$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer File: 3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer (raw, json) Hash identifier: 7QK5hKt1Xd70dquGAnOGc0Is10vMfy3H7x+rGmiYVp4= Subject key identifier: 3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 16B93772D7296CC951FACF156EF46E31DED02078 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.mft caRepository: rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 20:48:11 +0000 Certificate not after: Thu 04 Jun 2026 20:53:11 +0000 Subordinate resources: AS: 266399 IP: 170.81.92.0/22 IP: 2804:3740::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 12:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b9:37:72:d7:29:6c:c9:51:fa:cf:15:6e:f4:6e:31:de:d0:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 5 20:48:11 2025 GMT Not After : Jun 4 20:53:11 2026 GMT Subject: CN=3AB8D694A7B0FD123FE2783B274D7BF701A79F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:72:ee:8d:f0:b5:a0:b1:99:30:bd:de:60: 03:b3:e9:c6:cb:ca:65:8f:bd:5f:4d:ca:85:52:a5: c5:b0:d8:40:80:25:0e:d5:0b:38:5d:97:8c:c3:f2: 2c:e4:04:ca:a6:fe:8e:4b:76:da:ea:a4:8e:09:a7: 85:42:d8:1a:6f:03:6b:0e:2d:6e:a4:b4:5a:ad:1f: 39:f8:cf:84:b7:7a:df:5a:36:f8:21:d2:5b:d2:4a: 0f:c0:b4:08:2d:d8:23:a1:6a:5a:30:d1:58:ce:2d: 81:9e:c7:2d:39:8b:dc:99:f2:c5:82:e2:44:4c:d9: e1:84:70:1b:99:12:b9:79:e6:be:6b:8c:62:d2:5d: 3f:4b:f8:aa:68:00:86:65:97:a2:04:84:06:b1:f3: 3e:3a:93:95:92:0a:c5:62:43:6e:fe:53:11:f7:52: b8:a9:3a:cc:e5:a3:cb:dc:75:8a:2a:f6:80:59:dd: 72:3e:01:32:14:9c:39:85:10:e8:2e:62:ac:8e:d5: 82:6a:72:fb:ac:67:7d:65:1b:6c:b1:96:b1:66:ca: 25:d1:66:de:1c:5c:23:b7:87:a7:8a:a4:96:4d:09: 9d:a2:ca:71:d9:33:89:c5:42:3b:6e:82:b4:69:b4: 45:91:58:4f:01:ec:56:46:ec:ae:28:c5:ff:28:82: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.92.0/22 IPv6: 2804:3740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266399 Signature Algorithm: sha256WithRSAEncryption 65:46:2d:47:36:f0:0f:ff:ae:7b:dc:df:ba:73:d9:3c:41:52: d2:a7:ae:eb:45:84:60:48:64:72:a3:35:c1:ac:db:09:b2:33: cf:b4:91:80:1d:51:17:bb:75:58:56:86:9c:4a:d1:60:29:10: 13:f4:70:19:97:29:f8:62:70:9c:8f:95:cd:b4:28:55:05:f0: e5:98:15:c7:c4:8c:15:c7:ab:1d:8a:28:9a:31:41:48:6b:50: cf:44:90:94:f7:54:c1:14:ab:41:f9:8f:28:55:aa:7d:1e:82: 1f:60:b4:b9:11:a1:78:d1:ac:69:f5:c4:9f:fc:e0:57:4c:88: 64:16:f5:eb:2c:14:f1:aa:53:3b:be:34:3c:f3:4a:eb:7e:22: b6:4f:62:b0:fa:04:4c:7a:1a:f9:d7:06:77:2b:75:eb:56:8d: 5a:4a:62:ad:e4:71:27:e1:62:3d:6a:87:5b:d6:ff:ef:9b:44: 94:69:e4:5a:8e:37:e5:5c:1f:76:45:06:7d:62:24:30:11:d4: 22:99:d4:70:8f:b4:7d:f2:55:4a:72:96:67:24:4e:fc:82:e1: 6c:28:8c:ee:e2:4c:12:01:74:03:fd:e0:0f:10:8b:61:ae:86: 02:29:39:cb:89:6e:16:23:7d:23:51:8b:35:b0:34:87:c8:df: b7:b9:df:d7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFrk3ctcpbMlR+s8VbvRuMd7QIHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDUyMDQ4MTFaFw0yNjA2MDQyMDUzMTFaMDMxMTAvBgNV BAMTKDNBQjhENjk0QTdCMEZEMTIzRkUyNzgzQjI3NEQ3QkY3MDFBNzlGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcnLujfC1oLGZML3eYAOz6cbL ymWPvV9NyoVSpcWw2ECAJQ7VCzhdl4zD8izkBMqm/o5LdtrqpI4Jp4VC2BpvA2sO LW6ktFqtHzn4z4S3et9aNvgh0lvSSg/AtAgt2COhalow0VjOLYGexy05i9yZ8sWC 4kRM2eGEcBuZErl55r5rjGLSXT9L+KpoAIZll6IEhAax8z46k5WSCsViQ27+UxH3 UripOszlo8vcdYoq9oBZ3XI+ATIUnDmFEOguYqyO1YJqcvusZ31lG2yxlrFmyiXR Zt4cXCO3h6eKpJZNCZ2iynHZM4nFQjtugrRptEWRWE8B7FZG7K4oxf8ogrTpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6uNaUp7D9Ej/i eDsnTXv3AaefWzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnJp UlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFkeHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jy aVJZM1JVWEExMXdQUVVlSk5TeDhYY1hmd1hXVEFhV0puc0hUZnJRZHhxLzAvM0FC OEQ2OTRBN0IwRkQxMjNGRTI3ODNCMjc0RDdCRjcwMUE3OUY1Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlFcMA0EAgACMAcDBQAoBDdAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQnzANBgkqhkiG9w0BAQsFAAOCAQEAZUYtRzbwD/+ue9zf unPZPEFS0qeu60WEYEhkcqM1wazbCbIzz7SRgB1RF7t1WFaGnErRYCkQE/RwGZcp +GJwnI+VzbQoVQXw5ZgVx8SMFcerHYoomjFBSGtQz0SQlPdUwRSrQfmPKFWqfR6C H2C0uRGheNGsafXEn/zgV0yIZBb16ywU8apTO740PPNK634itk9isPoETHoa+dcG dyt161aNWkpireRxJ+FiPWqHW9b/75tElGnkWo435VwfdkUGfWIkMBHUIpnUcI+0 ffJVSnKWZyRO/ILhbCiM7uJMEgF0A/3gDxCLYa6GAik5y4luFiN9I1GLNbA0h8jf t7nf1w== -----END CERTIFICATE-----Generated at Tue Jun 10 11:33:28 2025 by rpki-client