$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer File: BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer (raw, json) Hash identifier: 2dSSkdKKtfbqbQZVjEiMWxk656JQ+Abl10IRZEJo8I4= Subject key identifier: BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A0CA88AAC8E6754E9AA26830484C4A63B528DAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft caRepository: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 03 Jul 2026 17:25:40 +0000 Certificate not after: Fri 02 Jul 2027 17:30:40 +0000 Subordinate resources: AS: 273468 IP: 168.0.3.0/24 IP: 2804:8f1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 15:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:a8:8a:ac:8e:67:54:e9:aa:26:83:04:84:c4:a6:3b:52:8d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 3 17:25:40 2026 GMT Not After : Jul 2 17:30:40 2027 GMT Subject: CN=BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:9e:ba:7f:20:71:5c:e3:28:13:60:6d:80: 89:21:25:d5:a9:a6:66:f2:41:96:50:a6:68:1d:e1: d5:c0:45:6d:57:68:e0:83:fb:f7:51:2d:ae:28:bb: a6:b2:cc:6c:4b:51:e3:db:26:59:44:90:6e:96:77: e9:33:49:0d:58:3a:6f:bb:81:f5:3c:de:6d:1c:4a: 6d:7b:ba:de:bd:fa:65:e6:54:82:6e:bc:44:b0:92: 9e:0c:88:49:2b:65:34:81:3e:09:50:cc:d9:a4:64: 21:2d:db:38:4d:c3:29:61:44:f9:cc:17:42:fb:14: d4:b3:36:99:15:4d:37:62:f9:2f:2c:16:fd:2c:67: dc:84:ef:f6:70:01:59:5a:ec:41:09:3d:6e:fa:1f: 5a:fd:25:f0:c4:65:c2:88:0d:cc:b3:7b:78:5d:5a: ed:f5:5b:66:0e:57:a6:eb:59:95:af:db:3d:8d:99: 98:d0:d3:38:e7:5e:a1:b3:74:38:e3:6e:86:b5:77: c0:5b:60:41:18:2f:5f:9e:39:30:93:42:ae:49:09: ed:b8:e2:08:5f:a0:56:20:ab:f7:0e:fa:55:78:7c: 42:a3:d6:ca:ae:49:a0:b5:42:5a:50:f3:4c:10:0d: 0a:06:4f:fc:d5:48:a7:be:f4:11:c5:23:8a:2f:09: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.3.0/24 IPv6: 2804:8f1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273468 Signature Algorithm: sha256WithRSAEncryption 08:b9:68:dd:c7:db:0f:98:f4:a0:65:93:87:8d:71:6e:98:b6: f6:cd:14:e9:ab:2b:ea:02:fd:bd:63:26:d0:8f:8e:3a:5c:35: 71:cd:ce:8c:10:4b:bb:82:5f:ce:b5:f0:54:94:49:20:95:74: c7:48:82:1a:55:ad:85:c1:a1:e8:f8:26:de:4d:2b:09:78:47: 41:4a:17:81:dd:db:ed:f0:f5:dd:ed:72:ba:42:6f:81:d2:3b: 6f:09:de:df:a4:a5:f5:6e:6e:52:4e:15:c1:d7:b8:b4:93:da: 92:3b:d0:2a:04:c7:80:bd:7b:c4:ea:20:42:cf:55:0c:de:88: 2c:22:37:0f:79:7b:41:63:d7:6c:c7:fa:fb:a2:64:4d:6d:53: 17:54:53:60:da:a7:c5:45:f6:bd:32:cb:a1:85:54:4b:61:d6: 22:34:86:bd:39:38:d6:ee:0e:1e:4e:0a:83:41:92:f3:9b:a7: 6c:79:bb:f4:ff:90:37:58:1d:15:2c:0f:3b:02:fe:52:bd:cc: 1b:95:40:45:d2:50:1b:f3:0d:3f:5e:fe:d0:85:b9:97:5c:5a: e7:2c:f3:9c:42:0a:41:1f:4d:3b:9a:c8:22:e4:a1:bc:7b:ff: 4a:d8:01:9a:a4:f8:45:8a:af:5b:2b:dd:9c:f1:26:5b:22:0b: dd:70:9e:64 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUWgyoiqyOZ1TpqiaDBITEpjtSja4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDMxNzI1NDBaFw0yNzA3MDIxNzMwNDBaMDMxMTAvBgNV BAMTKEJENEEzRTgyQ0E3NkRBRjQxOUM0NDFGQjFBNEFENDYzQzk4RUI5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+p66fyBxXOMoE2BtgIkhJdWp pmbyQZZQpmgd4dXARW1XaOCD+/dRLa4ou6ayzGxLUePbJllEkG6Wd+kzSQ1YOm+7 gfU83m0cSm17ut69+mXmVIJuvESwkp4MiEkrZTSBPglQzNmkZCEt2zhNwylhRPnM F0L7FNSzNpkVTTdi+S8sFv0sZ9yE7/ZwAVla7EEJPW76H1r9JfDEZcKIDcyze3hd Wu31W2YOV6brWZWv2z2NmZjQ0zjnXqGzdDjjboa1d8BbYEEYL1+eOTCTQq5JCe24 4ghfoFYgq/cO+lV4fEKj1squSaC1QlpQ80wQDQoGT/zVSKe+9BHFI4ovCYuLAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9Sj6Cynba9BnE QfsaStRjyY650DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWll4 cUZUa2NUOG5SRFpMRkM1Q2dIMTdhaUxvdkNLODk0bld3QmFqZkFIcS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWll4 cUZUa2NUOG5SRFpMRkM1Q2dIMTdhaUxvdkNLODk0bld3QmFqZkFIcS8wL0JENEEz RTgyQ0E3NkRBRjQxOUM0NDFGQjFBNEFENDYzQzk4RUI5RDAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAKgAAzANBAIAAjAHAwUAKASPHDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMELDwwDQYJKoZIhvcNAQELBQADggEBAAi5aN3H2w+Y9KBlk4eN cW6YtvbNFOmrK+oC/b1jJtCPjjpcNXHNzowQS7uCX8618FSUSSCVdMdIghpVrYXB oej4Jt5NKwl4R0FKF4Hd2+3w9d3tcrpCb4HSO28J3t+kpfVublJOFcHXuLST2pI7 0CoEx4C9e8TqIELPVQzeiCwiNw95e0Fj12zH+vuiZE1tUxdUU2Dap8VF9r0yy6GF VEth1iI0hr05ONbuDh5OCoNBkvObp2x5u/T/kDdYHRUsDzsC/lK9zBuVQEXSUBvz DT9e/tCFuZdcWucs85xCCkEfTTuayCLkobx7/0rYAZqk+EWKr1sr3ZzxJlsiC91w nmQ= -----END CERTIFICATE-----Generated at Wed Jul 8 14:20:51 2026 by rpki-client