$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer File: 4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer (raw, json) Hash identifier: slMoI3Hlp0f+R/7CYsKWcLGmgY3u3K/EVtJSKSLGNwI= Subject key identifier: 4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B060BB1EBDCF807982F8201230652F307F4C91A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.mft caRepository: rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Mar 2026 00:47:39 +0000 Certificate not after: Mon 15 Mar 2027 00:52:39 +0000 Subordinate resources: AS: 273474 IP: 131.72.52.0/22 IP: 2804:8f30::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:06:0b:b1:eb:dc:f8:07:98:2f:82:01:23:06:52:f3:07:f4:c9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 16 00:47:39 2026 GMT Not After : Mar 15 00:52:39 2027 GMT Subject: CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:fb:a6:fd:7f:81:67:8a:0e:40:53:a8:74: b4:b3:de:36:91:49:43:fc:60:1d:10:47:9c:9f:5e: 83:7d:5c:d3:cb:b0:0c:5a:5d:c7:03:9e:75:5e:71: 37:1c:75:1f:3e:76:62:7f:42:0d:22:2a:7b:fd:c4: ef:ed:1a:2e:78:c1:19:3e:a8:8c:4c:e7:ee:87:7b: 29:57:61:14:ad:d1:94:88:8f:ca:75:91:51:27:92: d2:50:78:10:60:60:4e:b5:31:3b:1d:31:b2:6e:b7: c1:d8:47:dd:ec:d5:ad:60:c3:79:cb:41:15:61:c5: 69:4d:63:c6:e3:cd:d8:1b:57:ce:6e:9c:c8:85:6f: 2a:28:25:c3:ed:75:c7:3f:7a:76:31:60:f4:ca:fa: 92:93:f6:bf:76:54:b6:a7:3f:69:94:1f:07:dc:00: ea:75:64:6e:72:6e:30:a3:eb:0f:19:77:c4:14:72: 9a:62:93:06:dd:ff:77:9c:b1:06:d7:4d:49:86:43: 78:63:05:3e:a0:8a:4e:25:e0:3e:4d:8c:0d:42:61: ba:13:bd:d6:a7:89:da:0c:24:0b:c3:aa:9d:4e:17: 1b:03:12:29:fc:71:64:7f:9c:f5:da:08:76:20:08: 18:e1:ad:8c:c6:73:6f:10:73:9f:49:23:69:13:c9: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.52.0/22 IPv6: 2804:8f30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273474 Signature Algorithm: sha256WithRSAEncryption 8b:69:0b:b2:a4:cd:f9:2e:4f:76:d8:22:83:ff:16:88:13:0d: 1f:9b:34:a0:a7:69:03:fb:ff:f3:e9:07:71:93:0c:27:28:ea: 99:de:5f:26:77:84:fb:1a:d5:81:b6:ad:2d:41:9f:55:02:9d: 15:5c:fd:86:7d:c5:e0:07:47:64:4b:01:33:9e:56:85:12:4a: 04:e5:75:f4:1e:18:53:80:f1:54:b6:6c:24:ff:d9:2e:6a:fc: 93:a7:03:a0:30:8d:8e:e5:b3:54:8d:88:ee:89:34:c4:1e:02: e1:3c:fe:fa:f5:e9:52:39:9e:a8:f7:f3:8a:ea:00:39:7b:31: d5:e3:82:0a:80:de:2d:9f:fa:07:eb:12:1c:38:25:89:17:3b: bf:ab:4f:8a:82:a1:04:a0:55:93:ab:fb:22:56:cd:dd:c8:b0: 6e:35:be:70:9f:01:e1:39:1f:ae:1d:ea:8f:94:91:31:6e:0c: 4b:2b:c6:1b:86:c0:2c:73:88:53:a6:25:a7:b3:34:59:f1:a0: 34:a2:6e:f2:f1:3e:6c:33:0e:d2:17:6a:b0:ed:dc:62:ce:c5: cd:55:9a:4e:6d:83:41:68:08:42:48:d3:b6:67:ea:bb:9f:1f: 7e:f7:de:2d:76:65:cf:26:51:a6:0e:38:d0:25:99:b1:ef:90: 7f:71:00:19 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOwYLsevc+AeYL4IBIwZS8wf0yRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTYwMDQ3MzlaFw0yNzAzMTUwMDUyMzlaMDMxMTAvBgNV BAMTKDRERDM4QzJDMjFGQjA4MTREQkIyRDkzNjUyQjdCNEMyMjg2NzY1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtvum/X+BZ4oOQFOodLSz3jaR SUP8YB0QR5yfXoN9XNPLsAxaXccDnnVecTccdR8+dmJ/Qg0iKnv9xO/tGi54wRk+ qIxM5+6HeylXYRSt0ZSIj8p1kVEnktJQeBBgYE61MTsdMbJut8HYR93s1a1gw3nL QRVhxWlNY8bjzdgbV85unMiFbyooJcPtdcc/enYxYPTK+pKT9r92VLanP2mUHwfc AOp1ZG5ybjCj6w8Zd8QUcppikwbd/3ecsQbXTUmGQ3hjBT6gik4l4D5NjA1CYboT vdanidoMJAvDqp1OFxsDEin8cWR/nPXaCHYgCBjhrYzGc28Qc59JI2kTyaFfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRN04wsIfsIFNuy 2TZSt7TCKGdlfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmti WVlMZ3FXR2oxOUZwMXVnNWZBS2pCYXk5OWRHVDZxTnlRMlV0M3h1akMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr YllZTGdxV0dqMTlGcDF1ZzVmQUtqQmF5OTlkR1Q2cU55UTJVdDN4dWpDLzAvNERE MzhDMkMyMUZCMDgxNERCQjJEOTM2NTJCN0I0QzIyODY3NjU3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg0g0MA0EAgACMAcDBQAoBI8wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQsQjANBgkqhkiG9w0BAQsFAAOCAQEAi2kLsqTN+S5Pdtgi g/8WiBMNH5s0oKdpA/v/8+kHcZMMJyjqmd5fJneE+xrVgbatLUGfVQKdFVz9hn3F 4AdHZEsBM55WhRJKBOV19B4YU4DxVLZsJP/ZLmr8k6cDoDCNjuWzVI2I7ok0xB4C 4Tz++vXpUjmeqPfziuoAOXsx1eOCCoDeLZ/6B+sSHDgliRc7v6tPioKhBKBVk6v7 IlbN3ciwbjW+cJ8B4Tkfrh3qj5SRMW4MSyvGG4bALHOIU6Ylp7M0WfGgNKJu8vE+ bDMO0hdqsO3cYs7FzVWaTm2DQWgIQkjTtmfqu58ffvfeLXZlzyZRpg440CWZse+Q f3EAGQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:53:46 2026 by rpki-client