$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer File: 22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer (raw, json) Hash identifier: Ihc7q4SgzasglJ1siOJUPJPJ6vYwZBjfgctUQpuxjvQ= Subject key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6FE29894A4F26EE04F46726A688025B5EC9C6E76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft caRepository: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Mar 2025 17:35:36 +0000 Certificate not after: Mon 16 Mar 2026 17:40:36 +0000 Subordinate resources: AS: 271699 IP: 45.228.36.0/22 IP: 2804:7fa0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e2:98:94:a4:f2:6e:e0:4f:46:72:6a:68:80:25:b5:ec:9c:6e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 17 17:35:36 2025 GMT Not After : Mar 16 17:40:36 2026 GMT Subject: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:a9:db:dd:71:7f:f8:3d:ae:5b:91:08:ac: 47:f9:fc:97:78:2e:fa:35:0c:5b:ff:47:d3:6a:02: 8f:d7:9a:52:50:41:dd:53:05:22:02:ce:3a:6c:d3: a6:4e:f8:66:9a:44:4e:3c:ba:42:5b:85:c6:a5:8e: d1:26:f9:50:3d:1c:14:fe:c8:f3:a6:71:4a:b5:56: b9:cb:72:45:36:45:fc:c9:14:0f:db:ff:e1:6e:ab: 9b:d6:50:1f:1b:24:7f:1f:8a:d8:b4:b0:8b:0f:1a: 47:de:b3:fe:14:65:6c:81:cd:37:72:86:ba:bd:31: a3:40:0c:78:95:58:b8:79:61:e1:ef:78:13:73:41: a0:2e:8a:22:ef:15:b1:2e:76:99:a0:12:40:0e:63: 0c:70:c6:db:39:2a:9b:6e:53:09:6b:75:6c:88:03: 27:d7:09:75:16:d2:4b:7e:f1:e5:c6:a2:f8:95:a1: a6:02:81:ed:a5:e5:05:a7:67:ef:28:af:0b:4b:42: 87:f8:49:3f:7f:19:ba:3e:ae:7c:f9:99:d1:83:c4: fc:86:b1:c2:f4:39:9d:90:91:0f:4b:87:49:2e:9e: 97:3b:1c:25:cb:ed:ca:ef:3e:68:bc:0c:00:8d:f6: 11:f2:14:86:1c:54:92:f6:d6:f9:4b:02:1e:32:09: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.36.0/22 IPv6: 2804:7fa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271699 Signature Algorithm: sha256WithRSAEncryption 3a:8a:be:12:70:42:2a:30:81:09:d1:47:bd:46:2f:1d:07:c3: 23:e1:ac:58:9b:08:57:a6:5d:74:60:6d:81:19:d9:33:ba:c6: 4f:32:88:9a:76:44:69:68:c5:a3:bb:6e:b7:81:ee:e9:2f:62: 9b:76:59:72:f8:19:af:60:ea:69:42:40:2d:f4:4f:cb:d8:dc: 9e:f2:f4:47:ef:77:1f:e7:34:11:2a:4c:ac:82:45:37:db:de: f8:1c:3f:87:6b:4a:7d:60:62:66:7b:18:e3:39:ee:a6:61:7d: d5:f2:35:e8:09:e5:d8:60:af:28:08:2e:25:f6:c5:b2:f8:d0: e7:c5:a6:0a:30:d4:6c:54:20:98:f7:24:44:1a:b4:5c:7d:72: 53:76:7a:11:15:5f:01:66:be:09:86:cc:a4:f6:a6:bf:2d:c7: f7:9f:7b:57:6e:1e:31:af:04:4c:4d:4a:e5:d4:3e:e6:84:38: 29:71:45:2d:41:d1:d7:e4:0f:ab:7b:10:c1:e8:d4:5e:ac:b4: ae:ab:db:80:e3:7f:03:3b:c7:50:30:81:7c:ff:b3:7b:29:f6: ae:6b:d1:32:3b:3a:ef:40:29:fb:a3:b2:0f:3c:88:aa:e8:53: af:c9:df:00:7c:b5:b9:52:14:1e:b4:95:13:ba:5a:d9:4d:f0: 1e:17:14:23 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUb+KYlKTybuBPRnJqaIAlteycbnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTcxNzM1MzZaFw0yNjAzMTYxNzQwMzZaMDMxMTAvBgNV BAMTKDIyQjg4NjVFRTJFQzhCQjA4RjJBNUZFMjJGOEU3RUMwN0UzODM0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQKnb3XF/+D2uW5EIrEf5/Jd4 Lvo1DFv/R9NqAo/XmlJQQd1TBSICzjps06ZO+GaaRE48ukJbhcaljtEm+VA9HBT+ yPOmcUq1VrnLckU2RfzJFA/b/+Fuq5vWUB8bJH8fiti0sIsPGkfes/4UZWyBzTdy hrq9MaNADHiVWLh5YeHveBNzQaAuiiLvFbEudpmgEkAOYwxwxts5KptuUwlrdWyI AyfXCXUW0kt+8eXGoviVoaYCge2l5QWnZ+8orwtLQof4ST9/Gbo+rnz5mdGDxPyG scL0OZ2QkQ9Lh0kunpc7HCXL7crvPmi8DACN9hHyFIYcVJL21vlLAh4yCTfZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiuIZe4uyLsI8q X+Ivjn7Afjg0DzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW53 RUNXUVpEWEFoVzVWcGFkVnZDYUo2c3dwYnNSUDhQSmM0WWZON1pMRFgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlu d0VDV1FaRFhBaFc1VnBhZFZ2Q2FKNnN3cGJzUlA4UEpjNFlmTjdaTERYLzAvMjJC ODg2NUVFMkVDOEJCMDhGMkE1RkUyMkY4RTdFQzA3RTM4MzQwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeQkMA0EAgACMAcDBQAoBH+gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlUzANBgkqhkiG9w0BAQsFAAOCAQEAOoq+EnBCKjCBCdFH vUYvHQfDI+GsWJsIV6ZddGBtgRnZM7rGTzKImnZEaWjFo7tut4Hu6S9im3ZZcvgZ r2DqaUJALfRPy9jcnvL0R+93H+c0ESpMrIJFN9ve+Bw/h2tKfWBiZnsY4znupmF9 1fI16Anl2GCvKAguJfbFsvjQ58WmCjDUbFQgmPckRBq0XH1yU3Z6ERVfAWa+CYbM pPamvy3H9597V24eMa8ETE1K5dQ+5oQ4KXFFLUHR1+QPq3sQwejUXqy0rqvbgON/ AzvHUDCBfP+zeyn2rmvRMjs670Ap+6OyDzyIquhTr8nfAHy1uVIUHrSVE7pa2U3w HhcUIw== -----END CERTIFICATE-----Generated at Fri Apr 4 10:52:05 2025 by rpki-client