$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer (raw, json) Hash identifier: lLdIL5W5rgVqDbn1a6gfU/bhPPhPOV8o4eswAqsdVok= Subject key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4ABC6F8B10737B06B71760A28FC369706EEF34CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft caRepository: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 May 2026 10:00:24 +0000 Certificate not after: Thu 06 May 2027 10:05:24 +0000 Subordinate resources: AS: 264236 IP: 138.117.88.0/22 IP: 168.90.36.0/22 IP: 2804:24a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bc:6f:8b:10:73:7b:06:b7:17:60:a2:8f:c3:69:70:6e:ef:34:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 10:00:24 2026 GMT Not After : May 6 10:05:24 2027 GMT Subject: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:78:f8:16:8e:09:87:d2:fe:c4:3b:58:69: c0:eb:c5:b6:8f:84:80:c8:3f:d1:3f:c2:8d:12:b9: bd:9a:19:fd:ad:f8:9a:fa:fd:ed:63:2d:51:97:c9: 18:bf:0d:a8:4c:d9:22:01:0f:78:fd:6e:da:23:c6: 70:39:71:02:0a:01:83:4b:5a:f1:7d:6f:72:90:77: 29:a5:00:05:7a:a8:9a:f5:e3:1a:24:45:df:b3:80: ab:4e:0e:2d:49:53:94:94:ce:d7:c4:d2:08:e9:a2: ca:d5:9b:90:4e:15:d3:1b:2d:32:11:cc:47:f5:b4: 36:7c:fc:e7:10:39:a3:b9:6c:b3:fe:2d:2f:2a:46: 5a:f3:72:68:6c:76:13:05:7c:42:b4:b5:ba:6d:50: 5c:36:16:c3:42:ca:d3:16:5f:55:be:bc:05:0a:59: 58:5e:9d:24:97:b3:f5:c6:34:9e:bc:eb:7c:a3:21: 17:30:57:a1:d8:c9:bd:2c:90:09:4e:77:96:23:f2: 4e:61:2c:8c:28:2d:dc:7e:49:e4:28:62:8b:eb:ce: 49:68:11:c8:90:df:cc:17:60:27:b3:c0:6f:dc:7a: 47:cd:40:9d:48:2b:52:20:72:12:b6:15:3a:15:28: a0:40:5d:2b:cf:90:13:41:f4:c2:4a:18:28:1e:05: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.88.0/22 168.90.36.0/22 IPv6: 2804:24a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264236 Signature Algorithm: sha256WithRSAEncryption 53:12:a4:12:17:50:3e:e4:00:14:de:9f:7c:47:88:15:92:b7: 2c:11:35:4b:9c:8b:04:e2:af:93:5f:1e:cf:a1:b2:ea:a6:f9: 47:7f:9d:8a:2c:75:30:e4:1a:ad:74:34:50:ce:15:e1:87:56: 51:22:b1:99:56:e9:01:f0:e8:93:cb:de:00:eb:3e:3e:28:e5: ca:6d:dd:a2:8b:ca:a6:cb:cf:2c:49:db:fd:b3:15:6f:49:7c: cb:5d:c1:88:8b:aa:64:32:4e:f6:42:43:da:4b:91:77:f3:62: 83:46:5b:14:e8:6d:3b:aa:6a:8d:9d:86:85:34:1b:d2:30:f6: 70:36:0f:a0:aa:02:11:c7:f2:55:9b:a2:33:eb:72:d0:bf:00: 2b:14:d1:c4:04:88:44:03:67:4b:d4:ad:28:6a:71:65:b5:2d: ba:5b:08:da:28:fe:17:e4:57:94:74:3b:5e:c9:23:4c:39:9c: 06:98:19:99:b0:84:82:ff:a6:45:70:30:8e:a9:a0:9a:02:50: 13:58:3d:25:9a:45:0d:10:eb:02:33:8e:96:1e:5b:51:2a:2e: 57:a1:5f:85:85:a3:95:f8:cf:d7:3f:6b:66:d5:1e:72:cf:76: 83:cd:95:54:15:64:81:4d:36:c2:ef:e7:d5:16:5c:d5:8c:18: 1a:fc:17:2d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSrxvixBzewa3F2Cij8NpcG7vNMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDcxMDAwMjRaFw0yNzA1MDYxMDA1MjRaMDMxMTAvBgNV BAMTKEE5NDhBQjk2RjZCQjdEQUMyQzE2NzZFRkJFRThENjEwOTlDNjFFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAnj4Fo4Jh9L+xDtYacDrxbaP hIDIP9E/wo0Sub2aGf2t+Jr6/e1jLVGXyRi/DahM2SIBD3j9btojxnA5cQIKAYNL WvF9b3KQdymlAAV6qJr14xokRd+zgKtODi1JU5SUztfE0gjposrVm5BOFdMbLTIR zEf1tDZ8/OcQOaO5bLP+LS8qRlrzcmhsdhMFfEK0tbptUFw2FsNCytMWX1W+vAUK WVhenSSXs/XGNJ6863yjIRcwV6HYyb0skAlOd5Yj8k5hLIwoLdx+SeQoYovrzklo EciQ38wXYCezwG/cekfNQJ1IK1IgchK2FToVKKBAXSvPkBNB9MJKGCgeBVg3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpSKuW9rt9rCwW du++6NYQmcYeCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUFY YUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2RUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVB WGFCOUtiYWRIQ1NqMkxNdHBCUlFvSFVFSmRucjI5d2dkdnRaMk1mdkVKLzAvQTk0 OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5OUM2MUUwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinVYAwQCqFokMA0EAgACMAcDBQAoBCSoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQILDANBgkqhkiG9w0BAQsFAAOCAQEAUxKkEhdQ PuQAFN6ffEeIFZK3LBE1S5yLBOKvk18ez6Gy6qb5R3+diix1MOQarXQ0UM4V4YdW USKxmVbpAfDok8veAOs+Pijlym3doovKpsvPLEnb/bMVb0l8y13BiIuqZDJO9kJD 2kuRd/Nig0ZbFOhtO6pqjZ2GhTQb0jD2cDYPoKoCEcfyVZuiM+ty0L8AKxTRxASI RANnS9StKGpxZbUtulsI2ij+F+RXlHQ7XskjTDmcBpgZmbCEgv+mRXAwjqmgmgJQ E1g9JZpFDRDrAjOOlh5bUSouV6FfhYWjlfjP1z9rZtUecs92g82VVBVkgU02wu/n 1RZc1YwYGvwXLQ== -----END CERTIFICATE-----Generated at Wed May 13 15:53:07 2026 by rpki-client