$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer File: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer (raw, json) Hash identifier: 9QPFJ8O9fw+GEMhc7RNLA1iWGGQ+laBW7afQwkLvkpE= Subject key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A577036BACAB5E3567A5D4FEDD1D2B0224407A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft caRepository: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Jul 2026 14:07:47 +0000 Certificate not after: Tue 06 Jul 2027 14:12:47 +0000 Subordinate resources: AS: 274461 IP: 45.170.138.0/24 IP: 186.195.166.0/24 IP: 186.195.168.0/24 IP: 2804:947c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 21:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:57:70:36:ba:ca:b5:e3:56:7a:5d:4f:ed:d1:d2:b0:22:44:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 14:07:47 2026 GMT Not After : Jul 6 14:12:47 2027 GMT Subject: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:fa:f3:32:21:c5:19:e2:92:fb:76:9a:03: 28:e0:d6:58:30:f1:cc:b3:9e:a1:c3:ab:f2:a5:fb: 55:85:90:05:00:13:db:33:79:10:45:7d:e9:ef:10: 21:32:26:3b:ac:ba:fe:f6:d5:f0:fa:58:61:1e:80: 0f:49:79:f4:d6:0f:65:2d:78:fd:52:7a:67:e1:cd: 06:18:09:f4:84:9f:7d:20:a6:2b:da:01:b6:17:c8: 33:fd:df:52:11:2f:be:a3:fb:57:ca:cf:1a:ca:f3: 8f:08:d4:8c:6c:83:e1:fd:6a:c4:7b:93:a4:1a:e5: 22:82:27:5b:06:79:f2:e1:1c:de:f7:05:8d:30:99: f3:25:e4:00:a4:b2:97:62:ee:40:33:76:3f:dd:5a: 4e:2e:ab:58:79:40:3f:2b:82:c3:77:38:17:fb:0c: 2e:bc:88:7a:57:78:52:8a:8c:9e:b3:64:d6:29:da: a2:15:19:9a:f2:43:68:fb:41:36:8e:a0:e5:f9:ed: 40:e3:4c:d0:34:bf:a7:21:11:7d:bf:2b:e0:f9:1d: 55:f3:c1:05:a2:0e:17:08:6d:b9:3d:b3:1c:00:9f: 2d:53:af:2a:3e:7a:43:20:59:07:80:b1:d1:45:4b: 58:6b:4c:c5:d9:1f:ef:80:e9:cc:f9:76:46:9f:44: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.138.0/24 186.195.166.0/24 186.195.168.0/24 IPv6: 2804:947c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274461 Signature Algorithm: sha256WithRSAEncryption c5:3e:7b:1c:cf:33:15:a1:75:c6:13:72:0c:e6:f3:11:a5:06: 59:c4:df:c5:0e:80:88:72:1c:05:e1:9d:25:75:b7:cc:4d:73: b0:43:ba:2f:02:e0:01:5c:4e:4c:b2:1d:b6:6d:0f:e1:93:56: 98:90:03:4f:07:f6:26:c4:36:be:52:de:c3:0d:d8:a7:fe:00: 89:33:de:73:f4:e5:35:23:35:ff:a2:84:8f:5a:32:ab:3d:af: 8a:97:e2:0c:a6:ac:09:30:38:ab:c5:4a:27:aa:af:bc:e7:be: be:c4:1d:2a:75:e1:27:42:82:06:7e:cc:c8:21:ae:e1:96:8a: 76:5a:a0:4a:0c:82:e6:c9:10:e1:cd:5d:d5:05:54:9e:14:c1: 50:39:60:0e:64:cc:88:25:c1:13:2a:dd:83:80:63:d2:cb:f3: b2:0a:b8:59:29:68:9c:14:3a:37:d7:2c:b9:5b:b5:8f:04:ed: 02:5f:97:b4:e8:36:94:84:0b:d6:5b:5a:87:9a:5a:17:76:4f: 3b:8b:a1:c9:8e:87:12:97:aa:4c:4e:c4:5c:93:55:c8:bb:1d: 2e:9b:6c:43:db:cf:e0:fa:42:6d:04:71:6b:b1:4d:39:76:89: e8:87:24:d3:d5:8b:9d:f8:9f:15:5f:82:d4:d5:78:a0:d5:e4: d9:f2:ea:52 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUSldwNrrKteNWel1P7dHSsCJEB6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDcxNDA3NDdaFw0yNzA3MDYxNDEyNDdaMDMxMTAvBgNV BAMTKDY3QjJBMzMzMzYyNTI1QzlFQ0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0frzMiHFGeKS+3aaAyjg1lgw 8cyznqHDq/Kl+1WFkAUAE9szeRBFfenvECEyJjusuv721fD6WGEegA9JefTWD2Ut eP1SemfhzQYYCfSEn30gpivaAbYXyDP931IRL76j+1fKzxrK848I1Ixsg+H9asR7 k6Qa5SKCJ1sGefLhHN73BY0wmfMl5ACkspdi7kAzdj/dWk4uq1h5QD8rgsN3OBf7 DC68iHpXeFKKjJ6zZNYp2qIVGZryQ2j7QTaOoOX57UDjTNA0v6chEX2/K+D5HVXz wQWiDhcIbbk9sxwAny1Tryo+ekMgWQeAsdFFS1hrTMXZH++A6cz5dkafRCJ7AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnsqMzNiUlyezV rkexvRLh4vy8UzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOENk TnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25HQ3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhD ZE55VlFRNllWYmtubUVOd3NEdXNYWlBRY1JBcGRuWUtpUmgzdUNuR0N5LzAvNjdC MkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFFMkZDQkM1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQALaqKAwQAusOmAwQAusOoMA0EAgACMAcDBQAoBJR8 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQwHTANBgkqhkiG9w0BAQsFAAOCAQEA xT57HM8zFaF1xhNyDObzEaUGWcTfxQ6AiHIcBeGdJXW3zE1zsEO6LwLgAVxOTLId tm0P4ZNWmJADTwf2JsQ2vlLeww3Yp/4AiTPec/TlNSM1/6KEj1oyqz2vipfiDKas CTA4q8VKJ6qvvOe+vsQdKnXhJ0KCBn7MyCGu4ZaKdlqgSgyC5skQ4c1d1QVUnhTB UDlgDmTMiCXBEyrdg4Bj0svzsgq4WSlonBQ6N9csuVu1jwTtAl+XtOg2lIQL1lta h5paF3ZPO4uhyY6HEpeqTE7EXJNVyLsdLptsQ9vP4PpCbQRxa7FNOXaJ6Ick09WL nfifFV+C1NV4oNXk2fLqUg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:33:11 2026 by rpki-client