$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE4CD40E468231580ACC3DCBD4F7E4F49810485A.cer File: CE4CD40E468231580ACC3DCBD4F7E4F49810485A.cer (raw, json) Hash identifier: G8zWMQCgsJfZP6GQR0PM5W9LSAom1xCwyO3J5EkCtfg= Subject key identifier: CE:4C:D4:0E:46:82:31:58:0A:CC:3D:CB:D4:F7:E4:F4:98:10:48:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38A4C925A989304B973B1B39A18B1776FA76D36F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/CE4CD40E468231580ACC3DCBD4F7E4F49810485A.mft caRepository: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 02 May 2026 16:43:23 +0000 Certificate not after: Sat 01 May 2027 16:48:23 +0000 Subordinate resources: AS: 274528 IP: 2804:9588::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 19:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a4:c9:25:a9:89:30:4b:97:3b:1b:39:a1:8b:17:76:fa:76:d3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 16:43:23 2026 GMT Not After : May 1 16:48:23 2027 GMT Subject: CN=CE4CD40E468231580ACC3DCBD4F7E4F49810485A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:a6:4b:9c:45:da:5e:80:72:59:d7:60:7d: 37:68:9a:cb:87:a5:f2:19:f2:1e:d1:8b:37:29:2c: 08:73:92:8c:cc:25:9e:79:27:1b:6f:78:b7:42:14: 7a:60:28:c0:3e:5a:e9:54:b6:c7:51:96:2b:03:c4: ae:93:c5:d2:d6:60:dc:e0:3e:a6:b5:f1:00:1e:5e: ec:c1:48:a4:6f:ea:70:16:7f:7f:82:14:6c:b3:11: 8e:d3:cf:77:7e:6a:0f:2f:54:20:68:6e:f2:3f:17: 26:ec:dc:0d:b5:a7:c1:7b:50:ea:2b:fd:c5:7b:c8: 69:1e:4b:71:f0:2d:b8:1d:47:29:6d:05:9c:41:26: 96:7f:60:69:55:51:51:44:84:e8:2c:84:3a:de:58: 7b:6b:87:de:ff:a5:ed:1e:e0:02:fa:a4:77:aa:7e: c9:ac:68:a0:cf:24:74:af:20:9a:50:04:9f:c6:a0: e0:5f:b3:1f:fc:42:b1:8c:b6:67:e0:3b:a3:95:2c: b4:02:70:0a:ae:f0:21:dd:b1:8a:07:1a:07:03:c3: d0:f3:2f:73:3c:4b:12:0d:37:8f:82:40:55:30:2a: 26:77:61:11:92:b9:64:70:74:18:5c:50:2d:ed:de: 4e:ae:e3:6c:f3:54:3d:be:9e:13:1a:57:77:8d:2f: 45:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:4C:D4:0E:46:82:31:58:0A:CC:3D:CB:D4:F7:E4:F4:98:10:48:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/CE4CD40E468231580ACC3DCBD4F7E4F49810485A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9588::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274528 Signature Algorithm: sha256WithRSAEncryption 67:26:e1:d8:95:12:8d:22:7d:d4:5f:93:32:f0:92:8a:7c:7e: 4b:9a:79:ad:9a:a0:db:6a:d3:f1:13:7a:30:a0:8a:49:2b:cf: b5:8e:51:9c:67:4b:d1:4f:fb:eb:7d:3c:b8:81:45:96:ef:60: 88:e0:85:a0:73:a0:52:fc:6e:4e:76:f4:a4:0a:a1:59:c5:f2: 05:fa:c0:8f:29:83:ad:41:36:91:24:72:e7:c1:b3:f5:96:d6: b9:ad:f5:4a:f4:65:3d:1a:15:8c:0b:ff:e5:a3:c6:81:b9:33: 18:d7:8b:9b:b8:e7:9d:9b:de:59:d1:1e:ed:dd:d4:36:9d:d6: 25:71:04:9b:2d:63:a9:57:e6:9d:8b:3a:ea:c1:a6:ac:27:27: de:04:e8:61:0d:09:5e:a1:9f:eb:60:d0:e9:bd:64:e1:ce:07: 0b:2e:22:72:e8:8c:01:c1:0e:e5:90:28:79:f9:1b:8e:b8:34: 90:84:2c:03:ad:4b:21:2c:01:c6:d8:9a:9a:d4:d7:2d:24:45: bb:f9:d5:58:f8:b6:ca:6f:94:31:92:39:73:18:a8:b3:9d:8c: c6:8c:08:98:d1:aa:d2:34:a2:c3:3a:85:8c:d6:67:10:4b:33: 6d:ed:3f:1e:9c:eb:48:b6:43:0c:03:06:a5:eb:b2:62:bc:29: 6a:61:ce:8c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUOKTJJamJMEuXOxs5oYsXdvp2028wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDIxNjQzMjNaFw0yNzA1MDExNjQ4MjNaMDMxMTAvBgNV BAMTKENFNENENDBFNDY4MjMxNTgwQUNDM0RDQkQ0RjdFNEY0OTgxMDQ4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER6ZLnEXaXoByWddgfTdomsuH pfIZ8h7RizcpLAhzkozMJZ55JxtveLdCFHpgKMA+WulUtsdRlisDxK6TxdLWYNzg Pqa18QAeXuzBSKRv6nAWf3+CFGyzEY7Tz3d+ag8vVCBobvI/Fybs3A21p8F7UOor /cV7yGkeS3HwLbgdRyltBZxBJpZ/YGlVUVFEhOgshDreWHtrh97/pe0e4AL6pHeq fsmsaKDPJHSvIJpQBJ/GoOBfsx/8QrGMtmfgO6OVLLQCcAqu8CHdsYoHGgcDw9Dz L3M8SxINN4+CQFUwKiZ3YRGSuWRwdBhcUC3t3k6u42zzVD2+nhMaV3eNL0UjAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOTNQORoIxWArM PcvU9+T0mBBIWjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG5r TXY4YlpnblhOblJ5UGk5d1lmdDV1THNkeHBKalZSQ1NhdVhzZzZRU3QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru a012OGJaZ25YTm5SeVBpOXdZZnQ1dUxzZHhwSmpWUkNTYXVYc2c2UVN0LzAvQ0U0 Q0Q0MEU0NjgyMzE1ODBBQ0MzRENCRDRGN0U0RjQ5ODEwNDg1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASViDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MGAwDQYJKoZIhvcNAQELBQADggEBAGcm4diVEo0ifdRfkzLwkop8fkuaea2aoNtq 0/ETejCgikkrz7WOUZxnS9FP++t9PLiBRZbvYIjghaBzoFL8bk529KQKoVnF8gX6 wI8pg61BNpEkcufBs/WW1rmt9Ur0ZT0aFYwL/+WjxoG5MxjXi5u4552b3lnRHu3d 1Dad1iVxBJstY6lX5p2LOurBpqwnJ94E6GENCV6hn+tg0Om9ZOHOBwsuInLojAHB DuWQKHn5G464NJCELAOtSyEsAcbYmprU1y0kRbv51Vj4tspvlDGSOXMYqLOdjMaM CJjRqtI0osM6hYzWZxBLM23tPx6c60i2QwwDBqXrsmK8KWphzow= -----END CERTIFICATE-----Generated at Tue May 12 21:42:13 2026 by rpki-client