$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer File: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer (raw, json) Hash identifier: dwgX7LVhChyLmNeF660JUs92M4B1kc5zFybsqB+rPLs= Subject key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0ADEFDC0E148D4B1DB221BFA5967C28B8B920705 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft caRepository: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 13 May 2026 03:44:46 +0000 Certificate not after: Wed 12 May 2027 03:49:46 +0000 Subordinate resources: AS: 263582 IP: 131.255.204.0/22 IP: 168.196.80.0/22 IP: 179.109.80.0/21 IP: 2804:f60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:de:fd:c0:e1:48:d4:b1:db:22:1b:fa:59:67:c2:8b:8b:92:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 13 03:44:46 2026 GMT Not After : May 12 03:49:46 2027 GMT Subject: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:ff:d2:c7:1e:7c:27:f7:ac:33:65:8d:e0: d5:f1:51:8f:68:ed:66:2c:69:d6:e8:3d:83:08:9d: 01:9a:02:3e:51:cd:ce:c3:01:67:67:c1:fd:71:da: 99:ca:b0:1b:f8:8e:a0:25:1c:86:c0:6c:d9:dd:6a: 10:38:8b:9a:97:70:81:db:2d:04:09:2d:f5:57:f1: 5f:d0:16:a8:16:bc:0b:74:ff:cc:72:fe:b7:fd:4e: 1e:9b:5d:ad:5d:24:17:50:b1:2e:72:18:1c:66:3c: 98:49:28:9f:8b:4e:0a:ab:02:ae:02:f5:4f:8a:8e: 6a:a2:c1:14:f9:bd:d1:59:44:50:ce:0d:15:7b:63: 53:a4:24:aa:f2:22:c3:d1:f8:90:c2:38:65:c5:15: 43:99:f2:78:c6:a4:b4:5b:4b:60:e8:25:75:c2:64: b2:b7:e1:90:5e:96:c7:5f:98:db:3f:3c:a8:b5:7a: 93:cf:21:b5:12:45:64:0c:05:31:a3:10:26:3c:cc: 40:7d:11:eb:29:7f:32:ec:60:77:9e:9f:e7:63:b6: 26:ed:ae:f7:2c:2d:64:f5:bb:88:06:40:40:4c:6a: f3:ec:14:99:ea:99:92:47:53:09:99:50:38:4c:ec: ce:9b:be:c8:a1:1b:30:8e:78:c8:36:6b:8d:44:16: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.204.0/22 168.196.80.0/22 179.109.80.0/21 IPv6: 2804:f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263582 Signature Algorithm: sha256WithRSAEncryption 96:b5:12:a4:1a:cb:f6:71:ce:de:78:41:82:41:c8:7d:91:a9: a2:92:b2:fb:4b:82:82:8c:b4:88:d6:9a:6e:e0:98:00:84:65: 60:0d:66:e0:6d:76:a8:67:7c:f0:5d:9e:13:bc:cb:1b:c4:8d: ba:1b:43:e3:2f:34:12:e8:d1:8e:6b:1b:ca:d7:7c:f6:07:ca: 78:e3:73:e4:09:b9:9b:64:67:4a:64:b4:b5:6c:b7:14:c7:4a: 09:8b:2e:ae:e4:e4:30:04:2a:a8:40:11:3b:10:b2:4c:74:83: ee:6b:b0:28:11:bd:ef:65:07:07:c3:1a:b2:9a:ce:56:41:b9: 8c:22:bc:0e:df:20:95:a6:22:5e:07:92:75:af:6e:0d:4d:63: fe:bb:4f:24:34:f3:48:07:6c:b0:d8:e1:32:af:3c:d2:cc:9d: 20:06:c7:7c:8a:0d:57:bc:90:e1:1d:23:26:b0:6a:d8:f6:3f: 30:61:ae:78:42:cc:12:e1:86:29:d7:d3:83:76:ee:04:2d:20: 45:d5:af:1e:25:4d:b7:f4:ce:ba:11:50:69:34:d4:d5:bb:f8: 52:e5:87:e5:42:b9:a4:01:50:11:5c:4c:9e:f4:92:8f:14:d1: 8c:22:fc:ec:8d:ce:76:4a:0a:24:64:ab:03:16:87:3b:d1:7c: c6:98:af:b4 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUCt79wOFI1LHbIhv6WWfCi4uSBwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTMwMzQ0NDZaFw0yNzA1MTIwMzQ5NDZaMDMxMTAvBgNV BAMTKDQzNzMwMjFBMTAxOTUzN0MyQTlEODRGRjAzNzIwQjBFQ0Y0RUJCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsf//Sxx58J/esM2WN4NXxUY9o 7WYsadboPYMInQGaAj5Rzc7DAWdnwf1x2pnKsBv4jqAlHIbAbNndahA4i5qXcIHb LQQJLfVX8V/QFqgWvAt0/8xy/rf9Th6bXa1dJBdQsS5yGBxmPJhJKJ+LTgqrAq4C 9U+KjmqiwRT5vdFZRFDODRV7Y1OkJKryIsPR+JDCOGXFFUOZ8njGpLRbS2DoJXXC ZLK34ZBelsdfmNs/PKi1epPPIbUSRWQMBTGjECY8zEB9EespfzLsYHeen+djtibt rvcsLWT1u4gGQEBMavPsFJnqmZJHUwmZUDhM7M6bvsihGzCOeMg2a41EFvf/AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDcwIaEBlTfCqd hP8DcgsOz067UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVNH YjlvU3h1ekVjNGNjUHVEelV0czM3QVVNb21iaHRYNTFQZTI1czk4RmgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlT R2I5b1N4dXpFYzRjY1B1RHpVdHMzN0FVTW9tYmh0WDUxUGUyNXM5OEZoLzEvNDM3 MzAyMUExMDE5NTM3QzJBOUQ4NEZGMDM3MjBCMEVDRjRFQkI1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCg//MAwQCqMRQAwQDs21QMA0EAgACMAcDBQAoBA9g MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFnjANBgkqhkiG9w0BAQsFAAOCAQEA lrUSpBrL9nHO3nhBgkHIfZGpopKy+0uCgoy0iNaabuCYAIRlYA1m4G12qGd88F2e E7zLG8SNuhtD4y80EujRjmsbytd89gfKeONz5Am5m2RnSmS0tWy3FMdKCYsuruTk MAQqqEAROxCyTHSD7muwKBG972UHB8MasprOVkG5jCK8Dt8glaYiXgeSda9uDU1j /rtPJDTzSAdssNjhMq880sydIAbHfIoNV7yQ4R0jJrBq2PY/MGGueELMEuGGKdfT g3buBC0gRdWvHiVNt/TOuhFQaTTU1bv4UuWH5UK5pAFQEVxMnvSSjxTRjCL87I3O dkoKJGSrAxaHO9F8xpivtA== -----END CERTIFICATE-----Generated at Wed May 13 15:21:49 2026 by rpki-client