$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer File: 909BA09D1557C8C734FFC182266E36889410A11D.cer (raw, json) Hash identifier: Ju8j8Q+WWwTpJj38xOO9YGkm1l6ppOeDkKKRQPjUgmo= Subject key identifier: 90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 362F578FB4CE3A749CB9BD4E07B981A0595CBCE9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.mft caRepository: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 13:09:22 +0000 Certificate not after: Mon 26 Apr 2027 13:14:22 +0000 Subordinate resources: AS: 28654 IP: 187.73.160.0/20 IP: 201.77.128.0/20 IP: 2804:95c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2f:57:8f:b4:ce:3a:74:9c:b9:bd:4e:07:b9:81:a0:59:5c:bc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 27 13:09:22 2026 GMT Not After : Apr 26 13:14:22 2027 GMT Subject: CN=909BA09D1557C8C734FFC182266E36889410A11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:a6:a6:d6:8f:11:49:89:6a:b4:67:e4:24: 73:8f:19:86:f2:28:66:31:fb:bb:7e:e6:fc:7c:15: 96:4d:1d:e4:59:72:df:47:f9:64:e0:0e:3b:ca:dc: 2e:a3:41:06:1d:ee:5b:5e:f8:dc:fe:49:5f:7b:f3: 13:90:da:ec:00:d0:ee:21:a6:16:b6:39:0f:3e:f7: 2f:c4:e6:3e:82:88:87:56:f2:8c:e1:84:39:aa:2f: d6:0f:9d:aa:97:3a:4f:29:6f:52:d8:5d:b3:9b:71: 3d:ae:0f:ee:18:08:a2:42:23:9e:56:f5:7c:f9:87: e8:85:da:12:49:dd:46:bb:e3:f3:96:a0:21:9a:73: 59:8b:bd:42:f3:c1:3f:99:8f:c0:9a:ac:32:90:7a: 9a:53:3f:7c:5a:64:29:65:72:fa:7c:5f:74:b1:2f: 4a:89:f0:13:58:bd:5e:7e:d2:b7:51:22:e1:03:2e: c5:1e:7c:ff:9f:80:ca:ec:14:eb:67:13:f2:99:0c: 40:88:53:09:57:b0:29:5b:47:39:10:cc:1e:f2:ce: 84:83:e9:8a:3b:0f:b8:8b:e0:ff:fc:6d:aa:aa:68: 90:7e:11:cb:db:a2:ad:59:a4:31:64:b7:53:57:01: 2b:0f:dd:0a:e3:5c:bc:78:64:1b:15:25:ec:ce:02: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.73.160.0/20 201.77.128.0/20 IPv6: 2804:95c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28654 Signature Algorithm: sha256WithRSAEncryption 85:61:98:d1:1c:32:64:93:0c:e3:06:7a:40:9b:b3:83:70:ce: fa:61:e0:78:53:fa:40:95:cc:c9:cc:15:83:6c:89:1c:9e:b5: 0e:aa:1a:34:23:fc:ad:5f:66:35:28:f1:05:1c:fc:c5:22:12: 48:02:99:6c:3d:bf:33:14:7d:23:bd:4d:1c:b6:45:fc:83:74: d1:e8:fe:ca:0c:f2:52:3a:34:9a:73:3b:cc:d7:1d:05:e6:da: 66:ee:0c:64:e4:df:eb:f2:24:51:80:d7:59:7d:f6:b5:f1:9c: a2:79:1f:6d:55:57:99:37:0c:ce:9f:57:55:40:0d:eb:88:6d: 21:3d:fc:b0:ae:78:e8:68:14:5d:8c:9f:fd:6b:95:21:84:ea: 7e:0e:6a:c6:91:98:7a:20:9b:80:7a:7f:64:dc:73:61:a7:1d: e4:ca:ab:39:83:ff:f3:d7:b7:61:76:49:a9:72:91:35:27:1d: eb:5f:7a:5f:55:29:90:1b:cd:0c:f0:4e:61:d3:1f:00:5f:85: 0c:85:df:53:66:40:17:94:f0:6e:96:c9:e7:26:a9:74:78:7e: 19:bd:96:f0:79:a1:e4:a3:e2:b1:cb:e0:ef:42:77:16:02:e7: 7f:28:19:93:59:20:d1:3a:a2:38:c2:f4:14:d5:b3:15:a3:7c: d3:52:21:27 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUNi9Xj7TOOnScub1OB7mBoFlcvOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MjcxMzA5MjJaFw0yNzA0MjYxMzE0MjJaMDMxMTAvBgNV BAMTKDkwOUJBMDlEMTU1N0M4QzczNEZGQzE4MjI2NkUzNjg4OTQxMEExMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KKam1o8RSYlqtGfkJHOPGYby KGYx+7t+5vx8FZZNHeRZct9H+WTgDjvK3C6jQQYd7lte+Nz+SV978xOQ2uwA0O4h pha2OQ8+9y/E5j6CiIdW8ozhhDmqL9YPnaqXOk8pb1LYXbObcT2uD+4YCKJCI55W 9Xz5h+iF2hJJ3Ua74/OWoCGac1mLvULzwT+Zj8CarDKQeppTP3xaZCllcvp8X3Sx L0qJ8BNYvV5+0rdRIuEDLsUefP+fgMrsFOtnE/KZDECIUwlXsClbRzkQzB7yzoSD 6Yo7D7iL4P/8baqqaJB+Ecvboq1ZpDFkt1NXASsP3QrjXLx4ZBsVJezOAhw7AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQm6CdFVfIxzT/ wYImbjaIlBChHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFBQ RWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhYNEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRQ UEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAvOTA5 QkEwOUQxNTU3QzhDNzM0RkZDMTgyMjY2RTM2ODg5NDEwQTExRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu0mgAwQEyU2AMA0EAgACMAcDBQAoBAlcMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm/uMA0GCSqGSIb3DQEBCwUAA4IBAQCFYZjRHDJk kwzjBnpAm7ODcM76YeB4U/pAlczJzBWDbIkcnrUOqho0I/ytX2Y1KPEFHPzFIhJI AplsPb8zFH0jvU0ctkX8g3TR6P7KDPJSOjSaczvM1x0F5tpm7gxk5N/r8iRRgNdZ ffa18ZyieR9tVVeZNwzOn1dVQA3riG0hPfywrnjoaBRdjJ/9a5UhhOp+DmrGkZh6 IJuAen9k3HNhpx3kyqs5g//z17dhdkmpcpE1Jx3rX3pfVSmQG80M8E5h0x8AX4UM hd9TZkAXlPBulsnnJql0eH4ZvZbweaHko+Kxy+DvQncWAud/KBmTWSDROqI4wvQU 1bMVo3zTUiEn -----END CERTIFICATE-----Generated at Wed May 13 15:40:16 2026 by rpki-client