$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer File: 7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer (raw, json) Hash identifier: KZE8wT+pqgDNq2w9uhbX6qoyx4kkeNAccwLG9kDiTZ4= Subject key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4CEF23C0A684E53FD34F6ADB1B6180ED72699AAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft caRepository: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 22 Aug 2026 18:07:16 +0000 Certificate not after: Sat 21 Aug 2027 18:12:16 +0000 Subordinate resources: AS: 268738 IP: 45.71.28.0/22 IP: 45.171.44.0/22 IP: 2804:59fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 06:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ef:23:c0:a6:84:e5:3f:d3:4f:6a:db:1b:61:80:ed:72:69:9a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 18:07:16 2026 GMT Not After : Aug 21 18:12:16 2027 GMT Subject: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:6f:69:3e:86:68:30:4c:bd:aa:51:29:b7: b1:60:d6:fb:16:48:d3:61:4f:6f:e1:64:94:17:72: 2f:d4:2a:56:2a:15:50:87:b8:9b:af:72:7d:ea:12: 8e:7c:40:0e:38:60:8a:9a:00:54:f4:b0:43:71:ef: 68:23:47:3d:d4:5d:05:dc:54:09:fa:8b:1b:36:7b: d9:17:9c:11:cc:42:60:b0:8c:42:a7:e8:02:1e:b5: e4:99:24:8e:29:e7:b9:b7:6a:f7:5f:c6:f1:3d:77: b0:df:9e:0a:54:7f:67:17:0e:51:82:e1:d2:81:e8: 29:3b:f5:be:f6:31:d1:50:f1:97:36:9d:90:e2:56: ed:d6:a4:79:8d:b7:38:74:fc:a8:21:11:8e:bf:09: 70:21:68:4b:e9:92:49:d1:d1:ee:5a:0d:89:df:36: fd:b5:da:5c:47:8a:2d:9f:73:d2:f9:0b:05:9d:10: d4:5b:a7:1a:d2:cc:76:00:b7:85:a1:cb:89:1c:95: 3b:30:d0:f9:03:4a:51:79:fb:5d:da:ee:09:04:65: 34:f8:2b:62:6b:73:de:11:c3:a1:c6:74:2e:eb:87: e3:8c:d8:e8:b4:5e:30:7c:21:5e:6c:eb:e6:d5:60: 3a:c7:8f:18:e5:1d:5a:1c:c0:3f:dd:48:69:ce:1b: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.28.0/22 45.171.44.0/22 IPv6: 2804:59fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268738 Signature Algorithm: sha256WithRSAEncryption 86:cc:c1:58:2a:73:b2:ba:d9:c0:15:8e:bf:0a:4f:34:64:63: 9c:11:65:cd:76:27:9e:b5:2e:95:bd:95:0d:bf:83:97:c1:07: 08:24:dc:95:5f:0a:57:8f:ad:55:27:ab:4a:fe:53:74:a7:b3: ec:1f:a7:9e:11:78:94:21:a8:d2:f7:fc:c0:87:9b:0c:c7:41: 7d:26:21:51:3e:19:76:45:52:07:50:6e:a2:8e:f7:a2:bc:08: 4c:7a:fa:45:6f:3a:b1:a1:05:d0:cf:c1:2c:78:bf:6d:ac:2a: 18:11:8d:84:95:95:67:26:60:4b:e0:37:66:c2:f1:f5:f7:9a: d3:d7:e1:5b:27:41:c3:63:a8:61:21:99:e5:75:c9:97:64:94: 48:29:72:57:d1:47:57:7e:6d:e9:73:34:2b:f8:d2:55:5f:26: a9:d8:55:5a:4b:aa:8f:40:f7:7b:8f:a4:ad:d8:2c:57:36:2f: b1:2e:da:ea:ba:e0:eb:00:b0:ca:9d:a2:89:45:dc:ae:ab:63: ff:6a:37:72:6a:51:df:62:dd:de:9e:71:13:81:11:05:39:d4: 06:37:d3:c3:ef:55:3b:59:1f:b0:0e:16:32:ba:bf:07:94:3b: 2d:ed:eb:70:c2:cb:30:04:6d:41:49:de:42:98:80:26:e6:88: 46:df:fc:23 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUTO8jwKaE5T/TT2rbG2GA7XJpmq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjIxODA3MTZaFw0yNzA4MjExODEyMTZaMDMxMTAvBgNV BAMTKDdCRTdCMTAyMDZCNUI1NkMwRjUwMEExQTcxRTgyQTVDRDkxQkNGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65G9pPoZoMEy9qlEpt7Fg1vsW SNNhT2/hZJQXci/UKlYqFVCHuJuvcn3qEo58QA44YIqaAFT0sENx72gjRz3UXQXc VAn6ixs2e9kXnBHMQmCwjEKn6AIeteSZJI4p57m3avdfxvE9d7DfngpUf2cXDlGC 4dKB6Ck79b72MdFQ8Zc2nZDiVu3WpHmNtzh0/KghEY6/CXAhaEvpkknR0e5aDYnf Nv212lxHii2fc9L5CwWdENRbpxrSzHYAt4Why4kclTsw0PkDSlF5+13a7gkEZTT4 K2Jrc94Rw6HGdC7rh+OM2Oi0XjB8IV5s6+bVYDrHjxjlHVocwD/dSGnOG1eFAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR757ECBrW1bA9Q Chpx6Cpc2RvPWTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzdCRTdC MTAyMDZCNUI1NkMwRjUwMEExQTcxRTgyQTVDRDkxQkNGNTkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi1HHAMEAi2rLDANBAIAAjAHAwUAKARZ/DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEGcIwDQYJKoZIhvcNAQELBQADggEBAIbMwVgqc7K6 2cAVjr8KTzRkY5wRZc12J561LpW9lQ2/g5fBBwgk3JVfClePrVUnq0r+U3Sns+wf p54ReJQhqNL3/MCHmwzHQX0mIVE+GXZFUgdQbqKO96K8CEx6+kVvOrGhBdDPwSx4 v22sKhgRjYSVlWcmYEvgN2bC8fX3mtPX4VsnQcNjqGEhmeV1yZdklEgpclfRR1d+ belzNCv40lVfJqnYVVpLqo9A93uPpK3YLFc2L7Eu2uq64OsAsMqdoolF3K6rY/9q N3JqUd9i3d6ecROBEQU51AY308PvVTtZH7AOFjK6vweUOy3t63DCyzAEbUFJ3kKY gCbmiEbf/CM= -----END CERTIFICATE-----Generated at Sun Aug 23 07:14:25 2026 by rpki-client