$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/539EBD0106751619B3004BF315DFE05E3415919D.cer File: 539EBD0106751619B3004BF315DFE05E3415919D.cer (raw, json) Hash identifier: tXzlr1cc2bLBOdFE8y/7QlkunwoMaETgq2JRwWwjnHY= Subject key identifier: 53:9E:BD:01:06:75:16:19:B3:00:4B:F3:15:DF:E0:5E:34:15:91:9D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 010A44E502EC96773483515BD9925D115F8144D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/539EBD0106751619B3004BF315DFE05E3415919D.mft caRepository: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Jun 2025 13:26:15 +0000 Certificate not after: Mon 08 Jun 2026 13:31:15 +0000 Subordinate resources: AS: 263878 IP: 138.204.20.0/22 IP: 2804:2720::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 23:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0a:44:e5:02:ec:96:77:34:83:51:5b:d9:92:5d:11:5f:81:44:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 9 13:26:15 2025 GMT Not After : Jun 8 13:31:15 2026 GMT Subject: CN=539EBD0106751619B3004BF315DFE05E3415919D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:d0:2a:5a:e6:e1:9f:a6:70:91:15:27:d4: 4f:b3:07:20:24:38:5a:a7:34:95:bc:86:05:92:f5: fe:8d:44:e8:2e:7c:c6:67:d3:d3:5b:ff:42:3e:92: 01:a5:bf:5f:0b:f0:a0:ee:57:1c:68:5f:18:e0:f7: 5a:a6:ef:75:8a:1f:e7:10:8d:02:1f:d8:29:27:de: 17:35:0d:6f:0e:d0:d0:42:6f:3b:03:20:b6:91:89: c5:d9:86:74:e2:72:4a:78:2f:f8:14:1b:01:a2:f2: c7:23:e4:06:5b:9b:61:4b:bd:c4:29:b2:68:7b:85: 20:4a:05:16:4a:95:79:0e:2b:01:d2:6e:6f:b0:38: a7:79:a9:4a:95:54:3f:34:ce:14:ee:bc:5d:6b:6d: 73:f4:8a:0f:58:3a:ad:9a:1c:77:f1:ea:b9:2f:7d: b8:94:2f:d1:b5:99:65:77:fb:17:ef:5e:e6:69:9d: 2a:bc:15:a2:0b:a2:4d:01:53:e8:0e:ec:08:41:3b: 39:97:a2:a1:41:e0:1f:db:45:65:72:85:b2:4b:da: 52:b9:f8:f7:dc:9b:f0:6f:43:71:e9:38:1a:ce:26: 11:31:87:36:3a:f4:2a:a6:10:04:46:00:56:2f:1e: e1:6c:e3:8c:d4:d9:53:de:81:e6:40:0b:0c:fb:c7: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:9E:BD:01:06:75:16:19:B3:00:4B:F3:15:DF:E0:5E:34:15:91:9D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/539EBD0106751619B3004BF315DFE05E3415919D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.20.0/22 IPv6: 2804:2720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263878 Signature Algorithm: sha256WithRSAEncryption a6:9e:33:ff:8a:3a:49:a5:f8:d7:ea:06:4b:83:2d:92:7b:ea: 49:fc:00:d4:75:8c:83:1d:08:f7:8b:44:15:b5:78:d8:1d:ec: 33:af:a1:2e:ae:8d:bd:56:2b:7c:a2:a4:de:00:3b:8c:fb:ac: 58:3e:f8:59:df:d1:8b:55:ee:da:ed:e2:1b:46:3a:02:97:c7: 85:2f:e3:8d:a6:57:4e:a8:44:f0:9a:0e:cb:78:c1:b1:53:c1: 64:1f:77:f5:04:67:38:c7:ed:d3:0f:ff:9e:59:5f:9c:04:61: 48:6c:09:6f:76:37:4b:82:e8:68:64:4e:85:04:aa:73:49:0d: ef:55:7b:23:4d:f2:4f:07:66:15:8e:4c:5f:f3:b1:1c:69:45: af:96:17:1b:5b:a4:4c:f6:1d:40:cc:ca:40:cd:0f:f4:39:c4: 60:84:75:38:de:de:1b:c5:6f:1b:3f:e1:68:8b:52:fd:ff:ff: ac:54:e9:9a:e3:cc:39:b0:22:35:44:4f:37:02:99:4d:e3:27: 52:79:a2:1a:c5:16:e2:52:eb:ed:1c:49:80:86:b4:37:55:9c: 83:6f:42:66:dd:a1:28:d7:4d:c5:7e:ef:92:c0:7f:30:9d:2d: f3:e5:00:5d:98:ba:c9:c0:76:0a:1c:d4:51:61:8f:3c:3b:1d: fd:07:22:d8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAQpE5QLslnc0g1Fb2ZJdEV+BRNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDkxMzI2MTVaFw0yNjA2MDgxMzMxMTVaMDMxMTAvBgNV BAMTKDUzOUVCRDAxMDY3NTE2MTlCMzAwNEJGMzE1REZFMDVFMzQxNTkxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkdAqWubhn6ZwkRUn1E+zByAk OFqnNJW8hgWS9f6NROgufMZn09Nb/0I+kgGlv18L8KDuVxxoXxjg91qm73WKH+cQ jQIf2Ckn3hc1DW8O0NBCbzsDILaRicXZhnTickp4L/gUGwGi8scj5AZbm2FLvcQp smh7hSBKBRZKlXkOKwHSbm+wOKd5qUqVVD80zhTuvF1rbXP0ig9YOq2aHHfx6rkv fbiUL9G1mWV3+xfvXuZpnSq8FaILok0BU+gO7AhBOzmXoqFB4B/bRWVyhbJL2lK5 +Pfcm/BvQ3HpOBrOJhExhzY69CqmEARGAFYvHuFs44zU2VPegeZACwz7x9yBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTnr0BBnUWGbMA S/MV3+BeNBWRnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEg5 YlJSUkNEVnFmY21hSnp3NzZwOVVYWE1Rb2FIaXd4cGRldWhuZVpGVFgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRI OWJSUlJDRFZxZmNtYUp6dzc2cDlVWFhNUW9hSGl3eHBkZXVobmVaRlRYLzAvNTM5 RUJEMDEwNjc1MTYxOUIzMDA0QkYzMTVERkUwNUUzNDE1OTE5RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiswUMA0EAgACMAcDBQAoBCcgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQGxjANBgkqhkiG9w0BAQsFAAOCAQEApp4z/4o6SaX41+oG S4MtknvqSfwA1HWMgx0I94tEFbV42B3sM6+hLq6NvVYrfKKk3gA7jPusWD74Wd/R i1Xu2u3iG0Y6ApfHhS/jjaZXTqhE8JoOy3jBsVPBZB939QRnOMft0w//nllfnARh SGwJb3Y3S4LoaGROhQSqc0kN71V7I03yTwdmFY5MX/OxHGlFr5YXG1ukTPYdQMzK QM0P9DnEYIR1ON7eG8VvGz/haItS/f//rFTpmuPMObAiNURPNwKZTeMnUnmiGsUW 4lLr7RxJgIa0N1Wcg29CZt2hKNdNxX7vksB/MJ0t8+UAXZi6ycB2ChzUUWGPPDsd /Qci2A== -----END CERTIFICATE-----Generated at Mon Jun 9 23:04:49 2025 by rpki-client