$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.cer File: 3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.cer (raw, json) Hash identifier: A5IYyu6HVy1ZUH0P85+CG6AxBsV+G6eWpnr3bH+3O+E= Subject key identifier: 3A:E1:B9:E2:F2:BD:28:C6:EF:01:5D:73:04:75:0C:61:B2:49:1B:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F49D9D6AA407C2EFABCB0579FEF23259DC8CBF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft caRepository: rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Jul 2026 18:07:11 +0000 Certificate not after: Mon 26 Jul 2027 18:12:11 +0000 Subordinate resources: AS: 267293 IP: 45.233.44.0/22 IP: 2804:4b40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 22:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:49:d9:d6:aa:40:7c:2e:fa:bc:b0:57:9f:ef:23:25:9d:c8:cb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 27 18:07:11 2026 GMT Not After : Jul 26 18:12:11 2027 GMT Subject: CN=3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:ff:64:c4:67:a2:61:96:2c:9b:57:6a:fd: eb:bc:f4:a8:bd:47:0b:bc:c3:bb:97:d5:0e:e7:ca: 22:42:f3:54:cd:b0:34:1f:56:67:b4:eb:ad:32:46: bd:23:9c:7d:ec:2f:bc:07:93:fa:7c:a1:78:e3:f0: d7:2b:1a:4e:c1:ff:74:3a:ab:12:76:8e:52:5e:27: 45:f6:18:bf:78:3a:92:08:ed:70:77:c4:c6:b4:47: 8e:3e:1d:41:97:e7:a3:e4:78:dc:3b:7f:96:b1:e9: fd:bd:7b:1d:31:ac:9c:9a:44:6e:7d:ca:23:1f:1f: b4:e3:aa:9e:89:8b:5e:6f:57:82:17:3a:eb:19:27: f1:40:d1:23:d5:b9:fc:d8:4f:7a:f7:55:dc:e9:70: 5c:0d:43:da:bc:2e:fe:99:11:d4:f9:86:0b:eb:20: 6d:63:51:72:76:d7:12:28:95:4b:e2:c4:5d:2f:61: 50:17:0d:3d:03:b1:80:fb:ec:3d:0d:35:72:00:95: 1d:fc:67:b8:26:f4:ef:04:ef:16:4e:63:32:87:63: e9:c2:99:7a:de:e2:0e:5d:4f:e5:fe:ed:cb:f7:de: a7:78:c6:b0:48:12:67:4c:3f:67:cb:b8:39:a9:4e: e5:4c:84:50:d1:e5:2f:a2:82:75:0a:46:23:8f:f7: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:E1:B9:E2:F2:BD:28:C6:EF:01:5D:73:04:75:0C:61:B2:49:1B:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/3AE1B9E2F2BD28C6EF015D7304750C61B2491BFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.44.0/22 IPv6: 2804:4b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267293 Signature Algorithm: sha256WithRSAEncryption 85:37:50:1e:e5:2f:1e:c3:a5:cb:7a:61:12:b0:cf:7a:73:2f: 0f:04:6c:c6:7d:64:b2:03:55:ef:74:7c:d1:65:29:6d:75:65: 03:b1:bc:c4:1f:8f:49:93:6f:27:d2:a7:48:e6:a8:b0:fa:67: 04:29:b6:8f:a7:39:56:14:3b:f7:4b:83:a4:17:dd:66:44:02: f9:13:6e:24:1c:6a:52:ed:38:c3:7c:86:3f:71:0e:9c:d9:25: 94:71:ae:69:0c:63:02:c4:4d:68:35:47:71:c7:fe:e9:ae:9d: 32:26:ac:ac:e4:19:1f:eb:01:25:5a:94:eb:18:6e:99:1f:b9: 73:3b:9a:93:95:2f:75:83:3c:6c:65:f1:be:dd:28:de:c8:3d: 07:34:a9:cf:aa:b0:fc:d0:ff:c8:02:9a:1b:fd:3d:2b:61:8f: 1b:6d:9d:e3:f9:b3:97:23:19:13:bf:f4:71:b7:74:42:fc:45: a7:e3:7e:f0:51:3a:48:98:82:af:58:91:6b:4b:0b:f9:f1:7a: a6:6a:c1:f9:39:c5:95:5e:4c:df:b1:58:f7:5c:ad:d0:8c:b8: 19:00:9a:d9:27:8c:20:23:30:8b:dd:e3:20:fb:ac:d4:2b:0e: f8:12:0b:4b:b9:9d:45:54:ea:f2:50:7a:24:8e:b9:6a:7a:04: ed:d8:3d:c5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUD0nZ1qpAfC76vLBXn+8jJZ3Iy/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjcxODA3MTFaFw0yNzA3MjYxODEyMTFaMDMxMTAvBgNV BAMTKDNBRTFCOUUyRjJCRDI4QzZFRjAxNUQ3MzA0NzUwQzYxQjI0OTFCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLP9kxGeiYZYsm1dq/eu89Ki9 Rwu8w7uX1Q7nyiJC81TNsDQfVme0660yRr0jnH3sL7wHk/p8oXjj8NcrGk7B/3Q6 qxJ2jlJeJ0X2GL94OpII7XB3xMa0R44+HUGX56PkeNw7f5ax6f29ex0xrJyaRG59 yiMfH7Tjqp6Ji15vV4IXOusZJ/FA0SPVufzYT3r3VdzpcFwNQ9q8Lv6ZEdT5hgvr IG1jUXJ21xIolUvixF0vYVAXDT0DsYD77D0NNXIAlR38Z7gm9O8E7xZOYzKHY+nC mXre4g5dT+X+7cv33qd4xrBIEmdMP2fLuDmpTuVMhFDR5S+ignUKRiOP9yHrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ64bni8r0oxu8B XXMEdQxhskkb+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXUx aHBzemg4M2Vjb2ZDN1FzUGdMRkZxTW8yZHpER3k5bzF4NE15cTlYUDMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl1 MWhwc3poODNlY29mQzdRc1BnTEZGcU1vMmR6REd5OW8xeDRNeXE5WFAzLzAvM0FF MUI5RTJGMkJEMjhDNkVGMDE1RDczMDQ3NTBDNjFCMjQ5MUJGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeksMA0EAgACMAcDBQAoBEtAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUHTANBgkqhkiG9w0BAQsFAAOCAQEAhTdQHuUvHsOly3ph ErDPenMvDwRsxn1ksgNV73R80WUpbXVlA7G8xB+PSZNvJ9KnSOaosPpnBCm2j6c5 VhQ790uDpBfdZkQC+RNuJBxqUu04w3yGP3EOnNkllHGuaQxjAsRNaDVHccf+6a6d MiasrOQZH+sBJVqU6xhumR+5czuak5UvdYM8bGXxvt0o3sg9BzSpz6qw/ND/yAKa G/09K2GPG22d4/mzlyMZE7/0cbd0QvxFp+N+8FE6SJiCr1iRa0sL+fF6pmrB+TnF lV5M37FY91yt0Iy4GQCa2SeMICMwi93jIPus1CsO+BILS7mdRVTq8lB6JI65anoE 7dg9xQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:42:05 2026 by rpki-client