$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4657C8918CAA2153B993BF7595B5A1411FE6F97E.cer File: 4657C8918CAA2153B993BF7595B5A1411FE6F97E.cer (raw, json) Hash identifier: NZCB86z178ClKqqtgU3bVitmysNlqXT+QqYETCp+cqo= Subject key identifier: 46:57:C8:91:8C:AA:21:53:B9:93:BF:75:95:B5:A1:41:1F:E6:F9:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 217DFBF4B4B6C1FF4C29A00E647C2DF177561FEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft caRepository: rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 05 May 2026 19:52:53 +0000 Certificate not after: Tue 04 May 2027 19:57:53 +0000 Subordinate resources: AS: 271061 IP: 45.5.24.0/22 IP: 2804:75a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7d:fb:f4:b4:b6:c1:ff:4c:29:a0:0e:64:7c:2d:f1:77:56:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 5 19:52:53 2026 GMT Not After : May 4 19:57:53 2027 GMT Subject: CN=4657C8918CAA2153B993BF7595B5A1411FE6F97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:8b:50:40:5a:6f:e8:b0:d5:da:b5:90:a8: 15:19:48:e5:5a:8f:4d:b2:fd:2b:a3:02:0d:96:bc: 36:d4:c8:0b:56:46:6e:17:aa:fe:a9:26:31:e7:20: 7a:9f:9e:7c:c4:73:bb:71:99:67:17:05:68:5c:b8: 36:cd:40:2e:23:85:f2:31:ab:4f:37:1f:74:96:c3: d3:c9:a2:06:5c:c9:51:ff:b3:eb:25:a5:87:ba:c9: c8:fd:33:7f:b8:6d:0d:e1:de:b1:d3:3a:77:65:9e: cf:a1:49:3f:b3:97:b3:3f:79:83:da:da:cf:f9:dc: 3d:09:6a:7b:10:a1:06:09:c9:03:69:27:8a:d4:e9: 90:17:a0:a2:bb:a7:c4:a6:23:97:0f:fe:00:7f:c6: 00:a9:87:c6:b0:ab:b1:fc:8e:f8:13:9c:4f:ef:4b: 10:ce:62:57:2f:1f:b5:40:e8:a0:e5:db:8f:c1:b7: ed:74:d7:99:f1:18:28:25:09:48:24:9f:66:c9:07: 55:ee:69:11:d7:db:c0:35:1a:6b:1b:e0:14:c1:bd: ee:a2:12:d3:a7:42:9e:dc:06:5b:60:b8:23:1a:40: 8c:4d:d7:a1:f5:93:b9:7e:67:3b:39:50:10:0d:67: 9b:48:73:00:8c:8b:b1:eb:81:e0:cf:b0:2a:fa:73: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:57:C8:91:8C:AA:21:53:B9:93:BF:75:95:B5:A1:41:1F:E6:F9:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.24.0/22 IPv6: 2804:75a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271061 Signature Algorithm: sha256WithRSAEncryption c2:66:29:a5:0b:97:1f:cd:e0:e2:92:ec:1e:b8:c4:a8:9a:f1: 91:90:d4:e5:2a:f9:94:09:12:98:23:d8:6e:60:98:fa:d5:80: 83:7a:61:97:94:9a:c7:d3:41:5a:7b:8d:c9:05:2e:16:8d:4c: 12:0e:c7:70:ee:10:95:29:a2:ad:a9:42:68:16:3a:cd:9e:76: db:76:83:5b:82:8a:0f:e9:a2:e3:48:de:0d:49:23:b3:9d:6f: a7:52:0d:eb:ce:c5:27:95:69:61:68:31:a7:c7:51:84:4a:ba: 4b:1c:03:87:ff:be:5b:20:f8:e2:60:5d:78:b0:f4:77:39:49: e8:6e:c3:a8:a9:53:6d:a7:fe:81:3f:00:e8:90:2a:d3:97:c6: 7e:b5:3d:f9:59:f7:83:b5:eb:e9:f7:4d:1c:64:76:11:1b:60: e8:c7:3e:72:23:49:58:1d:9d:3f:4b:9b:5b:33:e9:65:47:1b: 98:13:c2:3a:58:fa:c0:ad:19:d1:a8:c7:8a:b7:54:23:2f:15: 9d:28:17:d0:9a:b5:62:9a:37:f2:cf:73:10:0f:6c:b8:08:c4: 2d:f9:40:42:c8:46:06:a0:16:61:2f:8f:7a:f9:4b:26:bc:a9: 8a:e5:a3:82:32:54:5f:fa:a7:10:fc:5e:a3:07:85:42:84:26: 53:6e:e3:02 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUIX379LS2wf9MKaAOZHwt8XdWH+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MDUxOTUyNTNaFw0yNzA1MDQxOTU3NTNaMDMxMTAvBgNV BAMTKDQ2NTdDODkxOENBQTIxNTNCOTkzQkY3NTk1QjVBMTQxMUZFNkY5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGA4tQQFpv6LDV2rWQqBUZSOVa j02y/SujAg2WvDbUyAtWRm4Xqv6pJjHnIHqfnnzEc7txmWcXBWhcuDbNQC4jhfIx q083H3SWw9PJogZcyVH/s+slpYe6ycj9M3+4bQ3h3rHTOndlns+hST+zl7M/eYPa 2s/53D0JansQoQYJyQNpJ4rU6ZAXoKK7p8SmI5cP/gB/xgCph8awq7H8jvgTnE/v SxDOYlcvH7VA6KDl24/Bt+1015nxGCglCUgkn2bJB1XuaRHX28A1Gmsb4BTBve6i EtOnQp7cBltguCMaQIxN16H1k7l+Zzs5UBANZ5tIcwCMi7HrgeDPsCr6c+x9AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGV8iRjKohU7mT v3WVtaFBH+b5fjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjY3 dTJtajdWQXJ0NGc5cGlXWWVlbTg0M0ZZU3FRblV2ZXBURVhyQ0tUdkwvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjY3 dTJtajdWQXJ0NGc5cGlXWWVlbTg0M0ZZU3FRblV2ZXBURVhyQ0tUdkwvMC80NjU3 Qzg5MThDQUEyMTUzQjk5M0JGNzU5NUI1QTE0MTFGRTZGOTdFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItBRgwDQQCAAIwBwMFACgEdagwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCLVMA0GCSqGSIb3DQEBCwUAA4IBAQDCZimlC5cfzeDikuwe uMSomvGRkNTlKvmUCRKYI9huYJj61YCDemGXlJrH00Fae43JBS4WjUwSDsdw7hCV KaKtqUJoFjrNnnbbdoNbgooP6aLjSN4NSSOznW+nUg3rzsUnlWlhaDGnx1GESrpL HAOH/75bIPjiYF14sPR3OUnobsOoqVNtp/6BPwDokCrTl8Z+tT35WfeDtevp900c ZHYRG2Doxz5yI0lYHZ0/S5tbM+llRxuYE8I6WPrArRnRqMeKt1QjLxWdKBfQmrVi mjfyz3MQD2y4CMQt+UBCyEYGoBZhL496+UsmvKmK5aOCMlRf+qcQ/F6jB4VChCZT buMC -----END CERTIFICATE-----Generated at Wed May 13 15:30:38 2026 by rpki-client