$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer File: 64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer (raw, json) Hash identifier: Dx5C1HPPpuUead1iRduBNwMtkfHbykD7zpRBHpL0OnY= Subject key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A555BDC952AD3633339457FC4710A41F60F8B3B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft caRepository: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jul 2026 17:54:16 +0000 Certificate not after: Thu 29 Jul 2027 17:59:16 +0000 Subordinate resources: AS: 264025 IP: 143.137.32.0/22 IP: 168.197.56.0/22 IP: 2804:299c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:55:5b:dc:95:2a:d3:63:33:39:45:7f:c4:71:0a:41:f6:0f:8b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 17:54:16 2026 GMT Not After : Jul 29 17:59:16 2027 GMT Subject: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:9b:1d:04:58:14:89:cf:f3:2d:c0:ba:b9: f4:4b:ef:c2:c6:c4:b7:5b:b7:16:15:59:40:5b:b6: bc:99:d7:7b:70:a0:eb:f5:7b:61:fa:a7:7e:12:08: 64:19:9c:b7:50:e3:33:b0:a9:e9:69:dc:a6:9a:6f: 23:27:20:fb:7b:4c:2f:60:99:72:25:e3:0b:5d:b0: 68:96:ac:8a:5e:9c:03:2d:3a:c5:8a:9f:34:c6:a1: 41:73:e4:fd:b7:76:9b:2a:f4:2c:a3:39:a2:1b:0a: b8:12:40:12:3a:ce:52:bc:eb:52:97:1d:74:1f:4c: a0:45:8b:e5:b9:b4:a6:90:c4:99:7a:a7:bf:5b:a7: 07:b5:83:a9:50:16:9b:78:36:06:4c:ea:7d:82:8d: be:51:69:cf:75:6a:6f:d3:bf:97:b3:55:c7:34:e0: 10:88:7d:04:19:cd:b2:f0:bc:15:24:a7:6c:c1:f8: b6:fc:27:1c:ad:f1:bb:44:54:fd:3c:05:69:82:98: 55:dd:c0:e7:d6:6a:55:db:80:86:56:c7:f3:a8:c0: f1:8b:64:35:a9:00:88:af:42:84:b8:52:a3:3d:16: 14:38:81:8e:43:ff:31:1b:a5:a9:bc:d1:2b:5d:6e: 3f:a7:54:1a:34:a1:72:ee:a3:0b:fe:12:e8:08:9f: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.32.0/22 168.197.56.0/22 IPv6: 2804:299c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264025 Signature Algorithm: sha256WithRSAEncryption a2:61:c3:33:46:06:c1:b5:4d:cf:11:ba:a8:3d:e0:b8:2a:cf: 26:44:2a:9e:c7:5a:8c:d8:ed:16:e0:6b:6a:11:ec:57:95:5c: dd:f1:77:a6:77:f0:ad:b1:a5:c2:f2:95:ad:10:bd:43:cb:90: 3d:a2:7c:3e:3c:0b:c7:67:2f:dd:89:e1:ac:58:c0:9e:85:dd: 2a:e6:1d:0f:30:6e:b2:70:5a:14:c4:e5:f3:9e:5d:f0:4b:54: 2e:4b:9e:4f:0d:4b:fe:fb:11:90:cc:17:ee:22:73:be:01:80: fe:e9:98:d5:ac:fc:a6:fc:02:01:cf:6c:02:43:75:a9:eb:37: 74:32:ae:47:32:0e:23:61:d5:3a:45:94:55:1d:fb:36:a4:79: ed:93:ef:0d:88:64:6b:b6:e5:98:7a:8e:ea:94:84:80:d8:70: ad:0c:f3:b6:4b:8c:34:37:23:20:13:30:50:58:a4:5e:4d:2f: 02:97:b4:5c:08:35:da:a0:d8:ec:62:8f:bb:14:8d:7e:79:a5: 56:27:82:fa:47:89:6f:17:f9:08:b1:5a:cf:24:21:5e:9a:b8: bd:2a:31:f6:6a:47:e9:7e:3e:7f:35:07:a9:5b:03:1f:44:f0: 87:db:20:76:97:fd:eb:2f:54:2a:bf:7c:99:34:a5:7c:30:a6: a6:38:0f:8b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWlVb3JUq02MzOUV/xHEKQfYPizswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MzAxNzU0MTZaFw0yNzA3MjkxNzU5MTZaMDMxMTAvBgNV BAMTKDY0RUY0QTg4NEFCOUU0MEVENkEwOUFFMUMzRjQ3RDdDOTE5MzA1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtJsdBFgUic/zLcC6ufRL78LG xLdbtxYVWUBbtryZ13twoOv1e2H6p34SCGQZnLdQ4zOwqelp3KaabyMnIPt7TC9g mXIl4wtdsGiWrIpenAMtOsWKnzTGoUFz5P23dpsq9CyjOaIbCrgSQBI6zlK861KX HXQfTKBFi+W5tKaQxJl6p79bpwe1g6lQFpt4NgZM6n2Cjb5Rac91am/Tv5ezVcc0 4BCIfQQZzbLwvBUkp2zB+Lb8Jxyt8btEVP08BWmCmFXdwOfWalXbgIZWx/OowPGL ZDWpAIivQoS4UqM9FhQ4gY5D/zEbpam80Stdbj+nVBo0oXLuowv+EugIn9iXAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRk70qISrnkDtag muHD9H18kZMFcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGtL bXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdWb3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr S21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAvNjRF RjRBODg0QUI5RTQwRUQ2QTA5QUUxQzNGNDdEN0M5MTkzMDU3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj4kgAwQCqMU4MA0EAgACMAcDBQAoBCmcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHWTANBgkqhkiG9w0BAQsFAAOCAQEAomHDM0YG wbVNzxG6qD3guCrPJkQqnsdajNjtFuBrahHsV5Vc3fF3pnfwrbGlwvKVrRC9Q8uQ PaJ8PjwLx2cv3YnhrFjAnoXdKuYdDzBusnBaFMTl855d8EtULkueTw1L/vsRkMwX 7iJzvgGA/umY1az8pvwCAc9sAkN1qes3dDKuRzIOI2HVOkWUVR37NqR57ZPvDYhk a7blmHqO6pSEgNhwrQzztkuMNDcjIBMwUFikXk0vApe0XAg12qDY7GKPuxSNfnml VieC+keJbxf5CLFazyQhXpq4vSox9mpH6X4+fzUHqVsDH0Twh9sgdpf96y9UKr98 mTSlfDCmpjgPiw== -----END CERTIFICATE-----Generated at Sun Aug 23 00:29:33 2026 by rpki-client