$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer File: 7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer (raw, json) Hash identifier: QiQfZbHkjNKsUD6RysC5MecNNr8o31GZcBIiHZHFPWU= Subject key identifier: 7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 06F7107DD965D951491E76E39B23D51218A3D624 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft caRepository: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 16 May 2026 14:51:24 +0000 Certificate not after: Sat 15 May 2027 14:56:24 +0000 Subordinate resources: AS: 265130 IP: 143.208.152.0/22 IP: 170.254.200.0/22 IP: 2804:2b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f7:10:7d:d9:65:d9:51:49:1e:76:e3:9b:23:d5:12:18:a3:d6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 14:51:24 2026 GMT Not After : May 15 14:56:24 2027 GMT Subject: CN=7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:bc:ec:a7:2b:54:69:bb:46:f8:6a:19:9c: 06:e3:77:c2:4e:f2:c3:e4:e2:74:95:02:09:cd:28: 35:fa:64:07:e8:74:6c:61:fa:a4:3e:3f:19:58:0c: b1:d9:b9:27:52:58:ad:68:d7:30:11:ca:60:1d:15: 6c:6b:98:91:18:47:b4:84:70:d1:26:e2:86:27:e1: b4:fd:3a:ac:80:7a:17:a7:03:4e:d0:92:6f:10:7f: 80:c5:df:99:e7:6b:85:35:44:62:31:36:38:89:22: a4:b8:d8:a6:0a:e4:4f:35:70:4e:ce:42:fd:cd:04: 2f:16:b4:9f:e4:b6:c7:0c:d3:1c:7d:1d:49:b8:b8: 49:82:39:a9:52:37:48:6f:a8:9d:b8:74:f7:2e:4a: 4a:e0:cf:8c:d6:c8:23:17:d6:46:06:4f:cb:28:7e: 2e:a0:01:c0:a3:4b:e7:6f:01:45:c2:ed:1b:aa:f8: 37:23:79:0c:a4:b5:e7:aa:81:e4:c1:6d:e7:8d:d5: 66:0e:67:74:3d:01:15:b4:52:35:dc:bf:b7:47:49: 93:63:cd:30:b8:d6:fd:8c:ff:9d:e4:41:57:5a:a0: 91:cb:6c:7d:79:54:19:46:57:a8:b5:15:ca:ec:37: 27:74:bd:2c:0b:95:d2:d7:c6:29:7e:05:c6:4e:26: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.152.0/22 170.254.200.0/22 IPv6: 2804:2b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265130 Signature Algorithm: sha256WithRSAEncryption 93:ff:29:48:45:9e:02:68:6a:2d:84:35:e8:27:4c:3d:96:be: 8b:93:e1:67:42:1b:af:30:d8:b2:62:78:d3:ff:ff:3e:6e:e5: 6b:0e:f8:7e:09:f0:6e:5b:60:2d:bc:32:31:0b:be:37:cd:c7: c3:4e:de:1b:c0:8d:35:3f:6c:53:12:4b:ce:f6:78:2c:86:75: af:eb:b3:4d:c1:80:94:f0:2b:cd:d1:99:2a:af:ab:2c:34:7b: f4:40:e9:4c:79:68:5f:a7:d9:8a:66:52:7b:71:f8:d2:f4:a1: bb:f0:2f:6d:37:2a:8e:46:7e:24:97:d9:45:73:63:ab:1d:7c: a0:48:81:d1:dc:5d:51:ee:6f:23:cf:7e:a2:51:68:ba:1f:6b: 70:0a:8c:ce:0a:b1:a3:31:65:5c:50:11:ea:f8:b5:c8:b0:69: 5f:71:b6:92:4b:9c:7a:04:10:5e:b2:54:b8:ba:72:fb:df:7e: 65:3f:58:53:5d:98:7b:1e:fc:53:90:a5:58:0a:03:18:35:81: ac:0c:22:cd:39:1e:66:d8:5b:2c:17:48:46:c8:c8:1a:1d:00: 1d:cc:3b:41:bc:6e:89:41:a0:38:c9:0b:37:b9:52:f3:f5:54: 2b:19:4e:ae:47:2a:e6:98:cd:95:0e:3f:83:9b:f8:9f:38:97: f1:c9:82:72 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUBvcQfdll2VFJHnbjmyPVEhij1iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTYxNDUxMjRaFw0yNzA1MTUxNDU2MjRaMDMxMTAvBgNV BAMTKDdCMzA1QTlEODFGQjJBOTVBMDlFRTI4RTIyRjNGRUZFMUVFM0Q5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpibzspytUabtG+GoZnAbjd8JO 8sPk4nSVAgnNKDX6ZAfodGxh+qQ+PxlYDLHZuSdSWK1o1zARymAdFWxrmJEYR7SE cNEm4oYn4bT9OqyAehenA07Qkm8Qf4DF35nna4U1RGIxNjiJIqS42KYK5E81cE7O Qv3NBC8WtJ/ktscM0xx9HUm4uEmCOalSN0hvqJ24dPcuSkrgz4zWyCMX1kYGT8so fi6gAcCjS+dvAUXC7Ruq+DcjeQykteeqgeTBbeeN1WYOZ3Q9ARW0UjXcv7dHSZNj zTC41v2M/53kQVdaoJHLbH15VBlGV6i1FcrsNyd0vSwLldLXxil+BcZOJu97AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7MFqdgfsqlaCe 4o4i8/7+HuPZcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMC83QjMw NUE5RDgxRkIyQTk1QTA5RUUyOEUyMkYzRkVGRTFFRTNEOTcwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP0JgDBAKq/sgwDQQCAAIwBwMFACgEKwAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAuqMA0GCSqGSIb3DQEBCwUAA4IBAQCT/ylIRZ4C aGothDXoJ0w9lr6Lk+FnQhuvMNiyYnjT//8+buVrDvh+CfBuW2AtvDIxC743zcfD Tt4bwI01P2xTEkvO9ngshnWv67NNwYCU8CvN0Zkqr6ssNHv0QOlMeWhfp9mKZlJ7 cfjS9KG78C9tNyqORn4kl9lFc2OrHXygSIHR3F1R7m8jz36iUWi6H2twCozOCrGj MWVcUBHq+LXIsGlfcbaSS5x6BBBeslS4unL7335lP1hTXZh7HvxTkKVYCgMYNYGs DCLNOR5m2FssF0hGyMgaHQAdzDtBvG6JQaA4yQs3uVLz9VQrGU6uRyrmmM2VDj+D m/ifOJfxyYJy -----END CERTIFICATE-----Generated at Sun May 24 12:47:50 2026 by rpki-client