$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/652EEAAF6B93DC9257EEB9C8CB88D39720882250.cer File: 652EEAAF6B93DC9257EEB9C8CB88D39720882250.cer (raw, json) Hash identifier: fpvORaXKEm25dH74Ku+M6A0KBZiMJeTVswRSdyWlwpc= Subject key identifier: 65:2E:EA:AF:6B:93:DC:92:57:EE:B9:C8:CB:88:D3:97:20:88:22:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53DE4E72EE9CDFAE4BC5F1B9CED034479052BDE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/652EEAAF6B93DC9257EEB9C8CB88D39720882250.mft caRepository: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 15 May 2026 13:16:22 +0000 Certificate not after: Fri 14 May 2027 13:21:22 +0000 Subordinate resources: AS: 10285 AS: 21571 IP: 200.152.96.0/19 IP: 201.23.224.0/19 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:de:4e:72:ee:9c:df:ae:4b:c5:f1:b9:ce:d0:34:47:90:52:bd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 15 13:16:22 2026 GMT Not After : May 14 13:21:22 2027 GMT Subject: CN=652EEAAF6B93DC9257EEB9C8CB88D39720882250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:9d:1a:57:e0:c2:90:cb:b5:9e:1c:eb:45: 3a:28:93:ea:6e:aa:0a:47:c9:9e:0c:6d:1c:eb:06: 6b:3b:b9:3b:71:72:94:ff:29:90:0f:6e:e1:ff:e2: 8c:bc:cd:ea:59:3f:8c:5f:31:6c:da:6f:6d:89:5e: 48:45:8e:49:c0:16:bf:44:95:80:01:fe:52:a2:18: e5:8b:be:0d:88:ce:26:06:2e:fb:c9:e6:3f:15:84: b7:96:e0:12:79:71:8d:ba:50:33:08:e7:91:91:23: e5:63:42:70:5c:49:29:0a:d7:82:d9:61:76:c9:f8: af:68:38:77:24:02:a1:da:e5:c6:b5:28:1e:2d:f1: 69:9f:06:ce:74:35:d4:64:a4:64:bf:a7:d3:c4:db: 50:f5:7e:17:b0:25:82:06:d1:d4:4f:e2:3a:15:d3: e5:2a:b4:18:8f:b3:be:52:b7:ec:c4:7e:21:c0:0a: 8f:87:4f:60:84:df:12:41:84:26:bf:57:61:3c:b3: bb:55:63:a1:14:4b:ef:1d:1e:70:43:d6:b5:a2:b7: 94:72:3b:98:c6:d6:96:9b:ce:da:a1:14:69:15:19: 90:6a:5a:ad:8a:65:44:71:57:c8:d9:75:fb:73:de: b2:f5:30:df:e6:6c:b2:82:61:93:84:fa:d0:f9:df: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:2E:EA:AF:6B:93:DC:92:57:EE:B9:C8:CB:88:D3:97:20:88:22:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/652EEAAF6B93DC9257EEB9C8CB88D39720882250.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.96.0/19 201.23.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10285 21571 Signature Algorithm: sha256WithRSAEncryption c1:76:c6:91:9f:5f:d3:28:a6:c9:e9:76:80:7a:75:e3:11:5a: aa:c9:41:3b:e3:22:51:65:1f:91:0c:f1:34:3c:3e:1d:e6:7f: f6:ff:42:9a:11:13:d6:11:ca:51:db:cf:51:23:cb:18:5f:ca: 75:e2:f3:35:71:24:80:f5:c6:af:dd:80:d8:8d:72:33:10:cc: 05:f7:1c:33:5a:2a:e8:8b:ca:e3:ec:bc:a3:b6:3d:0d:8f:24: de:fc:f9:7a:de:2f:e2:f9:c2:dc:7d:00:7d:3f:3f:d0:65:c2: f0:2a:f7:42:30:e5:78:fc:83:8b:da:86:85:9d:52:f4:3c:57: 0a:da:b6:02:43:b1:f9:22:8b:fd:19:8f:8a:5d:e9:eb:45:89: 5c:c8:98:92:3a:0c:ac:53:21:f6:7a:ff:47:e4:91:bd:fb:4d: 14:2c:e8:a4:c1:5a:50:1f:5f:88:82:96:1e:8b:fd:df:74:5a: 30:72:03:28:ae:77:2d:fb:10:02:0f:ec:b9:bb:a2:a9:01:46: 0b:dc:ce:ee:7e:3b:e7:3e:6e:b8:a2:24:5f:63:f8:de:0f:be: 69:93:8b:c0:d2:48:17:35:9c:41:1e:02:55:9b:ed:5f:20:ec: 7b:da:e8:5f:30:52:87:b7:cf:72:c3:12:60:0d:f2:e9:36:b0: 32:ba:4b:89 -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIUU95Ocu6c365LxfG5ztA0R5BSveYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTUxMzE2MjJaFw0yNzA1MTQxMzIxMjJaMDMxMTAvBgNV BAMTKDY1MkVFQUFGNkI5M0RDOTI1N0VFQjlDOENCODhEMzk3MjA4ODIyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6Z0aV+DCkMu1nhzrRTook+pu qgpHyZ4MbRzrBms7uTtxcpT/KZAPbuH/4oy8zepZP4xfMWzab22JXkhFjknAFr9E lYAB/lKiGOWLvg2IziYGLvvJ5j8VhLeW4BJ5cY26UDMI55GRI+VjQnBcSSkK14LZ YXbJ+K9oOHckAqHa5ca1KB4t8WmfBs50NdRkpGS/p9PE21D1fhewJYIG0dRP4joV 0+UqtBiPs75St+zEfiHACo+HT2CE3xJBhCa/V2E8s7tVY6EUS+8dHnBD1rWit5Ry O5jG1pabztqhFGkVGZBqWq2KZURxV8jZdftz3rL1MN/mbLKCYZOE+tD53yRRAgMB AAGjggM0MIIDMDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlLuqva5Pcklfu ucjLiNOXIIgiUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1q VGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFTakUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht alRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAvNjUy RUVBQUY2QjkzREM5MjU3RUVCOUM4Q0I4OEQzOTcyMDg4MjI1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQFyJhgAwQFyRfgMB0GCCsGAQUFBwEIAQH/BA4wDKAK MAgCAigtAgJUQzANBgkqhkiG9w0BAQsFAAOCAQEAwXbGkZ9f0yimyel2gHp14xFa qslBO+MiUWUfkQzxNDw+HeZ/9v9CmhET1hHKUdvPUSPLGF/KdeLzNXEkgPXGr92A 2I1yMxDMBfccM1oq6IvK4+y8o7Y9DY8k3vz5et4v4vnC3H0AfT8/0GXC8Cr3QjDl ePyDi9qGhZ1S9DxXCtq2AkOx+SKL/RmPil3p60WJXMiYkjoMrFMh9nr/R+SRvftN FCzopMFaUB9fiIKWHov933RaMHIDKK53LfsQAg/subuiqQFGC9zO7n475z5uuKIk X2P43g++aZOLwNJIFzWcQR4CVZvtXyDse9roXzBSh7fPcsMSYA3y6TawMrpLiQ== -----END CERTIFICATE-----Generated at Sun May 24 12:47:52 2026 by rpki-client