$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/38CA677C90C7FC7382D14DAB610FD6C570C655EA.cer File: 38CA677C90C7FC7382D14DAB610FD6C570C655EA.cer (raw, json) Hash identifier: eQf1o7Aw6TaJDIAhtC4JZYpwiGv1g2Y1eUz1q6Cs0OY= Subject key identifier: 38:CA:67:7C:90:C7:FC:73:82:D1:4D:AB:61:0F:D6:C5:70:C6:55:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2EA802C47599ADD8E7D21ED6E331445E078F0E4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/38CA677C90C7FC7382D14DAB610FD6C570C655EA.mft caRepository: rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 20:00:52 +0000 Certificate not after: Fri 19 Mar 2027 20:05:52 +0000 Subordinate resources: AS: 265314 IP: 168.90.52.0/22 IP: 2804:2df4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a8:02:c4:75:99:ad:d8:e7:d2:1e:d6:e3:31:44:5e:07:8f:0e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 20:00:52 2026 GMT Not After : Mar 19 20:05:52 2027 GMT Subject: CN=38CA677C90C7FC7382D14DAB610FD6C570C655EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:69:72:95:42:da:6d:4b:fa:05:d8:20:8c: 50:c3:b5:9d:a7:92:92:7f:73:3f:80:79:bb:a3:e4: 05:2e:dd:c1:93:23:7f:0d:f8:1a:40:dc:93:88:14: 5b:2c:0b:6c:5e:f1:32:88:d6:e6:ec:a7:df:44:dc: 41:83:dd:12:ac:42:df:ff:82:8a:d9:7f:80:54:92: 13:53:49:2f:34:a6:8d:48:d9:e5:c7:8b:26:e9:0c: db:22:1a:6c:b7:6c:bd:64:a1:93:8c:50:7e:e3:32: 8a:8d:9b:4b:3f:3d:68:eb:33:09:5f:c2:2b:7d:da: 98:51:2f:bf:d6:e7:d7:6d:42:14:a3:25:a0:be:72: 1a:f6:90:26:0b:8e:35:ca:39:ac:87:81:9e:59:41: c6:4e:14:62:39:6f:6b:b8:16:01:4f:14:79:b7:c6: c2:84:9c:fb:47:ee:84:6b:38:ff:00:33:ba:bf:ab: 83:90:54:c1:3e:eb:93:e4:8d:9d:6f:cd:21:2d:71: 9d:fb:61:92:74:7e:3f:1b:f9:26:a2:fd:4b:66:1b: da:d9:44:bb:ab:c3:a4:aa:2d:c6:a3:05:cd:7f:0c: 6b:cb:b2:eb:c0:62:cc:4d:ff:10:2f:94:2d:ca:24: be:37:c8:a5:eb:59:ed:1d:32:fe:c5:b5:b4:6b:45: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:CA:67:7C:90:C7:FC:73:82:D1:4D:AB:61:0F:D6:C5:70:C6:55:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/38CA677C90C7FC7382D14DAB610FD6C570C655EA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.52.0/22 IPv6: 2804:2df4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265314 Signature Algorithm: sha256WithRSAEncryption 13:69:a2:40:cf:c0:d8:bd:dd:1e:ac:1d:2f:f2:b5:f9:70:af: 51:d9:57:36:8c:2e:59:e3:af:01:d2:a3:68:bb:f5:97:f8:73: c5:36:1c:09:3d:11:a4:7a:fb:70:cf:40:07:82:92:09:65:71: 0b:47:ee:d6:c8:6e:1f:a3:1a:47:e5:8e:fa:66:07:0a:c2:1f: fe:e4:9b:39:74:1c:62:31:78:ed:37:fd:c6:d8:eb:3b:ba:95: 05:6c:47:a6:61:af:e8:b0:83:ec:5d:68:c5:1f:5d:29:0e:2c: 57:1f:47:0f:97:7c:2d:4c:0a:79:d7:08:92:a2:58:25:dc:56: 13:64:5c:11:e5:35:0e:cf:f3:63:b9:3e:84:57:11:55:21:e6: 44:58:38:e5:78:da:8a:eb:1d:1d:8a:8e:3c:69:33:3a:6e:f6: 3a:26:6e:ff:37:40:fe:1b:43:d4:0e:8f:7e:66:fc:28:03:2a: 5e:a6:c4:81:4a:12:f7:a6:0f:0c:7e:86:ed:ef:38:39:2e:9d: 4c:1a:06:85:1e:b5:3a:c9:81:52:7f:55:f5:0c:b6:e3:36:b2: db:40:89:06:86:dc:9b:c7:e9:79:74:6b:5f:73:a3:07:8d:15: 16:79:42:f6:a0:c4:0a:0f:8c:bb:c8:ee:05:27:13:af:d2:6b: 1a:c1:08:f9 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIULqgCxHWZrdjn0h7W4zFEXgePDkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAyMDAwNTJaFw0yNzAzMTkyMDA1NTJaMDMxMTAvBgNV BAMTKDM4Q0E2NzdDOTBDN0ZDNzM4MkQxNERBQjYxMEZENkM1NzBDNjU1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4S2lylULabUv6BdggjFDDtZ2n kpJ/cz+Aebuj5AUu3cGTI38N+BpA3JOIFFssC2xe8TKI1ubsp99E3EGD3RKsQt// gorZf4BUkhNTSS80po1I2eXHiybpDNsiGmy3bL1koZOMUH7jMoqNm0s/PWjrMwlf wit92phRL7/W59dtQhSjJaC+chr2kCYLjjXKOayHgZ5ZQcZOFGI5b2u4FgFPFHm3 xsKEnPtH7oRrOP8AM7q/q4OQVME+65PkjZ1vzSEtcZ37YZJ0fj8b+Sai/UtmG9rZ RLurw6SqLcajBc1/DGvLsuvAYsxN/xAvlC3KJL43yKXrWe0dMv7FtbRrRRrVAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4ymd8kMf8c4LR TathD9bFcMZV6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Q3 dFc2UFF3SmsxVUY0RVZjOFp2c0hHcWlIZkp5ZHp4RnZpUWlhck1Gby8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Q3 dFc2UFF3SmsxVUY0RVZjOFp2c0hHcWlIZkp5ZHp4RnZpUWlhck1Gby8wLzM4Q0E2 NzdDOTBDN0ZDNzM4MkQxNERBQjYxMEZENkM1NzBDNjU1RUEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqhaNDANBAIAAjAHAwUAKAQt9DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEDGIwDQYJKoZIhvcNAQELBQADggEBABNpokDPwNi93R6sHS/y tflwr1HZVzaMLlnjrwHSo2i79Zf4c8U2HAk9EaR6+3DPQAeCkgllcQtH7tbIbh+j GkfljvpmBwrCH/7kmzl0HGIxeO03/cbY6zu6lQVsR6Zhr+iwg+xdaMUfXSkOLFcf Rw+XfC1MCnnXCJKiWCXcVhNkXBHlNQ7P82O5PoRXEVUh5kRYOOV42orrHR2Kjjxp Mzpu9jombv83QP4bQ9QOj35m/CgDKl6mxIFKEvemDwx+hu3vODkunUwaBoUetTrJ gVJ/VfUMtuM2sttAiQaG3JvH6Xl0a19zoweNFRZ5QvagxAoPjLvI7gUnE6/SaxrB CPk= -----END CERTIFICATE-----Generated at Wed Mar 25 23:57:50 2026 by rpki-client