$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer File: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer (raw, json) Hash identifier: jvR0hWQp432WXFCTKxZFIIP7+QiDc3q6Tmwcl/PD1H8= Subject key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 14758C3555670A14ADFBB060E2F97E2BA239757E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft caRepository: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 24 May 2026 22:27:58 +0000 Certificate not after: Sun 23 May 2027 22:32:58 +0000 Subordinate resources: AS: 61610 IP: 187.87.28.0/22 IP: 200.225.48.0/21 IP: 2804:8ae0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 01:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:75:8c:35:55:67:0a:14:ad:fb:b0:60:e2:f9:7e:2b:a2:39:75:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 24 22:27:58 2026 GMT Not After : May 23 22:32:58 2027 GMT Subject: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:62:00:ee:7a:bc:b2:3a:5e:3c:62:52:43: b1:77:46:e4:99:fd:ae:26:72:89:cb:44:39:9f:e3: b4:9a:23:3c:f4:28:7d:1b:a7:bd:79:e2:58:b3:ed: f0:48:7e:2f:83:f9:5b:1b:90:c8:04:d4:58:38:f9: 76:a1:f7:d1:20:d0:fc:9e:ea:39:b6:61:18:67:51: 55:9f:a0:7b:96:30:92:b4:f0:26:e7:93:89:4e:5c: a3:35:6d:ba:8e:9b:15:a0:13:e0:2a:b6:f1:ec:ea: fb:fb:ed:89:c0:36:31:72:7e:cf:8e:8d:23:07:a5: 08:6f:96:0e:b0:65:64:d2:fa:aa:38:e6:9a:d3:e1: 9f:38:f7:35:02:8a:86:67:bb:13:dd:8f:d7:97:53: db:34:3f:04:c2:0b:dd:44:1a:42:ad:67:ae:58:d7: e1:a2:f2:6e:a1:3c:e2:c4:b8:57:67:83:89:8a:d6: 95:53:6e:e0:43:b0:bd:3a:ee:1d:2a:3d:26:6a:cd: 55:be:b9:cd:05:6c:b0:d9:75:4c:6b:c4:79:97:c8: 20:36:17:df:26:f5:ad:73:85:6b:42:5e:f7:5a:3d: 79:4f:31:7e:98:95:1a:d5:b2:5b:9d:35:29:a8:72: f4:55:aa:8a:ed:58:2f:dc:4e:ba:75:e8:ed:af:b2: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.87.28.0/22 200.225.48.0/21 IPv6: 2804:8ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61610 Signature Algorithm: sha256WithRSAEncryption 75:0d:01:5e:17:c4:87:a8:1f:ed:e2:f5:68:87:7e:d5:94:eb: 1d:e3:0d:f3:b5:27:f6:3d:17:0e:9b:4b:9a:3e:6b:e0:18:65: cc:b8:94:65:0c:da:c3:9f:4b:9c:38:81:43:50:bb:2c:2c:1d: da:6e:9c:f7:11:79:85:5b:0e:42:92:61:c3:af:1e:67:8c:ae: fe:b3:fc:b2:a2:32:95:17:f9:ef:73:5e:8e:0b:5e:82:9e:87: aa:9e:ed:31:cf:d6:23:31:89:2b:e6:14:fb:bf:ea:4a:4c:87: 8a:e3:05:6f:be:33:e7:90:8d:c8:a4:25:64:45:3e:c6:d6:43: 55:62:7f:d5:a2:ff:b0:79:eb:9a:ba:7e:af:a3:19:d9:8f:6b: 60:7b:bb:0e:ce:74:af:6c:5c:1e:7e:81:27:2b:de:87:82:72: 46:d2:c6:a1:f9:3f:76:5e:db:e7:b9:94:f8:60:46:a9:d5:ad: 65:4d:eb:65:53:2e:2e:fe:46:3f:54:54:b8:e5:d0:5e:b7:52: 83:c5:a3:be:6a:12:57:c4:40:c8:fa:55:92:2a:b5:b7:ca:f1: 54:3f:c1:4d:3a:0e:9a:fe:c3:9f:e6:52:50:93:e2:4f:69:c7: 81:5d:d4:1a:94:ae:b0:e1:db:41:80:4f:39:f2:65:a7:02:f7: 7c:53:5c:e5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFHWMNVVnChSt+7Bg4vl+K6I5dX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MjQyMjI3NThaFw0yNzA1MjMyMjMyNThaMDMxMTAvBgNV BAMTKDRCM0ZCQzFGMzcyMUI2RDExRTExQjFEODc5RkM2QUM4OTk0RDdEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeP2IA7nq8sjpePGJSQ7F3RuSZ /a4mconLRDmf47SaIzz0KH0bp7154liz7fBIfi+D+VsbkMgE1Fg4+Xah99Eg0Pye 6jm2YRhnUVWfoHuWMJK08Cbnk4lOXKM1bbqOmxWgE+AqtvHs6vv77YnANjFyfs+O jSMHpQhvlg6wZWTS+qo45prT4Z849zUCioZnuxPdj9eXU9s0PwTCC91EGkKtZ65Y 1+Gi8m6hPOLEuFdng4mK1pVTbuBDsL067h0qPSZqzVW+uc0FbLDZdUxrxHmXyCA2 F98m9a1zhWtCXvdaPXlPMX6YlRrVsludNSmocvRVqortWC/cTrp16O2vsmzDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLP7wfNyG20R4R sdh5/GrImU193TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODV0 QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1 dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAvNEIz RkJDMUYzNzIxQjZEMTFFMTFCMUQ4NzlGQzZBQzg5OTREN0RERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCu1ccAwQDyOEwMA0EAgACMAcDBQAoBIrgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDwqjANBgkqhkiG9w0BAQsFAAOCAQEAdQ0BXhfE h6gf7eL1aId+1ZTrHeMN87Un9j0XDptLmj5r4BhlzLiUZQzaw59LnDiBQ1C7LCwd 2m6c9xF5hVsOQpJhw68eZ4yu/rP8sqIylRf573Nejgtegp6Hqp7tMc/WIzGJK+YU +7/qSkyHiuMFb74z55CNyKQlZEU+xtZDVWJ/1aL/sHnrmrp+r6MZ2Y9rYHu7Ds50 r2xcHn6BJyveh4JyRtLGofk/dl7b57mU+GBGqdWtZU3rZVMuLv5GP1RUuOXQXrdS g8WjvmoSV8RAyPpVkiq1t8rxVD/BTToOmv7Dn+ZSUJPiT2nHgV3UGpSusOHbQYBP OfJlpwL3fFNc5Q== -----END CERTIFICATE-----Generated at Sun Jun 14 01:11:02 2026 by rpki-client