$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer File: 7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer (raw, json) Hash identifier: V+0l6i66om4SpN/pya6dW3IGUTHPUyHC4yTGs/w/KeI= Subject key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7508134DAD15ED605950039FF0FC48E8131AA95E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft caRepository: rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 19:02:49 +0000 Certificate not after: Sat 20 Mar 2027 19:07:49 +0000 Subordinate resources: AS: 263338 IP: 170.78.244.0/22 IP: 191.36.184.0/21 IP: 2804:1494::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:08:13:4d:ad:15:ed:60:59:50:03:9f:f0:fc:48:e8:13:1a:a9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 19:02:49 2026 GMT Not After : Mar 20 19:07:49 2027 GMT Subject: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:66:84:2a:7b:14:03:45:8c:04:5f:13:0f: e5:1b:54:fc:28:01:4c:7e:14:f3:af:ea:b6:e9:05: d9:16:ae:21:db:fe:4f:aa:80:dd:38:96:15:26:f3: 7f:8c:e3:72:c0:da:6e:45:09:be:da:a0:23:bf:86: 1e:25:92:03:8b:a4:f7:9a:7d:c8:f3:cd:5b:a4:78: 40:d1:0d:62:e9:23:f8:35:49:65:ed:8d:d8:53:cf: 9e:ea:8e:28:df:68:ac:15:81:f3:32:84:51:2b:ef: a5:59:24:67:0f:ba:f5:e0:27:8c:d8:03:59:f0:7c: 05:94:5b:c0:76:a7:a7:7c:ee:cd:ab:7e:4b:7a:ff: e3:42:44:48:2c:cb:62:a6:69:fb:75:9b:67:f6:ff: 60:87:ba:d8:ee:05:c4:d2:47:f7:c6:86:02:df:2a: d0:98:aa:af:37:bc:92:8a:f0:5a:ed:8e:e7:55:fd: e2:e3:9c:f1:67:81:26:ea:b1:6d:fb:02:f0:c1:d4: 8c:d7:0d:13:9b:68:55:3b:3e:ab:28:1f:81:30:0c: 63:65:fb:5f:c8:c4:aa:c8:1a:ee:1d:2d:a9:4a:99: 59:0f:e1:89:8d:32:bf:83:db:1c:21:a5:c4:1e:b3: bf:09:28:1b:39:73:fe:b6:af:a4:2a:b6:78:5d:66: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.244.0/22 191.36.184.0/21 IPv6: 2804:1494::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263338 Signature Algorithm: sha256WithRSAEncryption 1d:ea:60:37:55:c6:1c:d0:17:f3:ee:47:6e:95:ab:3f:21:72: 82:dd:b5:de:68:1c:67:fc:4a:11:45:44:7e:9b:2b:b2:7b:0a: c6:e9:e3:5a:a1:4f:68:5d:ce:5e:bf:34:a0:14:e7:01:86:25: 24:db:5a:ed:b9:9d:fa:a1:6c:f0:3f:c9:c6:58:9d:5d:c7:e9: 27:be:7a:b7:90:cf:e9:15:54:47:9a:7b:ea:8a:2a:a1:9f:a8: 11:28:6e:38:cd:af:e5:77:0f:23:97:ee:26:14:bc:bf:91:06: d7:9c:2a:1b:ba:e8:06:96:80:34:b6:e0:e2:01:1c:7a:8c:c8: 40:86:d5:86:2e:d7:5b:99:e0:16:0e:18:18:9c:64:22:70:d7: ed:f3:06:37:d5:3f:5f:97:f7:36:6c:43:ec:02:6e:4b:7b:af: 52:5f:d4:72:c1:04:85:f8:94:02:d0:7a:5d:0d:2a:b4:81:0a: b9:20:6b:86:9f:82:33:36:9b:23:02:93:57:9b:7d:0a:44:32: 00:d7:6e:44:bf:42:b9:6d:fb:58:29:b3:84:07:bc:0d:50:f1: 97:95:75:91:f3:83:d6:d5:8c:80:a9:54:5f:c8:47:62:30:bf: 05:ef:76:24:63:99:b0:f6:07:ff:ae:70:5d:2d:63:f9:e1:99: 29:ea:d7:d5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdQgTTa0V7WBZUAOf8PxI6BMaqV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjExOTAyNDlaFw0yNzAzMjAxOTA3NDlaMDMxMTAvBgNV BAMTKDdCNDYzODUzRUE0QUMwMTJCRDlGMzE5NENGQTMzQUYzMjU5MURGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH2aEKnsUA0WMBF8TD+UbVPwo AUx+FPOv6rbpBdkWriHb/k+qgN04lhUm83+M43LA2m5FCb7aoCO/hh4lkgOLpPea fcjzzVukeEDRDWLpI/g1SWXtjdhTz57qjijfaKwVgfMyhFEr76VZJGcPuvXgJ4zY A1nwfAWUW8B2p6d87s2rfkt6/+NCREgsy2Kmaft1m2f2/2CHutjuBcTSR/fGhgLf KtCYqq83vJKK8FrtjudV/eLjnPFngSbqsW37AvDB1IzXDRObaFU7PqsoH4EwDGNl +1/IxKrIGu4dLalKmVkP4YmNMr+D2xwhpcQes78JKBs5c/62r6QqtnhdZuGJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7RjhT6krAEr2f MZTPozrzJZHfCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXZw OXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAxUEQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F2 cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAvN0I0 NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMyNTkxREYwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk70AwQDvyS4MA0EAgACMAcDBQAoBBSUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEqjANBgkqhkiG9w0BAQsFAAOCAQEAHepgN1XG HNAX8+5HbpWrPyFygt213mgcZ/xKEUVEfpsrsnsKxunjWqFPaF3OXr80oBTnAYYl JNta7bmd+qFs8D/JxlidXcfpJ756t5DP6RVUR5p76ooqoZ+oEShuOM2v5XcPI5fu JhS8v5EG15wqG7roBpaANLbg4gEceozIQIbVhi7XW5ngFg4YGJxkInDX7fMGN9U/ X5f3NmxD7AJuS3uvUl/UcsEEhfiUAtB6XQ0qtIEKuSBrhp+CMzabIwKTV5t9CkQy ANduRL9CuW37WCmzhAe8DVDxl5V1kfOD1tWMgKlUX8hHYjC/Be92JGOZsPYH/65w XS1j+eGZKerX1Q== -----END CERTIFICATE-----Generated at Wed Mar 25 22:35:13 2026 by rpki-client