$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer (raw, json) Hash identifier: x3c+z9jembHydezKFkGsCz+1srWgVq/r7r63wi88sp4= Subject key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 748B1AD118918BE57F4F8550630F1FE37710A9F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft caRepository: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 08:20:49 +0000 Certificate not after: Fri 16 Apr 2027 08:25:49 +0000 Subordinate resources: AS: 52694 IP: 177.73.36.0/22 IP: 200.6.128.0/22 IP: 2804:c58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 19:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8b:1a:d1:18:91:8b:e5:7f:4f:85:50:63:0f:1f:e3:77:10:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 17 08:20:49 2026 GMT Not After : Apr 16 08:25:49 2027 GMT Subject: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:45:bf:2d:ad:9c:19:85:9e:c1:a4:8b:86: 57:a5:2b:3d:55:ae:19:f6:14:bc:c1:f0:aa:a3:24: 7e:f1:56:5b:1c:85:4f:1b:4b:d1:7e:a8:9d:bc:b9: 8d:6b:5c:47:9f:8c:5f:f9:53:2c:2c:0a:04:10:e5: e0:12:8b:8b:d0:97:ca:08:99:c8:51:ac:46:9b:56: 00:24:22:da:0a:8f:82:cb:16:b2:80:49:6e:df:5d: 27:8e:45:32:ad:8a:6a:28:68:50:69:d8:47:b4:7a: 15:53:2e:88:19:b6:87:62:16:5b:ea:56:b1:e5:04: 00:c3:67:bb:9f:79:90:24:04:c3:19:d1:67:69:67: fe:02:65:f9:16:76:e1:54:0c:aa:ac:34:41:5d:67: 27:d0:d7:b6:32:c1:19:94:a1:cb:be:80:4e:b2:9c: 8e:48:7a:37:ec:62:4e:fa:7e:49:fb:07:af:eb:ef: eb:61:ae:2c:07:aa:c2:02:c5:11:f9:6f:93:b1:c1: 2c:2a:4a:54:f6:1e:d4:2e:a8:c1:fb:6c:05:0f:c9: 37:4f:60:1b:0f:e0:58:0d:e1:4a:a2:35:c7:ee:08: 53:cb:3f:a1:88:bd:42:ca:5d:a3:14:e4:04:d9:c9: dd:fb:3c:12:54:86:c4:b2:46:f8:40:e8:1d:ff:5b: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.36.0/22 200.6.128.0/22 IPv6: 2804:c58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52694 Signature Algorithm: sha256WithRSAEncryption 33:92:6e:de:a5:55:a7:5e:1b:e8:b3:0c:a8:4a:86:7f:54:a9: 8f:b6:ab:c5:e8:7c:9d:13:7b:a8:47:bb:69:64:62:82:a1:e7: 14:7e:96:f8:0e:ea:5d:f9:95:82:10:3d:e1:43:2a:8b:a1:26: a8:79:95:cf:6b:c3:7c:bd:69:ae:4b:2f:68:85:b5:b9:5c:37: c2:dd:35:d4:37:58:b5:63:1d:30:61:51:2a:68:57:a9:93:40: 33:d1:7d:2d:15:1a:e8:96:b5:d7:0e:d0:88:dc:aa:a3:6f:85: 5d:18:47:cc:1d:55:11:90:59:12:09:f8:ab:10:10:c9:d8:ff: 31:35:5d:33:46:1e:8e:31:2b:dc:14:00:7a:05:e0:e6:a6:ad: 3e:a3:75:00:b6:17:64:7e:84:c6:d5:65:fc:90:d3:e9:12:84: bf:92:50:62:34:64:da:72:8d:20:c8:78:68:fe:40:ea:30:da: 45:3f:19:7d:58:ae:51:6b:7d:29:ab:b7:8e:57:a1:d5:0b:52: 77:4b:4b:c7:85:05:89:e2:3d:d3:3f:e5:32:0d:48:d2:55:7a: 8d:4d:d7:5e:f5:47:4c:74:c7:c3:2d:1b:64:ce:95:a5:e5:cf: 50:d2:d3:e8:42:77:86:aa:d7:6c:9f:75:cf:cb:e2:eb:5e:a3: 5a:11:7d:e5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdIsa0RiRi+V/T4VQYw8f43cQqfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTcwODIwNDlaFw0yNzA0MTYwODI1NDlaMDMxMTAvBgNV BAMTKDNEQUYxQ0E0ODYzM0Q0MkYzODk1NUM0N0M4QkEwRkFEQTczRDcwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKUW/La2cGYWewaSLhlelKz1V rhn2FLzB8KqjJH7xVlschU8bS9F+qJ28uY1rXEefjF/5UywsCgQQ5eASi4vQl8oI mchRrEabVgAkItoKj4LLFrKASW7fXSeORTKtimooaFBp2Ee0ehVTLogZtodiFlvq VrHlBADDZ7ufeZAkBMMZ0WdpZ/4CZfkWduFUDKqsNEFdZyfQ17YywRmUocu+gE6y nI5IejfsYk76fkn7B6/r7+thriwHqsICxRH5b5OxwSwqSlT2HtQuqMH7bAUPyTdP YBsP4FgN4UqiNcfuCFPLP6GIvULKXaMU5ATZyd37PBJUhsSyRvhA6B3/W7LrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9rxykhjPULziV XEfIug+tpz1wBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjk2 OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvM0RB RjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURBNzNENzAwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUkkAwQCyAaAMA0EAgACMAcDBQAoBAxYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1jANBgkqhkiG9w0BAQsFAAOCAQEAM5Ju3qVV p14b6LMMqEqGf1Spj7arxeh8nRN7qEe7aWRigqHnFH6W+A7qXfmVghA94UMqi6Em qHmVz2vDfL1prksvaIW1uVw3wt011DdYtWMdMGFRKmhXqZNAM9F9LRUa6Ja11w7Q iNyqo2+FXRhHzB1VEZBZEgn4qxAQydj/MTVdM0YejjEr3BQAegXg5qatPqN1ALYX ZH6ExtVl/JDT6RKEv5JQYjRk2nKNIMh4aP5A6jDaRT8ZfViuUWt9Kau3jleh1QtS d0tLx4UFieI90z/lMg1I0lV6jU3XXvVHTHTHwy0bZM6VpeXPUNLT6EJ3hqrXbJ91 z8vi616jWhF95Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:24:50 2026 by rpki-client