$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer (raw, json) Hash identifier: a5DD6kotla0wUzwRbd4x215Exq7nBR8EDfThc8uheLM= Subject key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4FB981FFFDE3A9CEB7AC93027AB54531C52EB646 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft caRepository: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 09:41:36 +0000 Certificate not after: Tue 11 May 2027 09:46:36 +0000 Subordinate resources: AS: 52746 IP: 131.221.180.0/22 IP: 177.85.172.0/22 IP: 2804:1e54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 06:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b9:81:ff:fd:e3:a9:ce:b7:ac:93:02:7a:b5:45:31:c5:2e:b6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 09:41:36 2026 GMT Not After : May 11 09:46:36 2027 GMT Subject: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:b3:3f:89:07:c3:77:5c:54:c2:7f:6f:ad: 78:7d:61:45:f2:6b:d7:8d:2a:e5:96:51:1e:fe:f6: f7:1a:67:fd:7e:cc:9b:a1:92:4c:f4:7b:23:34:2e: 24:86:b2:7c:92:ac:5a:08:4a:20:de:27:1f:f4:18: 08:ae:11:13:52:7e:b7:15:4a:a6:4b:26:d5:1e:93: 63:79:b6:7a:8c:21:73:b1:7b:d5:ec:02:78:e1:c3: 94:88:88:2f:f5:5e:7d:0a:b9:a8:5f:7b:ff:04:0c: 93:fa:60:0f:f3:f9:9a:7e:06:14:96:42:f7:28:7b: 7f:24:cd:b1:51:90:62:4a:4c:84:1a:c5:07:ef:68: a1:5f:f3:1a:4e:4f:5e:83:48:40:fd:64:87:c8:cb: 45:c6:77:44:fa:b6:8a:a8:c0:93:98:f5:1d:f4:4a: 5c:e6:5a:4b:65:1c:b8:38:ed:5d:ff:b6:7b:8b:ab: aa:47:94:1e:b0:b8:b6:5e:a4:4b:a5:98:e5:d2:f8: e3:31:bb:18:1e:04:60:50:5b:31:11:3e:23:3e:1f: 23:94:2c:e7:1d:f6:92:60:a9:fa:25:3a:b5:d0:db: 46:06:ef:ff:ba:75:34:b4:7b:8b:07:d6:6f:bf:0f: c3:43:1f:31:ef:65:22:75:f7:63:a7:d0:3d:3b:b1: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.180.0/22 177.85.172.0/22 IPv6: 2804:1e54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52746 Signature Algorithm: sha256WithRSAEncryption 7e:b5:71:ce:ee:e9:ad:8e:ca:9d:5b:ce:27:13:1d:78:a2:1c: 48:0f:97:76:31:cd:18:6d:31:3e:64:e9:57:37:cd:e7:25:56: bc:40:89:a5:8b:da:19:08:4f:81:17:6b:ff:24:7c:0f:ac:49: 3f:ce:7a:cf:42:f6:46:6d:f0:ff:47:38:2d:9d:91:c0:b1:2e: 5d:55:4e:be:25:c0:4f:eb:18:1f:5f:cc:0d:a0:ed:70:87:8d: 34:d8:ed:ea:ca:11:48:ec:27:a7:b5:e6:47:05:a8:9e:9c:a1: d3:50:79:69:37:9f:1b:bb:e1:7c:14:7d:9c:55:d5:8b:22:f2: 8a:01:0d:aa:54:f4:a8:58:12:d0:eb:ce:7a:b8:fe:99:09:8f: f4:87:b4:19:14:12:7d:f0:77:01:f6:95:f4:e6:55:63:2a:67: 7f:16:0f:51:6d:64:41:7d:56:dc:f6:0a:07:70:79:dc:34:f3: 6c:43:5b:18:73:26:7b:9a:41:d7:dd:ae:45:1b:4d:9e:57:c9: d6:c0:5e:5a:60:e5:0c:fd:79:11:f4:ea:66:7b:8c:f6:b1:26: 04:b2:43:aa:16:fe:0a:98:f5:54:25:91:8b:eb:1c:c2:5e:91: ea:3d:63:4a:55:53:14:fe:69:2e:6d:08:8c:46:31:9a:27:ac: 32:45:22:5b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUT7mB//3jqc63rJMCerVFMcUutkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTIwOTQxMzZaFw0yNzA1MTEwOTQ2MzZaMDMxMTAvBgNV BAMTKERGQjFGM0ZBNkY0MjBERjAxOTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaLM/iQfDd1xUwn9vrXh9YUXy a9eNKuWWUR7+9vcaZ/1+zJuhkkz0eyM0LiSGsnySrFoISiDeJx/0GAiuERNSfrcV SqZLJtUek2N5tnqMIXOxe9XsAnjhw5SIiC/1Xn0Kuahfe/8EDJP6YA/z+Zp+BhSW Qvcoe38kzbFRkGJKTIQaxQfvaKFf8xpOT16DSED9ZIfIy0XGd0T6toqowJOY9R30 SlzmWktlHLg47V3/tnuLq6pHlB6wuLZepEulmOXS+OMxuxgeBGBQWzERPiM+HyOU LOcd9pJgqfolOrXQ20YG7/+6dTS0e4sH1m+/D8NDHzHvZSJ192On0D07sWzJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfsfP6b0IN8BkF UvwJcoWa9F82jjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW55 ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vu eWRocEJWbWthNFdOQ2RRd2hrZm1SbnVxRTZNRm01eDJxWTN2cG9zb2pYLzAvREZC MUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFGNDVGMzY4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg920AwQCsVWsMA0EAgACMAcDBQAoBB5UMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOCjANBgkqhkiG9w0BAQsFAAOCAQEAfrVxzu7p rY7KnVvOJxMdeKIcSA+XdjHNGG0xPmTpVzfN5yVWvECJpYvaGQhPgRdr/yR8D6xJ P856z0L2Rm3w/0c4LZ2RwLEuXVVOviXAT+sYH1/MDaDtcIeNNNjt6soRSOwnp7Xm RwWonpyh01B5aTefG7vhfBR9nFXViyLyigENqlT0qFgS0OvOerj+mQmP9Ie0GRQS ffB3AfaV9OZVYypnfxYPUW1kQX1W3PYKB3B53DTzbENbGHMme5pB192uRRtNnlfJ 1sBeWmDlDP15EfTqZnuM9rEmBLJDqhb+Cpj1VCWRi+scwl6R6j1jSlVTFP5pLm0I jEYxmiesMkUiWw== -----END CERTIFICATE-----Generated at Wed May 13 08:01:47 2026 by rpki-client