$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16CB8773EACB65F30777ECC795BCEC32A0DA9198.cer File: 16CB8773EACB65F30777ECC795BCEC32A0DA9198.cer (raw, json) Hash identifier: KHBt+4//CFkaNt3z3CHfBSkJjLyoafev5eWH6zsYan4= Subject key identifier: 16:CB:87:73:EA:CB:65:F3:07:77:EC:C7:95:BC:EC:32:A0:DA:91:98 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AFC624BB8BC8A0F46B5CE2AC914C60F168246F9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/16CB8773EACB65F30777ECC795BCEC32A0DA9198.mft caRepository: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 29 May 2025 18:20:29 +0000 Certificate not after: Thu 28 May 2026 18:25:29 +0000 Subordinate resources: AS: 268850 IP: 45.174.128.0/24 IP: 2801:80:3540::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Jun 2025 14:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fc:62:4b:b8:bc:8a:0f:46:b5:ce:2a:c9:14:c6:0f:16:82:46:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 29 18:20:29 2025 GMT Not After : May 28 18:25:29 2026 GMT Subject: CN=16CB8773EACB65F30777ECC795BCEC32A0DA9198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:ff:07:09:21:f8:c5:90:ae:3a:51:05:4e: db:e7:79:3f:cf:03:ef:19:d3:70:c7:b4:ac:40:4e: 43:52:19:3e:cf:92:73:be:e6:f9:0a:a5:6f:7b:62: 12:69:06:99:16:79:5b:d8:d6:aa:ec:dd:41:9e:54: 9c:55:2f:6b:6d:da:56:8e:93:a3:23:d9:f7:71:6b: ce:1d:f5:89:15:07:9d:8c:f3:5b:2d:2f:80:f4:24: 66:92:b1:cf:45:5d:22:d6:08:9b:69:4e:86:4c:9d: 7b:f2:0c:0f:7e:37:06:f2:cb:e3:4a:b6:bf:e0:df: fe:48:97:ce:06:27:2a:aa:ed:77:3f:af:9c:11:3c: e5:7a:18:db:08:58:93:b3:a9:4e:cf:be:af:85:19: 1f:cb:6e:86:d8:33:4e:29:f5:7a:1d:ad:47:11:19: 9f:b3:68:a8:74:b7:b4:72:19:31:e2:df:de:d3:27: 0f:2a:a3:86:9a:5d:92:5d:fb:4f:49:c0:a3:3e:58: 1e:7c:ed:ae:c0:e2:d2:13:9d:1f:af:7d:1f:14:be: 68:25:29:33:bd:ba:7d:93:d8:1e:cb:5f:b2:d1:56: a1:f0:94:ac:8c:eb:bf:45:a5:ca:07:48:bc:8f:b0: d8:6f:c0:d6:39:77:3b:ca:df:2e:a2:a2:c3:89:65: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:CB:87:73:EA:CB:65:F3:07:77:EC:C7:95:BC:EC:32:A0:DA:91:98 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/16CB8773EACB65F30777ECC795BCEC32A0DA9198.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.128.0/24 IPv6: 2801:80:3540::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268850 Signature Algorithm: sha256WithRSAEncryption 87:35:b1:39:4d:e1:ff:ee:b8:95:10:ff:57:ad:e1:b6:11:27: 5c:55:60:e7:87:73:6c:1b:05:8e:45:d3:eb:6a:7f:66:a1:d9: b5:0f:5b:52:24:ac:31:1b:00:3b:ff:6b:0c:55:cc:ae:8c:9a: c2:1c:11:a3:f5:b4:52:75:d6:c4:26:8e:9f:8a:2c:dd:40:23: d8:fa:d4:9d:07:a2:17:b1:62:b9:57:20:7d:e2:98:ef:43:52: bd:98:2e:ed:a4:a1:b1:f9:1e:1b:7f:bd:88:f3:20:b9:fb:4a: 81:bc:7d:b2:42:62:3a:7c:89:5f:22:18:b6:30:ef:4a:8f:73: d7:95:1c:2d:c4:aa:ce:74:aa:31:5f:dc:cf:39:85:f4:bd:1e: 48:1a:3c:01:d2:1d:ac:56:16:9c:3c:21:04:b4:87:ea:62:69: 6f:ee:bb:fa:bf:e8:71:ce:9f:e4:68:58:8b:cd:72:86:2b:f3: ed:84:6d:8f:be:e2:16:0a:d6:50:f8:8b:49:8d:db:31:f7:b8: 98:42:36:57:af:02:76:e1:a3:9b:dc:8b:cd:a7:4a:de:fa:7a: b5:88:17:74:d6:a1:02:4d:41:f1:5e:fc:b9:e9:6d:6c:88:b3: 37:f3:af:f6:07:b3:b4:4e:10:87:13:d2:dc:e0:81:ec:b4:b2: f5:a4:e6:3b -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUKvxiS7i8ig9Gtc4qyRTGDxaCRvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjkxODIwMjlaFw0yNjA1MjgxODI1MjlaMDMxMTAvBgNV BAMTKDE2Q0I4NzczRUFDQjY1RjMwNzc3RUNDNzk1QkNFQzMyQTBEQTkxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgf8HCSH4xZCuOlEFTtvneT/P A+8Z03DHtKxATkNSGT7PknO+5vkKpW97YhJpBpkWeVvY1qrs3UGeVJxVL2tt2laO k6Mj2fdxa84d9YkVB52M81stL4D0JGaSsc9FXSLWCJtpToZMnXvyDA9+Nwbyy+NK tr/g3/5Il84GJyqq7Xc/r5wRPOV6GNsIWJOzqU7Pvq+FGR/LbobYM04p9XodrUcR GZ+zaKh0t7RyGTHi397TJw8qo4aaXZJd+09JwKM+WB587a7A4tITnR+vfR8Uvmgl KTO9un2T2B7LX7LRVqHwlKyM679FpcoHSLyPsNhvwNY5dzvK3y6iosOJZY2VAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWy4dz6stl8wd3 7MeVvOwyoNqRmDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXIy c0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVFa1YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy MnNBUEZUeHJGQlRVaDFlUWRRUFl1c1pBY3BHenNRTlZ1a2VoUFpFRWtWLzAvMTZD Qjg3NzNFQUNCNjVGMzA3NzdFQ0M3OTVCQ0VDMzJBMERBOTE5OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQALa6AMA8EAgACMAkDBwAoAQCANUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBBoyMA0GCSqGSIb3DQEBCwUAA4IBAQCHNbE5TeH/7riV EP9XreG2ESdcVWDnh3NsGwWORdPran9modm1D1tSJKwxGwA7/2sMVcyujJrCHBGj 9bRSddbEJo6fiizdQCPY+tSdB6IXsWK5VyB94pjvQ1K9mC7tpKGx+R4bf72I8yC5 +0qBvH2yQmI6fIlfIhi2MO9Kj3PXlRwtxKrOdKoxX9zPOYX0vR5IGjwB0h2sVhac PCEEtIfqYmlv7rv6v+hxzp/kaFiLzXKGK/PthG2PvuIWCtZQ+ItJjdsx97iYQjZX rwJ24aOb3IvNp0re+nq1iBd01qECTUHxXvy56W1siLM386/2B7O0ThCHE9Lc4IHs tLL1pOY7 -----END CERTIFICATE-----Generated at Mon Jun 2 16:29:00 2025 by rpki-client