$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer File: CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer (raw, json) Hash identifier: 38c+rXjRzz5cXS7xecaRpmIezyTVw2ePNhajFy3JZFg= Subject key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E7B2520D3E33663B14E2C4F0113AD074844F519 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft caRepository: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 11:17:06 +0000 Certificate not after: Mon 14 Jun 2027 11:22:06 +0000 Subordinate resources: AS: 28191 IP: 186.193.176.0/20 IP: 189.90.32.0/20 IP: 2804:c2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 09:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7b:25:20:d3:e3:36:63:b1:4e:2c:4f:01:13:ad:07:48:44:f5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 15 11:17:06 2026 GMT Not After : Jun 14 11:22:06 2027 GMT Subject: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:4e:d1:60:13:73:17:36:9f:72:0d:5b:d6: fa:4c:ea:91:a1:f0:4b:0c:d5:3f:32:46:0f:2d:eb: b1:0d:09:15:6f:66:bf:85:c2:79:7f:69:37:dd:ac: bc:28:90:b4:b1:29:53:04:f3:a7:03:0d:6b:d2:17: a7:12:c7:2f:9d:9c:fd:34:e5:dc:6f:96:a5:e0:72: ef:3f:5d:1d:69:ff:c7:2b:a9:15:e1:00:1e:f3:ea: 3e:20:40:54:6e:44:40:2d:cd:db:36:67:e4:37:fc: b5:ee:47:14:f8:cc:b8:ee:22:29:66:08:74:7e:cb: 4e:1e:79:51:9c:6b:18:de:58:d4:a1:c3:7d:b2:fb: ea:94:56:18:0f:a8:9e:da:1e:30:63:67:ff:c5:f6: 0f:25:a8:02:a0:7f:28:9d:f7:3c:07:91:e9:36:ab: 5b:31:aa:15:49:2c:67:31:17:3c:88:7c:5e:1e:fb: bf:61:be:3c:2d:7d:98:b2:3b:74:f4:da:5f:35:93: 4b:e3:49:f1:c0:c6:ca:48:af:b4:eb:98:35:70:6a: 62:82:93:11:b7:ba:a5:0b:cf:8c:d9:7c:2a:e9:af: 52:ae:6c:e6:88:6b:b9:97:9a:26:80:38:26:3c:8b: 25:4f:8e:90:52:06:00:12:1b:09:d1:97:92:13:e0: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.193.176.0/20 189.90.32.0/20 IPv6: 2804:c2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28191 Signature Algorithm: sha256WithRSAEncryption 40:ca:78:f3:60:a9:8e:aa:1c:50:ff:54:3d:8e:a6:fd:ab:25: 18:8c:06:11:9d:23:a6:a0:c9:6f:e8:71:b7:a3:9b:86:35:e8: 3c:47:b1:83:99:e1:0c:bb:23:66:b1:3b:18:a7:42:5b:d8:8e: 2a:9f:fb:87:a2:8e:58:37:d4:9a:aa:75:7a:b0:b2:66:f0:0d: 20:3b:b4:05:ea:16:cc:75:71:7d:50:0c:2b:ce:c1:f0:07:e0: 10:53:88:65:31:cf:d1:c2:1a:c4:b2:2c:14:da:fb:1e:da:19: 23:ed:44:85:19:ce:08:a1:e9:42:5b:57:2a:49:eb:9f:dc:9c: cd:56:18:75:d7:b4:93:08:84:98:92:a9:93:96:39:b1:e7:1f: a3:98:d1:dd:dc:a0:ca:b0:d1:58:f8:58:2d:e3:55:cc:48:9c: 34:c4:c0:e9:dc:42:c4:a1:f7:81:db:b1:90:fe:0e:bc:29:2f: e6:76:cc:9c:c6:2e:69:78:3e:59:f0:3f:3b:e4:7d:19:88:10: a2:21:be:68:53:7f:b8:d0:ea:49:ec:8a:44:89:d5:82:41:99: b3:65:98:33:e9:78:7c:0d:bf:fe:cd:bd:02:44:33:a5:62:06: 16:7d:0b:53:0d:87:ff:5a:0e:3e:a3:d7:39:b6:1d:a8:f1:dc: 07:10:a3:95 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUHnslINPjNmOxTixPAROtB0hE9RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTUxMTE3MDZaFw0yNzA2MTQxMTIyMDZaMDMxMTAvBgNV BAMTKENGNjJCMzYzM0RDMjIxOTJFRTFCOEFEM0QyRTZDQzlDMTIxOEZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nU7RYBNzFzafcg1b1vpM6pGh 8EsM1T8yRg8t67ENCRVvZr+Fwnl/aTfdrLwokLSxKVME86cDDWvSF6cSxy+dnP00 5dxvlqXgcu8/XR1p/8crqRXhAB7z6j4gQFRuREAtzds2Z+Q3/LXuRxT4zLjuIilm CHR+y04eeVGcaxjeWNShw32y++qUVhgPqJ7aHjBjZ//F9g8lqAKgfyid9zwHkek2 q1sxqhVJLGcxFzyIfF4e+79hvjwtfZiyO3T02l81k0vjSfHAxspIr7TrmDVwamKC kxG3uqULz4zZfCrpr1KubOaIa7mXmiaAOCY8iyVPjpBSBgASGwnRl5IT4JtBAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPYrNjPcIhku4b itPS5sycEhj6XzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjgx U245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5R1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY4 MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAvQ0Y2 MkIzNjMzREMyMjE5MkVFMUI4QUQzRDJFNkNDOUMxMjE4RkE1Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusGwAwQEvVogMA0EAgACMAcDBQAoBAwsMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm4fMA0GCSqGSIb3DQEBCwUAA4IBAQBAynjzYKmO qhxQ/1Q9jqb9qyUYjAYRnSOmoMlv6HG3o5uGNeg8R7GDmeEMuyNmsTsYp0Jb2I4q n/uHoo5YN9SaqnV6sLJm8A0gO7QF6hbMdXF9UAwrzsHwB+AQU4hlMc/RwhrEsiwU 2vse2hkj7USFGc4IoelCW1cqSeuf3JzNVhh117STCISYkqmTljmx5x+jmNHd3KDK sNFY+Fgt41XMSJw0xMDp3ELEofeB27GQ/g68KS/mdsycxi5peD5Z8D875H0ZiBCi Ib5oU3+40OpJ7IpEidWCQZmzZZgz6Xh8Db/+zb0CRDOlYgYWfQtTDYf/Wg4+o9c5 th2o8dwHEKOV -----END CERTIFICATE-----Generated at Sat Jun 27 11:03:36 2026 by rpki-client