$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer File: 887ECD441DC8308A3C5570D1D65DF4302780ED08.cer (raw, json) Hash identifier: pPiypHvf8d+b3kRcIuJA0VKb6VSdYfouXFjcQTr2z/E= Subject key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7836176B8E3C34AA1A8233FA31EC78470BF4655B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft caRepository: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Jul 2026 20:47:42 +0000 Certificate not after: Mon 05 Jul 2027 20:52:42 +0000 Subordinate resources: AS: 53153 IP: 138.204.220.0/24 IP: 138.204.222.0/23 IP: 186.209.97.0 -- 186.209.111.255 IP: 187.61.96.0/20 IP: 2804:738::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 14:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:36:17:6b:8e:3c:34:aa:1a:82:33:fa:31:ec:78:47:0b:f4:65:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 6 20:47:42 2026 GMT Not After : Jul 5 20:52:42 2027 GMT Subject: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:68:57:f2:0e:1e:6a:e8:c3:10:7f:41:09: 82:82:8e:d8:6d:ac:57:9a:58:73:44:17:a3:20:30: 17:45:57:fc:c2:67:77:72:9b:30:87:8a:fa:ce:bc: ff:53:62:88:53:56:b9:65:9c:31:d7:29:3e:5d:5c: b4:ec:67:a4:f1:87:d0:ea:19:b6:13:c3:ab:ee:78: 04:c9:05:5d:32:58:75:35:ec:28:82:d5:54:33:b6: 1e:f4:63:1b:a5:54:e1:da:4b:7a:de:f4:f9:1a:9f: 27:fc:1a:8b:cd:b0:39:5b:f1:dc:3b:86:49:c6:fb: 71:34:c6:84:c4:7a:9e:04:f1:bc:6c:bf:00:45:35: f9:35:25:2f:9b:3f:cc:92:63:5c:98:4f:58:25:93: 5c:0e:f2:0b:2f:ca:dc:47:fd:3a:5c:86:77:16:3b: 33:0f:14:3a:14:fc:97:d9:09:f6:e0:96:b2:04:2a: a9:23:66:1c:c9:e4:59:53:10:8f:6f:15:38:57:1f: 24:cd:93:de:c6:86:b4:17:68:b2:3e:51:a2:53:bc: 4e:df:d3:5b:71:56:ce:68:04:b3:64:88:31:98:8a: 20:4e:9d:0b:ff:d8:7f:80:4c:bc:9c:31:e4:9e:22: aa:6e:27:b0:63:88:f7:4d:87:69:cb:6b:b3:a3:0b: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.220.0/24 138.204.222.0/23 186.209.97.0-186.209.111.255 187.61.96.0/20 IPv6: 2804:738::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53153 Signature Algorithm: sha256WithRSAEncryption 91:f3:f3:39:66:54:a5:e1:55:13:40:e1:0f:1c:ba:a5:d6:bd: 38:ec:03:70:de:d7:b5:94:e5:7a:86:b5:fe:cc:c5:81:f7:95: 5c:77:8f:43:eb:03:46:60:0f:f4:1b:9c:f4:99:01:38:b5:08: 64:26:db:44:b4:3e:42:c1:01:22:c9:80:5d:e6:2e:d9:a6:00: 0a:24:1b:45:c3:ad:f1:be:75:d9:dc:75:14:a8:d2:57:1b:9c: 75:d2:6b:99:e0:1f:58:a7:28:56:8b:7d:54:45:fe:e6:93:4c: 04:da:25:fe:f5:da:08:8e:ac:15:70:5c:ea:df:b7:3e:9a:a7: 35:41:f2:11:14:69:d6:bc:53:7f:bc:17:b4:b7:a3:71:3f:37: 49:12:85:b3:d6:20:64:3d:f6:6f:5f:c4:fd:be:ea:ec:e9:2d: 8c:2d:a4:1a:6a:81:45:29:f7:2f:58:c4:dd:ba:34:55:01:c8: 9c:42:ae:83:9e:a2:9b:23:d4:d2:ba:aa:ce:89:f7:3e:a2:38: 79:b2:58:4a:0c:35:1f:5d:3f:7a:33:8f:27:d6:bb:55:0b:9a: 46:8d:17:62:d8:4a:cc:fe:b7:7e:82:a9:f3:c7:0e:64:78:76: 18:6b:74:16:bc:9f:06:70:b9:5f:ad:6f:e2:d6:1d:d4:49:fa: da:06:fe:62 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUeDYXa448NKoagjP6Mex4Rwv0ZVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDYyMDQ3NDJaFw0yNzA3MDUyMDUyNDJaMDMxMTAvBgNV BAMTKDg4N0VDRDQ0MURDODMwOEEzQzU1NzBEMUQ2NURGNDMwMjc4MEVEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5GhX8g4eaujDEH9BCYKCjtht rFeaWHNEF6MgMBdFV/zCZ3dymzCHivrOvP9TYohTVrllnDHXKT5dXLTsZ6Txh9Dq GbYTw6vueATJBV0yWHU17CiC1VQzth70YxulVOHaS3re9Pkanyf8GovNsDlb8dw7 hknG+3E0xoTEep4E8bxsvwBFNfk1JS+bP8ySY1yYT1glk1wO8gsvytxH/TpchncW OzMPFDoU/JfZCfbglrIEKqkjZhzJ5FlTEI9vFThXHyTNk97GhrQXaLI+UaJTvE7f 01txVs5oBLNkiDGYiiBOnQv/2H+ATLycMeSeIqpuJ7BjiPdNh2nLa7OjC4UhAgMB AAGjggNUMIIDUDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIfs1EHcgwijxV cNHWXfQwJ4DtCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5z ZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJCSmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJu c2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAvODg3 RUNENDQxREM4MzA4QTNDNTU3MEQxRDY1REY0MzAyNzgwRUQwOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEH AQH/BDkwNzAmBAIAATAgAwQAiszcAwQBiszeMAwDBAC60WEDBAS60WADBAS7PWAw DQQCAAIwBwMFACgEBzgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM+hMA0GCSqG SIb3DQEBCwUAA4IBAQCR8/M5ZlSl4VUTQOEPHLql1r047ANw3te1lOV6hrX+zMWB 95Vcd49D6wNGYA/0G5z0mQE4tQhkJttEtD5CwQEiyYBd5i7ZpgAKJBtFw63xvnXZ 3HUUqNJXG5x10muZ4B9YpyhWi31URf7mk0wE2iX+9doIjqwVcFzq37c+mqc1QfIR FGnWvFN/vBe0t6NxPzdJEoWz1iBkPfZvX8T9vurs6S2MLaQaaoFFKfcvWMTdujRV AcicQq6DnqKbI9TSuqrOifc+ojh5slhKDDUfXT96M48n1rtVC5pGjRdi2ErM/rd+ gqnzxw5keHYYa3QWvJ8GcLlfrW/i1h3USfraBv5i -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:50 2026 by rpki-client