$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer File: 32A915BA5A97568A877890D55DC289FFCB6FEE60.cer (raw, json) Hash identifier: RKPxgmuo+ZjLeQpIcgcu6yCC/8ZW6Y1Hbv+QOWdiWBk= Subject key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4DB7F9F00EF3752AA3058B3CC17D08E331727509 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft caRepository: rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 17:44:33 +0000 Certificate not after: Wed 24 Mar 2027 17:49:33 +0000 Subordinate resources: AS: 28370 IP: 45.172.144.0/22 IP: 187.45.144.0/20 IP: 189.84.144.0/20 IP: 2804:591c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b7:f9:f0:0e:f3:75:2a:a3:05:8b:3c:c1:7d:08:e3:31:72:75:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 17:44:33 2026 GMT Not After : Mar 24 17:49:33 2027 GMT Subject: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:75:5e:92:00:54:83:c2:bc:8a:2f:d9:38: ac:42:b3:3e:a1:e3:c6:d3:5c:57:34:57:b9:81:0c: cc:98:fc:76:09:59:22:ac:8f:31:86:ff:79:d7:de: dd:19:80:a8:d1:39:10:1c:5a:aa:87:4e:bb:da:d5: 50:b3:79:3e:26:2b:5e:c7:86:af:3a:1b:db:67:77: a1:8f:aa:b7:0f:cf:d1:d7:4b:96:b9:85:f0:59:d4: 62:a8:29:f3:f1:80:80:68:3c:e7:d3:b4:b6:a4:08: 25:80:d3:36:7c:77:6f:a0:59:fe:2b:fc:11:fd:0f: e5:3c:fd:3d:4f:2f:e1:9d:93:34:12:e8:7c:8b:bd: 1d:b0:0e:5b:9f:d9:5f:e0:6c:2b:c6:d0:4d:a1:8a: 98:14:58:a6:52:e3:d5:c6:77:f2:5a:cf:6c:d3:9e: fd:49:08:cf:80:9b:02:a4:67:79:16:c3:50:f2:64: 08:bf:ea:cc:88:2c:fa:0f:1a:05:20:22:d4:8b:8e: 65:84:2a:f9:b2:1a:5f:d2:f1:a2:05:e5:ed:ab:70: 75:bf:bb:d4:3d:79:94:40:65:dd:c7:8a:63:13:24: 48:d4:f0:14:0f:75:72:60:04:13:e4:7a:1a:82:9a: fc:10:a0:9f:e3:46:aa:b9:af:a9:ed:88:c9:ee:bf: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.144.0/22 187.45.144.0/20 189.84.144.0/20 IPv6: 2804:591c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28370 Signature Algorithm: sha256WithRSAEncryption 2e:c9:dc:54:cf:0f:7e:f5:0a:98:75:e4:ad:8c:9d:4e:1e:42: 31:ef:c3:4a:3b:63:1b:93:84:3a:7d:dd:b7:ad:87:af:ef:06: 9c:70:ff:a1:99:89:41:40:f4:81:0c:20:a3:12:bb:c8:0f:17: c7:80:e2:0e:16:d9:89:a7:27:1d:78:17:90:83:ad:68:8f:0f: 47:59:9a:df:90:9b:9f:21:c3:45:1c:c7:b2:bc:0d:5f:14:2d: 08:bd:71:c1:20:33:10:2d:aa:48:e3:71:b7:e2:cf:72:32:df: 30:31:5b:5d:3e:fc:ac:86:f3:68:fd:2e:e5:a3:05:07:a3:2a: 16:af:59:78:d5:40:fe:4b:21:b0:20:73:18:a1:08:2f:0c:48: f1:05:86:b1:df:a8:a4:00:be:cc:d5:ec:e0:de:c3:42:a4:d5: 65:c4:0e:da:8e:ed:cc:07:b9:fc:d9:6f:6b:09:50:30:8e:4a: 71:c1:02:76:0c:2a:1a:b5:22:2a:61:a5:be:bb:35:51:3d:cb: bc:f4:8d:29:e8:d3:22:72:67:d0:16:5d:8f:a7:2c:99:8f:32: f5:b4:24:4c:5b:0c:7c:57:6f:28:2e:19:31:ce:8b:b2:23:67: c0:51:22:aa:b6:dc:e7:29:c2:79:10:c6:df:b9:0a:ee:ea:c1: 61:37:29:40 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUTbf58A7zdSqjBYs8wX0I4zFydQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxNzQ0MzNaFw0yNzAzMjQxNzQ5MzNaMDMxMTAvBgNV BAMTKDMyQTkxNUJBNUE5NzU2OEE4Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljnVekgBUg8K8ii/ZOKxCsz6h 48bTXFc0V7mBDMyY/HYJWSKsjzGG/3nX3t0ZgKjRORAcWqqHTrva1VCzeT4mK17H hq86G9tnd6GPqrcPz9HXS5a5hfBZ1GKoKfPxgIBoPOfTtLakCCWA0zZ8d2+gWf4r /BH9D+U8/T1PL+GdkzQS6HyLvR2wDluf2V/gbCvG0E2hipgUWKZS49XGd/Jaz2zT nv1JCM+AmwKkZ3kWw1DyZAi/6syILPoPGgUgItSLjmWEKvmyGl/S8aIF5e2rcHW/ u9Q9eZRAZd3HimMTJEjU8BQPdXJgBBPkehqCmvwQoJ/jRqq5r6ntiMnuv3pZAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyqRW6WpdWiod4 kNVdwon/y2/uYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJn SkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZrRlIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hy Z0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEvMzJB OTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZDQjZGRUU2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLayQAwQEuy2QAwQEvVSQMA0EAgACMAcDBQAoBFkc MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm7SMA0GCSqGSIb3DQEBCwUAA4IBAQAu ydxUzw9+9QqYdeStjJ1OHkIx78NKO2Mbk4Q6fd23rYev7waccP+hmYlBQPSBDCCj ErvIDxfHgOIOFtmJpycdeBeQg61ojw9HWZrfkJufIcNFHMeyvA1fFC0IvXHBIDMQ LapI43G34s9yMt8wMVtdPvyshvNo/S7lowUHoyoWr1l41UD+SyGwIHMYoQgvDEjx BYax36ikAL7M1ezg3sNCpNVlxA7aju3MB7n82W9rCVAwjkpxwQJ2DCoatSIqYaW+ uzVRPcu89I0p6NMicmfQFl2PpyyZjzL1tCRMWwx8V28oLhkxzouyI2fAUSKqttzn KcJ5EMbfuQru6sFhNylA -----END CERTIFICATE-----Generated at Wed Mar 25 22:31:07 2026 by rpki-client