$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer File: 7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer (raw, json) Hash identifier: xJMKfCrbPlE6VMLX6TARxZzYHiN8UEQPg4R89o1IBBI= Subject key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 47F1268AA6B142E9A0FCC3E27957F950AF2333D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft caRepository: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 00:10:57 +0000 Certificate not after: Tue 13 Apr 2027 00:15:57 +0000 Subordinate resources: AS: 7048 AS: 28146 AS: 28224 AS: 262688 IP: 45.71.224.0/22 IP: 45.162.164.0/22 IP: 45.227.192.0/22 IP: 45.238.108.0/22 IP: 45.238.164.0/22 IP: 131.100.96.0/22 IP: 138.186.116.0/22 IP: 138.204.72.0/22 IP: 143.208.12.0/22 IP: 143.255.100.0/22 IP: 168.0.4.0/22 IP: 170.0.168.0/22 IP: 170.84.56.0/22 IP: 170.233.40.0/22 IP: 170.245.216.0/22 IP: 170.247.192.0/22 IP: 177.73.188.0/22 IP: 177.75.96.0/20 IP: 177.75.128.0/19 IP: 177.86.0.0/21 IP: 177.125.32.0/21 IP: 177.126.192.0/20 IP: 177.154.96.0/20 IP: 177.234.132.0/22 IP: 179.127.128.0/20 IP: 179.127.224.0/20 IP: 179.191.36.0/22 IP: 186.216.144.0/21 IP: 186.236.0.0 -- 186.236.47.255 IP: 186.250.88.0/22 IP: 187.18.32.0/20 IP: 187.45.96.0/19 IP: 187.49.224.0/20 IP: 187.87.208.0/20 IP: 187.110.176.0/20 IP: 189.126.48.0/20 IP: 191.36.132.0/22 IP: 200.229.176.0/20 IP: 2804:310::/32 IP: 2804:6dc::/32 IP: 2804:108c::/32 IP: 2804:1bd8::/32 IP: 2804:26e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 19:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f1:26:8a:a6:b1:42:e9:a0:fc:c3:e2:79:57:f9:50:af:23:33:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 14 00:10:57 2026 GMT Not After : Apr 13 00:15:57 2027 GMT Subject: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:b6:02:03:4e:87:07:3f:1c:7b:01:7c:60: 2c:bc:6c:e1:9c:35:0c:01:ae:d8:3d:9d:aa:0c:06: 63:7c:95:34:ef:cb:94:4d:11:23:7f:5b:80:3c:09: 4c:c7:4a:5f:fa:d1:0c:5a:f1:f7:81:b7:f1:a1:06: e4:f9:da:2c:6f:9c:0f:64:e3:4b:71:7d:8c:6f:29: b0:a9:eb:3a:e6:fb:47:81:c0:95:66:48:9e:33:bb: 57:a2:83:e9:c9:99:d2:11:20:9e:92:a1:9a:93:7e: a5:1c:b0:ee:96:0a:71:d2:20:70:c6:4c:60:2c:dd: 95:56:de:97:ef:1a:da:c1:ff:0c:22:8b:ce:21:d3: 27:cd:62:dd:af:b9:d8:7b:b1:4e:d7:c0:5d:9f:28: 17:78:c2:e9:78:2a:d3:5d:e5:77:63:22:15:44:f7: a8:4f:98:0d:0a:97:0c:a8:a7:0b:59:81:3f:58:46: 16:ee:dc:51:e6:f7:a9:22:6d:de:52:01:a3:c9:51: d6:94:79:2e:86:f7:8f:2e:6f:82:b4:ac:b6:73:67: ab:4a:ce:fd:a9:6a:40:79:d9:4c:bd:8d:65:1c:6e: 3b:ca:1f:2f:45:a5:9c:f2:7f:71:64:be:8a:4e:9e: 6f:dc:9f:3b:b6:21:13:bf:3a:8d:95:8f:bd:60:c0: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.224.0/22 45.162.164.0/22 45.227.192.0/22 45.238.108.0/22 45.238.164.0/22 131.100.96.0/22 138.186.116.0/22 138.204.72.0/22 143.208.12.0/22 143.255.100.0/22 168.0.4.0/22 170.0.168.0/22 170.84.56.0/22 170.233.40.0/22 170.245.216.0/22 170.247.192.0/22 177.73.188.0/22 177.75.96.0/20 177.75.128.0/19 177.86.0.0/21 177.125.32.0/21 177.126.192.0/20 177.154.96.0/20 177.234.132.0/22 179.127.128.0/20 179.127.224.0/20 179.191.36.0/22 186.216.144.0/21 186.236.0.0-186.236.47.255 186.250.88.0/22 187.18.32.0/20 187.45.96.0/19 187.49.224.0/20 187.87.208.0/20 187.110.176.0/20 189.126.48.0/20 191.36.132.0/22 200.229.176.0/20 IPv6: 2804:310::/32 2804:6dc::/32 2804:108c::/32 2804:1bd8::/32 2804:26e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7048 28146 28224 262688 Signature Algorithm: sha256WithRSAEncryption b9:85:a2:3f:10:8e:b2:32:1e:7f:e3:53:aa:9c:5b:a2:36:a4: 3d:dc:ca:6f:cd:19:c6:00:5f:61:01:e5:ff:a0:1c:49:e8:97: f2:1d:a2:b6:38:14:5f:24:06:35:e2:0a:87:7d:2b:50:5d:20: 2c:04:b7:84:26:e3:8f:16:56:f2:d5:79:89:56:a9:a1:85:e5: db:8b:e8:33:f6:d2:e7:17:cf:e1:84:24:14:30:d3:81:86:e2: 72:4a:27:d8:71:37:6a:09:46:48:35:bf:aa:8b:9e:ee:61:99: 00:e0:ac:84:13:33:dc:66:dd:78:43:20:8f:3a:70:db:a1:53: 90:b6:ab:23:46:c6:9f:20:98:f7:d5:87:8a:2b:4a:74:30:84: cf:15:fa:94:aa:6b:af:21:11:4e:92:5d:0c:61:48:93:d2:d7: 04:b4:f2:b3:2e:58:f0:2a:ce:f6:12:f6:80:7b:dc:18:c6:86: 00:2f:15:9a:06:67:02:04:d9:fe:15:db:2f:e4:78:ca:6e:92: 88:c2:ab:d3:aa:b1:48:28:71:8f:32:9c:ff:eb:b0:a5:ff:97: 0e:6d:d8:52:a7:bc:67:25:22:0a:16:10:12:1d:12:0d:b6:f5: 39:eb:9d:2a:f9:71:c4:7f:d8:b5:7a:8a:7c:3e:a2:52:79:36: 20:07:07:73 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUR/EmiqaxQumg/MPieVf5UK8jM9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA0MTQwMDEwNTdaFw0yNzA0MTMwMDE1NTdaMDMxMTAvBgNV BAMTKDdBQjdDOUFBRUExRDI5MjAxMDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC797YCA06HBz8cewF8YCy8bOGc NQwBrtg9naoMBmN8lTTvy5RNESN/W4A8CUzHSl/60Qxa8feBt/GhBuT52ixvnA9k 40txfYxvKbCp6zrm+0eBwJVmSJ4zu1eig+nJmdIRIJ6SoZqTfqUcsO6WCnHSIHDG TGAs3ZVW3pfvGtrB/wwii84h0yfNYt2vudh7sU7XwF2fKBd4wul4KtNd5XdjIhVE 96hPmA0KlwyopwtZgT9YRhbu3FHm96kibd5SAaPJUdaUeS6G948ub4K0rLZzZ6tK zv2pakB52Uy9jWUcbjvKHy9FpZzyf3FkvopOnm/cnzu2IRO/Oo2Vj71gwAInAgMB AAGjggRPMIIESzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6t8mq6h0pIBAt BS4axF7KNDmy8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEZE Q2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZxSzYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhG RENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAvN0FC N0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0EzNDM5QjJGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUH AQcBAf8EggEkMIIBIDCB8gQCAAEwgesDBAItR+ADBAItoqQDBAIt48ADBAIt7mwD BAIt7qQDBAKDZGADBAKKunQDBAKKzEgDBAKP0AwDBAKP/2QDBAKoAAQDBAKqAKgD BAKqVDgDBAKq6SgDBAKq9dgDBAKq98ADBAKxSbwDBASxS2ADBAWxS4ADBAOxVgAD BAOxfSADBASxfsADBASxmmADBAKx6oQDBASzf4ADBASzf+ADBAKzvyQDBAO62JAw CwMDArrsAwQEuuwgAwQCuvpYAwQEuxIgAwQFuy1gAwQEuzHgAwQEu1fQAwQEu26w AwQEvX4wAwQCvySEAwQEyOWwMCkEAgACMCMDBQAoBAMQAwUAKAQG3AMFACgEEIwD BQAoBBvYAwUAKAQm4DAmBggrBgEFBQcBCAEB/wQXMBWgEzARAgIbiAICbfICAm5A AgMEAiAwDQYJKoZIhvcNAQELBQADggEBALmFoj8QjrIyHn/jU6qcW6I2pD3cym/N GcYAX2EB5f+gHEnol/IdorY4FF8kBjXiCod9K1BdICwEt4Qm448WVvLVeYlWqaGF 5duL6DP20ucXz+GEJBQw04GG4nJKJ9hxN2oJRkg1v6qLnu5hmQDgrIQTM9xm3XhD II86cNuhU5C2qyNGxp8gmPfVh4orSnQwhM8V+pSqa68hEU6SXQxhSJPS1wS08rMu WPAqzvYS9oB73BjGhgAvFZoGZwIE2f4V2y/keMpukojCq9OqsUgocY8ynP/rsKX/ lw5t2FKnvGclIgoWEBIdEg229TnrnSr5ccR/2LV6inw+olJ5NiAHB3M= -----END CERTIFICATE-----Generated at Fri Apr 17 19:52:27 2026 by rpki-client