$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/033A8F952402867A5258468D33D2CC54F7512A91.cer File: 033A8F952402867A5258468D33D2CC54F7512A91.cer (raw, json) Hash identifier: o5XyeBoLC5dlT6W2fdFwPgdiKQ3ERJIf37OKcnL5uBU= Subject key identifier: 03:3A:8F:95:24:02:86:7A:52:58:46:8D:33:D2:CC:54:F7:51:2A:91 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B6379A8AFF7B5309812464A6CCFD5E6C37D52F0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/033A8F952402867A5258468D33D2CC54F7512A91.mft caRepository: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 25 May 2026 19:20:58 +0000 Certificate not after: Mon 24 May 2027 19:25:58 +0000 Subordinate resources: AS: 267999 IP: 45.167.108.0 -- 45.167.110.255 IP: 2804:5674::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:63:79:a8:af:f7:b5:30:98:12:46:4a:6c:cf:d5:e6:c3:7d:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 25 19:20:58 2026 GMT Not After : May 24 19:25:58 2027 GMT Subject: CN=033A8F952402867A5258468D33D2CC54F7512A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:ee:98:45:0d:0a:06:b0:43:64:04:cb:83: 7f:12:36:fc:de:01:4d:65:b0:b8:04:a7:04:44:b8: 66:da:e8:9e:c4:37:2b:02:d5:45:40:fe:b9:ac:a4: 85:0e:a1:1c:36:cc:52:3a:5b:67:7c:0f:a4:06:f5: 62:da:5c:8a:16:b1:04:38:2a:3c:03:af:91:16:7f: 1f:59:22:e5:41:d5:30:ec:8f:8d:30:ac:2d:00:7a: bb:c4:47:8c:79:28:69:b7:c3:85:89:95:c8:9c:cb: 6e:7e:b1:7f:0d:12:84:ee:67:8f:1e:61:05:b7:85: fc:62:1c:84:ac:34:39:f4:72:5e:24:73:81:01:63: 70:61:4f:ea:8c:72:b4:76:3f:65:ba:3f:5b:24:09: 35:44:10:a9:c4:fc:58:31:1a:c9:15:19:6d:7f:46: 9d:f1:41:9f:5d:f6:c5:d8:aa:49:84:73:63:9f:82: a9:56:df:f1:83:c2:c6:0d:31:af:3d:cd:0b:24:41: c7:8d:8e:3d:4c:9d:62:2f:1f:6a:82:c2:89:4d:d9: 79:d5:db:b3:80:4a:3d:1b:54:e1:13:b2:2a:1b:ac: 35:3e:cf:e4:4d:c9:9b:8f:a1:36:a4:53:55:a4:07: a2:6a:47:cd:a3:b2:44:c9:84:82:5e:0a:07:01:e5: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:3A:8F:95:24:02:86:7A:52:58:46:8D:33:D2:CC:54:F7:51:2A:91 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/033A8F952402867A5258468D33D2CC54F7512A91.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.108.0-45.167.110.255 IPv6: 2804:5674::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267999 Signature Algorithm: sha256WithRSAEncryption 75:5c:c6:bd:57:f7:f7:33:d1:a4:18:ba:5e:d2:56:b5:68:13: bc:ec:95:c4:5a:4f:43:32:4d:44:cf:af:56:b9:5d:ce:c0:d5: 14:c9:ed:76:1c:c9:ef:18:ad:6d:a6:b9:1c:a6:42:c3:ec:ce: 66:1d:74:52:7f:7a:df:94:6e:49:cc:f2:ec:ce:1a:fd:f3:b7: 32:3b:f3:f9:a0:f7:63:7f:fb:2a:0d:ec:6c:c8:e9:84:4d:5e: c8:34:f0:a0:2d:7b:84:ec:12:e1:a6:dc:de:8a:ee:33:35:b6: 80:2b:c5:db:b4:6f:1e:a8:8b:27:7d:1b:0e:42:31:81:a9:6c: 4e:4c:5c:14:83:18:73:5f:ec:af:1e:5d:9a:0a:da:5e:59:cc: c4:5a:75:b8:69:d5:e9:a6:74:29:c5:c9:c0:cc:73:41:e1:99: a4:2d:5b:80:f8:40:22:bd:92:28:a9:ae:2a:eb:46:6e:eb:ab: 90:e6:cf:4d:5a:76:fe:2f:79:e5:69:af:53:e0:d9:26:b7:6e: a0:6c:85:36:e7:c5:69:83:08:41:cf:6a:3d:78:df:ad:8d:25: 46:1c:6e:37:09:a0:57:a6:e5:f2:bb:da:fa:fb:c6:c1:6e:53: b7:5e:29:b7:27:36:32:85:d4:e7:83:3f:3d:3b:ea:29:f1:65: 78:ca:cc:56 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUG2N5qK/3tTCYEkZKbM/V5sN9UvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjUxOTIwNThaFw0yNzA1MjQxOTI1NThaMDMxMTAvBgNV BAMTKDAzM0E4Rjk1MjQwMjg2N0E1MjU4NDY4RDMzRDJDQzU0Rjc1MTJBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHu6YRQ0KBrBDZATLg38SNvze AU1lsLgEpwREuGba6J7ENysC1UVA/rmspIUOoRw2zFI6W2d8D6QG9WLaXIoWsQQ4 KjwDr5EWfx9ZIuVB1TDsj40wrC0AervER4x5KGm3w4WJlcicy25+sX8NEoTuZ48e YQW3hfxiHISsNDn0cl4kc4EBY3BhT+qMcrR2P2W6P1skCTVEEKnE/FgxGskVGW1/ Rp3xQZ9d9sXYqkmEc2OfgqlW3/GDwsYNMa89zQskQceNjj1MnWIvH2qCwolN2XnV 27OASj0bVOETsiobrDU+z+RNyZuPoTakU1WkB6JqR82jskTJhIJeCgcB5QonAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDOo+VJAKGelJY Ro0z0sxU91EqkTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1Q akVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ft UGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzAvMDMz QThGOTUyNDAyODY3QTUyNTg0NjhEMzNEMkNDNTRGNzUxMkE5MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAItp2wDBAAtp24wDQQCAAIwBwMFACgEVnQwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBBbfMA0GCSqGSIb3DQEBCwUAA4IBAQB1XMa9 V/f3M9GkGLpe0la1aBO87JXEWk9DMk1Ez69WuV3OwNUUye12HMnvGK1tprkcpkLD 7M5mHXRSf3rflG5JzPLszhr987cyO/P5oPdjf/sqDexsyOmETV7INPCgLXuE7BLh ptzeiu4zNbaAK8XbtG8eqIsnfRsOQjGBqWxOTFwUgxhzX+yvHl2aCtpeWczEWnW4 adXppnQpxcnAzHNB4ZmkLVuA+EAivZIoqa4q60Zu66uQ5s9NWnb+L3nlaa9T4Nkm t26gbIU258VpgwhBz2o9eN+tjSVGHG43CaBXpuXyu9r6+8bBblO3Xim3JzYyhdTn gz89O+op8WV4ysxW -----END CERTIFICATE-----Generated at Sun Jun 14 02:25:15 2026 by rpki-client