$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer File: 464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer (raw, json) Hash identifier: 8Qt9YJRqshZOTa/EFe0ricFw1rNt5Wfbl0eC/JMeNyA= Subject key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 306284E028E44928F7F746EE9206D3E213020D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft caRepository: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 03:55:54 +0000 Certificate not after: Tue 11 May 2027 04:00:54 +0000 Subordinate resources: AS: 264547 IP: 138.0.132.0/22 IP: 170.79.8.0/22 IP: 2804:2150::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:62:84:e0:28:e4:49:28:f7:f7:46:ee:92:06:d3:e2:13:02:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 03:55:54 2026 GMT Not After : May 11 04:00:54 2027 GMT Subject: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:48:a3:d5:87:09:df:0d:41:8b:17:10:69: 46:45:b5:48:8e:dc:15:a7:08:6d:15:87:f8:2c:ec: 84:5a:71:69:ca:01:ca:16:35:76:84:a9:b3:3c:70: 66:fe:58:08:c2:f9:39:46:91:75:75:ef:de:0a:f7: ce:3e:74:ef:9a:13:2b:ac:88:1b:67:d4:5f:76:f0: 1a:1d:de:00:af:4a:cc:92:e9:7d:af:8e:b2:1b:cb: 85:f3:f7:5a:cd:e3:4e:0e:13:03:a6:f6:86:9e:88: 17:31:2e:b6:28:1e:29:92:ea:cf:2f:cc:15:6e:50: ed:62:46:ef:60:27:44:c5:33:d3:8d:69:c9:f9:f9: 4d:64:2b:13:a7:de:9a:ef:cf:fd:3b:db:52:9c:d6: 24:4a:7d:9f:ef:63:21:ea:9c:c7:52:f0:bf:87:16: fc:61:c8:35:34:91:c2:c7:0c:7b:95:62:a6:49:b5: 98:84:65:49:31:e2:63:e4:41:90:eb:f9:e6:91:9e: 9f:54:c4:3f:e3:ac:02:02:39:76:86:39:36:2c:35: 08:f5:3f:32:40:86:bf:e4:bb:de:f1:2f:50:c1:8d: 33:a1:31:b1:41:2c:a1:11:3d:b7:08:e5:92:95:e1: 60:d3:07:67:4a:83:13:18:8d:1d:be:91:58:2f:d1: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.132.0/22 170.79.8.0/22 IPv6: 2804:2150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264547 Signature Algorithm: sha256WithRSAEncryption 7d:a5:53:93:be:60:36:35:cb:db:c7:5c:10:00:1a:ba:8b:d1: 3c:09:59:c9:c2:d1:d6:bb:7f:45:2c:7f:9f:27:b6:3f:3f:8b: 78:05:3a:a1:fa:92:b1:a0:6c:b2:f8:92:e2:d5:dc:37:de:3f: 2e:19:86:f3:fb:f7:61:69:e5:3f:ab:5c:01:a1:63:b2:88:e9: 39:9d:c6:f1:d0:91:df:bd:b0:57:a9:e0:75:42:a0:28:86:71: db:48:bd:35:bd:8a:eb:e5:7d:58:62:ff:21:c2:a4:22:9a:b5: c1:30:d7:2d:5d:8d:be:9f:cc:b4:db:50:11:d1:04:57:e5:36: b6:6f:85:0d:26:d2:3b:ed:bf:a1:53:c0:1d:26:5b:cc:36:01: 95:5a:02:5e:0a:e4:f9:c5:a5:5f:aa:37:3a:a7:b7:de:fe:f1: 02:b3:2d:16:17:6c:fd:a6:58:1a:33:6d:fd:6d:37:78:5f:57: ed:2f:e4:73:af:57:01:2b:07:a6:92:29:bd:a5:91:d9:06:6d: a2:12:5b:03:44:bf:45:dc:83:7c:ae:5e:bd:22:c8:94:7b:67: de:bc:9e:c6:82:84:75:58:69:05:c6:08:31:06:55:fb:ec:21: d6:f7:51:0a:b3:55:59:e9:63:c9:e5:d6:11:04:0b:b2:2a:29: 7f:54:03:46 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgITMGKE4CjkSSj390bukgbT4hMCDTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI2MDUxMjAzNTU1NFoXDTI3MDUxMTA0MDA1NFowMzExMC8GA1UE AxMoNDY0RjdFQkExM0M0M0QxRkI4RUFDQ0JDQzBENDJFOUEyOEJDNUVBQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAORmSKPVhwnfDUGLFxBpRkW1SI7c FacIbRWH+CzshFpxacoByhY1doSpszxwZv5YCML5OUaRdXXv3gr3zj5075oTK6yI G2fUX3bwGh3eAK9KzJLpfa+OshvLhfP3Ws3jTg4TA6b2hp6IFzEutigeKZLqzy/M FW5Q7WJG72AnRMUz041pyfn5TWQrE6femu/P/TvbUpzWJEp9n+9jIeqcx1Lwv4cW /GHINTSRwscMe5Vipkm1mIRlSTHiY+RBkOv55pGen1TEP+OsAgI5doY5Niw1CPU/ MkCGv+S73vEvUMGNM6ExsUEsoRE9twjlkpXhYNMHZ0qDExiNHb6RWC/RruUCAwEA AaOCA0AwggM8MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEZPfroTxD0fuOrM vMDULpoovF6sMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82a0tk SG1jeG5GTE5KQkxMNG1OSmJTMzFVVjZ3ZkhtaVFmMlE2YkVwQ0tvMi8wLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmtL ZEhtY3huRkxOSkJMTDRtTkpiUzMxVVY2d2ZIbWlRZjJRNmJFcENLbzIvMC80NjRG N0VCQTEzQzQzRDFGQjhFQUNDQkNDMEQ0MkU5QTI4QkM1RUFDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKAIQDBAKqTwgwDQQCAAIwBwMFACgEIVAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAljMA0GCSqGSIb3DQEBCwUAA4IBAQB9pVOTvmA2 Ncvbx1wQABq6i9E8CVnJwtHWu39FLH+fJ7Y/P4t4BTqh+pKxoGyy+JLi1dw33j8u GYbz+/dhaeU/q1wBoWOyiOk5ncbx0JHfvbBXqeB1QqAohnHbSL01vYrr5X1YYv8h wqQimrXBMNctXY2+n8y021AR0QRX5Ta2b4UNJtI77b+hU8AdJlvMNgGVWgJeCuT5 xaVfqjc6p7fe/vECsy0WF2z9plgaM239bTd4X1ftL+Rzr1cBKwemkim9pZHZBm2i ElsDRL9F3IN8rl69IsiUe2fevJ7GgoR1WGkFxggxBlX77CHW91EKs1VZ6WPJ5dYR BAuyKil/VANG -----END CERTIFICATE-----Generated at Wed May 13 15:53:10 2026 by rpki-client