$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer File: A347F5D0945998093ADA03E9513EA096318126D4.cer (raw, json) Hash identifier: PmorkB+b78TlJgqRHe7C87POqn6aX7Hl7xtH3Fas34M= Subject key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E32502618A131B3EBC2095D4526A75F394ECC3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft caRepository: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 May 2026 21:57:29 +0000 Certificate not after: Sat 22 May 2027 22:02:29 +0000 Subordinate resources: AS: 28145 IP: 186.192.224.0/20 IP: 187.49.128.0/20 IP: 2804:d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 13:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:32:50:26:18:a1:31:b3:eb:c2:09:5d:45:26:a7:5f:39:4e:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 23 21:57:29 2026 GMT Not After : May 22 22:02:29 2027 GMT Subject: CN=A347F5D0945998093ADA03E9513EA096318126D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:2d:3e:24:d1:e0:37:61:0a:92:fa:30:6d: 22:62:21:1b:ad:d3:1d:30:f9:c8:96:6a:af:c7:99: 02:3d:75:f8:0a:79:4c:48:ca:23:e7:6b:04:4e:77: fe:a7:5a:2c:a0:b5:72:81:0f:b3:e8:af:36:24:59: 66:1e:98:ad:6f:ba:40:79:a0:ff:fd:3a:6d:6c:c4: 33:75:90:d2:2e:a6:38:ea:90:0d:4a:c9:5a:d1:57: 75:1f:25:02:91:fa:59:8e:09:5c:e7:00:b2:f2:ea: 88:b5:fc:a0:54:a5:23:25:4c:0d:85:3c:22:b4:61: 88:db:d8:1a:9c:71:03:ae:81:a9:da:1d:b5:11:d1: a8:fd:4b:96:19:70:b4:dd:6a:70:49:c3:ba:96:d2: 08:de:d6:5a:a9:72:f7:70:c5:94:36:05:85:9f:27: 9f:96:f3:89:91:15:82:94:75:1a:5b:17:51:63:7d: ae:a7:8f:44:1d:a1:bc:ca:7e:e2:35:09:12:88:1d: db:2c:ce:51:10:ed:35:98:6c:e7:23:a3:d9:ad:48: 24:bf:58:5b:d2:fb:48:b7:04:23:31:a8:af:e8:fa: a0:28:12:dd:ba:93:66:32:5d:3c:ac:fe:a4:89:5e: 35:70:97:78:5c:b2:60:ab:fa:45:77:66:21:24:9e: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.192.224.0/20 187.49.128.0/20 IPv6: 2804:d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28145 Signature Algorithm: sha256WithRSAEncryption 50:49:f9:7a:0c:6a:a8:99:5b:81:e0:c3:f5:2f:f8:33:02:ad: 8c:7e:61:bf:6f:c1:87:a8:65:cd:1e:b1:7d:19:e0:4a:5d:aa: a3:ad:a9:92:3b:cf:14:62:3e:a3:87:75:65:42:84:a1:f7:42: 9a:c5:c6:5d:00:ec:81:4f:b7:f1:f5:52:c1:04:74:65:24:47: 7b:a9:82:a3:4e:a8:e9:61:72:ab:71:2b:71:a4:8b:9b:6d:26: e7:f0:f1:47:aa:5f:1a:b6:45:aa:1e:7c:2b:9f:30:fc:61:1f: 36:22:ed:7c:11:df:e5:0b:fe:08:81:d6:80:70:a1:a7:3e:69: 9d:07:c0:de:09:23:8b:1d:a2:30:2b:dd:35:0d:02:16:12:05: 84:1d:ab:8f:14:c3:bc:14:b6:10:58:d9:4e:72:73:bb:72:e7: df:3d:54:0e:fe:19:68:3d:da:fd:9d:26:9f:20:4e:da:ec:3f: 8c:7e:6f:35:6e:83:25:03:f2:a9:07:42:e8:a3:00:f5:02:14: 4a:f7:41:a1:a6:ab:88:e9:fb:f2:73:b2:72:77:bd:c8:fd:83: 53:d1:e8:f5:48:4f:74:df:54:3b:fd:71:24:2d:08:79:2d:a7: 40:59:ee:89:8b:1f:b9:6b:df:71:77:46:13:2d:67:58:e6:b4: 11:d4:58:18 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUXjJQJhihMbPrwgldRSanXzlOzD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjMyMTU3MjlaFw0yNzA1MjIyMjAyMjlaMDMxMTAvBgNV BAMTKEEzNDdGNUQwOTQ1OTk4MDkzQURBMDNFOTUxM0VBMDk2MzE4MTI2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oy0+JNHgN2EKkvowbSJiIRut 0x0w+ciWaq/HmQI9dfgKeUxIyiPnawROd/6nWiygtXKBD7PorzYkWWYemK1vukB5 oP/9Om1sxDN1kNIupjjqkA1KyVrRV3UfJQKR+lmOCVznALLy6oi1/KBUpSMlTA2F PCK0YYjb2BqccQOuganaHbUR0aj9S5YZcLTdanBJw7qW0gje1lqpcvdwxZQ2BYWf J5+W84mRFYKUdRpbF1Fjfa6nj0QdobzKfuI1CRKIHdsszlEQ7TWYbOcjo9mtSCS/ WFvS+0i3BCMxqK/o+qAoEt26k2YyXTys/qSJXjVwl3hcsmCr+kV3ZiEknophAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjR/XQlFmYCTra A+lRPqCWMYEm1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1dG aG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dX RmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAvQTM0 N0Y1RDA5NDU5OTgwOTNBREEwM0U5NTEzRUEwOTYzMTgxMjZENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusDgAwQEuzGAMA0EAgACMAcDBQAoBADQMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3xMA0GCSqGSIb3DQEBCwUAA4IBAQBQSfl6DGqo mVuB4MP1L/gzAq2MfmG/b8GHqGXNHrF9GeBKXaqjramSO88UYj6jh3VlQoSh90Ka xcZdAOyBT7fx9VLBBHRlJEd7qYKjTqjpYXKrcStxpIubbSbn8PFHql8atkWqHnwr nzD8YR82Iu18Ed/lC/4IgdaAcKGnPmmdB8DeCSOLHaIwK901DQIWEgWEHauPFMO8 FLYQWNlOcnO7cuffPVQO/hloPdr9nSafIE7a7D+Mfm81boMlA/KpB0LoowD1AhRK 90GhpquI6fvyc7Jyd73I/YNT0ej1SE9031Q7/XEkLQh5LadAWe6Jix+5a99xd0YT LWdY5rQR1FgY -----END CERTIFICATE-----Generated at Sun May 24 14:12:10 2026 by rpki-client