$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96AF74DB78984438491FFB3ED895325FAF01A105.cer File: 96AF74DB78984438491FFB3ED895325FAF01A105.cer (raw, json) Hash identifier: RzL5rUPN27/6kEksKrz40kmD6juhIGWiIf5it7YcvMA= Subject key identifier: 96:AF:74:DB:78:98:44:38:49:1F:FB:3E:D8:95:32:5F:AF:01:A1:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0CFA6F14C983A247DF9B36F0F8BC688CC4BA6D8B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/96AF74DB78984438491FFB3ED895325FAF01A105.mft caRepository: rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Jun 2026 12:48:11 +0000 Certificate not after: Tue 22 Jun 2027 12:53:11 +0000 Subordinate resources: AS: 52747 IP: 138.99.108.0/22 IP: 177.130.48.0/20 IP: 2804:235c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fa:6f:14:c9:83:a2:47:df:9b:36:f0:f8:bc:68:8c:c4:ba:6d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 23 12:48:11 2026 GMT Not After : Jun 22 12:53:11 2027 GMT Subject: CN=96AF74DB78984438491FFB3ED895325FAF01A105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:d7:ea:0a:f0:44:47:95:c6:44:b6:0b:22: c3:87:c4:39:b2:31:c8:17:a4:27:e8:31:2b:7b:a3: f1:ff:c5:86:7e:7f:8f:45:6d:2d:20:70:b2:97:6f: 80:2b:14:bc:c4:c1:45:88:2d:03:25:3d:af:4c:9f: 5f:58:fb:fe:2c:37:bc:ad:73:ea:5d:ef:96:a3:71: e6:56:f7:e4:b0:39:f2:5f:f2:72:29:a8:6e:58:26: c3:b0:0e:7e:94:90:e9:c9:30:86:43:86:dd:92:99: 79:79:98:e1:29:bd:ad:48:c8:10:e2:bb:4d:cc:f7: 6e:de:a8:1f:9c:ec:58:9e:cd:cd:ca:a8:5a:9c:89: 08:fe:ff:2d:db:1a:0e:67:1b:35:95:cd:d9:00:72: 0f:51:27:a1:aa:82:d8:2d:d8:d6:a7:b8:d2:00:67: 50:4c:b5:07:cd:fe:ba:f6:0b:02:c1:0b:dc:62:dd: b7:d7:5c:c8:c1:97:b1:a1:cc:b0:12:c1:6e:bf:a7: d8:7c:07:6d:2a:d5:ee:cc:3b:f0:28:30:4f:56:86: ee:39:7a:c3:09:6e:6a:be:13:7a:3b:10:58:62:6f: b1:b5:21:58:fa:34:d9:3e:48:61:ae:01:49:06:24: 26:0e:bd:b6:97:26:a0:b8:39:e7:c8:18:79:7d:b2: 70:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:AF:74:DB:78:98:44:38:49:1F:FB:3E:D8:95:32:5F:AF:01:A1:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/96AF74DB78984438491FFB3ED895325FAF01A105.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.108.0/22 177.130.48.0/20 IPv6: 2804:235c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52747 Signature Algorithm: sha256WithRSAEncryption 15:bc:41:2d:83:cb:3d:0e:fb:4c:14:b2:a8:2c:1b:91:ef:6e: 82:1c:89:7a:69:85:b6:aa:2f:f0:10:29:76:39:08:24:92:db: 37:1d:79:88:94:e8:7f:62:6f:7f:10:e7:8b:ae:16:3e:cd:90: d8:eb:64:29:43:71:c5:56:96:48:1f:e8:0d:0a:e2:db:2f:d2: 5b:30:56:ed:05:9b:b8:34:66:fa:ec:5f:2a:8a:25:c3:71:f7: 8e:4b:60:27:73:ec:1c:ee:ef:9f:5d:1b:62:0e:40:b4:27:fd: 53:d0:8c:23:72:09:96:30:1b:d9:0e:23:06:90:36:98:59:0a: 76:08:de:1e:bf:48:b8:30:2e:38:f8:2e:91:f3:18:52:b2:65: 30:2b:30:d2:0c:7b:13:af:b1:a8:33:c5:c5:cc:18:62:d1:cc: e9:0e:b7:cf:4c:19:11:1c:7e:b3:9b:80:8a:72:af:47:66:20: 46:f1:73:c3:6f:49:95:3d:0e:07:dc:9f:f3:a9:9a:da:68:a2: b8:fa:ff:9b:c3:cb:a9:b9:21:05:93:44:6b:24:37:d8:19:9d: e0:33:b2:02:64:43:12:78:f0:38:ec:2b:79:47:1b:42:88:e0: 0c:5c:1b:93:8a:62:92:04:4f:a1:c8:7c:2e:9d:92:f8:8e:88: 51:1a:9f:f2 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDPpvFMmDokffmzbw+LxojMS6bYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjMxMjQ4MTFaFw0yNzA2MjIxMjUzMTFaMDMxMTAvBgNV BAMTKDk2QUY3NERCNzg5ODQ0Mzg0OTFGRkIzRUQ4OTUzMjVGQUYwMUExMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgdfqCvBER5XGRLYLIsOHxDmy McgXpCfoMSt7o/H/xYZ+f49FbS0gcLKXb4ArFLzEwUWILQMlPa9Mn19Y+/4sN7yt c+pd75ajceZW9+SwOfJf8nIpqG5YJsOwDn6UkOnJMIZDht2SmXl5mOEpva1IyBDi u03M927eqB+c7Fiezc3KqFqciQj+/y3bGg5nGzWVzdkAcg9RJ6Gqgtgt2NanuNIA Z1BMtQfN/rr2CwLBC9xi3bfXXMjBl7GhzLASwW6/p9h8B20q1e7MO/AoME9Whu45 esMJbmq+E3o7EFhib7G1IVj6NNk+SGGuAUkGJCYOvbaXJqC4OefIGHl9snBfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWr3TbeJhEOEkf +z7YlTJfrwGhBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2hz WjJyc2k3c2RFeWsyOFNXMzV6VDFkZ0Q3Q1pYbTFIeU01UkxmYjFzZkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0do c1oycnNpN3NkRXlrMjhTVzM1elQxZGdEN0NaWG0xSHlNNVJMZmIxc2ZMLzAvOTZB Rjc0REI3ODk4NDQzODQ5MUZGQjNFRDg5NTMyNUZBRjAxQTEwNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimNsAwQEsYIwMA0EAgACMAcDBQAoBCNcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOCzANBgkqhkiG9w0BAQsFAAOCAQEAFbxBLYPL PQ77TBSyqCwbke9ughyJemmFtqov8BApdjkIJJLbNx15iJTof2JvfxDni64WPs2Q 2OtkKUNxxVaWSB/oDQri2y/SWzBW7QWbuDRm+uxfKoolw3H3jktgJ3PsHO7vn10b Yg5AtCf9U9CMI3IJljAb2Q4jBpA2mFkKdgjeHr9IuDAuOPgukfMYUrJlMCsw0gx7 E6+xqDPFxcwYYtHM6Q63z0wZERx+s5uAinKvR2YgRvFzw29JlT0OB9yf86ma2mii uPr/m8PLqbkhBZNEayQ32Bmd4DOyAmRDEnjwOOwreUcbQojgDFwbk4pikgRPoch8 Lp2S+I6IURqf8g== -----END CERTIFICATE-----Generated at Wed Jul 8 14:21:04 2026 by rpki-client