$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer File: 4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer (raw, json) Hash identifier: d7nTT/yyed/2h13yum0trNOtZnuScpaubyVE+O1btiQ= Subject key identifier: 4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E01CB1F52B69675531AF5261F7F87DB51ABDABE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft caRepository: rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 16:36:43 +0000 Certificate not after: Mon 12 Apr 2027 16:41:43 +0000 Subordinate resources: AS: 274729 IP: 2804:92bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 20:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:01:cb:1f:52:b6:96:75:53:1a:f5:26:1f:7f:87:db:51:ab:da:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 13 16:36:43 2026 GMT Not After : Apr 12 16:41:43 2027 GMT Subject: CN=4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:f0:4a:c8:af:f0:14:cb:df:f9:35:2b:b9: 9e:e0:f3:ec:c3:03:52:cd:da:77:ca:00:31:40:f9: 26:a6:4a:4e:67:eb:fd:a3:cb:d5:df:be:6e:ca:97: 1b:d8:b4:44:46:69:bc:e7:76:42:07:9e:c1:40:ea: 5d:60:43:0c:62:09:62:6d:c4:be:0a:ed:79:28:14: 0d:1f:7d:83:e4:36:1b:61:a8:89:a5:b3:97:99:ec: 3b:52:23:a9:d7:0e:65:67:0a:c7:b7:cc:84:e3:c1: 3b:99:09:1f:c0:c1:a1:82:99:83:d1:39:77:b8:56: 31:70:be:7f:a6:b8:34:78:4f:5e:92:96:e2:fe:ff: 16:fb:8f:d7:1e:31:8d:36:3d:0a:bc:83:f4:76:b0: 03:67:56:fb:87:46:49:14:0e:a1:05:db:17:26:bc: df:20:bf:9a:57:ad:8e:12:2a:1e:82:2b:95:1f:30: 56:03:10:f5:a2:ee:e9:12:23:2d:09:72:f9:72:5a: 57:b7:ce:cc:2b:c7:e9:ad:14:b2:36:d3:53:0e:b4: 3b:7a:2b:ed:67:ae:a3:91:d1:a3:04:d5:60:ae:9a: 16:d5:87:87:a3:2a:0e:24:b7:c8:78:5d:0c:31:23: a3:9b:45:cb:19:ae:43:fc:31:2c:8a:41:4c:63:93: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:92bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274729 Signature Algorithm: sha256WithRSAEncryption 82:83:c0:37:f2:cd:f0:a4:82:97:5e:a2:1e:81:38:77:73:9e: 10:9a:9d:13:d8:cc:93:68:85:86:41:18:5f:ad:ce:e6:32:70: e5:b3:a7:bf:8f:ab:e1:7e:58:d7:46:f6:5c:4d:d7:37:c3:87: e4:9b:56:e8:04:d1:23:69:bf:40:a5:2f:4d:d8:2c:f0:e1:a4: 6d:96:1e:d0:fb:06:b7:69:21:cb:3f:70:0c:60:ab:20:95:2b: 6c:10:cc:29:9e:38:dc:02:ad:5b:9d:47:62:7a:9b:af:0c:ea: 3e:ec:66:f3:a7:01:1a:79:f4:5b:be:cc:9e:d3:18:6f:35:2a: b0:ae:8f:98:c5:90:5f:4f:a2:4e:ed:54:d1:1f:cc:4e:f0:46: d3:de:77:e0:b7:fd:25:06:ae:d8:6b:6d:43:52:80:f8:49:5b: 7a:da:f3:d1:db:f7:e0:96:79:56:36:05:20:28:cd:51:1c:76: cb:5f:b1:3e:07:b0:8b:30:7a:43:8b:e4:0e:7d:ed:c8:df:95: a7:3a:34:10:6d:d7:91:f1:42:94:00:7b:06:f8:64:d4:08:cb: 80:1d:e0:60:4c:d3:9c:8e:8f:b2:4c:60:2a:a5:c1:fc:d5:4c: 40:74:a6:6e:80:eb:06:8b:1d:83:9f:3a:ef:dd:90:46:eb:d3: 8f:ec:19:a7 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUfgHLH1K2lnVTGvUmH3+H21Gr2r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTMxNjM2NDNaFw0yNzA0MTIxNjQxNDNaMDMxMTAvBgNV BAMTKDREMzNDM0M4NjRBRTkwREFDNDZFQUU3NkFDRDZERTlERUJFQTYxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0fBKyK/wFMvf+TUruZ7g8+zD A1LN2nfKADFA+SamSk5n6/2jy9Xfvm7KlxvYtERGabzndkIHnsFA6l1gQwxiCWJt xL4K7XkoFA0ffYPkNhthqImls5eZ7DtSI6nXDmVnCse3zITjwTuZCR/AwaGCmYPR OXe4VjFwvn+muDR4T16SluL+/xb7j9ceMY02PQq8g/R2sANnVvuHRkkUDqEF2xcm vN8gv5pXrY4SKh6CK5UfMFYDEPWi7ukSIy0JcvlyWle3zswrx+mtFLI201MOtDt6 K+1nrqOR0aME1WCumhbVh4ejKg4kt8h4XQwxI6ObRcsZrkP8MSyKQUxjk87xAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNM8PIZK6Q2sRu rnas1t6d6+ph/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3lm VU43U3ZYdDhOUmZKVkpncTU5N3R1NEE3YmhRZVFtN2RTazNxMlNiNHkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN5 ZlVON1N2WHQ4TlJmSlZKZ3E1OTd0dTRBN2JoUWVRbTdkU2szcTJTYjR5LzAvNEQz M0MzQzg2NEFFOTBEQUM0NkVBRTc2QUNENkRFOURFQkVBNjFGQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASSvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MSkwDQYJKoZIhvcNAQELBQADggEBAIKDwDfyzfCkgpdeoh6BOHdznhCanRPYzJNo hYZBGF+tzuYycOWzp7+Pq+F+WNdG9lxN1zfDh+SbVugE0SNpv0ClL03YLPDhpG2W HtD7BrdpIcs/cAxgqyCVK2wQzCmeONwCrVudR2J6m68M6j7sZvOnARp59Fu+zJ7T GG81KrCuj5jFkF9Pok7tVNEfzE7wRtPed+C3/SUGrthrbUNSgPhJW3ra89Hb9+CW eVY2BSAozVEcdstfsT4HsIswekOL5A597cjflac6NBBt15HxQpQAewb4ZNQIy4Ad 4GBM05yOj7JMYCqlwfzVTEB0pm6A6waLHYOfOu/dkEbr04/sGac= -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:02 2026 by rpki-client