$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.cer File: 7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.cer (raw, json) Hash identifier: NBG6QlFFL30Lh+lJ9m+3+shD0yAuCwFmOrhNlNnBOo8= Subject key identifier: 74:26:A9:B7:66:87:52:08:5C:0A:BF:FF:BF:83:F4:FA:B0:56:E7:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3746CED7AD00A6C99D91B53ED1987618DAA0ED9C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.mft caRepository: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Jul 2026 15:47:18 +0000 Certificate not after: Thu 08 Jul 2027 15:52:18 +0000 Subordinate resources: AS: 262324 AS: 273683 IP: 45.4.40.0/22 IP: 45.171.192.0/22 IP: 45.224.196.0/22 IP: 45.232.56.0/22 IP: 45.233.196.0/22 IP: 45.235.56.0/22 IP: 45.238.48.0/22 IP: 131.100.148.0/22 IP: 131.108.124.0/22 IP: 138.36.28.0/22 IP: 138.36.84.0/22 IP: 138.94.176.0/22 IP: 138.97.184.0/22 IP: 143.202.128.0/22 IP: 167.250.12.0/22 IP: 170.79.24.0/22 IP: 170.238.52.0/22 IP: 177.53.40.0/21 IP: 177.53.160.0/22 IP: 177.66.164.0/22 IP: 177.67.28.0/22 IP: 177.84.236.0/22 IP: 177.124.136.0/22 IP: 187.84.176.0/20 IP: 187.121.144.0/21 IP: 189.8.120.0/22 IP: 190.112.148.0/22 IP: 201.87.240.0/20 IP: 2804:7d0::/32 IP: 2804:8aa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:46:ce:d7:ad:00:a6:c9:9d:91:b5:3e:d1:98:76:18:da:a0:ed:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 9 15:47:18 2026 GMT Not After : Jul 8 15:52:18 2027 GMT Subject: CN=7426A9B7668752085C0ABFFFBF83F4FAB056E7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:ac:04:d2:60:60:59:f5:93:61:34:df:57: d5:bc:2e:b1:c4:93:50:dc:dc:00:89:c8:4b:a9:2b: ea:0f:96:aa:a9:a3:c9:02:0f:52:0c:92:6f:da:f4: 49:03:c7:fd:19:5e:1b:4b:d7:0b:30:6c:d6:42:f6: 51:93:38:40:f1:e1:8b:a8:17:08:26:1d:13:2c:df: 30:de:a8:a4:ab:22:e2:6f:b6:29:1c:c7:07:82:59: 8c:fc:15:da:30:63:6f:f5:9e:d5:38:b9:e6:6d:93: d6:83:7b:72:67:84:ca:74:55:dc:f9:a7:63:fa:a6: 5d:6d:17:07:f3:2f:f9:41:be:7c:01:b6:35:99:22: 0f:30:42:cd:94:d5:c6:60:5d:bb:05:c6:d0:67:ca: ef:7e:e2:ea:68:f3:c0:fb:fa:8d:d4:d4:67:1e:50: 31:f7:3c:db:c9:17:09:d2:36:44:9c:56:0a:4e:5d: ef:84:e4:68:3c:91:9b:34:9a:f9:71:76:72:cf:be: b3:d0:05:2a:9e:4c:e8:d2:a8:5c:53:14:d4:2c:94: 62:da:39:cb:84:9b:9d:99:a8:7d:88:d0:23:8b:f7: d1:17:d7:e0:74:3b:83:83:7b:03:18:66:17:58:b2: 51:08:31:cd:e7:b0:c7:4e:a8:9a:63:28:7d:76:4e: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:26:A9:B7:66:87:52:08:5C:0A:BF:FF:BF:83:F4:FA:B0:56:E7:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.40.0/22 45.171.192.0/22 45.224.196.0/22 45.232.56.0/22 45.233.196.0/22 45.235.56.0/22 45.238.48.0/22 131.100.148.0/22 131.108.124.0/22 138.36.28.0/22 138.36.84.0/22 138.94.176.0/22 138.97.184.0/22 143.202.128.0/22 167.250.12.0/22 170.79.24.0/22 170.238.52.0/22 177.53.40.0/21 177.53.160.0/22 177.66.164.0/22 177.67.28.0/22 177.84.236.0/22 177.124.136.0/22 187.84.176.0/20 187.121.144.0/21 189.8.120.0/22 190.112.148.0/22 201.87.240.0/20 IPv6: 2804:7d0::/32 2804:8aa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262324 273683 Signature Algorithm: sha256WithRSAEncryption 4a:d9:59:7c:dd:9e:d0:c2:4a:33:c8:3c:ba:d8:3a:49:7f:8c: 6d:f4:f6:85:fd:53:29:97:05:04:0f:3e:e4:0e:84:f8:71:2b: 36:5a:a8:c4:23:0b:14:35:0c:42:83:1f:89:52:4a:84:0e:20: 9f:ab:4f:15:3a:a0:05:2c:1c:17:5f:b4:cd:66:21:44:17:7a: db:0f:7a:df:85:25:be:66:3b:f4:d2:21:3a:ef:6b:6d:7e:0a: 51:72:2a:58:cb:e3:fe:38:9c:96:1b:1c:b1:59:d8:ed:fc:a6: 78:20:b5:64:75:c1:30:7e:31:87:46:4d:34:19:66:88:fb:8c: 75:66:49:20:1d:bf:bc:c6:69:79:a9:d9:25:58:6f:95:97:87: a8:21:b0:ce:7b:65:41:5c:06:39:aa:ed:10:21:6f:e8:c0:14: 5d:d9:f2:f1:a2:33:0c:0b:23:6b:a7:f6:9d:ec:b8:47:f5:d9: 0f:ce:29:60:cf:67:f1:4a:25:f8:f3:35:7f:17:a4:bf:d2:e3: 6e:bf:f3:14:fe:63:da:e5:c9:64:61:e9:34:6a:94:d7:f5:7e: 33:ee:84:d1:df:94:ea:09:b3:1b:41:a3:67:25:1c:a2:b4:10: 19:9a:ca:0c:43:6a:69:6b:37:f6:66:e7:12:cc:10:4c:f0:6d: 75:af:88:bb -----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgIUN0bO160ApsmdkbU+0Zh2GNqg7ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDkxNTQ3MThaFw0yNzA3MDgxNTUyMThaMDMxMTAvBgNV BAMTKDc0MjZBOUI3NjY4NzUyMDg1QzBBQkZGRkJGODNGNEZBQjA1NkU3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE6wE0mBgWfWTYTTfV9W8LrHE k1Dc3ACJyEupK+oPlqqpo8kCD1IMkm/a9EkDx/0ZXhtL1wswbNZC9lGTOEDx4Yuo FwgmHRMs3zDeqKSrIuJvtikcxweCWYz8FdowY2/1ntU4ueZtk9aDe3JnhMp0Vdz5 p2P6pl1tFwfzL/lBvnwBtjWZIg8wQs2U1cZgXbsFxtBnyu9+4upo88D7+o3U1Gce UDH3PNvJFwnSNkScVgpOXe+E5Gg8kZs0mvlxdnLPvrPQBSqeTOjSqFxTFNQslGLa OcuEm52ZqH2I0COL99EX1+B0O4ODewMYZhdYslEIMc3nsMdOqJpjKH12Ts/lAgMB AAGjggPrMIID5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0Jqm3ZodSCFwK v/+/g/T6sFbn7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW5k SHN4UUp6VnBOYnJDYzhnYjRiTWI0RUhCV0FGVm1wZERvb21KUU5uVS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW5k SHN4UUp6VnBOYnJDYzhnYjRiTWI0RUhCV0FGVm1wZERvb21KUU5uVS8wLzc0MjZB OUI3NjY4NzUyMDg1QzBBQkZGRkJGODNGNEZBQjA1NkU3RUMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB2wYIKwYBBQUHAQcB Af8Egcswgcgwga8EAgABMIGoAwQCLQQoAwQCLavAAwQCLeDEAwQCLeg4AwQCLenE AwQCLes4AwQCLe4wAwQCg2SUAwQCg2x8AwQCiiQcAwQCiiRUAwQCil6wAwQCimG4 AwQCj8qAAwQCp/oMAwQCqk8YAwQCqu40AwQDsTUoAwQCsTWgAwQCsUKkAwQCsUMc AwQCsVTsAwQCsXyIAwQEu1SwAwQDu3mQAwQCvQh4AwQCvnCUAwQEyVfwMBQEAgAC MA4DBQAoBAfQAwUAKASKpDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEALQCAwQt EzANBgkqhkiG9w0BAQsFAAOCAQEAStlZfN2e0MJKM8g8utg6SX+MbfT2hf1TKZcF BA8+5A6E+HErNlqoxCMLFDUMQoMfiVJKhA4gn6tPFTqgBSwcF1+0zWYhRBd62w96 34UlvmY79NIhOu9rbX4KUXIqWMvj/jiclhscsVnY7fymeCC1ZHXBMH4xh0ZNNBlm iPuMdWZJIB2/vMZpeanZJVhvlZeHqCGwzntlQVwGOartECFv6MAUXdny8aIzDAsj a6f2ney4R/XZD84pYM9n8Uol+PM1fxekv9Ljbr/zFP5j2uXJZGHpNGqU1/V+M+6E 0d+U6gmzG0GjZyUcorQQGZrKDENqaWs39mbnEswQTPBtda+Iuw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:42:22 2026 by rpki-client