$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer File: 3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer (raw, json) Hash identifier: /cKEUyk83eX6U4chdIdtDyFmgxG10ufjRc7ca1Dip2Y= Subject key identifier: 3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38D037E4D3795F5F0930C8528F268CA82636F950 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft caRepository: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 16 Jul 2026 18:50:31 +0000 Certificate not after: Thu 15 Jul 2027 18:55:31 +0000 Subordinate resources: AS: 267574 IP: 45.70.28.0/22 IP: 2804:4380::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 22:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d0:37:e4:d3:79:5f:5f:09:30:c8:52:8f:26:8c:a8:26:36:f9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 16 18:50:31 2026 GMT Not After : Jul 15 18:55:31 2027 GMT Subject: CN=3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:e7:53:83:df:db:d9:6f:6a:9a:59:a8:26: 26:48:1f:ed:64:e1:a6:fe:42:75:31:77:5b:af:b8: 17:94:8a:f4:62:c4:58:68:ee:da:4c:7f:ca:a3:45: c6:a5:75:c2:cd:74:37:5d:ac:bb:de:bd:1c:15:d2: 14:8c:60:26:c1:83:04:b9:3e:fc:db:41:6a:df:9d: 71:a8:8e:89:4e:16:68:bc:60:bb:1a:75:57:29:49: 6f:fb:0f:df:59:64:e5:80:ed:9c:fc:8b:7a:29:18: 8f:49:f8:56:c5:2b:ea:1c:01:81:c0:a8:f0:f8:78: 2e:95:9f:b0:ab:2b:38:6a:8e:f6:5d:08:bc:34:44: eb:3f:76:53:68:55:29:4d:b5:44:ba:75:1a:d6:ef: 43:9c:72:73:78:92:e4:76:24:50:e7:a7:bd:08:ed: 8d:15:84:b9:da:27:32:33:8d:81:25:55:5f:39:f2: 59:01:ca:df:67:e9:0e:66:f8:88:6a:a1:36:9b:11: ac:1e:09:b5:a1:8b:a9:67:6e:ec:8f:2d:7c:c4:b8: 0b:e3:ca:69:b7:c4:6e:b9:56:69:e8:5b:46:b7:ec: 4b:09:e1:41:ae:9d:cd:04:75:a1:d7:66:cb:5c:6e: 80:b7:a1:7c:e9:45:85:ca:96:8d:07:f7:06:7e:29: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.28.0/22 IPv6: 2804:4380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267574 Signature Algorithm: sha256WithRSAEncryption d0:fc:21:6b:9e:22:dd:d3:09:f8:36:e5:10:1f:fa:4f:c4:fb: 3c:11:db:6a:86:79:39:62:f5:f5:7f:02:76:52:1a:08:c5:4c: 03:2c:35:2e:8e:54:06:a7:21:9e:4e:5d:12:67:a7:91:72:d3: 57:e8:3d:a8:cc:12:ee:76:2d:fc:cb:5e:df:59:85:be:d3:62: a1:94:97:d7:e6:63:e8:4a:f1:34:ed:e4:49:74:e6:1d:21:84: be:ae:9d:c0:35:30:83:20:6d:a8:73:27:35:06:c9:90:b0:c7: cd:9a:d2:27:e8:df:ca:97:8f:32:7e:fd:a0:8e:84:05:42:4a: ee:07:9e:94:84:f7:ee:30:60:b8:91:ed:97:1d:42:8e:19:53: b3:e0:f3:e9:ba:db:78:b8:25:d2:bb:5c:1f:71:06:bb:03:6a: d9:6c:3b:f1:90:3f:c7:94:53:cb:e6:e3:72:c3:61:ba:49:f3: b1:4a:d7:9c:85:a2:30:0b:e5:37:a6:3e:a3:a7:c4:c6:44:f9: 87:92:16:f2:8e:32:6d:b2:89:cd:7a:93:ed:50:92:28:1f:ab: 03:59:36:5d:73:9d:ea:89:56:49:75:6f:c2:59:4a:8d:db:48: 28:e5:f8:14:e0:10:eb:2a:3f:6c:03:03:d5:85:9a:1f:9f:00: 6e:d3:5c:4c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUONA35NN5X18JMMhSjyaMqCY2+VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTYxODUwMzFaFw0yNzA3MTUxODU1MzFaMDMxMTAvBgNV BAMTKDNENUM4NDM3RTc1OUI1M0Y5N0RDMkY1MTM0REFEOEFGRkIyODdFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJudTg9/b2W9qmlmoJiZIH+1k 4ab+QnUxd1uvuBeUivRixFho7tpMf8qjRcaldcLNdDddrLvevRwV0hSMYCbBgwS5 PvzbQWrfnXGojolOFmi8YLsadVcpSW/7D99ZZOWA7Zz8i3opGI9J+FbFK+ocAYHA qPD4eC6Vn7CrKzhqjvZdCLw0ROs/dlNoVSlNtUS6dRrW70OccnN4kuR2JFDnp70I 7Y0VhLnaJzIzjYElVV858lkByt9n6Q5m+IhqoTabEaweCbWhi6lnbuyPLXzEuAvj ymm3xG65VmnoW0a37EsJ4UGunc0EdaHXZstcboC3oXzpRYXKlo0H9wZ+KbU5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9XIQ351m1P5fc L1E02tiv+yh+2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN01I ZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdN SGZYa3VuQ2lRQnJSU0ZQNTlvajFVcjhMWHNCR3hCZ3Exc0dZVDRNZk5wLzAvM0Q1 Qzg0MzdFNzU5QjUzRjk3REMyRjUxMzREQUQ4QUZGQjI4N0VEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUYcMA0EAgACMAcDBQAoBEOAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVNjANBgkqhkiG9w0BAQsFAAOCAQEA0Pwha54i3dMJ+Dbl EB/6T8T7PBHbaoZ5OWL19X8CdlIaCMVMAyw1Lo5UBqchnk5dEmenkXLTV+g9qMwS 7nYt/Mte31mFvtNioZSX1+Zj6ErxNO3kSXTmHSGEvq6dwDUwgyBtqHMnNQbJkLDH zZrSJ+jfypePMn79oI6EBUJK7geelIT37jBguJHtlx1CjhlTs+Dz6brbeLgl0rtc H3EGuwNq2Ww78ZA/x5RTy+bjcsNhuknzsUrXnIWiMAvlN6Y+o6fExkT5h5IW8o4y bbKJzXqT7VCSKB+rA1k2XXOd6olWSXVvwllKjdtIKOX4FOAQ6yo/bAMD1YWaH58A btNcTA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:00 2026 by rpki-client