$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer File: 4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer (raw, json) Hash identifier: 7ymEUlYl0lzl0US69NQr9blL9wT0YlTtjMF5zm9xSu0= Subject key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70B7B220B22959604CE5D83713E2362027D294E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft caRepository: rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 18 Apr 2026 16:27:46 +0000 Certificate not after: Sat 17 Apr 2027 16:32:46 +0000 Subordinate resources: AS: 268327 IP: 45.238.132.0/22 IP: 2804:4f70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b7:b2:20:b2:29:59:60:4c:e5:d8:37:13:e2:36:20:27:d2:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 18 16:27:46 2026 GMT Not After : Apr 17 16:32:46 2027 GMT Subject: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:a3:6a:ea:98:c3:12:93:cb:ca:bb:21:e0: e4:d0:07:61:5f:f7:41:4e:f8:b6:f7:a1:5b:d1:62: b7:30:bd:0b:3f:97:38:d7:83:52:20:09:17:10:88: c2:23:7f:06:1f:bf:28:30:98:b1:06:1b:1f:05:cc: 9b:d3:66:d4:ff:3c:4b:a4:b4:c7:b5:bd:b4:fa:50: 82:96:34:a2:b7:de:d7:23:17:31:7e:90:d2:51:63: 4c:4f:7b:59:ed:7b:a2:2d:f3:9e:32:02:dc:a9:f5: d4:d9:35:19:b5:25:cb:88:e3:7b:d9:85:e0:47:6f: 96:a6:2e:55:a2:66:ff:d2:2b:75:2c:98:05:4a:31: f5:f8:1c:68:e6:d8:15:75:f2:e3:2e:29:02:3d:f6: 80:c2:3c:aa:aa:2a:6f:ee:f0:1c:bd:bf:2e:08:f5: 09:7a:c3:af:30:d0:b9:92:49:70:0c:47:5f:94:d7: d9:27:39:d9:33:d6:07:18:9a:c3:5d:fe:21:dc:99: 1e:5d:34:af:38:b7:19:01:93:c9:0b:eb:f1:e1:4f: 86:16:fd:25:df:d3:a0:2c:0f:9b:61:48:27:ed:8c: 55:21:16:a2:6d:3f:2b:91:0a:46:8b:6a:f1:4b:92: 64:ba:7b:f2:6f:23:2c:f8:33:33:ed:aa:fb:bc:c2: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.132.0/22 IPv6: 2804:4f70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268327 Signature Algorithm: sha256WithRSAEncryption 73:7a:d9:6e:ec:51:27:2a:4d:cc:9e:e7:15:47:d5:b9:fd:1d: 0e:01:21:e2:9f:67:76:ea:58:27:8e:06:65:2a:2b:d9:63:fc: 26:0a:d5:fc:f6:05:f7:dc:bf:6b:39:de:a6:10:1e:f3:3c:78: 52:f5:43:a3:fb:ce:d9:ba:65:6c:8a:f7:ff:34:53:8b:21:5a: a3:24:9b:4f:6d:22:a2:fd:5f:84:4c:2f:40:5a:e8:85:e2:7a: 93:8a:d0:8c:e2:8a:e8:ed:61:b5:0e:82:48:78:ac:06:44:01: 9f:7a:27:8f:11:15:15:93:89:27:62:f3:3c:09:54:80:88:fc: d0:68:2b:b4:57:61:54:a4:5e:1b:c6:f3:e1:f8:de:23:2b:72: 92:32:9c:51:e4:49:85:85:f4:07:c2:d7:e6:bc:cd:48:27:91: 94:3a:e6:8d:7a:0a:3e:5f:c6:7c:ec:91:d0:0e:ae:27:37:f3: 89:32:82:7a:e9:8f:89:25:9b:1c:2f:c0:29:aa:f7:e1:63:84: 18:0b:7b:84:32:96:5f:f9:2f:85:d1:bd:d8:41:3c:bd:54:d8: 72:86:2c:ff:9b:63:6e:c4:bc:c7:fd:11:9c:5d:6c:e3:05:fa: 30:b4:f1:d8:1e:c2:09:04:45:b7:76:08:fb:fd:67:7d:af:06: e3:02:3e:e7 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUcLeyILIpWWBM5dg3E+I2ICfSlOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTgxNjI3NDZaFw0yNzA0MTcxNjMyNDZaMDMxMTAvBgNV BAMTKDQ1NTdEMDdCM0Y5RkUyMEE4NTBFMTU1M0MyRDBFMDkwRjFFNTVENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyqNq6pjDEpPLyrsh4OTQB2Ff 90FO+Lb3oVvRYrcwvQs/lzjXg1IgCRcQiMIjfwYfvygwmLEGGx8FzJvTZtT/PEuk tMe1vbT6UIKWNKK33tcjFzF+kNJRY0xPe1nte6It854yAtyp9dTZNRm1JcuI43vZ heBHb5amLlWiZv/SK3UsmAVKMfX4HGjm2BV18uMuKQI99oDCPKqqKm/u8By9vy4I 9Ql6w68w0LmSSXAMR1+U19knOdkz1gcYmsNd/iHcmR5dNK84txkBk8kL6/HhT4YW /SXf06AsD5thSCftjFUhFqJtPyuRCkaLavFLkmS6e/JvIyz4MzPtqvu8woYVAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRFV9B7P5/iCoUO FVPC0OCQ8eVdSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZnZh WWlyRmRncFc1UE5CZWZmRTRyMnU2UWlKaXVBUEtncEQ4RG5ucEZTbS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZnZh WWlyRmRncFc1UE5CZWZmRTRyMnU2UWlKaXVBUEtncEQ4RG5ucEZTbS8wLzQ1NTdE MDdCM0Y5RkUyMEE4NTBFMTU1M0MyRDBFMDkwRjFFNTVENDgubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi3uhDANBAIAAjAHAwUAKARPcDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEGCcwDQYJKoZIhvcNAQELBQADggEBAHN62W7sUScqTcye5xVH 1bn9HQ4BIeKfZ3bqWCeOBmUqK9lj/CYK1fz2Bffcv2s53qYQHvM8eFL1Q6P7ztm6 ZWyK9/80U4shWqMkm09tIqL9X4RML0Ba6IXiepOK0IziiujtYbUOgkh4rAZEAZ96 J48RFRWTiSdi8zwJVICI/NBoK7RXYVSkXhvG8+H43iMrcpIynFHkSYWF9AfC1+a8 zUgnkZQ65o16Cj5fxnzskdAOric384kygnrpj4klmxwvwCmq9+FjhBgLe4Qyll/5 L4XRvdhBPL1U2HKGLP+bY27EvMf9EZxdbOMF+jC08dgewgkERbd2CPv9Z32vBuMC Puc= -----END CERTIFICATE-----Generated at Wed May 13 15:02:46 2026 by rpki-client