$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer File: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer (raw, json) Hash identifier: BBDmzhR8Eu6SjLzcIt9BuaLAErrYzXpVbFJZjCWjxPw= Subject key identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6105C822DA7442F87037AEA308EB8B3D203BEFCF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft caRepository: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Jul 2026 17:15:14 +0000 Certificate not after: Wed 14 Jul 2027 17:20:14 +0000 Subordinate resources: AS: 273517 IP: 168.0.192.0/22 IP: 2804:8fdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:05:c8:22:da:74:42:f8:70:37:ae:a3:08:eb:8b:3d:20:3b:ef:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 15 17:15:14 2026 GMT Not After : Jul 14 17:20:14 2027 GMT Subject: CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:fe:f5:16:2c:4e:30:3d:20:17:e6:8a:4a: 8c:2f:09:6b:5c:ad:39:ab:6c:b1:e7:43:64:3b:1a: a6:11:4a:0f:13:4e:6f:c6:23:1c:33:b3:0c:3f:e1: c2:2a:67:68:1b:19:5d:bc:3d:ff:d7:95:81:8a:ca: 3f:98:52:fb:66:df:b4:e6:b3:b7:dd:b4:ee:3e:3e: 26:5c:41:cf:6b:2d:dd:46:c5:f2:e7:8f:04:71:c7: 9c:28:8b:84:ea:ac:83:37:70:da:58:89:43:77:9c: b8:e2:aa:fd:1d:84:58:00:41:4c:16:67:4c:01:d8: 5b:da:83:d1:cd:65:3a:66:b9:f0:6e:44:36:91:e6: c5:28:9d:08:d1:a0:71:bc:ea:ba:e2:9f:9b:24:22: 3e:c8:56:32:69:b8:d5:f2:15:71:16:bc:16:48:13: c5:b3:d4:1b:80:90:fe:90:c6:cb:a0:e0:43:2c:74: e3:a6:ab:b0:db:91:bc:51:fe:0f:f6:99:7e:6a:43: d4:b3:0f:ab:1a:1d:53:53:bd:59:4c:f3:24:c2:6d: aa:69:ba:a0:a5:b9:d9:f2:21:98:2d:c8:bc:bc:f1: ed:8f:49:db:d2:04:0e:fb:bd:69:68:12:72:1f:fd: 87:52:e9:c3:0f:70:33:b6:05:e8:ba:02:35:26:26: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.192.0/22 IPv6: 2804:8fdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273517 Signature Algorithm: sha256WithRSAEncryption b5:5c:b5:60:f1:77:79:ec:f1:dc:4b:35:3d:4b:9b:c0:ac:59: c2:f7:6d:17:3f:df:a8:33:07:44:bb:d2:e8:10:68:99:34:bd: b0:c5:b4:6b:77:4f:59:47:d0:01:90:9d:35:19:5d:c5:9a:00: 81:9b:9c:bd:00:6d:f1:77:ea:7c:b1:3e:f4:4a:38:9f:d3:51: 96:76:bd:85:ce:f8:33:e7:81:2f:06:f4:89:23:c9:be:93:16: e6:98:a9:1f:0b:e9:c9:1e:5b:04:a4:e1:dc:34:fd:59:2c:24: 46:3f:d2:4c:a9:30:ff:28:e9:32:6f:09:b7:13:45:49:c6:26: e9:fd:4f:67:90:5e:9e:39:0c:07:c7:0a:85:5c:e0:9f:99:f0: 4a:f3:fc:70:f4:37:95:d0:50:ca:d9:8c:b1:df:f1:92:9f:c6: 58:99:08:b0:2b:55:81:d0:aa:74:f6:49:6a:cf:04:bd:bb:5b: e7:36:f1:3a:72:cd:4f:fe:ee:69:ca:be:85:29:e0:1a:e0:23: d9:0c:b5:bd:5b:9e:61:fa:0f:51:ce:95:24:39:28:57:6e:11: db:9b:26:c1:a4:8e:47:d7:90:99:2d:de:77:ad:60:ab:7a:ea: fe:14:cc:7d:d2:5e:36:e3:b7:ca:97:e0:bc:a8:23:f7:b2:2a: 8c:1a:05:35 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYQXIItp0QvhwN66jCOuLPSA7788wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTUxNzE1MTRaFw0yNzA3MTQxNzIwMTRaMDMxMTAvBgNV BAMTKDQzNkFFODE5MzlCMjNDMTI4MUU0OENBNUI1RThFMDQxRUFEMzRGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0v71FixOMD0gF+aKSowvCWtc rTmrbLHnQ2Q7GqYRSg8TTm/GIxwzsww/4cIqZ2gbGV28Pf/XlYGKyj+YUvtm37Tm s7fdtO4+PiZcQc9rLd1GxfLnjwRxx5woi4TqrIM3cNpYiUN3nLjiqv0dhFgAQUwW Z0wB2Fvag9HNZTpmufBuRDaR5sUonQjRoHG86rrin5skIj7IVjJpuNXyFXEWvBZI E8Wz1BuAkP6Qxsug4EMsdOOmq7DbkbxR/g/2mX5qQ9SzD6saHVNTvVlM8yTCbapp uqCludnyIZgtyLy88e2PSdvSBA77vWloEnIf/YdS6cMPcDO2Bei6AjUmJuL5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDaugZObI8EoHk jKW16OBB6tNP3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTg5 YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRrQlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E4 OWJTVkR3TnhpZVBONk04QlNKREhNVkgzVXBnWWpGeFJuU0ZaaUU0a0JYLzAvNDM2 QUU4MTkzOUIyM0MxMjgxRTQ4Q0E1QjVFOEUwNDFFQUQzNEZERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqADAMA0EAgACMAcDBQAoBI/cMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQsbTANBgkqhkiG9w0BAQsFAAOCAQEAtVy1YPF3eezx3Es1 PUubwKxZwvdtFz/fqDMHRLvS6BBomTS9sMW0a3dPWUfQAZCdNRldxZoAgZucvQBt 8XfqfLE+9Eo4n9NRlna9hc74M+eBLwb0iSPJvpMW5pipHwvpyR5bBKTh3DT9WSwk Rj/STKkw/yjpMm8JtxNFScYm6f1PZ5BenjkMB8cKhVzgn5nwSvP8cPQ3ldBQytmM sd/xkp/GWJkIsCtVgdCqdPZJas8Evbtb5zbxOnLNT/7uacq+hSngGuAj2Qy1vVue YfoPUc6VJDkoV24R25smwaSOR9eQmS3ed61gq3rq/hTMfdJeNuO3ypfgvKgj97Iq jBoFNQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:46:20 2026 by rpki-client