$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9963729CD2D1F0AE1E3F7A8F1253F1C87CBCA4D3.cer File: 9963729CD2D1F0AE1E3F7A8F1253F1C87CBCA4D3.cer (raw, json) Hash identifier: yFPH1bS5EfomBfNwFyag3OaiTdo/9f2wPeCKuq3IO1A= Subject key identifier: 99:63:72:9C:D2:D1:F0:AE:1E:3F:7A:8F:12:53:F1:C8:7C:BC:A4:D3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 342E0F0967890977E9319DD04EFDA6823BD5A5E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/9963729CD2D1F0AE1E3F7A8F1253F1C87CBCA4D3.mft caRepository: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 08 May 2026 14:37:43 +0000 Certificate not after: Fri 07 May 2027 14:42:43 +0000 Subordinate resources: AS: 265264 IP: 168.90.48.0/22 IP: 187.95.128.0/22 IP: 2804:2d28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 19:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2e:0f:09:67:89:09:77:e9:31:9d:d0:4e:fd:a6:82:3b:d5:a5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 14:37:43 2026 GMT Not After : May 7 14:42:43 2027 GMT Subject: CN=9963729CD2D1F0AE1E3F7A8F1253F1C87CBCA4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:90:86:3b:7e:3a:b0:78:62:74:5f:64:6f: 2f:f2:8a:b6:0c:67:1f:20:58:bd:cd:5e:c0:e3:54: 60:a5:e7:97:34:e5:a1:12:ad:da:c3:82:f3:bf:81: cc:dd:1e:a8:22:10:b9:3e:8b:dd:b5:14:91:87:ca: 9c:17:0f:6a:c2:81:d0:5e:88:ad:5d:e7:a9:09:12: 9d:34:4c:e7:e0:dc:16:ca:86:74:9d:c6:53:9d:10: 9e:36:30:ae:8a:a2:f4:00:79:1b:48:34:12:05:06: 66:05:5d:3b:2c:7b:37:d5:02:68:02:87:21:84:97: 65:9f:a8:cd:ab:ab:bf:11:4a:ac:7c:50:c4:7f:6f: 99:8d:69:e0:63:25:85:61:25:7d:a1:13:8e:97:37: 57:4b:24:6e:06:32:72:dd:0e:6e:9b:f9:82:8c:fb: 9d:00:df:2f:6a:52:9f:7d:fb:9e:24:6d:97:20:6d: 37:04:7a:df:89:34:22:35:a8:e5:c4:06:45:f3:67: 25:00:aa:87:52:d3:4e:e2:bf:f5:0c:08:5f:84:e4: 0e:0e:8e:67:f2:85:ea:a8:bb:06:a6:a0:3a:2b:2f: 66:85:a5:f8:01:a5:b1:41:25:9a:79:c6:7b:22:fa: 66:2b:ba:c8:01:2a:5d:79:41:92:90:0f:4e:58:84: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:63:72:9C:D2:D1:F0:AE:1E:3F:7A:8F:12:53:F1:C8:7C:BC:A4:D3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/9963729CD2D1F0AE1E3F7A8F1253F1C87CBCA4D3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.48.0/22 187.95.128.0/22 IPv6: 2804:2d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265264 Signature Algorithm: sha256WithRSAEncryption c7:d9:d9:72:e2:1b:93:38:74:06:cb:f7:45:89:63:b7:33:d1: 65:1f:28:ec:86:c1:82:bb:be:84:47:51:e5:fb:58:f9:ad:c1: cb:6f:ab:3d:a9:a5:40:b0:27:f0:20:97:02:53:75:1d:ca:67: 2c:d3:e8:28:bb:d7:8e:67:ec:da:a5:65:79:c8:b9:c2:06:05: 55:3c:9b:65:6e:70:bf:08:c2:9a:4a:71:b8:6a:71:9e:e3:f9: 7a:15:32:71:70:0d:a4:80:3d:70:ba:2c:0b:90:48:4c:56:0d: 0c:67:95:0e:b6:f7:dc:2c:e7:0c:b2:99:08:99:74:7c:7e:df: 18:14:11:a5:fc:c1:ce:42:de:e5:16:bd:52:dd:e2:b5:85:c2: 4c:3e:5e:f7:4f:11:2c:cd:f7:f7:ee:7c:36:40:85:81:25:44: 25:ef:8e:16:6d:17:a4:5f:c3:e5:48:28:ae:8b:6e:cf:45:60: b6:d5:27:d4:db:f6:3f:d9:c3:b2:94:5c:76:96:bf:0a:a4:54: c4:8a:57:5d:3a:5d:ed:8f:7c:f7:3d:03:54:ef:17:a5:e6:09: 80:b4:8a:23:08:f8:51:1a:59:f4:30:4c:17:fc:e1:4f:ca:73: c8:47:2a:cc:9e:3b:3a:4b:52:aa:ac:31:f9:f2:da:be:40:03: 06:56:21:66 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNC4PCWeJCXfpMZ3QTv2mgjvVpegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDgxNDM3NDNaFw0yNzA1MDcxNDQyNDNaMDMxMTAvBgNV BAMTKDk5NjM3MjlDRDJEMUYwQUUxRTNGN0E4RjEyNTNGMUM4N0NCQ0E0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlX5CGO346sHhidF9kby/yirYM Zx8gWL3NXsDjVGCl55c05aESrdrDgvO/gczdHqgiELk+i921FJGHypwXD2rCgdBe iK1d56kJEp00TOfg3BbKhnSdxlOdEJ42MK6KovQAeRtINBIFBmYFXTssezfVAmgC hyGEl2WfqM2rq78RSqx8UMR/b5mNaeBjJYVhJX2hE46XN1dLJG4GMnLdDm6b+YKM +50A3y9qUp99+54kbZcgbTcEet+JNCI1qOXEBkXzZyUAqodS007iv/UMCF+E5A4O jmfyheqouwamoDorL2aFpfgBpbFBJZp5xnsi+mYrusgBKl15QZKQD05YhDtfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZY3Kc0tHwrh4/ eo8SU/HIfLyk0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUxw ZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVM cGVKRzlmZlQ1Q25oRGJobjdBZHV5dUxiRUE5QWhXVzV3aVBvSGFGZVBTLzAvOTk2 MzcyOUNEMkQxRjBBRTFFM0Y3QThGMTI1M0YxQzg3Q0JDQTREMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqFowAwQCu1+AMA0EAgACMAcDBQAoBC0oMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMMDANBgkqhkiG9w0BAQsFAAOCAQEAx9nZcuIb kzh0Bsv3RYljtzPRZR8o7IbBgru+hEdR5ftY+a3By2+rPamlQLAn8CCXAlN1Hcpn LNPoKLvXjmfs2qVleci5wgYFVTybZW5wvwjCmkpxuGpxnuP5ehUycXANpIA9cLos C5BITFYNDGeVDrb33CznDLKZCJl0fH7fGBQRpfzBzkLe5Ra9Ut3itYXCTD5e908R LM339+58NkCFgSVEJe+OFm0XpF/D5Ugorotuz0VgttUn1Nv2P9nDspRcdpa/CqRU xIpXXTpd7Y989z0DVO8XpeYJgLSKIwj4URpZ9DBMF/zhT8pzyEcqzJ47OktSqqwx +fLavkADBlYhZg== -----END CERTIFICATE-----Generated at Tue May 12 21:42:22 2026 by rpki-client