$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer File: EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer (raw, json) Hash identifier: 6Tvf50x4+N1woYL3JTfdKmrpdiTlYCYaUlN9okwy9SE= Subject key identifier: EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08BFCB248C700224DB7960D71C467211A546CBE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.mft caRepository: rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 05 Jul 2026 20:56:42 +0000 Certificate not after: Sun 04 Jul 2027 21:01:42 +0000 Subordinate resources: AS: 263626 IP: 168.232.176.0/22 IP: 179.125.24.0/21 IP: 2804:1040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:cb:24:8c:70:02:24:db:79:60:d7:1c:46:72:11:a5:46:cb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 5 20:56:42 2026 GMT Not After : Jul 4 21:01:42 2027 GMT Subject: CN=EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:66:61:e5:e3:e5:ac:2e:67:0a:bb:b0:20: 29:2e:32:e3:19:2d:4d:74:8c:26:18:35:a9:8c:b2: 6c:05:47:e4:12:6f:08:2d:29:1d:e3:74:40:c1:b0: da:7e:ad:9c:d9:0f:23:3c:db:16:e1:4b:64:3d:b2: 49:a4:0a:16:e2:9f:b1:5a:c1:4b:e1:3a:9f:77:c0: a1:54:0d:e6:3f:35:31:02:f7:eb:95:d3:1f:79:9f: 11:e4:83:2e:3a:0b:ba:2f:ef:21:71:a9:4b:a0:59: bb:c1:11:a2:06:24:8a:12:66:94:3c:77:a6:92:b0: 80:37:31:6c:a2:52:68:a7:17:13:b4:a5:5e:f6:5c: dd:73:03:a6:a2:f1:55:30:cf:86:b4:92:b0:f6:30: c2:1f:6b:3e:b8:12:6d:83:f0:cc:be:e5:5e:78:55: 27:f9:57:d7:be:6e:d4:a5:96:8f:8d:5b:81:da:80: 88:c6:42:85:1c:00:66:b8:c4:8b:34:d1:c6:96:d8: 7c:f1:53:2b:fc:c1:8b:63:0d:82:02:f2:7a:94:ac: 87:89:5d:e5:f0:30:27:d0:0b:99:0e:3d:87:69:25: e2:25:13:70:29:52:c9:67:81:28:78:7c:b4:06:16: f8:bc:60:43:d8:86:0a:e5:a9:e8:d8:f3:ba:02:8f: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.176.0/22 179.125.24.0/21 IPv6: 2804:1040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263626 Signature Algorithm: sha256WithRSAEncryption 77:83:38:43:b8:33:41:0e:5e:75:f6:ff:34:d4:cc:fd:ca:ca: 33:57:f4:d3:71:15:54:e4:97:6f:8e:a2:df:1b:1a:95:83:fb: e1:c7:4e:db:99:a2:cf:b9:89:43:b5:1c:54:0a:bf:e2:97:70: 16:1b:77:29:81:00:88:a9:ae:e0:6e:16:d5:36:5e:75:7a:da: 67:71:97:de:07:95:8a:ed:7a:16:4c:37:ca:a0:0b:35:de:d1: 84:5b:7b:8c:51:f9:ee:79:f9:54:4b:04:dd:0a:e1:46:b8:50: 50:cd:98:2d:b4:7f:4b:1e:db:dd:da:ea:43:dd:04:c9:0e:11: 03:d8:3f:56:01:da:ce:6f:20:81:e3:a4:b9:8b:9e:0f:60:06: fa:cb:62:37:97:4c:6e:2d:93:eb:2d:48:81:c7:4c:cb:b0:00: 15:cb:a4:9b:1b:e4:4c:99:0d:61:71:bf:53:7b:d3:88:37:e5: 2e:08:96:13:ff:de:d6:e9:8a:32:3b:bf:91:b2:df:bf:bf:1a: 98:b5:d0:0e:cc:9c:0e:49:d9:78:7c:6f:e6:93:1c:0f:60:ef: 6b:82:42:c1:d1:df:af:c1:76:eb:f1:c8:2b:2f:89:22:da:2c: c0:62:07:a4:e7:f9:84:87:a0:71:4e:02:15:72:36:57:51:79: 35:28:ea:a6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCL/LJIxwAiTbeWDXHEZyEaVGy+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDUyMDU2NDJaFw0yNzA3MDQyMTAxNDJaMDMxMTAvBgNV BAMTKEVGQTUwQ0Y4NjUyNjlGRjY1NUJGRDNGMTM0QjNCQjRGMUFDMkRDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+GZh5ePlrC5nCruwICkuMuMZ LU10jCYYNamMsmwFR+QSbwgtKR3jdEDBsNp+rZzZDyM82xbhS2Q9skmkChbin7Fa wUvhOp93wKFUDeY/NTEC9+uV0x95nxHkgy46C7ov7yFxqUugWbvBEaIGJIoSZpQ8 d6aSsIA3MWyiUminFxO0pV72XN1zA6ai8VUwz4a0krD2MMIfaz64Em2D8My+5V54 VSf5V9e+btSllo+NW4HagIjGQoUcAGa4xIs00caW2HzxUyv8wYtjDYIC8nqUrIeJ XeXwMCfQC5kOPYdpJeIlE3ApUslngSh4fLQGFvi8YEPYhgrlqejY87oCjxOzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvpQz4ZSaf9lW/ 0/E0s7tPGsLcmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ5 NXlMeVZoZlNzVWtUVjdtWTVIYnY3VXFvb0ZtRVJEWHNxazVRMXE4MVcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 eTV5THlWaGZTc1VrVFY3bVk1SGJ2N1Vxb29GbUVSRFhzcWs1UTFxODFXLzAvRUZB NTBDRjg2NTI2OUZGNjU1QkZEM0YxMzRCM0JCNEYxQUMyREM5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOiwAwQDs30YMA0EAgACMAcDBQAoBBBAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFyjANBgkqhkiG9w0BAQsFAAOCAQEAd4M4Q7gz QQ5edfb/NNTM/crKM1f003EVVOSXb46i3xsalYP74cdO25miz7mJQ7UcVAq/4pdw Fht3KYEAiKmu4G4W1TZedXraZ3GX3geViu16Fkw3yqALNd7RhFt7jFH57nn5VEsE 3QrhRrhQUM2YLbR/Sx7b3drqQ90EyQ4RA9g/VgHazm8ggeOkuYueD2AG+stiN5dM bi2T6y1IgcdMy7AAFcukmxvkTJkNYXG/U3vTiDflLgiWE//e1umKMju/kbLfv78a mLXQDsycDknZeHxv5pMcD2Dva4JCwdHfr8F26/HIKy+JItoswGIHpOf5hIegcU4C FXI2V1F5NSjqpg== -----END CERTIFICATE-----Generated at Wed Jul 8 14:21:01 2026 by rpki-client