$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3AB14A2EC1AE79B87D36C01702E423E9706B51A1.cer File: 3AB14A2EC1AE79B87D36C01702E423E9706B51A1.cer (raw, json) Hash identifier: fgtIlQ/GLUZp0VN4/mKB8+cSh8o0YjQ4Mjwa0cqNGsw= Subject key identifier: 3A:B1:4A:2E:C1:AE:79:B8:7D:36:C0:17:02:E4:23:E9:70:6B:51:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 580A914AD81AD036A5F05FD713F5600FB08B2B51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3AB14A2EC1AE79B87D36C01702E423E9706B51A1.mft caRepository: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Apr 2026 19:06:36 +0000 Certificate not after: Wed 21 Apr 2027 19:11:36 +0000 Subordinate resources: AS: 61670 IP: 131.100.104.0/22 IP: 201.148.164.0/22 IP: 2804:1cb4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0a:91:4a:d8:1a:d0:36:a5:f0:5f:d7:13:f5:60:0f:b0:8b:2b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 19:06:36 2026 GMT Not After : Apr 21 19:11:36 2027 GMT Subject: CN=3AB14A2EC1AE79B87D36C01702E423E9706B51A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:9c:59:24:59:8d:82:32:3b:2d:c6:5b:9f: 09:46:d5:e7:59:40:a3:fe:a4:25:ab:2a:96:00:c5: 28:54:4f:d9:ef:49:a4:fd:39:b2:f2:7d:68:4c:3e: b6:fd:d3:cf:9e:11:55:44:fa:44:1b:08:69:f8:c5: 1a:2f:55:51:ca:5a:ad:a8:30:f1:26:07:93:b5:cb: 84:d6:7a:c3:b6:9c:11:d3:de:a9:4a:a6:69:94:61: 8f:af:4c:6c:2c:55:61:f2:2f:f3:df:fe:51:4e:27: 4d:de:f3:a3:50:69:ed:0b:84:9f:65:ba:24:3f:34: 55:51:6c:b2:79:01:23:30:28:2a:ad:93:b7:14:b9: 05:20:fa:4f:4c:f5:bd:67:d0:25:c6:46:37:9b:22: bf:d0:33:7d:c8:e4:48:59:67:e1:d7:af:3d:04:77: 23:e9:95:2f:ab:40:21:40:fa:86:98:08:c0:41:df: 7d:9a:47:ca:59:61:c6:6a:3b:80:f1:d0:0a:88:c8: c0:96:3a:e7:a5:17:da:09:30:60:6a:3c:ae:e3:f1: f1:d0:63:59:14:51:a1:b8:02:b5:b7:72:af:8b:91: 29:bf:68:8c:21:fa:9e:ff:58:69:85:09:14:9e:0a: 00:85:ef:f6:dc:c1:f5:40:ef:70:22:17:b2:d4:62: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:B1:4A:2E:C1:AE:79:B8:7D:36:C0:17:02:E4:23:E9:70:6B:51:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3AB14A2EC1AE79B87D36C01702E423E9706B51A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.104.0/22 201.148.164.0/22 IPv6: 2804:1cb4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61670 Signature Algorithm: sha256WithRSAEncryption 73:5d:f3:59:49:36:7e:1b:fc:62:d9:86:94:fa:35:88:5b:e3: 41:91:ce:f6:72:92:34:29:97:3b:af:c9:74:d6:a6:af:84:0f: 52:a5:a0:ec:da:dd:fd:80:ff:60:01:09:58:4b:b5:14:53:97: 20:74:19:95:8c:95:b5:9f:76:1c:0f:2e:28:80:e8:36:5f:64: 26:28:ea:09:8a:a8:54:65:b0:b0:50:18:f5:e2:f6:fd:f3:88: dd:0c:aa:fc:b9:4c:37:e5:25:8c:6f:be:c8:ee:44:6a:db:3e: 12:06:66:ad:d6:4c:17:fe:6c:0c:56:33:a3:b5:ae:c7:2c:5c: 0d:5c:85:1e:70:51:75:c7:d6:94:06:0a:95:7e:f1:0a:f9:0a: 60:98:15:5d:ba:2a:51:d0:86:2b:02:08:ba:7a:36:44:36:7c: a0:ab:10:96:c7:ea:fb:e2:4b:44:1f:96:0d:be:56:91:8c:3b: 53:dc:75:fe:a9:15:43:62:2b:ec:c2:d8:36:2b:3f:9e:c4:03: 92:60:55:e9:9b:65:75:a8:3b:7b:12:08:17:89:73:c2:67:57: 6d:6e:b7:77:d9:2c:cd:2e:2a:aa:bd:2c:04:6a:53:ea:60:a5: fe:c3:f9:e3:fb:88:86:ef:24:c6:6d:3f:28:10:bc:04:5f:fb: 4a:8e:a1:f4 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWAqRStga0Dal8F/XE/VgD7CLK1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjIxOTA2MzZaFw0yNzA0MjExOTExMzZaMDMxMTAvBgNV BAMTKDNBQjE0QTJFQzFBRTc5Qjg3RDM2QzAxNzAyRTQyM0U5NzA2QjUxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqpxZJFmNgjI7LcZbnwlG1edZ QKP+pCWrKpYAxShUT9nvSaT9ObLyfWhMPrb908+eEVVE+kQbCGn4xRovVVHKWq2o MPEmB5O1y4TWesO2nBHT3qlKpmmUYY+vTGwsVWHyL/Pf/lFOJ03e86NQae0LhJ9l uiQ/NFVRbLJ5ASMwKCqtk7cUuQUg+k9M9b1n0CXGRjebIr/QM33I5EhZZ+HXrz0E dyPplS+rQCFA+oaYCMBB332aR8pZYcZqO4Dx0AqIyMCWOuelF9oJMGBqPK7j8fHQ Y1kUUaG4ArW3cq+LkSm/aIwh+p7/WGmFCRSeCgCF7/bcwfVA73AiF7LUYn7TAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6sUouwa55uH02 wBcC5CPpcGtRoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVo Tm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlkcVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV aE5tQ2ZwVlVCQUNtak1MOG13OUdoVThzWk5SV256YkJ0QmlTSkRZZHFaLzAvM0FC MTRBMkVDMUFFNzlCODdEMzZDMDE3MDJFNDIzRTk3MDZCNTFBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg2RoAwQCyZSkMA0EAgACMAcDBQAoBBy0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDw5jANBgkqhkiG9w0BAQsFAAOCAQEAc13zWUk2 fhv8YtmGlPo1iFvjQZHO9nKSNCmXO6/JdNamr4QPUqWg7Nrd/YD/YAEJWEu1FFOX IHQZlYyVtZ92HA8uKIDoNl9kJijqCYqoVGWwsFAY9eL2/fOI3Qyq/LlMN+UljG++ yO5Eats+EgZmrdZMF/5sDFYzo7WuxyxcDVyFHnBRdcfWlAYKlX7xCvkKYJgVXboq UdCGKwIIuno2RDZ8oKsQlsfq++JLRB+WDb5WkYw7U9x1/qkVQ2Ir7MLYNis/nsQD kmBV6Ztldag7exIIF4lzwmdXbW63d9kszS4qqr0sBGpT6mCl/sP54/uIhu8kxm0/ KBC8BF/7So6h9A== -----END CERTIFICATE-----Generated at Wed May 13 15:24:08 2026 by rpki-client