$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer File: CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer (raw, json) Hash identifier: RNJ2aSUORbnyJZA7j4wSaxg97AF+ijPTX7I2PxgnehM= Subject key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0B1E0ED655CAD09A1A05BEDA2E69E17C13A7529E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft caRepository: rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 16 Jun 2026 19:03:49 +0000 Certificate not after: Tue 15 Jun 2027 19:08:49 +0000 Subordinate resources: AS: 265215 IP: 45.176.196.0/22 IP: 167.250.184.0/22 IP: 2804:2c64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 09:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1e:0e:d6:55:ca:d0:9a:1a:05:be:da:2e:69:e1:7c:13:a7:52:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 16 19:03:49 2026 GMT Not After : Jun 15 19:08:49 2027 GMT Subject: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:39:6b:06:91:4f:c7:73:92:59:ba:a0:1c: 4e:81:26:61:1f:be:1a:e3:6f:d3:2c:e2:e5:67:06: a0:9e:59:7e:5e:a2:e2:82:6e:a4:7e:31:d1:ad:c9: 78:5c:e3:34:09:5d:de:62:56:98:bb:19:14:c2:58: 10:79:fb:9b:ec:07:93:27:20:e3:22:e8:ac:e2:8c: c6:f6:27:3f:89:d7:2f:86:38:51:cd:b2:e4:5c:61: 09:b6:f9:bb:b3:46:b3:a4:d1:fb:07:29:31:58:99: b9:11:b8:f2:9f:22:06:ad:52:5d:1c:1a:f8:3a:53: 77:f6:91:8b:ed:aa:50:49:6b:eb:b1:ee:5f:54:82: f1:97:85:d8:b7:97:b3:4d:df:73:5c:b5:9a:18:47: 9c:1e:c8:65:6f:f7:87:41:47:bc:c6:40:9a:b7:b2: c8:ec:d4:41:fc:80:66:25:c7:4e:06:83:3c:6e:15: 5d:e9:f8:89:69:bc:d8:57:41:c0:9a:31:90:49:d9: 43:b9:32:16:c4:7c:c8:8c:d2:77:5a:74:7c:30:e1: 10:62:0d:85:03:e3:c3:1e:cc:2b:f7:5e:b0:30:6e: 99:1f:93:c5:60:3e:b6:5f:4c:a2:61:2c:9e:f4:21: db:8d:d6:9f:b4:90:c6:6f:4e:36:37:0b:18:1d:2c: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.196.0/22 167.250.184.0/22 IPv6: 2804:2c64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265215 Signature Algorithm: sha256WithRSAEncryption 38:cd:15:2e:f7:9a:ae:27:5a:ee:f8:9e:50:60:c8:b1:cb:6b: aa:e9:85:ee:3d:17:47:e5:ec:4a:3b:17:77:f2:7e:16:2e:2d: 93:cd:e2:fe:4c:46:d0:5b:99:f8:71:d7:9d:d7:9c:64:24:c7: 4d:26:c5:be:28:ad:dc:58:ef:55:67:40:55:ac:f9:72:c7:b9: 34:3f:b8:33:fb:34:e7:e5:6c:77:65:94:ca:64:48:e3:80:4e: 33:80:08:5a:46:7b:07:a6:16:2d:57:50:f0:2b:d4:a4:be:84: 59:58:3f:dd:dc:35:09:de:f8:95:a4:24:eb:64:1e:6e:cc:3d: fd:52:a9:f0:83:f5:06:de:24:94:1a:38:92:16:ee:ea:0f:61: ce:78:b7:3b:a7:18:30:9d:cb:fb:01:59:36:b4:50:f3:0e:9a: 77:8d:97:9c:91:b8:71:43:f5:83:43:1e:d2:26:7e:bb:91:85: 60:8a:4e:f5:25:d8:60:e0:fa:ac:1a:ac:3f:9f:c5:87:11:c1: 4c:ae:31:1e:13:9b:ac:4c:a7:ad:69:5c:26:21:93:10:2c:5b: 96:4e:b6:6d:e0:3c:15:bd:7a:59:6b:6c:34:53:58:ab:59:3d: 3a:0e:a3:0a:32:f0:54:09:52:31:36:69:30:f2:4e:aa:27:df: 4e:cb:46:ef -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCx4O1lXK0JoaBb7aLmnhfBOnUp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTYxOTAzNDlaFw0yNzA2MTUxOTA4NDlaMDMxMTAvBgNV BAMTKENBM0I0QTI0MzBEQzZBMUU2RDI4MUIzNEJBRDJGQUU1RkM0MTQ2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzATlrBpFPx3OSWbqgHE6BJmEf vhrjb9Ms4uVnBqCeWX5eouKCbqR+MdGtyXhc4zQJXd5iVpi7GRTCWBB5+5vsB5Mn IOMi6KzijMb2Jz+J1y+GOFHNsuRcYQm2+buzRrOk0fsHKTFYmbkRuPKfIgatUl0c Gvg6U3f2kYvtqlBJa+ux7l9UgvGXhdi3l7NN33NctZoYR5weyGVv94dBR7zGQJq3 ssjs1EH8gGYlx04GgzxuFV3p+IlpvNhXQcCaMZBJ2UO5MhbEfMiM0ndadHww4RBi DYUD48MezCv3XrAwbpkfk8VgPrZfTKJhLJ70IduN1p+0kMZvTjY3CxgdLKw7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKO0okMNxqHm0o GzS60vrl/EFGkTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhU RmhCNTZzMnhaeTFrS0VHQkY4c1YydU52ZllFWFJpR1lrd2lXbmlLTXMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FY VEZoQjU2czJ4Wnkxa0tFR0JGOHNWMnVOdmZZRVhSaUdZa3dpV25pS01zLzAvQ0Ez QjRBMjQzMERDNkExRTZEMjgxQjM0QkFEMkZBRTVGQzQxNDY5MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbDEAwQCp/q4MA0EAgACMAcDBQAoBCxkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQL/zANBgkqhkiG9w0BAQsFAAOCAQEAOM0VLvea rida7vieUGDIsctrqumF7j0XR+XsSjsXd/J+Fi4tk83i/kxG0FuZ+HHXndecZCTH TSbFviit3FjvVWdAVaz5cse5ND+4M/s05+Vsd2WUymRI44BOM4AIWkZ7B6YWLVdQ 8CvUpL6EWVg/3dw1Cd74laQk62Qebsw9/VKp8IP1Bt4klBo4khbu6g9hzni3O6cY MJ3L+wFZNrRQ8w6ad42XnJG4cUP1g0Me0iZ+u5GFYIpO9SXYYOD6rBqsP5/FhxHB TK4xHhObrEynrWlcJiGTECxblk62beA8Fb16WWtsNFNYq1k9Og6jCjLwVAlSMTZp MPJOqiffTstG7w== -----END CERTIFICATE-----Generated at Sat Jun 27 11:04:34 2026 by rpki-client