$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer File: 13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer (raw, json) Hash identifier: POKs4fhYSq/aiIKUszzt1EFajg5UvGAp1/kSnpiDvrI= Subject key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 511A8E197147E780F631395E3F1B0C3F7915BD4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft caRepository: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 13 May 2026 02:53:45 +0000 Certificate not after: Wed 12 May 2027 02:58:45 +0000 Subordinate resources: AS: 264485 IP: 131.255.144.0/22 IP: 189.91.144.0/20 IP: 2804:2050::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1a:8e:19:71:47:e7:80:f6:31:39:5e:3f:1b:0c:3f:79:15:bd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 13 02:53:45 2026 GMT Not After : May 12 02:58:45 2027 GMT Subject: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:d1:c3:90:e6:0e:fe:06:af:17:f1:3e:85: 42:57:b0:53:68:f2:cb:dc:34:1b:ec:9a:67:26:3b: 62:39:1e:fb:09:39:8d:10:55:e7:48:ae:8a:14:74: f3:85:3c:0c:b6:eb:85:c1:cb:9a:b9:6e:f8:9b:f4: c5:cb:5a:d6:1e:3a:e7:f2:73:e9:c0:f9:2c:b1:8c: fe:dd:a4:6c:d7:66:5a:79:9d:b5:96:4e:3f:a1:12: df:7e:81:bf:95:a1:78:04:21:28:b6:9a:d2:c6:f1: 84:4a:df:26:2a:cf:87:5d:10:87:aa:e2:0f:e5:af: bf:2b:5a:1a:30:9c:1a:81:a5:64:32:7f:45:7d:5b: 57:1a:c5:81:2d:26:46:17:8c:1c:af:83:97:78:7d: 62:e4:17:c9:cb:dd:6c:79:27:73:43:a4:28:20:e1: fc:5c:71:24:a1:f5:3c:5e:8d:df:18:56:1c:6a:d2: 21:60:5e:b7:75:6c:f6:ce:5b:87:82:9d:43:f7:ea: b8:0c:27:90:be:e5:d0:3c:18:15:3d:5c:a1:1d:6a: 3c:64:94:1f:35:fc:9b:38:7d:42:74:2c:a9:74:0a: 81:59:86:8c:5d:d3:f7:d2:f8:94:31:44:62:11:66: 7b:f6:b1:51:fc:e3:e1:18:c8:e0:10:3e:67:16:26: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.144.0/22 189.91.144.0/20 IPv6: 2804:2050::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264485 Signature Algorithm: sha256WithRSAEncryption ad:06:ce:3c:0a:c9:87:5c:9a:d9:89:33:9b:0e:93:59:d6:9f: 5b:fc:d7:72:16:21:95:22:20:0f:a0:43:51:49:6e:41:da:2a: 8c:d6:f2:32:ad:6b:4b:19:75:fa:67:6c:6a:c3:f0:5c:90:4c: 0e:93:22:f9:ba:ad:19:58:f1:58:9e:36:b4:61:27:09:98:e5: d1:8a:86:7c:06:9e:6a:b4:9c:b1:1f:0f:d9:86:d8:6b:01:a9: c8:29:5a:92:e6:a7:68:21:34:7b:72:61:90:57:5f:4a:ee:f0: 14:95:c9:b4:5c:b2:43:c4:6a:9f:b9:1e:e4:2b:8d:d0:6c:72: e8:79:91:83:e6:03:54:01:a8:54:18:5c:4e:f6:4a:43:f9:33: ae:bf:fb:3a:10:56:82:75:38:01:2f:8f:8f:06:16:ae:c2:aa: 80:97:07:9f:ba:01:7c:62:90:cc:93:68:c2:4b:e0:d5:47:2b: f3:4c:cc:98:23:a8:63:de:25:2d:f1:25:7c:e2:9b:2d:8b:e0: 5d:3b:61:25:ec:ef:77:e5:ea:25:4a:bd:fa:6a:fc:c0:fe:e5: 59:cb:31:7b:8a:bd:ee:65:08:af:ee:19:09:e2:11:0c:f8:fd: 46:24:2d:1f:cd:93:bb:0d:ed:ee:b1:cf:9f:03:06:dd:d8:f4: 90:b3:95:b9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUURqOGXFH54D2MTlePxsMP3kVvU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTMwMjUzNDVaFw0yNzA1MTIwMjU4NDVaMDMxMTAvBgNV BAMTKDEzMDQ5QTI1ODkyMUJCQjNBRjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiQdHDkOYO/gavF/E+hUJXsFNo 8svcNBvsmmcmO2I5HvsJOY0QVedIrooUdPOFPAy264XBy5q5bvib9MXLWtYeOufy c+nA+SyxjP7dpGzXZlp5nbWWTj+hEt9+gb+VoXgEISi2mtLG8YRK3yYqz4ddEIeq 4g/lr78rWhownBqBpWQyf0V9W1caxYEtJkYXjByvg5d4fWLkF8nL3Wx5J3NDpCgg 4fxccSSh9Txejd8YVhxq0iFgXrd1bPbOW4eCnUP36rgMJ5C+5dA8GBU9XKEdajxk lB81/Js4fUJ0LKl0CoFZhoxd0/fS+JQxRGIRZnv2sVH84+EYyOAQPmcWJvetAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTBJoliSG7s687 uxBENKzbDtjfOjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG5q QmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZFSjYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru akJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAvMTMw NDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIwRUQ4REYzQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg/+QAwQEvVuQMA0EAgACMAcDBQAoBCBQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJJTANBgkqhkiG9w0BAQsFAAOCAQEArQbOPArJ h1ya2Ykzmw6TWdafW/zXchYhlSIgD6BDUUluQdoqjNbyMq1rSxl1+mdsasPwXJBM DpMi+bqtGVjxWJ42tGEnCZjl0YqGfAaearScsR8P2YbYawGpyClakuanaCE0e3Jh kFdfSu7wFJXJtFyyQ8Rqn7ke5CuN0Gxy6HmRg+YDVAGoVBhcTvZKQ/kzrr/7OhBW gnU4AS+PjwYWrsKqgJcHn7oBfGKQzJNowkvg1Ucr80zMmCOoY94lLfElfOKbLYvg XTthJezvd+XqJUq9+mr8wP7lWcsxe4q97mUIr+4ZCeIRDPj9RiQtH82Tuw3t7rHP nwMG3dj0kLOVuQ== -----END CERTIFICATE-----Generated at Wed May 13 15:53:00 2026 by rpki-client