$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.cer File: C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.cer (raw, json) Hash identifier: 99+jlxIvpL2IMsDExcJ3Ki6SUUpZEfe5WAHLLpwayDc= Subject key identifier: C4:B9:97:E2:1D:1B:67:21:0A:47:D2:B6:BE:3A:BA:51:A9:B2:49:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7DC58D2C03F6A0FD4FFCD91E3D84137659F3CA1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.mft caRepository: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 05 May 2026 17:42:00 +0000 Certificate not after: Tue 04 May 2027 17:47:00 +0000 Subordinate resources: AS: 273638 IP: 2804:89f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 18:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c5:8d:2c:03:f6:a0:fd:4f:fc:d9:1e:3d:84:13:76:59:f3:ca:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 5 17:42:00 2026 GMT Not After : May 4 17:47:00 2027 GMT Subject: CN=C4B997E21D1B67210A47D2B6BE3ABA51A9B24915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:ec:63:7b:b1:7e:b3:35:92:d3:bf:6e:db: 2d:b8:93:f8:9b:92:17:72:5b:56:b3:0e:db:67:db: 79:3d:3e:14:1b:b8:f7:9a:8c:a9:b1:ab:f7:91:3d: 72:3d:f2:f6:5d:ea:49:79:cf:9b:0b:4d:da:19:de: c5:2a:af:57:aa:e1:85:a6:9e:98:a8:f6:71:ce:97: f9:7c:e4:42:d9:7f:7f:fd:3d:91:4e:c6:b8:f4:e4: 13:a8:69:58:bc:1a:d5:9f:94:4d:1f:ae:b1:bb:44: 03:3d:ba:b9:43:cc:38:fb:f7:32:0b:ee:39:b4:98: 12:a5:ea:12:42:18:f1:b5:48:c0:be:3e:8b:ba:40: 23:05:bf:af:3a:36:41:22:4c:4d:fd:c4:24:41:98: 44:ab:e8:33:6d:93:52:51:44:36:88:1e:82:45:1a: 84:4a:7e:62:a6:5f:65:48:d7:db:ca:5f:2e:c3:81: 5d:07:8c:fe:89:96:a7:e3:50:f6:3f:c3:e7:71:a8: 50:6d:b2:40:46:6a:c9:30:e9:3e:fc:59:58:bb:86: c0:35:d4:34:90:b8:95:db:00:0c:99:7e:ff:69:01: d3:66:42:7f:93:1f:d0:79:f2:49:3c:38:6c:de:6e: b6:3c:ac:6f:f1:20:cb:34:71:03:1b:07:b1:03:e7: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:B9:97:E2:1D:1B:67:21:0A:47:D2:B6:BE:3A:BA:51:A9:B2:49:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:89f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273638 Signature Algorithm: sha256WithRSAEncryption 89:43:f9:61:22:de:8b:72:11:59:3d:36:9f:01:e1:3a:3c:e9: c6:5a:bf:3c:f0:c4:11:cc:ee:d7:45:82:49:e6:47:a6:d6:b2: 84:48:af:7c:e5:1c:78:61:a3:7d:f6:7d:51:39:77:0e:0a:84: 17:2c:bf:9b:23:61:80:dc:2f:6d:12:0e:f7:d3:d2:88:fe:11: 08:f3:2b:ff:6e:d0:30:2f:2c:eb:94:4c:2f:4a:0b:b5:2e:ec: 8c:0f:b6:1f:98:57:41:24:9f:72:ba:5b:da:ec:00:0d:c4:79: e5:6b:9d:7c:16:68:2a:80:fd:d7:15:02:0a:2c:43:ea:55:ac: f4:71:03:57:b1:41:44:a2:5e:16:9a:95:03:dd:8a:cc:fb:43: df:44:7d:b5:59:65:26:05:88:5b:87:78:bb:94:2e:28:57:5b: f0:88:6e:c1:35:1e:82:67:f6:ee:d7:a6:80:64:09:fd:cd:9c: 59:4c:2d:c7:24:c5:39:d3:81:ef:61:bc:f5:1d:e7:77:0d:0d: e2:b1:1d:5f:49:a3:e5:02:b6:cb:54:94:94:98:a0:e7:61:05: e1:29:69:f1:0d:75:cb:75:38:f7:92:71:d7:9f:70:bf:43:4d: 03:4a:dc:eb:49:1d:ce:35:be:05:48:71:ff:b4:f5:f7:af:20: ba:5c:6c:bd -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUfcWNLAP2oP1P/NkePYQTdlnzyh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDUxNzQyMDBaFw0yNzA1MDQxNzQ3MDBaMDMxMTAvBgNV BAMTKEM0Qjk5N0UyMUQxQjY3MjEwQTQ3RDJCNkJFM0FCQTUxQTlCMjQ5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDz+xje7F+szWS079u2y24k/ib khdyW1azDttn23k9PhQbuPeajKmxq/eRPXI98vZd6kl5z5sLTdoZ3sUqr1eq4YWm npio9nHOl/l85ELZf3/9PZFOxrj05BOoaVi8GtWflE0frrG7RAM9urlDzDj79zIL 7jm0mBKl6hJCGPG1SMC+Pou6QCMFv686NkEiTE39xCRBmESr6DNtk1JRRDaIHoJF GoRKfmKmX2VI19vKXy7DgV0HjP6JlqfjUPY/w+dxqFBtskBGaskw6T78WVi7hsA1 1DSQuJXbAAyZfv9pAdNmQn+TH9B58kk8OGzebrY8rG/xIMs0cQMbB7ED50NDAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEuZfiHRtnIQpH 0ra+OrpRqbJJFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhM OEdqTWREMnp5N3I3TlhZclNWbVpueDU4MUJNYVhSaGVVdHpOUXR6aFQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4 TDhHak1kRDJ6eTdyN05YWXJTVm1abng1ODFCTWFYUmhlVXR6TlF0emhULzAvQzRC OTk3RTIxRDFCNjcyMTBBNDdEMkI2QkUzQUJBNTFBOUIyNDkxNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASJ+DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LOYwDQYJKoZIhvcNAQELBQADggEBAIlD+WEi3otyEVk9Np8B4To86cZavzzwxBHM 7tdFgknmR6bWsoRIr3zlHHhho332fVE5dw4KhBcsv5sjYYDcL20SDvfT0oj+EQjz K/9u0DAvLOuUTC9KC7Uu7IwPth+YV0Ekn3K6W9rsAA3EeeVrnXwWaCqA/dcVAgos Q+pVrPRxA1exQUSiXhaalQPdisz7Q99EfbVZZSYFiFuHeLuULihXW/CIbsE1HoJn 9u7XpoBkCf3NnFlMLcckxTnTge9hvPUd53cNDeKxHV9Jo+UCtstUlJSYoOdhBeEp afENdct1OPeScdefcL9DTQNK3OtJHc41vgVIcf+09fevILpcbL0= -----END CERTIFICATE-----Generated at Wed May 13 17:10:48 2026 by rpki-client