$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer (raw, json) Hash identifier: UojU2mzzPRrsiRyuU8HNDU9l0U+HognpsXWHcYM1R/Q= Subject key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0656CC2AA7D40ADCC81E9945A221D851FB77CA29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft caRepository: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 May 2025 17:37:03 +0000 Certificate not after: Mon 11 May 2026 17:42:03 +0000 Subordinate resources: AS: 273414 IP: 45.182.148.0/22 IP: 2804:8e44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 01:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:56:cc:2a:a7:d4:0a:dc:c8:1e:99:45:a2:21:d8:51:fb:77:ca:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 17:37:03 2025 GMT Not After : May 11 17:42:03 2026 GMT Subject: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:a4:09:f3:7d:60:cf:0e:4d:00:11:3c:c7: d5:c0:c9:ba:b8:56:4f:a3:9d:1e:f6:00:6b:ca:38: a4:6c:b8:cd:15:85:86:75:5d:ce:24:f8:f4:18:c8: f3:cc:92:73:6c:e1:43:5c:78:58:a5:b8:b6:65:96: f5:ed:4e:d7:94:26:b8:87:66:65:d9:28:e1:bd:40: 48:81:ea:f9:93:ba:bf:b4:58:7f:f0:af:84:a5:0f: c2:c2:ae:41:94:88:b7:0c:84:fb:b8:ed:fd:6c:d6: 10:96:25:2e:c8:42:7b:f0:5f:0b:e0:a3:49:60:c9: 5b:6c:b9:8b:c3:cb:53:11:91:f5:39:a9:6b:73:a0: b3:aa:9c:ae:96:3e:f1:90:96:6a:a1:f8:a3:fd:83: 93:a0:64:f8:dc:54:9b:2c:1b:60:f6:c1:5d:eb:43: 8a:6e:26:62:4a:5d:f8:a8:1f:c7:76:71:47:7f:82: a0:ee:38:1b:36:5d:58:8f:50:0e:f4:2e:ab:5b:35: b4:9f:00:ed:71:28:10:c4:53:78:e7:43:86:79:71: ef:14:bf:ec:0b:35:b7:6f:ca:e5:70:7e:19:2b:cb: cb:cb:a4:68:e9:aa:a6:99:00:9e:79:11:91:f4:c6: fb:90:6a:de:12:70:ec:9e:c2:1c:e0:ed:e7:55:93: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.148.0/22 IPv6: 2804:8e44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273414 Signature Algorithm: sha256WithRSAEncryption 39:42:25:2f:14:8e:dc:df:06:8e:cf:94:63:0a:49:f2:61:e2: a1:82:bf:01:53:e6:02:73:a1:11:b5:70:c5:d4:3f:24:0e:e1: 12:be:b5:9e:f4:e6:6a:ac:d8:3a:39:25:0d:c7:db:06:f8:06: 43:33:5f:1e:aa:0c:4d:0c:a4:7a:c4:53:f0:68:6f:ea:22:f4: 53:16:da:86:c5:3e:c5:bd:fd:7d:00:ae:b9:36:65:fd:b8:22: c1:90:b0:0d:3e:74:ca:77:03:5a:97:59:4f:ec:f1:c6:c8:6b: 9e:a3:66:2f:cd:a4:08:01:7d:9b:d6:d7:2d:85:95:31:f2:ab: 2a:77:f8:dd:e6:f1:9e:11:7c:29:e4:cb:c0:d0:11:2a:82:83: b9:37:07:e6:4e:94:5b:f2:31:7d:1f:3e:78:4f:3a:d5:8f:c1: d1:39:5e:22:9f:eb:49:99:fc:da:b2:3b:36:a5:32:75:c1:1f: dc:e5:bd:b2:7b:3d:ab:3f:78:e2:18:40:cd:81:a1:a0:5d:0a: 8c:41:69:e2:f3:e0:0e:29:64:82:ca:1e:29:c0:54:ac:fa:67: 02:3d:e2:7c:78:97:7a:ef:8c:d3:e1:92:4c:9a:e6:6e:e0:fa: 01:6b:47:98:fb:e3:07:d1:1b:aa:e0:b9:9a:b3:53:3d:bc:38: 79:e7:93:f0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBlbMKqfUCtzIHplFoiHYUft3yikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTIxNzM3MDNaFw0yNjA1MTExNzQyMDNaMDMxMTAvBgNV BAMTKDFDRUZEQ0E3MDMyOUI5RENEMjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCR6QJ831gzw5NABE8x9XAybq4 Vk+jnR72AGvKOKRsuM0VhYZ1Xc4k+PQYyPPMknNs4UNceFiluLZllvXtTteUJriH ZmXZKOG9QEiB6vmTur+0WH/wr4SlD8LCrkGUiLcMhPu47f1s1hCWJS7IQnvwXwvg o0lgyVtsuYvDy1MRkfU5qWtzoLOqnK6WPvGQlmqh+KP9g5OgZPjcVJssG2D2wV3r Q4puJmJKXfioH8d2cUd/gqDuOBs2XViPUA70LqtbNbSfAO1xKBDEU3jnQ4Z5ce8U v+wLNbdvyuVwfhkry8vLpGjpqqaZAJ55EZH0xvuQat4ScOyewhzg7edVk191AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQc79ynAym53NIX YJvZzllC/hxqLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzVH OUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1 RzlIY1V6UEFEY2RheE55Q1ROSktUYU1INlNDeHljaTkxUFZYNVhhbUNYLzAvMUNF RkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJGRTFDNkEyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbaUMA0EAgACMAcDBQAoBI5EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQsBjANBgkqhkiG9w0BAQsFAAOCAQEAOUIlLxSO3N8Gjs+U YwpJ8mHioYK/AVPmAnOhEbVwxdQ/JA7hEr61nvTmaqzYOjklDcfbBvgGQzNfHqoM TQykesRT8Ghv6iL0UxbahsU+xb39fQCuuTZl/bgiwZCwDT50yncDWpdZT+zxxshr nqNmL82kCAF9m9bXLYWVMfKrKnf43ebxnhF8KeTLwNARKoKDuTcH5k6UW/IxfR8+ eE861Y/B0TleIp/rSZn82rI7NqUydcEf3OW9sns9qz944hhAzYGhoF0KjEFp4vPg DilkgsoeKcBUrPpnAj3ifHiXeu+M0+GSTJrmbuD6AWtHmPvjB9EbquC5mrNTPbw4 eeeT8A== -----END CERTIFICATE-----Generated at Sun Jun 8 00:45:05 2025 by rpki-client