a:3a:9c:d1:17:4b:13:f8:21:80:6c:28:c3:ba:19:2d:8c: 4e:03:84:66:17:98:3e:1f:90:21:bb:89:5b:65:f9:35:08:65: 83:1d:32:d9:5b:64:e1:13:f6:67:8e:59:71:5f:82:4e:e6:6d: a8:34:86:55:42:1f:61:d0:bb:a9:ce:5d:92:75:80:32:a5:be: f6:a6:9f:39:7a:ef:a2:6c:d1:4b:ac:09:29:3e:c6:a3:25:d0: 76:bc:73:c0:d9:d8:5d:33:56:69:4b:64:c0:cb:75:14:77:fd: 62:9f:c5:f2:8c:bb:fb:73:64:fb:9e:91:46:87:52:8e:5b:0b: 4d:21:33:e2:c3:5b:45:3f:94:74:82:f0:09:9d:32:1b:0e:aa: e8:7f:58:84:7e:36:59:5c:20:08:03:e6:68:68:b0:3c:60:0f: e5:96:7b:47:93:7f:15:45:b2:cc:7a:18:51:a2:af:e5:5b:63: 4e:1a:6f:b8:01:04:89:dd:d1:ae:69:84:6f:93:39:2e:47:46: 5c:17:67:01:e0:a3:5c:8a:c3:c1:7c:27:36:e5:f3:23:f9:92: f8:ca:6c:31:22:df:1d:65:8f:62:47:9a:5f:34:ac:ac:74:ab: c2:f3:0a:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTYVsv4E/POoztMqLC0ZEYEvT44owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjYxMzM3MDlaFw0yNzA2MjUxMzQyMDlaMDMxMTAvBgNV BAMTKDREMUQyQzUxNkIxNTA4RDJCRTI3NzBEQURGMTFDMEE5Rjg1OUU3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaXWJL8V9nmwfxR9QIpkypHOLy +2R0ZuBjTP3XlSR+EiVbKnX6aDW25xynswtemTZPEnIN3KylWIuxol+zVtypnA1A xXLLkfTRhFIHWBesugwp5KBBrbOCYATXhT+brKwIHYjPDmbWM6wqt/qFaBDcDxLz bqNgmNWgKFPrJvmjVJvkiX6A/KMykQkCuPwdud2Ga7Ufqaagj4S14tcsVicJnsFl BWE732S0s2toaSOgv+kMsPzWfL0hlovRnNw9UfnU0884VG8p/EP9r2pBo3pZ34wv 2OvMUA8gJ1XlLfcor3MWj3T/nxBqPhi4KyrMQ7iG2VIJHQjMmc1qhVGxc/WtAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNHSxRaxUI0r4n cNrfEcCp+FnnvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDVt TVdSdGJjb3BlVjdnUXZQTDFNcmNINGJnRlg1YVliSDFqWU5rZ3ljQkIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q1 bU1XUnRiY29wZVY3Z1F2UEwxTXJjSDRiZ0ZYNWFZYkgxallOa2d5Y0JCLzAvNEQx RDJDNTE2QjE1MDhEMkJFMjc3MERBREYxMUMwQTlGODU5RTdCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu1egAwQDv/FQMA0EAgACMAcDBQAoBACAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPVDANBgkqhkiG9w0BAQsFAAOCAQEAxd8aXkBf 2nCT6pxJD2+CX+iRWIo6nNEXSxP4IYBsKMO6GS2MTgOEZheYPh+QIbuJW2X5NQhl gx0y2Vtk4RP2Z45ZcV+CTuZtqDSGVUIfYdC7qc5dknWAMqW+9qafOXrvomzRS6wJ KT7GoyXQdrxzwNnYXTNWaUtkwMt1FHf9Yp/F8oy7+3Nk+56RRodSjlsLTSEz4sNb RT+UdILwCZ0yGw6q6H9YhH42WVwgCAPmaGiwPGAP5ZZ7R5N/FUWyzHoYUaKv5Vtj ThpvuAEEid3RrmmEb5M5LkdGXBdnAeCjXIrDwXwnNuXzI/mS+MpsMSLfHWWPYkea XzSsrHSrwvMKMQ== -----END CERTIFICATE-----Generated at Wed Jul 8 14:20:55 2026 by rpki-client