$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer File: 21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer (raw, json) Hash identifier: 3x7OyO/JnktQbqan25yiULXDwr0Z6cDY1+jBK0zaDig= Subject key identifier: 21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C80AECD3933E17BD0E589898D7E9803320A36EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft caRepository: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 18:06:13 +0000 Certificate not after: Fri 05 Jun 2026 18:11:13 +0000 Subordinate resources: AS: 271335 IP: 207.248.20.0/22 IP: 2804:79e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:80:ae:cd:39:33:e1:7b:d0:e5:89:89:8d:7e:98:03:32:0a:36:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 6 18:06:13 2025 GMT Not After : Jun 5 18:11:13 2026 GMT Subject: CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:98:f2:84:d7:f6:76:81:fa:16:a1:0c:ae: 74:76:48:c0:04:26:85:6a:6b:03:81:17:4f:7b:38: 9a:07:b1:07:19:53:cf:89:66:f3:0b:79:67:73:fd: 7a:ea:43:40:0c:f9:a4:82:cd:94:9d:02:ce:b2:23: 64:b2:62:54:d2:f7:f4:09:c5:e4:db:d8:72:32:ce: d2:07:9b:dc:2f:32:1c:f0:77:fc:07:1a:30:2c:5e: cc:87:e1:a6:f5:48:48:b9:5b:c4:7d:63:30:d4:c7: 16:fa:65:9c:54:85:bf:71:cf:7c:fb:fc:77:f4:9a: 64:29:fb:cc:03:37:23:c1:fb:00:0e:7b:d6:89:e7: 14:a7:49:bd:1f:f1:d2:47:64:84:81:48:4c:1c:2b: 2d:b8:47:85:94:3a:ab:41:7e:d3:34:c1:dd:8a:41: 7f:e2:d4:7e:e8:c0:88:90:6b:67:49:be:8a:45:62: f7:2f:3b:f8:4e:49:92:80:4f:ab:b9:f7:5b:99:b3: 5a:a2:de:4f:76:a5:b0:37:2c:11:f7:18:c7:a1:f7: 03:08:30:06:50:b6:09:a5:b3:60:16:76:62:a7:b3: 8a:94:55:75:07:b0:f6:26:61:63:66:23:a6:f3:3a: 43:bd:09:6e:fe:53:1a:7c:89:94:c1:28:ae:8e:2a: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.20.0/22 IPv6: 2804:79e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271335 Signature Algorithm: sha256WithRSAEncryption 8d:72:93:46:0e:36:85:4f:d1:2d:c8:a3:7f:46:8a:39:68:d1: 3d:43:9c:77:77:c4:08:ef:b0:ac:ed:8c:ce:09:56:c4:76:68: 9e:45:3f:06:17:8b:bb:8f:45:4d:11:06:a0:e2:da:7a:b3:bd: de:42:46:25:d4:9d:3c:12:ec:d1:24:71:2d:09:98:fe:c7:30: 0a:c1:45:ba:86:be:0d:8e:78:74:5f:4d:8f:0e:e0:5d:50:20: 60:bd:01:a5:f3:8a:af:28:12:fc:4d:61:cd:7b:9b:96:66:1c: b3:0c:41:1f:52:99:66:d6:ad:25:e0:ab:b4:7f:16:41:08:f9: 77:45:4d:7a:a9:c4:fe:03:2a:98:8b:e4:07:ad:b2:1c:d4:fe: 06:70:a8:ac:7a:2c:b4:80:f6:6b:77:64:be:70:fd:b3:59:81: 25:90:32:9e:97:81:af:c9:cf:07:03:78:2b:b7:8a:03:00:8c: 1d:a2:08:19:78:85:21:86:85:e0:59:4b:9a:fd:f2:1a:7c:5e: 62:dd:40:ca:2e:85:43:e5:3b:3d:f6:de:84:af:8e:d6:64:5b: 6b:7c:88:89:83:29:8d:28:a4:14:d3:3e:2e:aa:75:b5:d2:e2: 01:14:dd:3b:bf:3f:87:97:d0:42:33:cc:a4:3d:be:3b:fc:0e: 02:f0:8c:95 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbICuzTkz4XvQ5YmJjX6YAzIKNuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDYxODA2MTNaFw0yNjA2MDUxODExMTNaMDMxMTAvBgNV BAMTKDIxQzg3QjI3RERERTg0NUJGMEMzQTNGOTA5NjVBQTREOUJGNDI3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EZjyhNf2doH6FqEMrnR2SMAE JoVqawOBF097OJoHsQcZU8+JZvMLeWdz/XrqQ0AM+aSCzZSdAs6yI2SyYlTS9/QJ xeTb2HIyztIHm9wvMhzwd/wHGjAsXsyH4ab1SEi5W8R9YzDUxxb6ZZxUhb9xz3z7 /Hf0mmQp+8wDNyPB+wAOe9aJ5xSnSb0f8dJHZISBSEwcKy24R4WUOqtBftM0wd2K QX/i1H7owIiQa2dJvopFYvcvO/hOSZKAT6u591uZs1qi3k92pbA3LBH3GMeh9wMI MAZQtgmls2AWdmKns4qUVXUHsPYmYWNmI6bzOkO9CW7+Uxp8iZTBKK6OKnWDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhyHsn3d6EW/DD o/kJZapNm/QneDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkdw Y1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJzVjUxVzFIWEVvR3MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZH cGNYcENWQ0Z6dk1ROHVKblZqamtZelJodnlqbk4yc1Y1MVcxSFhFb0dzLzAvMjFD ODdCMjdERERFODQ1QkYwQzNBM0Y5MDk2NUFBNEQ5QkY0Mjc3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCz/gUMA0EAgACMAcDBQAoBHnoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQj5zANBgkqhkiG9w0BAQsFAAOCAQEAjXKTRg42hU/RLcij f0aKOWjRPUOcd3fECO+wrO2MzglWxHZonkU/BheLu49FTREGoOLaerO93kJGJdSd PBLs0SRxLQmY/scwCsFFuoa+DY54dF9Njw7gXVAgYL0BpfOKrygS/E1hzXublmYc swxBH1KZZtatJeCrtH8WQQj5d0VNeqnE/gMqmIvkB62yHNT+BnCorHostID2a3dk vnD9s1mBJZAynpeBr8nPBwN4K7eKAwCMHaIIGXiFIYaF4FlLmv3yGnxeYt1Ayi6F Q+U7PfbehK+O1mRba3yIiYMpjSikFNM+Lqp1tdLiARTdO78/h5fQQjPMpD2+O/wO AvCMlQ== -----END CERTIFICATE-----Generated at Wed Jun 11 02:41:14 2025 by rpki-client