$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer File: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer (raw, json) Hash identifier: T0mYd1v/yv8Q7/5wsX2MQROGXmsJe+dFXBvgaztVyC0= Subject key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A7064633721A0FB860D5856C0426D98E6E5B1DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft caRepository: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 16 Jul 2026 19:39:29 +0000 Certificate not after: Thu 15 Jul 2027 19:44:29 +0000 Subordinate resources: AS: 264216 IP: 138.99.196.0/22 IP: 177.86.48.0/21 IP: 2804:2458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:70:64:63:37:21:a0:fb:86:0d:58:56:c0:42:6d:98:e6:e5:b1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 16 19:39:29 2026 GMT Not After : Jul 15 19:44:29 2027 GMT Subject: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:a2:c6:4e:95:a4:3d:b3:bc:ec:83:fb:6c: 17:60:14:85:6e:87:2f:92:81:3f:a4:b5:ab:c0:2e: 71:19:d8:18:95:a3:f7:ec:05:c3:f0:00:65:be:dc: fe:7d:86:fa:f4:d5:1f:4c:f1:aa:48:db:03:2a:24: ea:cd:0e:f7:40:c8:7f:64:f5:7f:73:2a:8f:02:88: 6e:48:27:48:48:a7:76:1d:e1:1b:72:04:14:19:15: 77:9b:f7:ce:5c:37:3a:d8:13:ed:f7:ee:0c:ed:bc: 0d:a4:6d:31:88:b5:85:fb:0f:2c:37:65:a3:5a:d0: 76:54:21:0a:ad:38:4e:06:8b:c9:b9:71:2d:83:36: 15:1b:d1:7e:df:48:bd:43:30:f5:bf:fd:64:16:a3: 6c:2d:89:4f:6a:41:16:7a:6e:34:7e:d2:67:5d:c8: fe:85:24:f9:46:f3:13:eb:0c:f1:65:38:0d:e5:6e: 68:a0:60:38:ab:cf:60:0c:19:10:7f:2c:1e:79:6b: 4e:1d:0c:a7:c7:9c:2d:d2:a4:70:c0:37:d6:27:4f: 98:15:be:9b:80:8c:ff:24:5b:af:97:bd:21:76:7b: 32:6b:93:05:57:69:f9:b9:5a:8c:c5:26:11:7b:cb: a9:d1:9b:89:21:3f:f4:6c:d0:c7:05:81:e2:c5:e9: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.196.0/22 177.86.48.0/21 IPv6: 2804:2458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264216 Signature Algorithm: sha256WithRSAEncryption af:70:64:f0:08:60:c8:e7:7f:c6:d6:9f:79:61:bf:83:d7:6c: e3:5e:1e:59:43:cb:25:2c:f4:16:8d:3a:f5:d9:59:81:1a:33: 42:f9:00:7e:8f:e3:01:c4:a0:03:1b:52:29:35:93:ef:10:36: 2e:ff:18:ee:38:c0:a4:a4:09:be:38:7e:1f:4d:97:94:d8:34: ba:76:7b:48:df:01:37:b9:c5:d5:2a:1a:02:04:b2:92:78:b7: f7:65:eb:4d:82:89:37:02:5f:c2:6d:ed:14:17:da:ca:b0:6e: 3c:e6:39:93:fd:63:d8:0d:b1:64:52:ee:1b:54:32:82:05:88: 88:1e:21:5d:c2:cf:31:f6:58:e4:8c:05:a1:f4:97:e3:2b:72: 50:9a:30:a8:f1:e8:50:39:61:5b:98:06:ea:2e:da:1c:23:ff: ca:5d:c5:6b:05:dc:b3:e6:7c:a3:aa:7e:6b:d6:ca:45:59:22: 7f:96:00:0c:5a:13:16:e5:a9:55:d4:36:77:b8:1b:d1:43:18: 3a:74:4d:24:93:8c:3e:02:1f:8d:4e:9b:26:64:8d:d1:65:8d: 29:7f:61:0a:2b:83:9f:6f:8e:8b:ab:0f:60:62:a4:e7:c9:ea: 8d:71:93:62:a1:14:d3:d5:7a:b4:59:ed:b5:b1:fd:c6:18:b2: 6a:b5:f1:30 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUanBkYzchoPuGDVhWwEJtmOblsdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTYxOTM5MjlaFw0yNzA3MTUxOTQ0MjlaMDMxMTAvBgNV BAMTKEUzMjU1RTI0REY0MTdEOUQyQ0Y1QThBMzkyQzMyNUYwOTQzMkVBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHKLGTpWkPbO87IP7bBdgFIVu hy+SgT+ktavALnEZ2BiVo/fsBcPwAGW+3P59hvr01R9M8apI2wMqJOrNDvdAyH9k 9X9zKo8CiG5IJ0hIp3Yd4RtyBBQZFXeb985cNzrYE+337gztvA2kbTGItYX7Dyw3 ZaNa0HZUIQqtOE4Gi8m5cS2DNhUb0X7fSL1DMPW//WQWo2wtiU9qQRZ6bjR+0mdd yP6FJPlG8xPrDPFlOA3lbmigYDirz2AMGRB/LB55a04dDKfHnC3SpHDAN9YnT5gV vpuAjP8kW6+XvSF2ezJrkwVXafm5WozFJhF7y6nRm4khP/Rs0McFgeLF6YlFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjJV4k30F9nSz1 qKOSwyXwlDLqXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3dF ZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d3 RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAvRTMy NTVFMjRERjQxN0Q5RDJDRjVBOEEzOTJDMzI1RjA5NDMyRUE1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimPEAwQDsVYwMA0EAgACMAcDBQAoBCRYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIGDANBgkqhkiG9w0BAQsFAAOCAQEAr3Bk8Ahg yOd/xtafeWG/g9ds414eWUPLJSz0Fo069dlZgRozQvkAfo/jAcSgAxtSKTWT7xA2 Lv8Y7jjApKQJvjh+H02XlNg0unZ7SN8BN7nF1SoaAgSykni392XrTYKJNwJfwm3t FBfayrBuPOY5k/1j2A2xZFLuG1QyggWIiB4hXcLPMfZY5IwFofSX4ytyUJowqPHo UDlhW5gG6i7aHCP/yl3FawXcs+Z8o6p+a9bKRVkif5YADFoTFuWpVdQ2d7gb0UMY OnRNJJOMPgIfjU6bJmSN0WWNKX9hCiuDn2+Oi6sPYGKk58nqjXGTYqEU09V6tFnt tbH9xhiyarXxMA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:07:29 2026 by rpki-client