$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer File: 28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer (raw, json) Hash identifier: pvuVDIdWLoCaLkhRs/YPc0ZYxTVP3ZjtBgzDI1/Wxg4= Subject key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 382FFB41D8D9C09F05E4704A4E0E28ABAF49D75B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft caRepository: rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Apr 2026 14:09:55 +0000 Certificate not after: Wed 21 Apr 2027 14:14:55 +0000 Subordinate resources: AS: 262642 IP: 168.205.140.0/22 IP: 170.82.84.0/22 IP: 177.87.0.0/21 IP: 2804:2ea8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2f:fb:41:d8:d9:c0:9f:05:e4:70:4a:4e:0e:28:ab:af:49:d7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 14:09:55 2026 GMT Not After : Apr 21 14:14:55 2027 GMT Subject: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:e2:20:b0:65:a0:57:1c:81:2f:69:b7:66: bb:f9:b3:3f:b0:6b:ce:04:f4:3e:b1:22:c7:80:57: b0:22:53:92:f9:d8:53:a8:1d:1c:04:fd:49:74:f9: fb:af:e6:95:d7:fc:e5:e6:66:be:86:49:2e:b7:5f: 8d:2b:8f:bf:74:a3:57:fb:96:05:9b:44:bc:e6:9b: ba:95:1e:aa:fb:c3:69:a2:5e:d0:3d:ec:b3:ed:b4: b7:f3:d8:14:13:33:a1:a4:b0:81:72:f0:24:db:77: 16:ee:20:c9:b0:2b:4d:6e:73:06:1f:c2:66:a9:be: b2:70:e0:ba:70:cf:cb:ce:f4:af:69:1e:6a:dd:78: ff:94:44:33:6e:f6:92:25:a1:ac:2b:a5:50:d6:57: 54:eb:dc:b5:b4:58:ec:18:d2:0c:66:86:ed:56:9c: 33:f4:1a:3f:6e:b0:31:f9:8b:b5:7d:55:74:83:dc: 15:8f:49:75:35:41:73:64:de:f9:fa:57:18:1e:0c: 12:fe:d2:f1:f3:d0:7a:16:a4:a1:b2:d9:90:f0:a5: 5e:2e:65:79:70:f8:1f:c4:8c:59:58:6b:97:c5:49: 1b:d1:50:ea:e6:31:ef:f4:5e:84:d0:13:5b:4f:ec: 97:ed:dc:fe:76:d4:4f:b5:6e:04:ea:cb:30:e6:9a: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.140.0/22 170.82.84.0/22 177.87.0.0/21 IPv6: 2804:2ea8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262642 Signature Algorithm: sha256WithRSAEncryption bf:0b:ce:02:c5:de:e7:56:81:5f:8e:14:b9:e7:b6:60:af:12: 6b:dd:08:1d:00:49:18:7f:f4:8a:00:d7:c7:62:ad:24:21:e1: 70:eb:94:a6:ba:58:7f:d6:6f:29:89:17:42:87:b5:67:7b:ce: ee:b1:ad:be:33:ca:f6:d4:55:5f:fa:a9:e9:c8:2d:47:49:fc: c2:a8:53:58:27:0a:94:7b:d3:1e:9d:02:86:c9:0e:44:77:4b: 45:5c:1b:1d:0e:ef:9e:3b:4d:7f:9b:df:6e:60:73:62:4a:80: b1:d5:f0:56:6a:35:63:9c:28:cc:08:14:ba:97:ba:6c:a7:23: 14:00:d5:ed:ca:4f:97:53:02:f3:db:a2:73:58:5d:83:22:a1: 65:b4:31:11:75:f2:29:fd:a2:e2:63:ed:a8:a0:0f:5b:07:56: f9:d3:84:5c:33:21:e0:3e:02:1b:65:21:3f:7a:25:14:4f:6b: f1:fb:90:e7:a3:ce:74:22:11:5f:8b:20:62:f6:7d:5b:aa:a0: c8:13:2a:c7:6c:98:4e:77:2f:82:65:69:8e:bd:86:67:9d:b8: 84:be:a1:2e:6b:c7:41:13:43:ac:52:d3:94:cc:d4:01:77:56: ba:06:8b:7a:39:27:65:62:3f:ad:15:b5:c2:76:2b:a2:91:83: 68:4a:99:8b -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUOC/7QdjZwJ8F5HBKTg4oq69J11swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjIxNDA5NTVaFw0yNzA0MjExNDE0NTVaMDMxMTAvBgNV BAMTKDI4MDM0QjlGQjRBRkQ4RDNGMzlCMTMzQUE0NzFFNDBBODNGMjFBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliOIgsGWgVxyBL2m3Zrv5sz+w a84E9D6xIseAV7AiU5L52FOoHRwE/Ul0+fuv5pXX/OXmZr6GSS63X40rj790o1f7 lgWbRLzmm7qVHqr7w2miXtA97LPttLfz2BQTM6GksIFy8CTbdxbuIMmwK01ucwYf wmapvrJw4Lpwz8vO9K9pHmrdeP+URDNu9pIloawrpVDWV1Tr3LW0WOwY0gxmhu1W nDP0Gj9usDH5i7V9VXSD3BWPSXU1QXNk3vn6VxgeDBL+0vHz0HoWpKGy2ZDwpV4u ZXlw+B/EjFlYa5fFSRvRUOrmMe/0XoTQE1tP7Jft3P521E+1bgTqyzDmmi4FAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQoA0uftK/Y0/Ob EzqkceQKg/IaxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjlH d2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUyYWYvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjlH d2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUyYWYvMC8yODAz NEI5RkI0QUZEOEQzRjM5QjEzM0FBNDcxRTQwQTgzRjIxQUM0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKozYwDBAKqUlQDBAOxVwAwDQQCAAIwBwMFACgELqgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAHyMA0GCSqGSIb3DQEBCwUAA4IBAQC/ C84Cxd7nVoFfjhS557ZgrxJr3QgdAEkYf/SKANfHYq0kIeFw65Smulh/1m8piRdC h7Vne87usa2+M8r21FVf+qnpyC1HSfzCqFNYJwqUe9MenQKGyQ5Ed0tFXBsdDu+e O01/m99uYHNiSoCx1fBWajVjnCjMCBS6l7pspyMUANXtyk+XUwLz26JzWF2DIqFl tDERdfIp/aLiY+2ooA9bB1b504RcMyHgPgIbZSE/eiUUT2vx+5Dno850IhFfiyBi 9n1bqqDIEyrHbJhOdy+CZWmOvYZnnbiEvqEua8dBE0OsUtOUzNQBd1a6Bot6OSdl Yj+tFbXCdiuikYNoSpmL -----END CERTIFICATE-----Generated at Wed May 13 13:02:35 2026 by rpki-client