$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer File: 020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer (raw, json) Hash identifier: 9oGmp7ciPyH5tdK2Ho47B3XZuXSlM9nof6evhH0aNUA= Subject key identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 283AB34F70529E533729CC01F0DF36DB9B91AE40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft caRepository: rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 20:56:36 +0000 Certificate not after: Fri 10 Apr 2026 21:01:36 +0000 Subordinate resources: AS: 271578 IP: 2804:7db8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3a:b3:4f:70:52:9e:53:37:29:cc:01:f0:df:36:db:9b:91:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 11 20:56:36 2025 GMT Not After : Apr 10 21:01:36 2026 GMT Subject: CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:17:8a:36:1a:e0:d7:bc:06:6a:31:34:b1: 0a:08:10:6b:c3:66:91:b7:1d:8d:47:ed:88:59:e2: 4a:74:d4:98:d0:11:e0:34:1e:d1:53:34:b5:39:0f: 3a:a1:5f:4d:7f:2e:4b:e8:fc:fd:42:ca:2b:1d:50: 96:49:43:86:ff:8e:01:e4:9a:ce:a0:71:6f:23:c9: b6:07:52:a5:39:12:a8:83:93:a1:e6:d4:e8:77:18: d6:fd:47:f3:1a:6d:2e:63:ba:af:e3:d5:05:77:51: 98:9f:14:9b:71:97:35:5b:f1:7d:00:1e:37:50:ef: 16:40:21:03:3f:fc:b5:0c:95:6f:66:e9:96:d3:0e: d4:d9:49:f4:69:4d:0b:96:1a:93:9f:53:51:24:fa: 38:f9:1b:79:c5:c8:96:ce:ac:e6:dd:bf:e5:d0:9a: 84:c5:5a:bf:2c:ce:90:d6:9b:c8:a6:d2:1a:8c:0e: bf:16:88:0d:3d:49:e2:a3:94:1a:b1:98:6a:27:cf: bd:59:c6:ec:cc:24:f7:15:74:be:ca:63:b2:59:79: db:f8:6e:c3:30:df:54:5c:db:0a:e6:e3:20:63:b4: e4:c7:18:16:70:26:a6:95:00:ba:95:14:66:e2:12: b5:21:6f:59:47:8c:0d:58:35:a4:38:bf:c9:9b:50: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7db8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271578 Signature Algorithm: sha256WithRSAEncryption 0c:5f:67:e1:de:fb:1e:4c:e2:3f:b3:19:57:ef:68:1e:1c:6b: b4:8b:bd:36:e5:a2:35:ca:ae:20:30:0e:5e:fc:91:66:b6:2e: cc:31:de:73:0d:ba:b2:95:20:69:68:a8:06:6a:ae:de:db:a3: 53:9e:b9:4f:ec:fb:b7:f4:05:d8:a8:b5:7a:9e:03:b7:28:87: 89:27:9d:8c:25:b6:55:70:d5:21:49:28:8a:46:e5:f6:8f:66: 94:e3:67:44:e6:36:c1:94:5a:91:a2:d9:b4:3c:70:04:f5:d8: c6:c7:ec:95:5d:2b:30:2e:65:ea:df:92:a1:e5:13:8f:9b:53: 54:65:46:09:b3:5e:1e:f2:0d:10:e9:14:52:70:b6:e7:2c:0a: cf:e0:3a:25:16:f9:3b:0d:1d:fa:b0:b4:9e:7b:49:9d:fe:b7: 82:96:56:09:4e:06:0f:fd:be:38:96:bf:69:8f:ff:1a:e0:e3: 2c:11:c1:a9:2f:5b:92:f1:60:3a:9a:68:96:f4:96:75:8f:c0: f1:3e:57:7f:5c:e3:ae:57:0f:b9:7d:17:30:40:1d:d9:21:7a: 95:0e:06:9b:2c:65:85:2e:92:91:1e:aa:1d:e1:d3:8f:fd:a7: 9d:41:16:a3:8e:ef:1e:15:1d:51:34:f9:34:9b:bd:91:af:d2: 5e:09:cf:04 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUKDqzT3BSnlM3KcwB8N8225uRrkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTEyMDU2MzZaFw0yNjA0MTAyMTAxMzZaMDMxMTAvBgNV BAMTKDAyMEI2MDI1RDMxNUNCQUVCMUFBNkIyMDg3MzQ5NEY0QkQyRUQwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCReKNhrg17wGajE0sQoIEGvD ZpG3HY1H7YhZ4kp01JjQEeA0HtFTNLU5DzqhX01/Lkvo/P1CyisdUJZJQ4b/jgHk ms6gcW8jybYHUqU5EqiDk6Hm1Oh3GNb9R/MabS5juq/j1QV3UZifFJtxlzVb8X0A HjdQ7xZAIQM//LUMlW9m6ZbTDtTZSfRpTQuWGpOfU1Ek+jj5G3nFyJbOrObdv+XQ moTFWr8szpDWm8im0hqMDr8WiA09SeKjlBqxmGonz71ZxuzMJPcVdL7KY7JZedv4 bsMw31Rc2wrm4yBjtOTHGBZwJqaVALqVFGbiErUhb1lHjA1YNaQ4v8mbUI0DAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCC2Al0xXLrrGq ayCHNJT0vS7QAzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkhU RWNaeFdyaVZXd3dYczg2bm1XS3JVcDZhTmFwenNCbjRXYXRYVU54ZTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI VEVjWnhXcmlWV3d3WHM4Nm5tV0tyVXA2YU5hcHpzQm40V2F0WFVOeGU5LzAvMDIw QjYwMjVEMzE1Q0JBRUIxQUE2QjIwODczNDk0RjRCRDJFRDAwMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR9uDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME JNowDQYJKoZIhvcNAQELBQADggEBAAxfZ+He+x5M4j+zGVfvaB4ca7SLvTblojXK riAwDl78kWa2Lswx3nMNurKVIGloqAZqrt7bo1OeuU/s+7f0BdiotXqeA7coh4kn nYwltlVw1SFJKIpG5faPZpTjZ0TmNsGUWpGi2bQ8cAT12MbH7JVdKzAuZerfkqHl E4+bU1RlRgmzXh7yDRDpFFJwtucsCs/gOiUW+TsNHfqwtJ57SZ3+t4KWVglOBg/9 vjiWv2mP/xrg4ywRwakvW5LxYDqaaJb0lnWPwPE+V39c465XD7l9FzBAHdkhepUO BpssZYUukpEeqh3h04/9p51BFqOO7x4VHVE0+TSbvZGv0l4JzwQ= -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:19 2025 by rpki-client