$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer File: 7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer (raw, json) Hash identifier: OiJz+8KhEFfO1y90FrpVmLvNdwyt96uBkwwM8NxoBTg= Subject key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A6E8C4AE682E418D6F2E016082128C25552B3F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft caRepository: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Jul 2026 11:48:59 +0000 Certificate not after: Thu 08 Jul 2027 11:53:59 +0000 Subordinate resources: AS: 7048 AS: 28146 AS: 28224 AS: 262688 IP: 45.71.224.0/22 IP: 45.162.164.0/22 IP: 45.227.192.0/22 IP: 45.238.108.0/22 IP: 45.238.164.0/22 IP: 131.100.96.0/22 IP: 138.186.116.0/22 IP: 138.204.72.0/22 IP: 143.208.12.0/22 IP: 143.255.100.0/22 IP: 168.0.4.0/22 IP: 170.0.168.0/22 IP: 170.84.56.0/22 IP: 170.233.40.0/22 IP: 170.245.216.0/22 IP: 170.247.192.0/22 IP: 177.73.188.0/22 IP: 177.75.96.0/20 IP: 177.75.128.0/19 IP: 177.86.0.0/21 IP: 177.125.32.0/21 IP: 177.126.192.0/20 IP: 177.154.96.0/20 IP: 177.234.132.0/22 IP: 179.127.128.0/20 IP: 179.127.224.0/20 IP: 179.191.36.0/22 IP: 186.216.144.0/21 IP: 186.236.0.0 -- 186.236.47.255 IP: 186.250.88.0/22 IP: 187.18.32.0/20 IP: 187.45.96.0/19 IP: 187.49.224.0/20 IP: 187.87.208.0/20 IP: 187.110.176.0/20 IP: 189.126.48.0/20 IP: 191.36.132.0/22 IP: 200.229.176.0/20 IP: 2804:310::/32 IP: 2804:6dc::/32 IP: 2804:108c::/32 IP: 2804:1bd8::/32 IP: 2804:26e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 19:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6e:8c:4a:e6:82:e4:18:d6:f2:e0:16:08:21:28:c2:55:52:b3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 9 11:48:59 2026 GMT Not After : Jul 8 11:53:59 2027 GMT Subject: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:b6:02:03:4e:87:07:3f:1c:7b:01:7c:60: 2c:bc:6c:e1:9c:35:0c:01:ae:d8:3d:9d:aa:0c:06: 63:7c:95:34:ef:cb:94:4d:11:23:7f:5b:80:3c:09: 4c:c7:4a:5f:fa:d1:0c:5a:f1:f7:81:b7:f1:a1:06: e4:f9:da:2c:6f:9c:0f:64:e3:4b:71:7d:8c:6f:29: b0:a9:eb:3a:e6:fb:47:81:c0:95:66:48:9e:33:bb: 57:a2:83:e9:c9:99:d2:11:20:9e:92:a1:9a:93:7e: a5:1c:b0:ee:96:0a:71:d2:20:70:c6:4c:60:2c:dd: 95:56:de:97:ef:1a:da:c1:ff:0c:22:8b:ce:21:d3: 27:cd:62:dd:af:b9:d8:7b:b1:4e:d7:c0:5d:9f:28: 17:78:c2:e9:78:2a:d3:5d:e5:77:63:22:15:44:f7: a8:4f:98:0d:0a:97:0c:a8:a7:0b:59:81:3f:58:46: 16:ee:dc:51:e6:f7:a9:22:6d:de:52:01:a3:c9:51: d6:94:79:2e:86:f7:8f:2e:6f:82:b4:ac:b6:73:67: ab:4a:ce:fd:a9:6a:40:79:d9:4c:bd:8d:65:1c:6e: 3b:ca:1f:2f:45:a5:9c:f2:7f:71:64:be:8a:4e:9e: 6f:dc:9f:3b:b6:21:13:bf:3a:8d:95:8f:bd:60:c0: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.224.0/22 45.162.164.0/22 45.227.192.0/22 45.238.108.0/22 45.238.164.0/22 131.100.96.0/22 138.186.116.0/22 138.204.72.0/22 143.208.12.0/22 143.255.100.0/22 168.0.4.0/22 170.0.168.0/22 170.84.56.0/22 170.233.40.0/22 170.245.216.0/22 170.247.192.0/22 177.73.188.0/22 177.75.96.0/20 177.75.128.0/19 177.86.0.0/21 177.125.32.0/21 177.126.192.0/20 177.154.96.0/20 177.234.132.0/22 179.127.128.0/20 179.127.224.0/20 179.191.36.0/22 186.216.144.0/21 186.236.0.0-186.236.47.255 186.250.88.0/22 187.18.32.0/20 187.45.96.0/19 187.49.224.0/20 187.87.208.0/20 187.110.176.0/20 189.126.48.0/20 191.36.132.0/22 200.229.176.0/20 IPv6: 2804:310::/32 2804:6dc::/32 2804:108c::/32 2804:1bd8::/32 2804:26e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7048 28146 28224 262688 Signature Algorithm: sha256WithRSAEncryption 63:32:04:15:7a:d5:6c:b6:74:fb:01:ad:ce:99:1c:21:f3:87: 32:9a:d9:83:b8:cc:27:0d:06:ce:4a:69:5c:b0:68:47:82:fb: 44:35:bb:db:a0:9f:05:99:1a:bc:b0:bd:ba:e6:6b:13:70:41: d9:40:9e:35:c7:68:0f:f8:88:ea:54:15:88:98:a5:38:16:58: 88:33:3c:52:cf:9c:2a:99:1f:90:10:15:de:59:5c:fc:1e:54: 69:84:75:68:33:9c:b2:43:30:2f:5c:72:17:dd:68:37:18:45: 64:4c:2a:b2:0d:3f:8d:1f:ec:57:0a:db:c5:06:f4:b4:e3:e4: 01:38:13:74:04:c6:bc:29:74:38:1d:07:e2:57:a0:d6:64:a1: e2:df:0c:48:52:8e:84:4d:2d:6e:44:81:46:d5:b1:3c:8c:b8: 98:db:12:29:a1:2e:58:5e:0e:ac:0e:b6:05:7b:b4:9d:75:22: 7e:62:89:2a:ab:f5:38:c7:16:bc:58:2b:13:41:32:a1:18:47: a8:4c:f4:e0:2a:07:d7:f1:8b:09:49:d4:6f:20:d8:8e:ce:ab: c9:49:02:cb:2d:45:5e:be:aa:24:09:f9:07:18:37:aa:79:30: c3:70:36:c5:0b:dc:61:22:de:b9:8b:5c:a4:f5:3a:e7:45:08: a0:29:b7:8f -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUKm6MSuaC5BjW8uAWCCEowlVSs/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDkxMTQ4NTlaFw0yNzA3MDgxMTUzNTlaMDMxMTAvBgNV BAMTKDdBQjdDOUFBRUExRDI5MjAxMDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC797YCA06HBz8cewF8YCy8bOGc NQwBrtg9naoMBmN8lTTvy5RNESN/W4A8CUzHSl/60Qxa8feBt/GhBuT52ixvnA9k 40txfYxvKbCp6zrm+0eBwJVmSJ4zu1eig+nJmdIRIJ6SoZqTfqUcsO6WCnHSIHDG TGAs3ZVW3pfvGtrB/wwii84h0yfNYt2vudh7sU7XwF2fKBd4wul4KtNd5XdjIhVE 96hPmA0KlwyopwtZgT9YRhbu3FHm96kibd5SAaPJUdaUeS6G948ub4K0rLZzZ6tK zv2pakB52Uy9jWUcbjvKHy9FpZzyf3FkvopOnm/cnzu2IRO/Oo2Vj71gwAInAgMB AAGjggRPMIIESzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6t8mq6h0pIBAt BS4axF7KNDmy8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEZE Q2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZxSzYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhG RENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAvN0FC N0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0EzNDM5QjJGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUH AQcBAf8EggEkMIIBIDCB8gQCAAEwgesDBAItR+ADBAItoqQDBAIt48ADBAIt7mwD BAIt7qQDBAKDZGADBAKKunQDBAKKzEgDBAKP0AwDBAKP/2QDBAKoAAQDBAKqAKgD BAKqVDgDBAKq6SgDBAKq9dgDBAKq98ADBAKxSbwDBASxS2ADBAWxS4ADBAOxVgAD BAOxfSADBASxfsADBASxmmADBAKx6oQDBASzf4ADBASzf+ADBAKzvyQDBAO62JAw CwMDArrsAwQEuuwgAwQCuvpYAwQEuxIgAwQFuy1gAwQEuzHgAwQEu1fQAwQEu26w AwQEvX4wAwQCvySEAwQEyOWwMCkEAgACMCMDBQAoBAMQAwUAKAQG3AMFACgEEIwD BQAoBBvYAwUAKAQm4DAmBggrBgEFBQcBCAEB/wQXMBWgEzARAgIbiAICbfICAm5A AgMEAiAwDQYJKoZIhvcNAQELBQADggEBAGMyBBV61Wy2dPsBrc6ZHCHzhzKa2YO4 zCcNBs5KaVywaEeC+0Q1u9ugnwWZGrywvbrmaxNwQdlAnjXHaA/4iOpUFYiYpTgW WIgzPFLPnCqZH5AQFd5ZXPweVGmEdWgznLJDMC9cchfdaDcYRWRMKrINP40f7FcK 28UG9LTj5AE4E3QExrwpdDgdB+JXoNZkoeLfDEhSjoRNLW5EgUbVsTyMuJjbEimh LlheDqwOtgV7tJ11In5iiSqr9TjHFrxYKxNBMqEYR6hM9OAqB9fxiwlJ1G8g2I7O q8lJAsstRV6+qiQJ+QcYN6p5MMNwNsUL3GEi3rmLXKT1OudFCKApt48= -----END CERTIFICATE-----Generated at Thu Jul 23 20:28:36 2026 by rpki-client