$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer (raw, json) Hash identifier: wEREqrYXZgTfKjP15pEluV0GO5mOJ4bwhcNG+igRR0c= Subject key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 013F90B213863DD92E488D20FEDBFA2FC152E6FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft caRepository: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Jun 2026 15:07:40 +0000 Certificate not after: Thu 10 Jun 2027 15:12:40 +0000 Subordinate resources: AS: 52746 IP: 131.221.180.0/22 IP: 177.85.172.0/22 IP: 2804:1e54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3f:90:b2:13:86:3d:d9:2e:48:8d:20:fe:db:fa:2f:c1:52:e6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 11 15:07:40 2026 GMT Not After : Jun 10 15:12:40 2027 GMT Subject: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:b3:3f:89:07:c3:77:5c:54:c2:7f:6f:ad: 78:7d:61:45:f2:6b:d7:8d:2a:e5:96:51:1e:fe:f6: f7:1a:67:fd:7e:cc:9b:a1:92:4c:f4:7b:23:34:2e: 24:86:b2:7c:92:ac:5a:08:4a:20:de:27:1f:f4:18: 08:ae:11:13:52:7e:b7:15:4a:a6:4b:26:d5:1e:93: 63:79:b6:7a:8c:21:73:b1:7b:d5:ec:02:78:e1:c3: 94:88:88:2f:f5:5e:7d:0a:b9:a8:5f:7b:ff:04:0c: 93:fa:60:0f:f3:f9:9a:7e:06:14:96:42:f7:28:7b: 7f:24:cd:b1:51:90:62:4a:4c:84:1a:c5:07:ef:68: a1:5f:f3:1a:4e:4f:5e:83:48:40:fd:64:87:c8:cb: 45:c6:77:44:fa:b6:8a:a8:c0:93:98:f5:1d:f4:4a: 5c:e6:5a:4b:65:1c:b8:38:ed:5d:ff:b6:7b:8b:ab: aa:47:94:1e:b0:b8:b6:5e:a4:4b:a5:98:e5:d2:f8: e3:31:bb:18:1e:04:60:50:5b:31:11:3e:23:3e:1f: 23:94:2c:e7:1d:f6:92:60:a9:fa:25:3a:b5:d0:db: 46:06:ef:ff:ba:75:34:b4:7b:8b:07:d6:6f:bf:0f: c3:43:1f:31:ef:65:22:75:f7:63:a7:d0:3d:3b:b1: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.180.0/22 177.85.172.0/22 IPv6: 2804:1e54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52746 Signature Algorithm: sha256WithRSAEncryption 6c:74:82:cf:19:38:7d:9c:11:c6:91:5c:d3:5d:b0:ce:e1:fb: 9a:a1:65:c5:f9:35:2a:25:da:43:9e:ce:d5:96:73:9e:b9:1d: f2:1b:62:8b:72:4c:91:88:ed:a3:51:b5:0b:b7:c5:a6:62:a9: 96:72:4f:28:08:43:a5:fd:20:f1:4d:48:6e:91:37:20:85:1a: cb:20:60:88:eb:20:ad:5c:d1:37:d1:9a:9b:70:11:4e:82:60: 41:57:b5:e9:b2:68:b4:0e:81:7f:8b:4d:f1:b2:fa:83:88:c1: c0:a2:48:a2:db:9a:d6:96:61:2c:1b:e2:1a:b2:dd:a5:7a:5b: 6f:b6:c2:50:3a:4c:fc:40:63:07:68:92:60:01:86:d2:08:2f: 70:98:b3:2c:40:2a:ac:5e:f0:bc:47:51:fe:7a:f6:d6:28:2d: 22:c7:7d:a0:2f:42:7a:23:f9:82:4c:ac:ab:11:59:9d:7c:72: 83:de:db:51:43:57:3e:9b:32:d7:b2:2c:b3:96:bd:d3:3a:44: 71:8a:e3:01:f5:ea:e6:31:89:f1:53:ca:3e:fc:0c:a8:c2:b9: db:dc:44:1e:a7:99:0b:1a:6d:c6:69:02:5c:4c:da:76:bb:bd: c2:77:4d:17:2d:af:c0:b0:e2:4c:52:8d:94:f8:fa:80:53:f8: cd:03:86:a1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAT+QshOGPdkuSI0g/tv6L8FS5vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTExNTA3NDBaFw0yNzA2MTAxNTEyNDBaMDMxMTAvBgNV BAMTKERGQjFGM0ZBNkY0MjBERjAxOTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaLM/iQfDd1xUwn9vrXh9YUXy a9eNKuWWUR7+9vcaZ/1+zJuhkkz0eyM0LiSGsnySrFoISiDeJx/0GAiuERNSfrcV SqZLJtUek2N5tnqMIXOxe9XsAnjhw5SIiC/1Xn0Kuahfe/8EDJP6YA/z+Zp+BhSW Qvcoe38kzbFRkGJKTIQaxQfvaKFf8xpOT16DSED9ZIfIy0XGd0T6toqowJOY9R30 SlzmWktlHLg47V3/tnuLq6pHlB6wuLZepEulmOXS+OMxuxgeBGBQWzERPiM+HyOU LOcd9pJgqfolOrXQ20YG7/+6dTS0e4sH1m+/D8NDHzHvZSJ192On0D07sWzJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfsfP6b0IN8BkF UvwJcoWa9F82jjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW55 ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vu eWRocEJWbWthNFdOQ2RRd2hrZm1SbnVxRTZNRm01eDJxWTN2cG9zb2pYLzAvREZC MUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFGNDVGMzY4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg920AwQCsVWsMA0EAgACMAcDBQAoBB5UMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOCjANBgkqhkiG9w0BAQsFAAOCAQEAbHSCzxk4 fZwRxpFc012wzuH7mqFlxfk1KiXaQ57O1ZZznrkd8htii3JMkYjto1G1C7fFpmKp lnJPKAhDpf0g8U1IbpE3IIUayyBgiOsgrVzRN9Gam3ARToJgQVe16bJotA6Bf4tN 8bL6g4jBwKJIotua1pZhLBviGrLdpXpbb7bCUDpM/EBjB2iSYAGG0ggvcJizLEAq rF7wvEdR/nr21igtIsd9oC9CeiP5gkysqxFZnXxyg97bUUNXPpsy17Iss5a90zpE cYrjAfXq5jGJ8VPKPvwMqMK529xEHqeZCxptxmkCXEzadru9wndNFy2vwLDiTFKN lPj6gFP4zQOGoQ== -----END CERTIFICATE-----Generated at Sat Jun 13 21:35:30 2026 by rpki-client