$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer (raw, json) Hash identifier: ZvBcHcBiAmqOWwi2nE3JbwofTaq7aiGc8Z3SS9AuQag= Subject key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 699D02ACE6251F7AB13C0677401B844FE383E16E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft caRepository: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 Oct 2026 13:08:25 +0000 Certificate not after: Sat 09 Oct 2027 13:13:25 +0000 Subordinate resources: AS: 53138 IP: 177.53.224.0/21 IP: 186.192.240.0/20 IP: 2804:140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:02:ac:e6:25:1f:7a:b1:3c:06:77:40:1b:84:4f:e3:83:e1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 13:08:25 2026 GMT Not After : Oct 9 13:13:25 2027 GMT Subject: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:cd:4d:13:23:35:f2:e3:fb:70:2a:b7:7d: 9c:29:33:30:7d:73:85:34:ab:ef:f9:00:a4:01:99: 38:15:74:47:09:39:7b:04:e7:26:e2:a4:68:92:c4: 43:09:ec:67:b8:ab:64:a5:74:98:8a:64:95:40:ec: 43:18:81:2b:8c:96:d2:4b:4c:0d:c5:db:97:e8:44: 57:7c:b8:fe:5c:43:11:02:34:d7:fd:65:0e:2d:0f: 4d:d1:e4:19:89:74:ee:a8:d5:05:9d:5e:31:14:5c: 64:e2:92:75:6d:f1:88:cd:e3:ee:95:21:61:ba:20: b7:1e:2a:2d:95:7c:db:0d:ff:fd:39:0d:4d:bf:ac: 1c:5d:23:0b:cc:73:8a:e6:f6:a2:eb:bc:94:d8:59: 33:9f:ad:60:31:a6:94:c3:33:fb:e5:67:f7:3e:d5: fe:e6:cd:a7:77:05:95:7c:a6:a3:84:d1:70:58:d9: ad:82:b3:7b:0b:f7:59:65:d0:ae:32:8d:e2:0a:61: 27:6a:1a:e3:41:e8:5e:43:84:e1:fc:6a:61:7c:fa: b8:d2:7d:6e:44:7d:5d:7c:e1:96:03:50:6a:9d:07: a4:6e:6d:fc:29:89:df:de:d3:30:71:32:f5:7a:ae: 0d:64:b4:48:85:52:05:07:98:4c:2f:d2:e3:4c:eb: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.224.0/21 186.192.240.0/20 IPv6: 2804:140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53138 Signature Algorithm: sha256WithRSAEncryption 30:76:5b:42:25:e4:8a:3b:6e:28:1c:50:2b:b4:ac:17:8a:c9: 1c:e5:ef:ee:42:ed:d2:af:2c:fd:ef:05:00:7d:20:51:1d:a4: 0d:ab:d0:65:8d:bf:60:14:4a:c4:a3:03:ee:9d:8a:1b:cd:cd: d4:7d:be:13:c5:cc:7d:0f:73:81:35:4e:43:b1:3c:9d:25:f2: 63:a7:99:47:5d:78:d7:91:a1:3a:ca:aa:c7:a4:c1:c3:9a:11: d1:ad:e7:09:3e:3f:65:dc:d3:71:7a:c2:65:38:26:cf:74:9d: ca:15:c4:50:45:1a:e2:1a:2b:f9:5a:6e:f2:df:76:e3:9f:01: 8a:3a:ea:5b:a8:3f:f7:9f:1a:af:f8:55:49:2e:e8:69:40:4e: 5b:25:ad:5c:a8:a2:6a:e3:29:2f:5b:40:bf:05:ae:7e:1d:18: 17:ed:af:b3:30:4b:dd:d1:6b:02:a8:12:bd:a0:15:e2:2f:18: a2:6b:87:b1:74:63:1d:65:81:99:f1:da:32:d1:c5:ee:84:23: 44:1a:d4:ab:d9:03:b3:e3:63:79:84:10:ec:7f:3d:95:66:99: 31:64:22:d9:fc:76:54:64:a6:50:35:43:e6:15:d4:e0:bf:5c: 80:b9:30:d6:e1:5e:9e:35:7b:3e:ee:91:8a:c8:0c:8a:6a:cc: 32:f5:63:6e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaZ0CrOYlH3qxPAZ3QBuET+OD4W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTAxMzA4MjVaFw0yNzEwMDkxMzEzMjVaMDMxMTAvBgNV BAMTKDM5MTdFNEJCQjREMUZEOTk0MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gs1NEyM18uP7cCq3fZwpMzB9 c4U0q+/5AKQBmTgVdEcJOXsE5ybipGiSxEMJ7Ge4q2SldJiKZJVA7EMYgSuMltJL TA3F25foRFd8uP5cQxECNNf9ZQ4tD03R5BmJdO6o1QWdXjEUXGTiknVt8YjN4+6V IWG6ILceKi2VfNsN//05DU2/rBxdIwvMc4rm9qLrvJTYWTOfrWAxppTDM/vlZ/c+ 1f7mzad3BZV8pqOE0XBY2a2Cs3sL91ll0K4yjeIKYSdqGuNB6F5DhOH8amF8+rjS fW5EfV184ZYDUGqdB6Rubfwpid/e0zBxMvV6rg1ktEiFUgUHmEwv0uNM6163AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5F+S7tNH9mUAO 2YyYoyOtqrOJdzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFlY cTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RZ WHEzQ0pLMzJHaVhxR2JZU01rbWtlMkZNMnhmNEZ4VmVnbjc1b05CZGtHLzAvMzkx N0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURBQUIzODk3Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsTXgAwQEusDwMA0EAgACMAcDBQAoBAFAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPkjANBgkqhkiG9w0BAQsFAAOCAQEAMHZbQiXk ijtuKBxQK7SsF4rJHOXv7kLt0q8s/e8FAH0gUR2kDavQZY2/YBRKxKMD7p2KG83N 1H2+E8XMfQ9zgTVOQ7E8nSXyY6eZR11415GhOsqqx6TBw5oR0a3nCT4/ZdzTcXrC ZTgmz3SdyhXEUEUa4hor+Vpu8t92458BijrqW6g/958ar/hVSS7oaUBOWyWtXKii auMpL1tAvwWufh0YF+2vszBL3dFrAqgSvaAV4i8YomuHsXRjHWWBmfHaMtHF7oQj RBrUq9kDs+NjeYQQ7H89lWaZMWQi2fx2VGSmUDVD5hXU4L9cgLkw1uFenjV7Pu6R isgMimrMMvVjbg== -----END CERTIFICATE-----Generated at Sat Oct 10 16:34:35 2026 by rpki-client