$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer File: 8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer (raw, json) Hash identifier: GhbfdYbpHI8irWwhLuY+xbtQxNly1FS5mfgHaZcoTPM= Subject key identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B5EBE354EF951B6A1A981A49704BAB9A88E5EC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft caRepository: rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 13 May 2026 14:20:07 +0000 Certificate not after: Wed 12 May 2027 14:25:07 +0000 Subordinate resources: AS: 267953 IP: 45.166.68.0/22 IP: 186.227.84.0/22 IP: 2804:55bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 17:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5e:be:35:4e:f9:51:b6:a1:a9:81:a4:97:04:ba:b9:a8:8e:5e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 13 14:20:07 2026 GMT Not After : May 12 14:25:07 2027 GMT Subject: CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:9a:fb:97:a7:04:3c:a8:b5:59:66:f1:b1: 50:5d:e8:ac:aa:8a:69:4f:46:34:21:ee:40:9e:46: da:f1:fe:20:b4:7c:11:87:ea:2b:31:3d:8d:00:3d: 5a:a4:1b:70:3f:ad:81:ff:bf:ac:ba:a2:c6:e5:b4: 31:da:fc:0c:36:18:66:1b:22:b6:2e:07:81:f3:38: 00:48:cd:55:1e:11:82:69:47:c6:aa:83:ae:4b:74: 27:8c:9f:01:52:66:0d:ec:f2:ea:c4:f3:16:73:db: 23:fd:18:d9:e3:fc:6c:e2:c7:5f:ad:ba:3c:40:9a: c7:b3:b6:77:08:92:32:c3:11:c2:0a:97:06:c3:7d: 99:3b:29:9e:3f:bd:76:d2:75:33:46:d1:73:2b:da: 14:56:19:bc:73:ee:b0:62:40:68:f9:05:97:83:8e: 22:fc:65:d0:de:aa:40:f7:f7:b5:97:3a:9c:10:5f: ac:58:70:c2:39:99:f7:4c:85:03:3d:6e:3d:e8:53: 1d:55:e1:14:5a:2f:9d:bb:5e:9f:1a:f4:26:b9:b0: e2:a4:3d:72:95:6f:05:17:c6:ba:fe:d8:e1:4f:df: a4:af:e7:95:33:04:09:ba:76:cb:5c:79:23:a6:3f: 1b:6f:a6:61:95:0d:c9:99:f0:3a:e0:7a:ef:58:eb: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.68.0/22 186.227.84.0/22 IPv6: 2804:55bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267953 Signature Algorithm: sha256WithRSAEncryption 5b:38:28:21:07:39:4c:e9:4e:44:4e:e2:9d:17:86:f8:d1:2a: da:23:4e:36:60:7d:fa:d9:a3:39:91:71:56:3b:48:22:f9:6e: a4:37:67:b8:97:77:3c:8e:40:5e:c0:15:c8:2e:09:5a:de:eb: b8:1c:50:30:13:bc:46:13:8f:55:0e:57:59:5f:24:ee:0e:ae: 7e:c7:eb:65:82:c4:e8:b5:20:81:0b:71:c4:43:ad:41:20:6d: fc:b5:92:c9:d4:7e:f3:9a:5c:b3:78:34:ff:16:29:78:01:01: 1c:74:2b:34:09:6c:40:78:1d:6c:e7:4a:df:13:57:57:8e:9f: 3f:8d:dd:35:b5:b5:7b:95:cd:78:c4:38:8c:8f:ec:f9:63:9d: ee:0e:14:44:12:96:20:aa:7b:7d:13:c8:dd:b4:2f:da:7c:25: 7d:33:8b:29:f4:14:7d:11:4c:28:e2:b3:5d:9c:c1:b0:11:f3: 75:e9:14:df:30:3b:5e:03:d5:92:fe:ec:d8:7c:49:b3:25:68: a0:fc:57:80:cb:df:5d:37:b6:cf:c3:99:85:98:22:cc:cd:45: c6:6d:70:e7:c0:a3:08:ce:8b:09:29:f0:54:87:86:4d:7e:62: 01:c5:9a:1a:0a:fe:f2:37:4a:e9:4a:bf:19:1f:e2:62:96:0e: b3:f4:8f:26 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUe16+NU75UbahqYGklwS6uaiOXsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTMxNDIwMDdaFw0yNzA1MTIxNDI1MDdaMDMxMTAvBgNV BAMTKDhDM0NGNDhDNkVGMjgwMkU1NUVEMEIwRjg5RDNDQTU3MjBENzJCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlypr7l6cEPKi1WWbxsVBd6Kyq imlPRjQh7kCeRtrx/iC0fBGH6isxPY0APVqkG3A/rYH/v6y6osbltDHa/Aw2GGYb IrYuB4HzOABIzVUeEYJpR8aqg65LdCeMnwFSZg3s8urE8xZz2yP9GNnj/Gzix1+t ujxAmseztncIkjLDEcIKlwbDfZk7KZ4/vXbSdTNG0XMr2hRWGbxz7rBiQGj5BZeD jiL8ZdDeqkD397WXOpwQX6xYcMI5mfdMhQM9bj3oUx1V4RRaL527Xp8a9Ca5sOKk PXKVbwUXxrr+2OFP36Sv55UzBAm6dstceSOmPxtvpmGVDcmZ8Drgeu9Y69Y3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMPPSMbvKALlXt Cw+J08pXINcr4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNC Qmt1RGR2Wjh4RVVIY2FhNGJmUjZTWHFOU2p4QlJpTmNaWXNXUUZIeHkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JT QkJrdURkdlo4eEVVSGNhYTRiZlI2U1hxTlNqeEJSaU5jWllzV1FGSHh5LzAvOEMz Q0Y0OEM2RUYyODAyRTU1RUQwQjBGODlEM0NBNTcyMEQ3MkJFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaZEAwQCuuNUMA0EAgACMAcDBQAoBFW8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQWsTANBgkqhkiG9w0BAQsFAAOCAQEAWzgoIQc5 TOlORE7inReG+NEq2iNONmB9+tmjOZFxVjtIIvlupDdnuJd3PI5AXsAVyC4JWt7r uBxQMBO8RhOPVQ5XWV8k7g6ufsfrZYLE6LUggQtxxEOtQSBt/LWSydR+85pcs3g0 /xYpeAEBHHQrNAlsQHgdbOdK3xNXV46fP43dNbW1e5XNeMQ4jI/s+WOd7g4URBKW IKp7fRPI3bQv2nwlfTOLKfQUfRFMKOKzXZzBsBHzdekU3zA7XgPVkv7s2HxJsyVo oPxXgMvfXTe2z8OZhZgizM1Fxm1w58CjCM6LCSnwVIeGTX5iAcWaGgr+8jdK6Uq/ GR/iYpYOs/SPJg== -----END CERTIFICATE-----Generated at Sun May 24 17:58:21 2026 by rpki-client