$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer File: 413AC88212333C28246B2D35C853E50D0EAA55DC.cer (raw, json) Hash identifier: LMtUmZQ08g6As0XwacB3mJJVaWOGKkYt52hj7jniDTM= Subject key identifier: 41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D209ACEEDB06475F6FCEB31593707362AEE8C93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.mft caRepository: rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 15:23:09 +0000 Certificate not after: Mon 19 Apr 2027 15:28:09 +0000 Subordinate resources: AS: 53238 IP: 177.10.160.0/21 IP: 191.5.176.0/20 IP: 2804:2fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:9a:ce:ed:b0:64:75:f6:fc:eb:31:59:37:07:36:2a:ee:8c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 20 15:23:09 2026 GMT Not After : Apr 19 15:28:09 2027 GMT Subject: CN=413AC88212333C28246B2D35C853E50D0EAA55DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:60:9f:26:92:c6:88:f3:b1:e3:d3:2c:61: da:93:85:d3:33:b3:ca:c6:8b:e8:d5:69:4b:fd:d8: 28:db:7c:0e:d5:3a:c7:19:2d:79:f2:6e:47:e8:ea: 62:0e:1f:28:a3:45:6a:46:e2:de:a0:63:64:18:b8: c8:aa:9e:38:e9:eb:a1:b6:aa:cd:d0:f9:f4:90:91: 39:7d:09:3b:57:0b:bf:0d:6b:be:d2:b9:52:94:20: 69:3f:c8:ee:40:a3:00:c8:d3:be:97:af:81:f3:94: fc:07:6d:1c:4e:f8:78:50:d9:1e:ab:12:5c:58:34: c2:12:5a:9e:4a:e4:3f:af:3b:e7:4e:d7:4e:9d:5d: 14:f8:ba:00:47:79:8f:85:09:4b:dd:15:17:a2:72: 3f:35:61:82:41:45:f4:0c:9b:9b:58:f1:d0:9e:97: e6:8e:6d:a7:d6:5d:76:96:0f:c4:02:67:94:ab:6d: f5:38:eb:7d:c2:55:8c:ad:5a:72:50:e1:ca:98:50: 57:fe:94:ea:e2:d5:3b:8d:5d:d3:ef:9d:9b:b0:2d: e2:af:45:e7:9b:92:ac:79:fd:04:52:87:1a:d7:ab: e6:e3:07:61:cd:7c:b2:7d:89:c4:9e:cd:42:82:b5: bd:9d:b7:ed:e5:f5:24:3f:cd:6b:b8:e3:f2:0b:1a: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.10.160.0/21 191.5.176.0/20 IPv6: 2804:2fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53238 Signature Algorithm: sha256WithRSAEncryption cf:f3:2f:52:a5:d5:16:73:d5:4f:ce:67:f6:78:ac:f4:02:e8: 3a:b4:f7:46:7a:8a:55:e8:40:4b:a2:8b:a0:78:85:1d:2e:18: 4b:5d:fd:f5:95:dc:9d:9b:cb:b6:bb:21:5a:ac:a9:7f:5d:b8: 6e:ab:e3:7d:62:a7:f9:15:1d:ee:97:f1:ac:0a:53:ef:13:b4: 67:26:93:65:37:41:c1:c4:3e:4f:64:08:a6:16:ce:65:08:6e: a5:be:c3:88:db:60:bd:e1:0b:47:45:f3:00:7d:ac:da:84:f4: 06:b5:2a:b0:4a:08:5d:3f:03:3e:fa:b4:11:4b:f5:61:b8:ca: b2:cd:f0:52:d1:86:b5:01:91:24:04:0b:d4:a0:5d:04:65:97: 97:cd:9e:9b:ce:ec:b0:34:bf:f2:66:ef:ad:ce:72:0e:c4:8d: a2:8a:7c:9e:73:1c:98:8e:dc:09:13:6b:f5:eb:fb:6f:e5:1e: 44:12:4a:dc:eb:c7:b8:41:a1:78:b9:2f:cb:7c:bb:1f:b0:de: 19:a6:bb:ab:eb:ff:41:a1:b0:82:1a:02:a8:35:d6:c5:0b:51: 60:d2:6e:43:99:d3:ef:18:14:4d:3d:ec:d1:c2:1d:86:ee:62: 22:02:aa:e8:6d:d4:f0:57:ef:ea:2f:50:34:14:4b:aa:b7:c9: d3:42:d1:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfSCazu2wZHX2/OsxWTcHNirujJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjAxNTIzMDlaFw0yNzA0MTkxNTI4MDlaMDMxMTAvBgNV BAMTKDQxM0FDODgyMTIzMzNDMjgyNDZCMkQzNUM4NTNFNTBEMEVBQTU1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbimCfJpLGiPOx49MsYdqThdMz s8rGi+jVaUv92CjbfA7VOscZLXnybkfo6mIOHyijRWpG4t6gY2QYuMiqnjjp66G2 qs3Q+fSQkTl9CTtXC78Na77SuVKUIGk/yO5AowDI076Xr4HzlPwHbRxO+HhQ2R6r ElxYNMISWp5K5D+vO+dO106dXRT4ugBHeY+FCUvdFReicj81YYJBRfQMm5tY8dCe l+aObafWXXaWD8QCZ5SrbfU4633CVYytWnJQ4cqYUFf+lOri1TuNXdPvnZuwLeKv Reebkqx5/QRShxrXq+bjB2HNfLJ9icSezUKCtb2dt+3l9SQ/zWu44/ILGvWdAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBOsiCEjM8KCRr LTXIU+UNDqpV3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGFX OU15VHZXaUtDdERQYjNKNHBhMUUyeG9EVzhvTnU5OGpVN0F3cDRxWTEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhh VzlNeVR2V2lLQ3REUGIzSjRwYTFFMnhvRFc4b051OThqVTdBd3A0cVkxLzAvNDEz QUM4ODIxMjMzM0MyODI0NkIyRDM1Qzg1M0U1MEQwRUFBNTVEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsQqgAwQEvwWwMA0EAgACMAcDBQAoBAL8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDP9jANBgkqhkiG9w0BAQsFAAOCAQEAz/MvUqXV FnPVT85n9nis9ALoOrT3RnqKVehAS6KLoHiFHS4YS1399ZXcnZvLtrshWqypf124 bqvjfWKn+RUd7pfxrApT7xO0ZyaTZTdBwcQ+T2QIphbOZQhupb7DiNtgveELR0Xz AH2s2oT0BrUqsEoIXT8DPvq0EUv1YbjKss3wUtGGtQGRJAQL1KBdBGWXl82em87s sDS/8mbvrc5yDsSNoop8nnMcmI7cCRNr9ev7b+UeRBJK3OvHuEGheLkvy3y7H7De Gaa7q+v/QaGwghoCqDXWxQtRYNJuQ5nT7xgUTT3s0cIdhu5iIgKq6G3U8Ffv6i9Q NBRLqrfJ00LRMQ== -----END CERTIFICATE-----Generated at Wed May 13 13:45:53 2026 by rpki-client