$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer File: 9D38422B911C6A812AD0D3598391A062B2B872FD.cer (raw, json) Hash identifier: ZTs3/u7JmSQjYb7+9af+iPjpY0X9fHLQqRzhmqUXNEo= Subject key identifier: 9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6731CA3525A190B9D9E08F95ACF9BB6C793B2E22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft caRepository: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Jul 2026 19:36:39 +0000 Certificate not after: Wed 07 Jul 2027 19:41:39 +0000 Subordinate resources: AS: 52872 AS: 267388 IP: 45.4.156.0/22 IP: 45.7.0.0/22 IP: 45.174.208.0/22 IP: 45.234.248.0/22 IP: 131.196.40.0/22 IP: 132.255.44.0/22 IP: 168.0.236.0/22 IP: 168.197.136.0/22 IP: 177.128.192.0/21 IP: 2804:88c::/32 IP: 2804:4cbc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 21:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:31:ca:35:25:a1:90:b9:d9:e0:8f:95:ac:f9:bb:6c:79:3b:2e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 19:36:39 2026 GMT Not After : Jul 7 19:41:39 2027 GMT Subject: CN=9D38422B911C6A812AD0D3598391A062B2B872FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:74:a4:e1:c9:de:17:2d:02:80:0e:09:97: 77:0f:8d:68:fb:4f:b4:40:ad:2a:1b:9e:fd:db:b4: a9:83:aa:76:10:9c:de:a3:e7:b6:3e:20:d2:33:fa: e2:ef:dc:cf:7e:19:3e:9d:d6:e6:61:ce:63:69:89: 5a:50:e9:e4:c6:8c:7b:2a:67:3b:6f:3b:b7:95:6d: b8:5c:5d:a1:f8:6e:65:2a:89:e6:10:73:4b:23:9a: 74:9b:c7:03:eb:f3:6b:52:c9:d0:e8:15:a7:b0:45: 29:ac:6f:10:9f:92:35:f2:bb:5e:3a:7d:00:04:95: 5f:b2:f8:62:9e:b0:fd:46:83:a4:55:6a:6c:86:28: d7:2b:23:91:ad:65:95:37:72:bf:89:2b:d3:c6:f4: cc:04:0c:53:de:70:eb:2e:93:b5:be:fe:c4:60:3b: c4:88:cc:77:1e:08:a3:f8:ce:6c:e5:6b:04:f9:63: be:a5:67:b9:b1:36:a2:c1:70:ec:a3:c7:34:e9:79: f2:34:7f:48:b7:18:c5:3a:c1:28:11:ec:f6:bb:46: ac:2c:61:de:56:21:db:02:8a:96:35:a6:41:87:f7: 0a:29:e1:42:01:60:b1:ce:95:0b:c7:20:06:3a:02: 08:e7:f5:c1:eb:d4:2b:25:08:68:0a:97:27:44:36: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.156.0/22 45.7.0.0/22 45.174.208.0/22 45.234.248.0/22 131.196.40.0/22 132.255.44.0/22 168.0.236.0/22 168.197.136.0/22 177.128.192.0/21 IPv6: 2804:88c::/32 2804:4cbc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52872 267388 Signature Algorithm: sha256WithRSAEncryption b0:13:d5:ac:6e:a5:32:24:87:ac:9b:9b:f7:09:64:30:14:ff: c7:70:a7:36:3a:3e:28:b6:4a:00:92:71:c3:3d:af:7a:34:6f: de:25:56:03:fb:1e:d7:0c:3e:fd:44:a0:f9:64:f5:f1:04:39: 3a:1d:10:03:be:9e:2a:fc:aa:cc:ab:79:c6:29:1a:b5:23:28: 0b:0a:4b:11:13:03:64:8b:a0:6f:8c:47:9d:73:80:6a:fd:4b: 69:a2:2d:03:d5:fc:ee:e0:96:23:c2:fc:7f:b2:a3:c9:62:4b: 87:84:d8:7c:3b:27:af:9a:0f:ec:6b:d0:c8:c0:4a:13:87:f8: 72:f2:b9:7a:04:34:8d:fa:12:a9:ba:a0:d2:55:fd:21:6f:da: 31:fe:e3:e2:29:c3:06:f4:02:db:36:68:2c:78:c0:0c:be:07: 43:4f:f3:13:87:c5:83:21:bf:7b:1b:55:cf:f6:fc:a3:f5:37: 97:f5:a0:35:c0:36:65:1a:ee:d2:3b:6e:76:28:dd:80:7b:db: db:d4:81:09:88:f5:85:da:42:7a:9e:3b:d8:48:41:5b:ae:09: 8e:c1:c8:96:fa:7b:7b:89:cb:a2:09:55:b2:4c:2c:96:2d:7b: 30:c2:23:55:77:fd:b5:92:a6:84:56:59:8a:00:12:50:a9:8c: 70:97:51:9a -----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgIUZzHKNSWhkLnZ4I+VrPm7bHk7LiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDgxOTM2MzlaFw0yNzA3MDcxOTQxMzlaMDMxMTAvBgNV BAMTKDlEMzg0MjJCOTExQzZBODEyQUQwRDM1OTgzOTFBMDYyQjJCODcyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGS3Sk4cneFy0CgA4Jl3cPjWj7 T7RArSobnv3btKmDqnYQnN6j57Y+INIz+uLv3M9+GT6d1uZhzmNpiVpQ6eTGjHsq ZztvO7eVbbhcXaH4bmUqieYQc0sjmnSbxwPr82tSydDoFaewRSmsbxCfkjXyu146 fQAElV+y+GKesP1Gg6RVamyGKNcrI5GtZZU3cr+JK9PG9MwEDFPecOsuk7W+/sRg O8SIzHceCKP4zmzlawT5Y76lZ7mxNqLBcOyjxzTpefI0f0i3GMU6wSgR7Pa7Rqws Yd5WIdsCipY1pkGH9wop4UIBYLHOlQvHIAY6Agjn9cHr1CslCGgKlydENiDpAgMB AAGjggN2MIIDcjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdOEIrkRxqgSrQ 01mDkaBisrhy/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODRj UEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRHN2MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg0 Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAvOUQz ODQyMkI5MTFDNkE4MTJBRDBEMzU5ODM5MUEwNjJCMkI4NzJGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEH AQH/BFYwVDA8BAIAATA2AwQCLQScAwQCLQcAAwQCLa7QAwQCLer4AwQCg8QoAwQC hP8sAwQCqADsAwQCqMWIAwQDsYDAMBQEAgACMA4DBQAoBAiMAwUAKARMvDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMAzogCAwQUfDANBgkqhkiG9w0BAQsFAAOCAQEA sBPVrG6lMiSHrJub9wlkMBT/x3CnNjo+KLZKAJJxwz2vejRv3iVWA/se1ww+/USg +WT18QQ5Oh0QA76eKvyqzKt5xikatSMoCwpLERMDZIugb4xHnXOAav1LaaItA9X8 7uCWI8L8f7KjyWJLh4TYfDsnr5oP7GvQyMBKE4f4cvK5egQ0jfoSqbqg0lX9IW/a Mf7j4inDBvQC2zZoLHjADL4HQ0/zE4fFgyG/extVz/b8o/U3l/WgNcA2ZRru0jtu dijdgHvb29SBCYj1hdpCep472EhBW64JjsHIlvp7e4nLoglVskwsli17MMIjVXf9 tZKmhFZZigASUKmMcJdRmg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:33:49 2026 by rpki-client