$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.cer File: BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.cer (raw, json) Hash identifier: vq1cLnsSmQJ72kse4QvGb4U2n11mZw1Qhqdl5NOy+ok= Subject key identifier: BD:A8:15:54:09:B4:D8:8D:BC:FF:1B:B4:FD:33:D7:53:6C:E4:7A:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22194AA5203BAD98333244731E852B0DFB99919D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.mft caRepository: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 04:00:24 +0000 Certificate not after: Wed 14 Apr 2027 04:05:24 +0000 Subordinate resources: AS: 61723 IP: 131.72.40.0/22 IP: 2804:1b58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:19:4a:a5:20:3b:ad:98:33:32:44:73:1e:85:2b:0d:fb:99:91:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 15 04:00:24 2026 GMT Not After : Apr 14 04:05:24 2027 GMT Subject: CN=BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:3b:d9:2b:d4:3a:e3:35:6f:82:0b:64:cd: 25:81:c6:56:be:37:a1:fc:08:ea:22:ff:a6:60:a8: dc:11:3b:43:3a:68:5f:98:91:5c:05:66:17:a2:ab: 08:33:07:63:ba:70:cf:ab:9f:25:d6:05:ac:ea:cd: 9d:54:b9:37:d8:b3:64:87:34:e8:a1:77:27:ce:6c: 35:1a:da:7f:44:dd:4d:45:60:57:28:9b:d7:07:8a: 49:10:0d:66:00:0e:19:ae:11:73:fb:ab:d8:27:45: 6f:64:7e:d0:57:ef:68:59:e4:77:8c:65:d2:56:87: 47:35:35:9f:9c:a3:b0:8d:21:c7:90:8f:f4:b7:58: 5f:f7:cb:68:60:d7:67:a2:71:6f:9e:15:85:48:3b: bb:c6:35:9b:11:9e:61:23:dd:6d:c9:e9:5e:f2:e4: 6f:15:1e:70:6c:dc:5c:d0:30:11:c9:31:61:8a:fb: 62:50:60:bd:81:ea:23:b0:46:23:09:a2:c7:aa:2f: 71:1a:33:0e:f1:0c:a3:a0:e3:10:7f:28:65:e9:14: 83:42:d2:74:80:9e:47:59:66:b2:8f:18:a5:a3:49: f1:59:ba:7c:a9:bd:c6:24:28:d4:3b:9c:94:41:48: f7:61:12:17:73:c2:27:33:63:ee:55:c4:16:d8:fe: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:A8:15:54:09:B4:D8:8D:BC:FF:1B:B4:FD:33:D7:53:6C:E4:7A:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.40.0/22 IPv6: 2804:1b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61723 Signature Algorithm: sha256WithRSAEncryption 83:4e:b2:5f:be:d5:c8:5c:76:4d:08:74:36:63:06:a5:c7:33: 0b:7d:c4:65:19:79:21:45:03:55:a6:59:bb:6c:0e:e1:cc:3d: e2:b4:88:b9:af:24:d0:bf:78:db:0d:09:74:2c:f6:e6:f2:00: 24:11:52:61:3b:18:fe:ed:9f:1d:87:23:56:6d:81:59:23:56: 8f:4d:d0:7b:3f:c1:84:c9:59:9f:a2:28:56:15:0c:0f:eb:72: 03:c7:b6:c5:4d:71:f3:d2:65:a6:e5:63:59:06:27:15:86:b4: 45:56:da:54:84:3c:c7:13:44:44:8d:59:98:c1:32:1f:c8:e9: fc:f7:1c:fe:1b:a9:de:b2:7b:10:36:bb:24:05:df:3b:6e:3d: 25:ab:57:fd:f6:27:c0:4c:e0:ad:88:d4:38:00:28:e3:9c:d4: 2e:a5:67:a4:7b:c9:e1:1d:99:96:51:c1:4b:88:f1:6d:67:3f: 4a:04:38:5e:e9:84:f3:53:a7:7a:61:1e:36:73:ca:00:8f:4b: b7:85:78:89:f7:3b:1a:86:e4:7a:88:fa:56:55:bf:c5:7c:ea: af:eb:c7:70:80:8e:89:76:a9:1a:04:cd:99:3a:2a:ab:ef:7b: cb:f3:a1:60:db:4c:a8:30:9c:e6:fc:cc:97:a9:99:ec:59:91: 6d:60:78:62 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIhlKpSA7rZgzMkRzHoUrDfuZkZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTUwNDAwMjRaFw0yNzA0MTQwNDA1MjRaMDMxMTAvBgNV BAMTKEJEQTgxNTU0MDlCNEQ4OERCQ0ZGMUJCNEZEMzNENzUzNkNFNDdBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8zvZK9Q64zVvggtkzSWBxla+ N6H8COoi/6ZgqNwRO0M6aF+YkVwFZheiqwgzB2O6cM+rnyXWBazqzZ1UuTfYs2SH NOihdyfObDUa2n9E3U1FYFcom9cHikkQDWYADhmuEXP7q9gnRW9kftBX72hZ5HeM ZdJWh0c1NZ+co7CNIceQj/S3WF/3y2hg12eicW+eFYVIO7vGNZsRnmEj3W3J6V7y 5G8VHnBs3FzQMBHJMWGK+2JQYL2B6iOwRiMJoseqL3EaMw7xDKOg4xB/KGXpFINC 0nSAnkdZZrKPGKWjSfFZunypvcYkKNQ7nJRBSPdhEhdzwiczY+5VxBbY/uefAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9qBVUCbTYjbz/ G7T9M9dTbOR6sjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREdn dzNQMktDTG5hTVJ4aXBDUXRycWpIZkN4VnhKMUNNRUpkRU1rdkFOTmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RH Z3czUDJLQ0xuYU1SeGlwQ1F0cnFqSGZDeFZ4SjFDTUVKZEVNa3ZBTk5oLzAvQkRB ODE1NTQwOUI0RDg4REJDRkYxQkI0RkQzM0Q3NTM2Q0U0N0FCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg0goMA0EAgACMAcDBQAoBBtYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxGzANBgkqhkiG9w0BAQsFAAOCAQEAg06yX77VyFx2TQh0 NmMGpcczC33EZRl5IUUDVaZZu2wO4cw94rSIua8k0L942w0JdCz25vIAJBFSYTsY /u2fHYcjVm2BWSNWj03Qez/BhMlZn6IoVhUMD+tyA8e2xU1x89JlpuVjWQYnFYa0 RVbaVIQ8xxNERI1ZmMEyH8jp/Pcc/hup3rJ7EDa7JAXfO249JatX/fYnwEzgrYjU OAAo45zULqVnpHvJ4R2ZllHBS4jxbWc/SgQ4XumE81OnemEeNnPKAI9Lt4V4ifc7 Gobkeoj6VlW/xXzqr+vHcICOiXapGgTNmToqq+97y/OhYNtMqDCc5vzMl6mZ7FmR bWB4Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:41 2026 by rpki-client