$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer File: 8D8103C50E13594487EBCABC153A71DA39AC6E49.cer (raw, json) Hash identifier: xwnM/944dKc+oWnOpVwt14DZ/e730WP5yuJOvaV7vkM= Subject key identifier: 8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5286AF3D9DC0AAF75BF0C8E5BEA216B5176272B0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.mft caRepository: rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 26 Apr 2026 03:06:41 +0000 Certificate not after: Sun 25 Apr 2027 03:11:41 +0000 Subordinate resources: AS: 264158 IP: 138.97.92.0/22 IP: 168.121.160.0/22 IP: 2804:2360::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 19:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:86:af:3d:9d:c0:aa:f7:5b:f0:c8:e5:be:a2:16:b5:17:62:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 26 03:06:41 2026 GMT Not After : Apr 25 03:11:41 2027 GMT Subject: CN=8D8103C50E13594487EBCABC153A71DA39AC6E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:be:30:65:8b:fb:35:58:38:1d:f6:d2:0f: 10:73:24:71:74:f2:23:47:e2:72:0d:72:ae:8d:54: 24:58:9a:c8:2b:35:62:63:64:9e:74:92:b3:be:a3: 53:d5:5d:31:9e:b6:a5:93:3b:b4:10:5b:be:3e:0a: 3d:c6:0d:d1:e9:62:5b:29:23:d6:a2:b0:ee:c5:24: 43:96:53:20:e3:bb:a6:4f:12:dd:f8:04:d7:e5:d7: 50:24:5c:e9:33:ee:1d:d8:cb:bd:b4:e7:49:f8:85: 92:9e:b2:2d:32:be:54:b0:f7:d6:ba:57:3f:04:c2: a7:69:83:b3:86:c1:fa:c0:05:13:1b:b9:de:f4:a2: e3:8b:14:2d:72:96:ed:c8:c0:c6:cd:28:a1:70:37: e0:ad:dd:37:f5:56:78:aa:6c:da:20:18:63:c3:ab: 55:62:81:5f:bc:54:de:f3:a3:4c:47:1d:ed:d0:6d: 11:1e:41:14:e1:99:b3:57:15:3c:86:db:05:f6:f3: 83:70:be:ee:d5:a3:1d:f6:de:fc:86:4a:76:e6:ab: b4:7a:d1:1f:b0:3e:19:e6:ec:5c:56:8d:1f:4c:30: 44:57:d8:c3:3f:3d:50:16:23:74:a4:13:99:85:e2: 45:d0:46:99:55:1e:d7:79:d2:a0:23:b4:ba:55:98: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.92.0/22 168.121.160.0/22 IPv6: 2804:2360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264158 Signature Algorithm: sha256WithRSAEncryption 8b:d3:5b:5c:92:81:a8:df:a7:8c:e0:1f:de:6a:4c:62:f1:27: 4b:aa:94:c5:a7:1d:c8:a7:df:23:49:1c:08:8e:c0:61:b2:60: f9:85:82:3e:f9:b5:a6:a5:fd:e3:47:32:c2:90:2c:4c:5e:cc: c9:1c:14:d5:16:ad:ee:d0:7b:5c:9d:6f:84:61:08:c3:ac:b0: 63:20:30:fa:59:d0:34:0b:77:55:3e:8a:d1:af:cf:48:d5:c6: bc:a5:9b:06:01:4a:69:cc:77:b4:d5:9f:da:30:bb:82:f8:1a: 7d:ba:76:ca:06:87:72:d0:ea:fd:40:bc:19:9d:c9:33:97:bf: 8a:2a:1a:8b:8b:27:e0:69:a6:7b:dd:89:9a:c2:00:b5:e9:63: a0:04:7e:23:5a:0c:3a:d0:a1:ba:c2:7e:22:dc:29:d6:84:cf: 6d:3c:1c:06:dc:4a:8d:fc:34:c4:2d:77:91:15:45:5e:3b:fa: 9e:79:a0:ca:78:32:da:f8:e7:5c:d9:55:10:25:0d:45:f9:06: 6c:9d:b4:48:be:09:c7:77:85:d0:e4:82:80:cb:15:ec:08:c6: 20:86:da:d4:9b:b4:58:43:1d:6a:73:13:f1:45:67:ae:98:3e: b5:e7:53:00:91:e7:64:55:d4:41:17:a3:93:bf:41:11:7a:d1: f9:20:96:cb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUoavPZ3Aqvdb8MjlvqIWtRdicrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjYwMzA2NDFaFw0yNzA0MjUwMzExNDFaMDMxMTAvBgNV BAMTKDhEODEwM0M1MEUxMzU5NDQ4N0VCQ0FCQzE1M0E3MURBMzlBQzZFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPb4wZYv7NVg4HfbSDxBzJHF0 8iNH4nINcq6NVCRYmsgrNWJjZJ50krO+o1PVXTGetqWTO7QQW74+Cj3GDdHpYlsp I9aisO7FJEOWUyDju6ZPEt34BNfl11AkXOkz7h3Yy72050n4hZKesi0yvlSw99a6 Vz8Ewqdpg7OGwfrABRMbud70ouOLFC1ylu3IwMbNKKFwN+Ct3Tf1VniqbNogGGPD q1VigV+8VN7zo0xHHe3QbREeQRThmbNXFTyG2wX284Nwvu7Vox323vyGSnbmq7R6 0R+wPhnm7FxWjR9MMERX2MM/PVAWI3SkE5mF4kXQRplVHtd50qAjtLpVmAt/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNgQPFDhNZRIfr yrwVOnHaOaxuSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Rz Y2ZIZTlYek1pUllFSEJEM2lZZmoxUUd1bkhoa0hMSEFBWmFjdlBiYWovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NE c2NmSGU5WHpNaVJZRUhCRDNpWWZqMVFHdW5IaGtITEhBQVphY3ZQYmFqLzAvOEQ4 MTAzQzUwRTEzNTk0NDg3RUJDQUJDMTUzQTcxREEzOUFDNkU0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimFcAwQCqHmgMA0EAgACMAcDBQAoBCNgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQH3jANBgkqhkiG9w0BAQsFAAOCAQEAi9NbXJKB qN+njOAf3mpMYvEnS6qUxacdyKffI0kcCI7AYbJg+YWCPvm1pqX940cywpAsTF7M yRwU1Rat7tB7XJ1vhGEIw6ywYyAw+lnQNAt3VT6K0a/PSNXGvKWbBgFKacx3tNWf 2jC7gvgafbp2ygaHctDq/UC8GZ3JM5e/iioai4sn4Gmme92JmsIAteljoAR+I1oM OtChusJ+Itwp1oTPbTwcBtxKjfw0xC13kRVFXjv6nnmgyngy2vjnXNlVECUNRfkG bJ20SL4Jx3eF0OSCgMsV7AjGIIba1Ju0WEMdanMT8UVnrpg+tedTAJHnZFXUQRej k79BEXrR+SCWyw== -----END CERTIFICATE-----Generated at Tue May 12 21:41:58 2026 by rpki-client