$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer File: A347F5D0945998093ADA03E9513EA096318126D4.cer (raw, json) Hash identifier: bjUfUrlq+bEeHgyjXN66jnc+BmdjUGgi4BCI0pijKQo= Subject key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A2FF7F031E0C6B275657B66D523AC5ED1FC314B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft caRepository: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 14:42:55 +0000 Certificate not after: Tue 11 May 2027 14:47:55 +0000 Subordinate resources: AS: 28145 IP: 186.192.224.0/20 IP: 187.49.128.0/20 IP: 2804:d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2f:f7:f0:31:e0:c6:b2:75:65:7b:66:d5:23:ac:5e:d1:fc:31:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 14:42:55 2026 GMT Not After : May 11 14:47:55 2027 GMT Subject: CN=A347F5D0945998093ADA03E9513EA096318126D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:2d:3e:24:d1:e0:37:61:0a:92:fa:30:6d: 22:62:21:1b:ad:d3:1d:30:f9:c8:96:6a:af:c7:99: 02:3d:75:f8:0a:79:4c:48:ca:23:e7:6b:04:4e:77: fe:a7:5a:2c:a0:b5:72:81:0f:b3:e8:af:36:24:59: 66:1e:98:ad:6f:ba:40:79:a0:ff:fd:3a:6d:6c:c4: 33:75:90:d2:2e:a6:38:ea:90:0d:4a:c9:5a:d1:57: 75:1f:25:02:91:fa:59:8e:09:5c:e7:00:b2:f2:ea: 88:b5:fc:a0:54:a5:23:25:4c:0d:85:3c:22:b4:61: 88:db:d8:1a:9c:71:03:ae:81:a9:da:1d:b5:11:d1: a8:fd:4b:96:19:70:b4:dd:6a:70:49:c3:ba:96:d2: 08:de:d6:5a:a9:72:f7:70:c5:94:36:05:85:9f:27: 9f:96:f3:89:91:15:82:94:75:1a:5b:17:51:63:7d: ae:a7:8f:44:1d:a1:bc:ca:7e:e2:35:09:12:88:1d: db:2c:ce:51:10:ed:35:98:6c:e7:23:a3:d9:ad:48: 24:bf:58:5b:d2:fb:48:b7:04:23:31:a8:af:e8:fa: a0:28:12:dd:ba:93:66:32:5d:3c:ac:fe:a4:89:5e: 35:70:97:78:5c:b2:60:ab:fa:45:77:66:21:24:9e: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.192.224.0/20 187.49.128.0/20 IPv6: 2804:d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28145 Signature Algorithm: sha256WithRSAEncryption d1:5c:0e:d0:3a:6f:49:09:4c:ea:41:52:e2:4f:4d:fc:46:8e: a4:c4:8c:cc:a5:96:5e:d7:ee:5b:6e:c6:8a:3c:3e:15:56:63: c1:af:9f:fe:72:88:ff:c8:d0:96:b4:eb:f6:40:07:d0:97:7e: 6c:03:23:26:69:dc:f6:a9:08:2c:16:1f:25:5c:c8:35:4d:33: 68:cb:a7:08:c2:b3:6f:1a:32:f1:7a:bd:37:a7:57:49:42:a1: 9d:98:65:80:88:6b:be:aa:fa:a4:bf:3a:ef:c9:66:54:37:91: 21:b6:b8:83:96:96:3d:db:c2:25:af:1b:03:e0:5f:1d:54:f0: 97:53:5b:b5:f0:6b:b2:ac:02:45:38:fb:d9:b0:a4:d8:d5:99: 45:91:33:9a:72:db:f9:4d:d0:1f:99:44:39:fb:c8:aa:f1:ce: 7f:a9:2a:60:fe:52:a2:ef:f8:19:8d:b0:21:b4:db:23:6d:9a: 4c:97:7a:5b:ba:5c:d5:5b:ca:d2:c6:96:56:5a:3f:e1:7a:a1: cd:c1:76:f1:f7:73:f0:82:ec:19:91:61:8d:41:6a:e9:c2:ee: 04:a6:f5:65:71:19:f1:b4:5e:5c:cf:a3:6a:37:19:4e:aa:fa: a4:e3:8a:78:01:0d:bf:d3:63:c1:37:76:ca:73:7f:b7:e3:c8: 6c:7b:d8:d3 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUSi/38DHgxrJ1ZXtm1SOsXtH8MUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTIxNDQyNTVaFw0yNzA1MTExNDQ3NTVaMDMxMTAvBgNV BAMTKEEzNDdGNUQwOTQ1OTk4MDkzQURBMDNFOTUxM0VBMDk2MzE4MTI2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oy0+JNHgN2EKkvowbSJiIRut 0x0w+ciWaq/HmQI9dfgKeUxIyiPnawROd/6nWiygtXKBD7PorzYkWWYemK1vukB5 oP/9Om1sxDN1kNIupjjqkA1KyVrRV3UfJQKR+lmOCVznALLy6oi1/KBUpSMlTA2F PCK0YYjb2BqccQOuganaHbUR0aj9S5YZcLTdanBJw7qW0gje1lqpcvdwxZQ2BYWf J5+W84mRFYKUdRpbF1Fjfa6nj0QdobzKfuI1CRKIHdsszlEQ7TWYbOcjo9mtSCS/ WFvS+0i3BCMxqK/o+qAoEt26k2YyXTys/qSJXjVwl3hcsmCr+kV3ZiEknophAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjR/XQlFmYCTra A+lRPqCWMYEm1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1dG aG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dX RmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAvQTM0 N0Y1RDA5NDU5OTgwOTNBREEwM0U5NTEzRUEwOTYzMTgxMjZENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusDgAwQEuzGAMA0EAgACMAcDBQAoBADQMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3xMA0GCSqGSIb3DQEBCwUAA4IBAQDRXA7QOm9J CUzqQVLiT038Ro6kxIzMpZZe1+5bbsaKPD4VVmPBr5/+coj/yNCWtOv2QAfQl35s AyMmadz2qQgsFh8lXMg1TTNoy6cIwrNvGjLxer03p1dJQqGdmGWAiGu+qvqkvzrv yWZUN5EhtriDlpY928IlrxsD4F8dVPCXU1u18GuyrAJFOPvZsKTY1ZlFkTOactv5 TdAfmUQ5+8iq8c5/qSpg/lKi7/gZjbAhtNsjbZpMl3pbulzVW8rSxpZWWj/heqHN wXbx93PwguwZkWGNQWrpwu4EpvVlcRnxtF5cz6NqNxlOqvqk44p4AQ2/02PBN3bK c3+348hse9jT -----END CERTIFICATE-----Generated at Wed May 13 16:04:02 2026 by rpki-client