$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer (raw, json) Hash identifier: +yMuHBLCj6/goGW1NEE1CQXrUM09a9m4fCboMlWhE4g= Subject key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32F12CBA3B45141D2B2729A6A830295E6C22E38F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft caRepository: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 13 Jun 2026 18:09:11 +0000 Certificate not after: Sat 12 Jun 2027 18:14:11 +0000 Subordinate resources: AS: 263482 IP: 170.83.212.0/22 IP: 189.84.44.0/22 IP: 191.242.216.0/22 IP: 2804:1288::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f1:2c:ba:3b:45:14:1d:2b:27:29:a6:a8:30:29:5e:6c:22:e3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 13 18:09:11 2026 GMT Not After : Jun 12 18:14:11 2027 GMT Subject: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:7b:89:1a:95:fe:40:28:5d:ca:97:be:af: 33:73:a0:54:1b:f8:aa:02:ee:92:1c:bc:d3:3d:94: 0c:40:c2:12:aa:2d:11:e6:19:51:19:89:24:fd:cc: ed:28:94:dc:49:81:4b:43:33:e0:69:8b:4f:e9:a9: d1:04:19:82:81:8e:6f:c8:c2:0c:2c:64:bc:40:28: 10:e3:c6:1e:df:a3:c7:2e:c9:57:f4:84:47:22:3e: 0e:1f:f1:d7:70:14:e2:18:bc:96:4e:ce:c4:4a:a7: e9:f5:83:67:14:81:7f:68:1f:5d:f4:cf:57:31:94: e5:ab:77:4b:32:3e:8e:64:e3:13:b7:0f:75:50:dc: a5:24:f4:c4:a8:cc:6d:5c:8a:a0:4a:99:f3:ef:b4: 40:28:42:cc:82:a2:7f:2c:6f:f4:7c:f9:a3:e8:2f: 34:15:0b:88:44:f3:d7:d6:87:c4:07:c8:32:5d:45: ad:c8:54:80:46:b5:97:ad:43:9c:90:76:e7:c5:78: 60:17:20:6f:e5:6a:bd:27:3b:86:92:91:c8:5d:62: 72:e6:23:75:88:69:94:66:aa:6c:b7:39:e0:c5:0c: a8:72:e8:68:15:dd:6e:7c:7a:76:a5:d8:0f:3e:bb: 09:a5:ab:7e:d8:e7:02:f9:a2:09:36:4f:9a:82:77: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.212.0/22 189.84.44.0/22 191.242.216.0/22 IPv6: 2804:1288::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263482 Signature Algorithm: sha256WithRSAEncryption db:b9:f2:05:54:3d:86:fc:37:8d:95:e4:8a:46:a9:62:3f:55: 33:45:f3:39:cd:b3:26:69:51:2d:03:77:9d:5f:ce:fd:75:3a: a6:36:87:e8:fc:02:89:3e:d5:3d:3c:1f:6e:21:b3:3d:45:b5: ea:89:9a:52:6e:6b:ae:ef:00:ef:3b:b9:4a:db:bb:aa:cf:32: 5e:14:f7:99:2f:c6:77:7b:f6:f2:13:ee:a6:06:3c:5f:7c:14: 87:fc:85:2a:ad:55:ed:0f:f6:55:62:36:07:e2:37:5b:00:81: 93:f8:59:ae:cb:d5:25:61:ad:7d:4d:b8:9c:1c:e1:92:3c:75: 74:42:a2:7c:b8:73:a9:d6:58:80:23:54:3b:2a:1d:e7:86:66: 17:1e:85:25:b7:eb:dd:c1:97:ae:27:03:1e:dc:6a:a3:7f:dc: f1:e4:0f:ff:ab:0e:d4:25:3f:17:1a:7a:8a:10:76:67:8a:43: 76:33:b9:7d:e3:c9:89:d0:61:f3:7d:40:2c:66:a0:d1:a1:7c: 58:18:b9:cf:e0:2b:ed:a1:e6:29:55:83:b6:b5:af:5b:ab:20: 1e:a6:18:9a:24:3e:fe:54:7c:d9:73:a0:6d:04:a3:43:a0:12: 72:cb:e0:70:6d:1e:47:72:f3:45:67:35:19:29:da:c1:e1:85: f9:c7:b8:cb -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUMvEsujtFFB0rJymmqDApXmwi448wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTMxODA5MTFaFw0yNzA2MTIxODE0MTFaMDMxMTAvBgNV BAMTKDIwREJEM0EwQjU0RDE5RTEzNUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGXuJGpX+QChdype+rzNzoFQb +KoC7pIcvNM9lAxAwhKqLRHmGVEZiST9zO0olNxJgUtDM+Bpi0/pqdEEGYKBjm/I wgwsZLxAKBDjxh7fo8cuyVf0hEciPg4f8ddwFOIYvJZOzsRKp+n1g2cUgX9oH130 z1cxlOWrd0syPo5k4xO3D3VQ3KUk9MSozG1ciqBKmfPvtEAoQsyCon8sb/R8+aPo LzQVC4hE89fWh8QHyDJdRa3IVIBGtZetQ5yQdufFeGAXIG/lar0nO4aSkchdYnLm I3WIaZRmqmy3OeDFDKhy6GgV3W58enal2A8+uwmlq37Y5wL5ogk2T5qCd+B1AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQg29OgtU0Z4TW6 U7McRYhCyJ1J8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREhN UVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RI TVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAvMjBE QkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJDODlENDlGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqlPUAwQCvVQsAwQCv/LYMA0EAgACMAcDBQAoBBKI MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFOjANBgkqhkiG9w0BAQsFAAOCAQEA 27nyBVQ9hvw3jZXkikapYj9VM0XzOc2zJmlRLQN3nV/O/XU6pjaH6PwCiT7VPTwf biGzPUW16omaUm5rru8A7zu5Stu7qs8yXhT3mS/Gd3v28hPupgY8X3wUh/yFKq1V 7Q/2VWI2B+I3WwCBk/hZrsvVJWGtfU24nBzhkjx1dEKifLhzqdZYgCNUOyod54Zm Fx6FJbfr3cGXricDHtxqo3/c8eQP/6sO1CU/Fxp6ihB2Z4pDdjO5fePJidBh831A LGag0aF8WBi5z+Ar7aHmKVWDtrWvW6sgHqYYmiQ+/lR82XOgbQSjQ6AScsvgcG0e R3LzRWc1GSnaweGF+ce4yw== -----END CERTIFICATE-----Generated at Sun Jun 14 02:35:50 2026 by rpki-client