$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer File: 2B93072F9705E77F0DDB8862E74187CBE35911BA.cer (raw, json) Hash identifier: 11MEz76+1+/CfUXsJOBwKbvNcOjX5gKZreUzqSiU8BQ= Subject key identifier: 2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42009490A441BB9B2C576CB0EBC6216CB5E01C80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft caRepository: rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 11 May 2026 17:41:47 +0000 Certificate not after: Mon 10 May 2027 17:46:47 +0000 Subordinate resources: AS: 264005 IP: 143.0.148.0/22 IP: 168.194.48.0/22 IP: 2804:293c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:00:94:90:a4:41:bb:9b:2c:57:6c:b0:eb:c6:21:6c:b5:e0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 11 17:41:47 2026 GMT Not After : May 10 17:46:47 2027 GMT Subject: CN=2B93072F9705E77F0DDB8862E74187CBE35911BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:38:6a:a5:cb:12:1e:1d:0a:dd:e4:82:63: ce:9c:d1:ed:36:35:dc:6c:73:36:17:0f:09:1f:9e: 89:60:5d:5d:8f:11:69:a4:ee:33:0c:3f:e3:3c:5d: 5d:6c:7a:29:86:f6:4e:70:32:33:f7:a6:35:c5:4e: 04:63:90:8e:34:49:23:b9:f2:11:7b:f8:2e:2c:5b: a5:85:bd:c9:fa:85:da:c8:15:da:84:c8:13:6a:6e: 96:f9:2f:63:d0:11:d8:3e:80:ab:d0:44:75:60:5c: c0:4f:8a:50:95:c5:54:50:fc:8d:b3:b0:d0:6f:23: ea:81:3b:99:02:c7:98:d3:d8:e9:b5:d2:6c:eb:1a: 67:d1:c2:5d:49:6e:68:5d:87:d6:01:dc:ca:65:c8: 48:ea:ff:3d:cb:dd:0c:02:f2:7d:36:bd:66:9e:8f: 31:ce:4b:6d:9e:a9:f1:6c:08:9f:42:81:f9:63:54: b4:49:d0:76:b8:83:d3:20:f7:d7:56:0b:1e:35:82: 44:d9:ff:e7:ea:af:a0:fd:32:52:23:d0:38:6c:2d: 58:23:ff:88:53:02:2a:7c:11:46:91:c2:8c:8d:98: 06:d4:27:74:4f:d2:69:77:be:ff:55:bd:a9:9d:e9: d8:20:1d:1f:5c:61:8c:dc:15:29:36:dc:10:0f:d4: ed:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.148.0/22 168.194.48.0/22 IPv6: 2804:293c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264005 Signature Algorithm: sha256WithRSAEncryption 77:f0:2c:15:46:de:2a:46:f4:d8:a7:77:04:97:8b:c0:18:55: fc:f7:ee:ae:e4:ee:91:87:ba:a4:42:5c:21:b9:54:3a:88:b3: 85:12:2b:a3:06:a8:6b:3d:70:af:94:d4:e3:98:b5:7a:31:aa: da:c7:5f:dc:07:44:74:fe:8b:f3:8c:96:81:c6:5c:b9:da:b8: 28:4e:01:3a:32:f7:2d:d9:d3:08:99:de:c8:b7:5a:79:6f:0e: cc:8f:a8:66:af:6f:6a:e2:6b:34:11:0b:55:62:e3:b0:16:14: 9b:5e:a0:8b:70:88:f8:c8:a4:50:e5:df:ac:38:6a:bd:be:1e: c8:e0:f3:83:59:23:5a:a5:05:1a:22:bb:ad:94:63:70:a3:10: 05:f9:fe:2c:7f:cb:9e:30:5a:ec:35:3f:4c:7a:7e:4f:32:62: 5c:87:95:d2:58:ee:ef:8d:4a:64:c2:fd:42:90:b3:f0:6d:b0: bc:40:bb:0e:ac:ba:e8:d8:38:bb:a5:db:76:ed:73:1f:b3:cb: fb:67:ba:09:8e:57:5f:c3:44:ce:9c:4b:a9:4c:4d:56:d3:9f: 66:df:83:9f:ee:ca:44:d5:9a:4c:77:9d:94:f5:d5:f6:61:d8: d5:35:33:59:f9:b4:6b:5d:52:d4:ef:d5:a5:c4:64:2d:df:26: 0c:49:21:ab -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQgCUkKRBu5ssV2yw68YhbLXgHIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTExNzQxNDdaFw0yNzA1MTAxNzQ2NDdaMDMxMTAvBgNV BAMTKDJCOTMwNzJGOTcwNUU3N0YwRERCODg2MkU3NDE4N0NCRTM1OTExQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4DhqpcsSHh0K3eSCY86c0e02 NdxsczYXDwkfnolgXV2PEWmk7jMMP+M8XV1seimG9k5wMjP3pjXFTgRjkI40SSO5 8hF7+C4sW6WFvcn6hdrIFdqEyBNqbpb5L2PQEdg+gKvQRHVgXMBPilCVxVRQ/I2z sNBvI+qBO5kCx5jT2Om10mzrGmfRwl1Jbmhdh9YB3MplyEjq/z3L3QwC8n02vWae jzHOS22eqfFsCJ9CgfljVLRJ0Ha4g9Mg99dWCx41gkTZ/+fqr6D9MlIj0DhsLVgj /4hTAip8EUaRwoyNmAbUJ3RP0ml3vv9Vvamd6dggHR9cYYzcFSk23BAP1O3tAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrkwcvlwXnfw3b iGLnQYfL41kRujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQldR WVFqR2VSNW9yQjhaQUZibkFlV1VWeWp3a1VuaktNYVVYM1V4ZVlQQzUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JX UVlRakdlUjVvckI4WkFGYm5BZVdVVnlqd2tVbmpLTWFVWDNVeGVZUEM1LzAvMkI5 MzA3MkY5NzA1RTc3RjBEREI4ODYyRTc0MTg3Q0JFMzU5MTFCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCjwCUAwQCqMIwMA0EAgACMAcDBQAoBCk8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHRTANBgkqhkiG9w0BAQsFAAOCAQEAd/AsFUbe Kkb02Kd3BJeLwBhV/PfuruTukYe6pEJcIblUOoizhRIrowaoaz1wr5TU45i1ejGq 2sdf3AdEdP6L84yWgcZcudq4KE4BOjL3LdnTCJneyLdaeW8OzI+oZq9vauJrNBEL VWLjsBYUm16gi3CI+MikUOXfrDhqvb4eyODzg1kjWqUFGiK7rZRjcKMQBfn+LH/L njBa7DU/THp+TzJiXIeV0lju741KZML9QpCz8G2wvEC7Dqy66Ng4u6Xbdu1zH7PL +2e6CY5XX8NEzpxLqUxNVtOfZt+Dn+7KRNWaTHedlPXV9mHY1TUzWfm0a11S1O/V pcRkLd8mDEkhqw== -----END CERTIFICATE-----Generated at Wed May 13 13:44:57 2026 by rpki-client