$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer File: A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer (raw, json) Hash identifier: SBabV5kRIcnbcn75mXwwzuMf1NdDNVyotrjvrPagxZw= Subject key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 63A5B11B32BE07AA3E52BD640ACD01CCE5F7FC79 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft caRepository: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Jun 2026 00:56:20 +0000 Certificate not after: Fri 04 Jun 2027 01:01:20 +0000 Subordinate resources: AS: 264112 IP: 138.97.20.0/22 IP: 170.83.160.0/22 IP: 2804:22a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 21:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a5:b1:1b:32:be:07:aa:3e:52:bd:64:0a:cd:01:cc:e5:f7:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 5 00:56:20 2026 GMT Not After : Jun 4 01:01:20 2027 GMT Subject: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:99:2f:9d:fa:ad:fb:7a:0e:0b:de:30:f0: b0:42:d6:9f:41:94:26:dc:36:e7:37:64:8f:e3:f0: 33:99:ed:11:75:22:4c:3e:e3:24:f9:1c:13:f9:23: 10:d9:e5:86:dc:59:7a:72:26:e7:4a:f4:d4:32:2c: 85:36:c7:96:50:f6:d5:01:0d:fd:33:b7:f7:d5:91: 7d:c8:4a:55:42:af:ea:2a:52:8a:8d:31:0b:f1:a5: ed:51:5f:c2:a9:25:25:7d:e1:27:32:c7:f5:b4:2d: 96:d4:95:45:37:10:6c:45:b8:39:5b:01:0d:1c:f9: ce:c3:37:da:06:16:8b:0a:34:45:72:45:2a:0f:71: 79:e2:9b:db:e6:68:c8:24:8d:47:64:48:9a:10:c1: 32:73:2f:cb:5d:16:89:48:97:e3:fb:2a:4c:53:57: ed:ae:e4:74:fa:45:45:e0:3b:40:24:eb:a3:0a:ea: 50:64:56:cb:00:53:63:04:4e:16:e6:81:7d:ff:81: 77:50:76:38:86:14:d3:fc:ac:24:ff:31:6b:b7:2f: 50:f4:0f:4e:4e:47:dd:0c:bf:0d:d1:38:06:18:76: 7e:71:fa:ef:90:89:6e:70:3e:fe:d7:e8:3d:35:54: 2b:e5:6e:81:ba:db:57:7a:78:95:03:ed:bb:f5:33: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.20.0/22 170.83.160.0/22 IPv6: 2804:22a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264112 Signature Algorithm: sha256WithRSAEncryption cc:67:a5:6a:5c:9e:f0:1e:2d:0f:18:51:da:60:f5:8f:94:4a: ce:7b:4f:53:03:08:ef:6d:0c:ca:50:68:a7:43:1d:e7:81:b6: 0a:eb:34:06:31:bb:f3:a6:1b:32:c8:4a:1d:62:9e:71:28:03: da:d7:72:05:54:f7:ea:66:22:97:3f:b0:c9:85:ab:bb:1a:58: 9c:02:40:e6:c1:7e:a8:46:f9:89:94:19:81:83:9a:a1:2c:5d: 46:cd:e1:90:c7:1e:8e:86:b7:54:66:36:36:4f:57:6c:3b:df: 22:66:ef:2d:dc:12:7a:30:24:5b:a4:7e:99:40:c9:bc:31:ad: d3:61:3e:54:99:3a:a1:24:09:0d:9a:77:90:2b:92:a1:ec:ca: c2:c0:66:9e:a0:c8:2e:eb:89:32:85:75:80:b5:e0:f8:bf:b0: 4f:83:a7:cc:61:a2:25:e2:be:19:70:c6:40:cb:5c:fb:34:19: 08:4b:7f:bd:f9:fe:50:2f:55:06:6e:10:32:9d:cc:69:16:55: 07:8e:3b:35:b6:26:55:fc:94:ce:9d:6a:6b:83:49:43:4e:2d: 43:b8:50:a3:c0:d4:ce:77:e1:8f:ea:f6:50:f1:f3:c5:de:43: 60:f0:63:5d:b7:8e:ec:8d:cd:24:24:c1:73:d2:b5:df:aa:96: 5f:80:d5:bc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUY6WxGzK+B6o+Ur1kCs0BzOX3/HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MDUwMDU2MjBaFw0yNzA2MDQwMTAxMjBaMDMxMTAvBgNV BAMTKEE3MjAzOUM4MEE3QTNBNEVGM0EyMTE1RjkzQTE0M0M3OENBQ0JDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQpkvnfqt+3oOC94w8LBC1p9B lCbcNuc3ZI/j8DOZ7RF1Ikw+4yT5HBP5IxDZ5YbcWXpyJudK9NQyLIU2x5ZQ9tUB Df0zt/fVkX3ISlVCr+oqUoqNMQvxpe1RX8KpJSV94Scyx/W0LZbUlUU3EGxFuDlb AQ0c+c7DN9oGFosKNEVyRSoPcXnim9vmaMgkjUdkSJoQwTJzL8tdFolIl+P7KkxT V+2u5HT6RUXgO0Ak66MK6lBkVssAU2METhbmgX3/gXdQdjiGFNP8rCT/MWu3L1D0 D05OR90Mvw3ROAYYdn5x+u+QiW5wPv7X6D01VCvlboG621d6eJUD7bv1Mx/5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnIDnICno6TvOi EV+ToUPHjKy88TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE1z TkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRN c05EcGVBaHZ2OHdkaldIZ2o0eUh0dFZEY1ZNOFBYeXlkdHpZVDlpclVQLzAvQTcy MDM5QzgwQTdBM0E0RUYzQTIxMTVGOTNBMTQzQzc4Q0FDQkNGMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimEUAwQCqlOgMA0EAgACMAcDBQAoBCKgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHsDANBgkqhkiG9w0BAQsFAAOCAQEAzGelalye 8B4tDxhR2mD1j5RKzntPUwMI720MylBop0Md54G2Cus0BjG786YbMshKHWKecSgD 2tdyBVT36mYilz+wyYWruxpYnAJA5sF+qEb5iZQZgYOaoSxdRs3hkMcejoa3VGY2 Nk9XbDvfImbvLdwSejAkW6R+mUDJvDGt02E+VJk6oSQJDZp3kCuSoezKwsBmnqDI LuuJMoV1gLXg+L+wT4OnzGGiJeK+GXDGQMtc+zQZCEt/vfn+UC9VBm4QMp3MaRZV B447NbYmVfyUzp1qa4NJQ04tQ7hQo8DUznfhj+r2UPHzxd5DYPBjXbeO7I3NJCTB c9K136qWX4DVvA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:41:48 2026 by rpki-client