$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer File: 338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer (raw, json) Hash identifier: d90u3Br2PhjQ2h7POIrmo0ZrCKw+uXtr/xWCgnoZLYY= Subject key identifier: 33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7772E33272F5631448F4DFDB20090E10BE57EB1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft caRepository: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 31 May 2026 11:34:36 +0000 Certificate not after: Sun 30 May 2027 11:39:36 +0000 Subordinate resources: AS: 263940 IP: 138.185.252.0/22 IP: 2804:2818::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 03:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:72:e3:32:72:f5:63:14:48:f4:df:db:20:09:0e:10:be:57:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 31 11:34:36 2026 GMT Not After : May 30 11:39:36 2027 GMT Subject: CN=338D018DD1A983A496F7C17B72907F6B5CE80AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:54:32:b9:11:ff:23:b3:a1:9f:d0:0d:76: 71:ae:b1:ea:4c:9d:f1:ae:f8:77:a3:0f:03:82:13: e7:c1:5d:ba:f1:be:10:1b:ef:45:4f:c7:d3:ed:e3: 3d:67:a1:b9:fc:00:f6:03:98:5d:ec:3d:25:d2:2a: ab:4a:b1:1b:48:5d:d7:3e:c3:85:d8:3b:e6:1a:c7: 0f:6f:a7:c2:0e:ca:b8:22:8b:65:26:79:34:dc:7e: b0:b0:fd:a3:3a:e1:af:97:08:78:1f:1c:5d:bc:48: 52:64:c2:ee:9d:59:83:2e:6b:d6:50:51:62:50:d2: ef:cc:ea:06:2a:c4:6f:43:8b:2a:dc:a6:ae:ec:a5: 59:7e:93:54:ad:a7:0a:97:4f:d4:d0:bb:17:3d:df: 3f:0f:b7:9d:4a:51:3d:1f:e0:8a:ca:61:a1:4d:d9: 54:28:42:6a:d3:f5:1c:7a:09:86:88:f7:9f:ab:1b: dc:e5:c0:35:b3:27:02:4a:a2:d1:b2:bc:0e:25:8e: b9:37:10:ba:9f:9e:57:8b:eb:1f:e3:b6:03:32:1e: 64:26:54:1a:c2:9e:be:f5:c1:eb:85:ac:77:80:a9: f7:4a:5c:29:71:5a:67:0b:07:f5:ca:f7:5c:34:31: 08:d8:01:7d:80:f8:aa:b9:9b:72:1a:d9:51:dd:01: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.252.0/22 IPv6: 2804:2818::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263940 Signature Algorithm: sha256WithRSAEncryption a7:83:a5:9e:2a:c7:99:17:78:fa:34:cc:c1:80:67:d8:77:68: bc:07:4b:79:72:f6:c8:ff:ef:bf:82:b5:20:8f:9b:5e:52:6e: e5:20:31:62:ca:85:53:03:b9:c9:b8:c9:49:ff:40:40:66:31: 16:12:1e:f5:d6:f3:ca:3e:08:b1:a0:75:fa:30:89:eb:4f:8a: a6:b0:58:b7:a4:1d:ed:4f:e3:23:d8:25:6d:74:3a:7a:20:0c: 5f:39:67:91:b6:c5:50:b4:d9:60:cd:27:48:7d:25:81:59:ec: df:78:7f:d6:44:d5:5e:7d:95:01:61:88:f6:46:01:91:cc:cc: e1:50:c7:29:b9:5a:a0:25:39:2f:75:aa:65:b8:55:a5:76:f1: 09:89:5c:bc:be:2c:10:42:b1:77:05:fb:85:fe:36:14:0c:d8: 14:fc:9e:41:02:72:7d:07:bc:84:30:a0:7e:12:a1:bc:ec:e7: 96:3d:e6:33:83:5f:8e:9e:f7:66:fe:6c:44:72:81:9e:19:61: d7:bd:a6:78:23:14:8e:2c:2d:48:78:97:24:43:6b:84:86:59: 33:de:3c:fb:4b:bf:f4:f3:64:c6:66:91:d3:4f:92:91:52:45: 74:74:6d:ab:d7:81:df:7d:c1:89:aa:83:7f:7f:28:2c:d8:a2: 66:46:49:d9 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUd3LjMnL1YxRI9N/bIAkOEL5X6xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MzExMTM0MzZaFw0yNzA1MzAxMTM5MzZaMDMxMTAvBgNV BAMTKDMzOEQwMThERDFBOTgzQTQ5NkY3QzE3QjcyOTA3RjZCNUNFODBBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe1QyuRH/I7Ohn9ANdnGusepM nfGu+HejDwOCE+fBXbrxvhAb70VPx9Pt4z1nobn8APYDmF3sPSXSKqtKsRtIXdc+ w4XYO+Yaxw9vp8IOyrgii2UmeTTcfrCw/aM64a+XCHgfHF28SFJkwu6dWYMua9ZQ UWJQ0u/M6gYqxG9Diyrcpq7spVl+k1StpwqXT9TQuxc93z8Pt51KUT0f4IrKYaFN 2VQoQmrT9Rx6CYaI95+rG9zlwDWzJwJKotGyvA4ljrk3ELqfnleL6x/jtgMyHmQm VBrCnr71weuFrHeAqfdKXClxWmcLB/XK91w0MQjYAX2A+Kq5m3Ia2VHdAZFRAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzjQGN0amDpJb3 wXtykH9rXOgKwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzMzOEQw MThERDFBOTgzQTQ5NkY3QzE3QjcyOTA3RjZCNUNFODBBQzEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq5/DANBAIAAjAHAwUAKAQoGDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBwQwDQYJKoZIhvcNAQELBQADggEBAKeDpZ4qx5kXePo0zMGA Z9h3aLwHS3ly9sj/77+CtSCPm15SbuUgMWLKhVMDucm4yUn/QEBmMRYSHvXW88o+ CLGgdfowietPiqawWLekHe1P4yPYJW10OnogDF85Z5G2xVC02WDNJ0h9JYFZ7N94 f9ZE1V59lQFhiPZGAZHMzOFQxym5WqAlOS91qmW4VaV28QmJXLy+LBBCsXcF+4X+ NhQM2BT8nkECcn0HvIQwoH4Sobzs55Y95jODX46e92b+bERygZ4ZYde9pngjFI4s LUh4lyRDa4SGWTPePPtLv/TzZMZmkdNPkpFSRXR0bavXgd99wYmqg39/KCzYomZG Sdk= -----END CERTIFICATE-----Generated at Sun Jun 14 03:58:57 2026 by rpki-client