$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer (raw, json) Hash identifier: 0BCAQfOCEo1M7nO5ioSA+6trZ6hVnW7/0lkljB2aiGA= Subject key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DEBEADD81D2FFC9708A60132B9AC3491B2DA935 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft caRepository: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 07:28:54 +0000 Certificate not after: Sun 28 Feb 2027 07:33:54 +0000 Subordinate resources: AS: 52694 IP: 177.73.36.0/22 IP: 200.6.128.0/22 IP: 2804:c58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 08:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:eb:ea:dd:81:d2:ff:c9:70:8a:60:13:2b:9a:c3:49:1b:2d:a9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 1 07:28:54 2026 GMT Not After : Feb 28 07:33:54 2027 GMT Subject: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:45:bf:2d:ad:9c:19:85:9e:c1:a4:8b:86: 57:a5:2b:3d:55:ae:19:f6:14:bc:c1:f0:aa:a3:24: 7e:f1:56:5b:1c:85:4f:1b:4b:d1:7e:a8:9d:bc:b9: 8d:6b:5c:47:9f:8c:5f:f9:53:2c:2c:0a:04:10:e5: e0:12:8b:8b:d0:97:ca:08:99:c8:51:ac:46:9b:56: 00:24:22:da:0a:8f:82:cb:16:b2:80:49:6e:df:5d: 27:8e:45:32:ad:8a:6a:28:68:50:69:d8:47:b4:7a: 15:53:2e:88:19:b6:87:62:16:5b:ea:56:b1:e5:04: 00:c3:67:bb:9f:79:90:24:04:c3:19:d1:67:69:67: fe:02:65:f9:16:76:e1:54:0c:aa:ac:34:41:5d:67: 27:d0:d7:b6:32:c1:19:94:a1:cb:be:80:4e:b2:9c: 8e:48:7a:37:ec:62:4e:fa:7e:49:fb:07:af:eb:ef: eb:61:ae:2c:07:aa:c2:02:c5:11:f9:6f:93:b1:c1: 2c:2a:4a:54:f6:1e:d4:2e:a8:c1:fb:6c:05:0f:c9: 37:4f:60:1b:0f:e0:58:0d:e1:4a:a2:35:c7:ee:08: 53:cb:3f:a1:88:bd:42:ca:5d:a3:14:e4:04:d9:c9: dd:fb:3c:12:54:86:c4:b2:46:f8:40:e8:1d:ff:5b: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.36.0/22 200.6.128.0/22 IPv6: 2804:c58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52694 Signature Algorithm: sha256WithRSAEncryption 17:9c:5a:68:71:04:fd:4e:65:39:c6:a5:3b:f0:6a:37:a9:38: 21:a0:6a:70:1d:1e:11:38:9a:0d:c3:f6:97:fe:8a:a5:b2:e4: 1c:3e:f5:f0:76:6f:df:ad:2b:f4:0f:3b:5d:ac:6f:d7:dd:55: 00:7c:5c:f7:e6:1d:ed:90:2f:01:dc:46:66:bd:a6:c6:81:6d: 4b:d5:7f:cd:15:57:4a:10:0b:df:ce:7b:d8:b2:0f:57:13:03: c4:c7:69:7c:4e:e1:32:4e:1c:13:23:66:5c:01:9e:f2:c0:cb: ad:e4:7d:1d:e9:12:fe:f5:b0:92:b9:d7:ec:8d:14:1b:c3:78: 30:5f:de:2a:db:f1:36:f5:ef:dd:0a:33:e8:31:f6:2c:ea:52: 78:37:1e:52:30:9d:fc:6f:00:cc:c1:0c:7b:e1:f1:c9:07:c9: b1:7a:f0:ae:38:8c:e5:a4:fa:12:e2:26:94:5e:79:5a:2d:6e: 25:98:60:0d:dd:c7:c3:05:f4:21:70:63:7d:8a:82:35:5f:ef: 93:ad:30:3b:95:f4:7d:47:01:84:b5:f2:2b:0e:f4:8d:77:58: 78:75:09:48:38:f3:5b:71:81:d7:71:13:0e:60:bc:d3:a3:d7: 05:f6:3a:d3:c2:34:2f:2d:94:11:d4:25:9e:c3:a7:b1:fc:a5: a6:2f:69:cc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbevq3YHS/8lwimATK5rDSRstqTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMDEwNzI4NTRaFw0yNzAyMjgwNzMzNTRaMDMxMTAvBgNV BAMTKDNEQUYxQ0E0ODYzM0Q0MkYzODk1NUM0N0M4QkEwRkFEQTczRDcwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKUW/La2cGYWewaSLhlelKz1V rhn2FLzB8KqjJH7xVlschU8bS9F+qJ28uY1rXEefjF/5UywsCgQQ5eASi4vQl8oI mchRrEabVgAkItoKj4LLFrKASW7fXSeORTKtimooaFBp2Ee0ehVTLogZtodiFlvq VrHlBADDZ7ufeZAkBMMZ0WdpZ/4CZfkWduFUDKqsNEFdZyfQ17YywRmUocu+gE6y nI5IejfsYk76fkn7B6/r7+thriwHqsICxRH5b5OxwSwqSlT2HtQuqMH7bAUPyTdP YBsP4FgN4UqiNcfuCFPLP6GIvULKXaMU5ATZyd37PBJUhsSyRvhA6B3/W7LrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9rxykhjPULziV XEfIug+tpz1wBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjk2 OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvM0RB RjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURBNzNENzAwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUkkAwQCyAaAMA0EAgACMAcDBQAoBAxYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1jANBgkqhkiG9w0BAQsFAAOCAQEAF5xaaHEE /U5lOcalO/BqN6k4IaBqcB0eETiaDcP2l/6KpbLkHD718HZv360r9A87Xaxv191V AHxc9+Yd7ZAvAdxGZr2mxoFtS9V/zRVXShAL38572LIPVxMDxMdpfE7hMk4cEyNm XAGe8sDLreR9HekS/vWwkrnX7I0UG8N4MF/eKtvxNvXv3Qoz6DH2LOpSeDceUjCd /G8AzMEMe+HxyQfJsXrwrjiM5aT6EuImlF55Wi1uJZhgDd3HwwX0IXBjfYqCNV/v k60wO5X0fUcBhLXyKw70jXdYeHUJSDjzW3GB13ETDmC806PXBfY608I0Ly2UEdQl nsOnsfylpi9pzA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:54 2026 by rpki-client