$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer File: 072772F63E62DC06EAED9A555C2C793CEFF59262.cer (raw, json) Hash identifier: R71YL9+85eHg3XhVKWXBxq4cYmeHWJTofjDhDo4GtSI= Subject key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F1F53261D59E28BF5F4790C9E068CB2979E7478 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft caRepository: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 28 May 2025 13:42:23 +0000 Certificate not after: Wed 27 May 2026 13:47:23 +0000 Subordinate resources: AS: 271204 IP: 45.236.60.0/22 IP: 179.49.188.0/22 IP: 2804:77dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1f:53:26:1d:59:e2:8b:f5:f4:79:0c:9e:06:8c:b2:97:9e:74:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 28 13:42:23 2025 GMT Not After : May 27 13:47:23 2026 GMT Subject: CN=072772F63E62DC06EAED9A555C2C793CEFF59262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:dd:21:66:50:be:7a:7b:b1:03:73:dc:5a: a2:f4:54:4a:87:f2:46:f3:ea:f5:3e:3f:6f:76:22: 40:b7:41:72:48:d9:38:79:16:42:a9:4b:ee:47:e4: d5:ec:ed:5d:27:2d:de:c8:21:2a:79:60:6b:35:95: 3c:32:15:67:8a:ca:cf:9f:07:ab:96:c4:f8:67:18: 64:57:4b:48:95:30:75:c1:a0:12:f4:7a:b4:8f:a7: b9:40:98:4f:22:57:7a:4f:26:46:92:5d:b5:77:66: 5a:b9:c4:52:07:59:f3:2f:74:3f:eb:72:a4:5a:7b: c5:fc:7c:97:9f:b5:bc:5e:b2:e5:df:ff:10:64:76: bd:7b:3c:6b:10:d0:1b:2a:b3:31:df:e7:e5:2f:b0: 60:ac:7d:ad:68:86:07:d8:23:74:37:62:b7:4f:18: b1:0f:71:1f:01:54:0a:c0:38:82:23:8d:c2:43:2c: c8:b6:a7:cb:9b:4c:42:88:6c:2b:8b:7f:5e:3d:cc: 65:bd:48:33:17:e3:54:dc:c6:0f:88:21:19:7c:c1: 51:ea:76:0e:00:41:12:ea:86:9d:fc:ec:d1:65:ba: 12:7a:b1:cf:41:23:0e:29:9d:cf:49:28:75:79:3a: bc:08:40:fb:93:60:31:9d:25:87:db:eb:87:1a:6b: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.60.0/22 179.49.188.0/22 IPv6: 2804:77dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271204 Signature Algorithm: sha256WithRSAEncryption a7:62:e2:10:e4:8f:07:ef:12:46:83:53:d2:3a:db:6b:65:ae: f1:17:9e:6e:45:14:09:dc:34:74:35:0f:31:1f:01:9a:46:27: 7e:ae:94:fa:a9:91:f6:b6:4a:7a:06:7f:92:a6:ce:b9:a0:75: bd:ac:90:55:00:2e:fc:14:ab:6a:a2:38:c7:e8:c5:a3:4a:00: ac:bd:75:5a:6a:58:b8:ed:ef:46:c5:2c:50:92:e3:ea:dc:01: b6:68:20:1f:31:81:3d:05:d7:0d:2e:a7:5a:1c:a7:9e:26:99: ec:61:21:42:1f:3a:98:67:f9:1b:ae:78:74:da:de:fd:42:64: 71:6d:97:2e:ee:90:72:cc:46:2f:64:9d:47:48:c4:c5:32:8b: 6b:b2:cf:93:48:ba:6d:a0:01:04:24:c0:bd:da:29:13:79:ea: 69:44:19:cd:42:6a:b6:fe:f8:93:6f:ca:79:01:02:08:7e:5e: 99:34:67:e3:69:61:d5:02:a0:5a:2e:fb:89:d8:2a:1c:e4:9f: 47:d2:7a:84:2f:60:87:a4:15:45:65:1d:5d:44:94:d2:c7:c2: b4:e8:a9:3a:c2:d6:05:1f:f7:ff:b6:e2:46:a0:65:65:de:29: 6a:e9:6d:38:3b:4a:24:40:3c:5f:b6:d3:0a:ee:d8:85:be:fc: e4:cf:ed:58 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUXx9TJh1Z4ov19HkMngaMspeedHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjgxMzQyMjNaFw0yNjA1MjcxMzQ3MjNaMDMxMTAvBgNV BAMTKDA3Mjc3MkY2M0U2MkRDMDZFQUVEOUE1NTVDMkM3OTNDRUZGNTkyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5c90hZlC+enuxA3PcWqL0VEqH 8kbz6vU+P292IkC3QXJI2Th5FkKpS+5H5NXs7V0nLd7IISp5YGs1lTwyFWeKys+f B6uWxPhnGGRXS0iVMHXBoBL0erSPp7lAmE8iV3pPJkaSXbV3Zlq5xFIHWfMvdD/r cqRae8X8fJeftbxesuXf/xBkdr17PGsQ0BsqszHf5+UvsGCsfa1ohgfYI3Q3YrdP GLEPcR8BVArAOIIjjcJDLMi2p8ubTEKIbCuLf149zGW9SDMX41Tcxg+IIRl8wVHq dg4AQRLqhp387NFluhJ6sc9BIw4pnc9JKHV5OrwIQPuTYDGdJYfb64caa58nAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHJ3L2PmLcBurt mlVcLHk87/WSYjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFa UEdiM1I5Mm9QSkUybmhxOXBZZmlVRHhNZU1UTTl2a2l0cXRDVjhjY2kvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFa UEdiM1I5Mm9QSkUybmhxOXBZZmlVRHhNZU1UTTl2a2l0cXRDVjhjY2kvMS8wNzI3 NzJGNjNFNjJEQzA2RUFFRDlBNTU1QzJDNzkzQ0VGRjU5MjYyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt7DwDBAKzMbwwDQQCAAIwBwMFACgEd9wwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCNkMA0GCSqGSIb3DQEBCwUAA4IBAQCnYuIQ5I8H 7xJGg1PSOttrZa7xF55uRRQJ3DR0NQ8xHwGaRid+rpT6qZH2tkp6Bn+Sps65oHW9 rJBVAC78FKtqojjH6MWjSgCsvXVaali47e9GxSxQkuPq3AG2aCAfMYE9BdcNLqda HKeeJpnsYSFCHzqYZ/kbrnh02t79QmRxbZcu7pByzEYvZJ1HSMTFMotrss+TSLpt oAEEJMC92ikTeeppRBnNQmq2/viTb8p5AQIIfl6ZNGfjaWHVAqBaLvuJ2Coc5J9H 0nqEL2CHpBVFZR1dRJTSx8K06Kk6wtYFH/f/tuJGoGVl3ilq6W04O0okQDxfttMK 7tiFvvzkz+1Y -----END CERTIFICATE-----Generated at Fri Jun 6 04:48:05 2025 by rpki-client