$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer File: 464B947257F06B70E4456A2AACFED298FBBEE866.cer (raw, json) Hash identifier: FZCR6/RAJrH3ZtJaUMY+e3wTM0X9tF2sPpogLRlT9kg= Subject key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B3F0E747C440B0F2D5F2E1FFDFCA5ABD37677C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft caRepository: rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Jun 2026 13:48:47 +0000 Certificate not after: Fri 25 Jun 2027 13:53:47 +0000 Subordinate resources: AS: 268487 IP: 45.161.248.0/22 IP: 131.72.164.0/22 IP: 2804:51f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3f:0e:74:7c:44:0b:0f:2d:5f:2e:1f:fd:fc:a5:ab:d3:76:77:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 26 13:48:47 2026 GMT Not After : Jun 25 13:53:47 2027 GMT Subject: CN=464B947257F06B70E4456A2AACFED298FBBEE866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:88:54:29:9e:dd:6a:94:98:18:95:75:95: 82:ba:0b:a6:70:44:95:26:b9:02:34:41:17:a8:df: a2:7c:2a:03:22:d4:2b:15:e1:67:75:65:b5:67:ca: 40:b8:49:52:6a:83:79:9a:ab:6e:a1:9f:2f:ef:94: 7b:c5:da:76:94:02:7b:1a:77:aa:af:c2:93:6b:63: 4b:a2:65:b9:75:12:68:18:6f:d4:dc:2e:d9:81:a1: ac:6a:87:fa:25:3a:2c:0a:ac:f7:e1:9c:0d:d1:f9: dd:94:46:00:82:c8:1b:8d:3e:91:a6:04:f6:af:e7: ed:5b:70:86:9e:0f:19:e5:d4:28:ff:4e:1a:54:8a: 09:34:33:d9:47:65:6a:54:43:16:4a:b0:f0:34:94: c6:db:a3:de:73:50:16:90:ff:a9:96:03:a1:c1:44: 57:d6:56:96:30:36:8a:86:00:8f:6b:a0:62:d2:0e: 87:ef:63:28:32:90:c2:cb:f7:33:ea:d0:e4:f1:c4: 02:ff:b5:27:9e:6a:ee:d5:3d:79:1b:6b:5e:bb:c2: 92:69:d5:47:64:e7:ea:44:60:01:e7:7a:ba:44:65: 37:d2:20:3a:e7:69:38:e3:df:c0:72:f1:cf:47:da: 57:9b:a0:c0:e5:9b:43:44:7f:0e:61:90:42:e5:fe: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.248.0/22 131.72.164.0/22 IPv6: 2804:51f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268487 Signature Algorithm: sha256WithRSAEncryption ce:49:0e:06:8d:50:70:1d:0d:9a:de:1a:99:f4:84:a8:f4:ae: 71:b7:ba:c0:50:72:ce:ce:3c:ee:ad:63:67:83:b8:92:7d:0d: 90:c2:7f:8b:5d:fb:bd:62:c9:29:92:9d:82:c9:1d:6e:46:56: 90:f5:02:38:4c:61:8b:20:ce:6d:69:e6:84:18:0e:43:f0:b5: 11:3a:bf:22:55:46:79:9a:d5:a4:cf:75:fa:4c:de:19:2e:e8: 77:82:9b:72:d4:11:39:2a:3e:15:11:98:ab:15:4d:b9:14:e7: f9:d2:5b:43:79:90:c3:f9:e9:bc:b9:56:ae:3c:64:39:a5:95: d8:60:71:b4:48:e4:54:2c:e7:05:bf:a7:10:62:d0:e2:db:16: 0c:72:7f:08:6b:a9:db:3b:f3:57:12:fb:13:0a:3a:50:24:2c: 05:05:80:5b:bb:99:f2:a5:96:bd:f0:c6:1a:09:32:94:d9:b4: 56:35:ea:3a:0a:7e:ca:d2:0c:34:5d:0d:c7:7f:4c:80:9e:39: e5:39:fd:32:96:52:5f:d7:29:78:4a:90:bd:7d:bb:10:f1:d7: 2a:d9:92:1f:66:42:f3:53:86:cd:bf:17:aa:3d:0c:65:a3:09: 0e:43:2d:7e:c8:63:20:d9:de:26:9e:d3:3a:9d:6d:2b:76:4f: 15:7b:56:70 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUez8OdHxECw8tXy4f/fylq9N2d8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MjYxMzQ4NDdaFw0yNzA2MjUxMzUzNDdaMDMxMTAvBgNV BAMTKDQ2NEI5NDcyNTdGMDZCNzBFNDQ1NkEyQUFDRkVEMjk4RkJCRUU4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4ohUKZ7dapSYGJV1lYK6C6Zw RJUmuQI0QReo36J8KgMi1CsV4Wd1ZbVnykC4SVJqg3maq26hny/vlHvF2naUAnsa d6qvwpNrY0uiZbl1EmgYb9TcLtmBoaxqh/olOiwKrPfhnA3R+d2URgCCyBuNPpGm BPav5+1bcIaeDxnl1Cj/ThpUigk0M9lHZWpUQxZKsPA0lMbbo95zUBaQ/6mWA6HB RFfWVpYwNoqGAI9roGLSDofvYygykMLL9zPq0OTxxAL/tSeeau7VPXkba167wpJp 1Udk5+pEYAHnerpEZTfSIDrnaTjj38By8c9H2leboMDlm0NEfw5hkELl/o8tAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGS5RyV/BrcORF aiqs/tKY+77oZjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN243 Y2c1VHVVOEg1ZG5UUWk1N1JUNUhBQ2ZSZ0E3SmRuWUViR2FQWVlCV2kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdu N2NnNVR1VThINWRuVFFpNTdSVDVIQUNmUmdBN0pkbllFYkdhUFlZQldpLzAvNDY0 Qjk0NzI1N0YwNkI3MEU0NDU2QTJBQUNGRUQyOThGQkJFRTg2Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaH4AwQCg0ikMA0EAgACMAcDBQAoBFH4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQYxzANBgkqhkiG9w0BAQsFAAOCAQEAzkkOBo1Q cB0Nmt4amfSEqPSucbe6wFByzs487q1jZ4O4kn0NkMJ/i137vWLJKZKdgskdbkZW kPUCOExhiyDObWnmhBgOQ/C1ETq/IlVGeZrVpM91+kzeGS7od4KbctQROSo+FRGY qxVNuRTn+dJbQ3mQw/npvLlWrjxkOaWV2GBxtEjkVCznBb+nEGLQ4tsWDHJ/CGup 2zvzVxL7Ewo6UCQsBQWAW7uZ8qWWvfDGGgkylNm0VjXqOgp+ytIMNF0Nx39MgJ45 5Tn9MpZSX9cpeEqQvX27EPHXKtmSH2ZC81OGzb8Xqj0MZaMJDkMtfshjINneJp7T Op1tK3ZPFXtWcA== -----END CERTIFICATE-----Generated at Wed Jul 8 14:20:48 2026 by rpki-client