$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.cer File: E38111A1621CC8277B33EF7A17ABAE02D4164A9C.cer (raw, json) Hash identifier: VJmMA51q/ThhMnHiZ+dTCHfmFrMR+4o1yuuApXGsGLI= Subject key identifier: E3:81:11:A1:62:1C:C8:27:7B:33:EF:7A:17:AB:AE:02:D4:16:4A:9C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 62FD2C14E78E48676BDC992B0F42458C82F813FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.mft caRepository: rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Jul 2026 12:46:51 +0000 Certificate not after: Wed 30 Jun 2027 12:51:51 +0000 Subordinate resources: AS: 28132 IP: 138.255.140.0/22 IP: 177.105.252.0/22 IP: 187.44.80.0/20 IP: 2804:258::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 15:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fd:2c:14:e7:8e:48:67:6b:dc:99:2b:0f:42:45:8c:82:f8:13:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 12:46:51 2026 GMT Not After : Jun 30 12:51:51 2027 GMT Subject: CN=E38111A1621CC8277B33EF7A17ABAE02D4164A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:f9:aa:1c:56:07:c8:cf:65:5d:4e:63:d9: 90:5d:78:f1:56:1e:1c:d8:7d:07:80:3b:cc:3c:a6: 20:91:ce:6a:7a:78:b2:ae:4c:94:d2:ec:3a:fa:af: b0:0d:dd:75:7a:fe:f3:7f:77:48:6c:d4:00:b0:74: 65:50:cc:8f:ed:f0:24:fd:6e:d6:ee:f3:1a:03:00: 51:c9:e7:7d:36:f3:84:c5:9f:b2:9a:fc:75:3c:f8: 4d:08:0c:f2:2e:03:ad:28:ce:a5:44:4e:f5:0b:8d: 28:de:a4:73:a9:33:ef:95:18:54:3d:8c:fa:fd:50: 1b:e0:69:e8:0f:7c:e9:dd:84:8f:2e:94:ba:24:91: 1e:d8:05:62:0d:42:60:4d:56:da:d6:e1:68:be:e1: 14:26:d0:cd:3b:c2:f5:d5:77:e4:6e:28:81:53:a9: f5:09:79:b5:f6:fb:c1:31:f6:d3:ba:1b:72:03:f2: 7d:e6:2d:af:0a:79:89:0d:90:b9:e1:d1:8f:94:fc: a7:a8:dd:72:44:5c:59:fd:86:c4:5d:c7:b9:7a:5e: 8b:df:7b:d1:13:23:93:64:d0:da:25:bb:c6:d5:f8: c2:48:e3:8d:b6:e1:0e:c5:11:f8:9a:3e:95:e4:da: fb:34:c3:f6:95:72:d4:5d:c3:dc:e1:38:17:27:18: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:81:11:A1:62:1C:C8:27:7B:33:EF:7A:17:AB:AE:02:D4:16:4A:9C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.140.0/22 177.105.252.0/22 187.44.80.0/20 IPv6: 2804:258::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28132 Signature Algorithm: sha256WithRSAEncryption 72:62:05:f9:bf:81:68:de:f9:1c:e7:ce:18:2d:0f:e5:0b:e9: 31:b8:93:12:f4:0d:cc:c3:19:aa:b9:9a:3d:15:73:09:05:4a: 98:e4:d6:37:a1:ca:ae:b5:2c:e0:5c:22:c0:72:f8:db:f3:ab: d5:de:df:ba:0a:9a:74:4d:30:34:b8:e1:54:4c:56:cc:33:98: d5:5f:f6:89:37:a4:22:f9:bc:f4:8b:7d:5d:34:90:6d:01:63: 2a:fd:83:4f:79:a0:20:58:67:20:01:52:56:7a:10:9d:23:ab: 16:0a:07:07:6a:d8:e0:aa:4f:ee:c5:c3:b1:38:68:39:fc:fa: d5:75:f6:40:77:84:da:ae:03:ae:5d:79:c9:09:f6:24:b5:b5: 06:c8:3e:65:30:74:a4:a5:4d:8c:a3:d3:17:0c:f7:0f:b4:fa: 51:57:95:c2:9e:86:e1:8a:ee:0e:11:95:a9:6e:8b:44:e7:d4: 50:0c:43:64:09:1c:5a:7b:76:57:26:2a:52:8c:09:7b:c6:ca: 45:5c:7b:39:ef:39:cc:3c:2c:cd:ab:8e:39:53:3b:11:58:2d: 0e:59:c3:46:dc:5d:6a:3e:16:c8:e8:a4:af:cd:b0:1b:67:2c: 4c:5e:bb:ab:91:eb:08:f6:18:2d:50:1e:61:b0:df:59:ee:28: 70:d1:dd:5e -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUYv0sFOeOSGdr3JkrD0JFjIL4E/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDExMjQ2NTFaFw0yNzA2MzAxMjUxNTFaMDMxMTAvBgNV BAMTKEUzODExMUExNjIxQ0M4Mjc3QjMzRUY3QTE3QUJBRTAyRDQxNjRBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClU/mqHFYHyM9lXU5j2ZBdePFW HhzYfQeAO8w8piCRzmp6eLKuTJTS7Dr6r7AN3XV6/vN/d0hs1ACwdGVQzI/t8CT9 btbu8xoDAFHJ530284TFn7Ka/HU8+E0IDPIuA60ozqVETvULjSjepHOpM++VGFQ9 jPr9UBvgaegPfOndhI8ulLokkR7YBWINQmBNVtrW4Wi+4RQm0M07wvXVd+RuKIFT qfUJebX2+8Ex9tO6G3ID8n3mLa8KeYkNkLnh0Y+U/Keo3XJEXFn9hsRdx7l6Xovf e9ETI5Nk0Nolu8bV+MJI44224Q7FEfiaPpXk2vs0w/aVctRdw9zhOBcnGGbTAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjgRGhYhzIJ3sz 73oXq64C1BZKnDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNW1V OFN2anZYSmtmbzltN3g0cTdLYTZ1MXY2NnF1RHJqZm85NmlITDN6SGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVt VThTdmp2WEprZm85bTd4NHE3S2E2dTF2NjZxdURyamZvOTZpSEwzekhmLzAvRTM4 MTExQTE2MjFDQzgyNzdCMzNFRjdBMTdBQkFFMDJENDE2NEE5Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCiv+MAwQCsWn8AwQEuyxQMA0EAgACMAcDBQAoBAJY MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm3kMA0GCSqGSIb3DQEBCwUAA4IBAQBy YgX5v4Fo3vkc584YLQ/lC+kxuJMS9A3MwxmquZo9FXMJBUqY5NY3ocqutSzgXCLA cvjb86vV3t+6Cpp0TTA0uOFUTFbMM5jVX/aJN6Qi+bz0i31dNJBtAWMq/YNPeaAg WGcgAVJWehCdI6sWCgcHatjgqk/uxcOxOGg5/PrVdfZAd4TargOuXXnJCfYktbUG yD5lMHSkpU2Mo9MXDPcPtPpRV5XCnobhiu4OEZWpbotE59RQDENkCRxae3ZXJipS jAl7xspFXHs57znMPCzNq445UzsRWC0OWcNG3F1qPhbI6KSvzbAbZyxMXrurkesI 9hgtUB5hsN9Z7ihw0d1e -----END CERTIFICATE-----Generated at Wed Jul 8 14:20:49 2026 by rpki-client