$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer File: 44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer (raw, json) Hash identifier: lM0bTJROZQoOyAi8YCM+R19BSX433+Q+mPyM+S3zCFo= Subject key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 310CE0008CAFCB9D8B5C46A042E646E99E6333E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft caRepository: rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 19 May 2025 14:23:21 +0000 Certificate not after: Mon 18 May 2026 14:28:21 +0000 Subordinate resources: AS: 269220 IP: 45.182.60.0 -- 45.182.62.255 IP: 2804:6134::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 07:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:e0:00:8c:af:cb:9d:8b:5c:46:a0:42:e6:46:e9:9e:63:33:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 19 14:23:21 2025 GMT Not After : May 18 14:28:21 2026 GMT Subject: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:27:69:23:a1:f9:66:27:c2:20:df:9b:69: 44:45:5e:64:8e:33:cc:70:9f:60:6a:92:2b:c2:d8: da:b4:28:f1:45:31:9f:61:e1:ea:40:d1:57:29:01: e4:1a:5a:3a:8c:35:85:3d:4a:6c:f8:6e:ca:1c:c3: 38:81:7d:a8:e8:57:15:94:bc:7a:59:c3:5c:da:a6: 94:e8:e9:ac:58:d8:79:07:e4:d6:26:a6:25:32:c9: 1e:3a:5a:31:38:47:50:bf:6e:5f:1f:d1:d8:e0:62: f3:e9:fa:cc:26:b7:10:5e:49:16:85:6c:1f:e5:08: 01:62:92:76:d8:63:15:65:27:25:ce:fe:a8:69:61: fd:23:fb:84:79:25:6e:07:5f:f2:8e:81:16:b5:bd: ec:a0:e3:8a:b0:19:b2:74:e1:99:bc:f7:ce:ea:4a: 5e:b6:35:d2:29:1e:76:99:03:08:61:b3:41:72:47: f9:9a:c8:3e:98:4e:28:9d:c7:70:bf:ad:6e:b2:41: c2:9b:8a:35:90:34:86:5c:63:8b:11:4b:51:a9:3e: d9:d9:85:dd:34:74:44:b0:4f:6d:b7:c8:28:db:25: 2c:4e:58:9c:8a:c8:0e:e4:a5:f7:a2:22:a8:5b:f8: e4:22:2b:a9:98:8a:6b:31:9b:8b:ac:0c:11:ef:ee: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.60.0-45.182.62.255 IPv6: 2804:6134::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269220 Signature Algorithm: sha256WithRSAEncryption 8a:c8:bc:5c:a4:67:84:a7:57:95:1a:44:70:d6:7d:91:da:ef: a3:4d:dc:94:27:76:41:f5:59:d2:ff:ff:2a:d0:22:f5:dc:b4: 1c:7b:5f:62:8d:ca:f1:ca:50:28:5c:61:fe:86:bf:6a:14:65: 18:13:09:b5:1c:f5:2f:fb:78:33:4f:6b:16:40:74:a5:1f:13: d1:6f:e4:8d:61:05:73:b5:9c:9d:b6:f4:40:1a:77:c7:1c:37: 3f:50:3f:f1:76:90:56:07:9c:72:26:df:e6:66:2d:4d:74:0b: d0:bc:dd:8c:e0:4b:7a:6f:2c:27:09:69:d2:1c:5a:00:73:cb: 97:69:07:f2:7f:90:ac:d1:f6:08:e8:9a:b9:32:25:4a:b3:4b: 01:32:57:13:af:07:00:8e:23:e4:04:20:55:66:9c:e8:1d:5a: 65:81:75:1f:f9:10:3f:e9:b2:93:e9:93:47:d6:23:c1:6a:47: 05:ad:60:08:64:85:67:66:22:60:03:ae:de:59:61:b4:88:e9: 87:79:79:7e:fd:7c:5a:1b:31:31:35:8b:93:3d:19:0b:dc:e3: 34:02:06:2d:61:b6:42:72:71:db:a7:6a:57:32:8c:21:a9:ed: 00:28:33:89:dc:28:1e:ab:cb:d3:b3:f2:46:43:25:13:3b:65: 0e:63:32:90 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUMQzgAIyvy52LXEagQuZG6Z5jM+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTkxNDIzMjFaFw0yNjA1MTgxNDI4MjFaMDMxMTAvBgNV BAMTKDQ0RjZEODNCRTBGQTVEM0IyMDlDQjg5QjUxOEY3NERBMENEMkJBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3ydpI6H5ZifCIN+baURFXmSO M8xwn2BqkivC2Nq0KPFFMZ9h4epA0VcpAeQaWjqMNYU9Smz4bsocwziBfajoVxWU vHpZw1zappTo6axY2HkH5NYmpiUyyR46WjE4R1C/bl8f0djgYvPp+swmtxBeSRaF bB/lCAFiknbYYxVlJyXO/qhpYf0j+4R5JW4HX/KOgRa1veyg44qwGbJ04Zm8987q Sl62NdIpHnaZAwhhs0FyR/mayD6YTiidx3C/rW6yQcKbijWQNIZcY4sRS1GpPtnZ hd00dESwT223yCjbJSxOWJyKyA7kpfeiIqhb+OQiK6mYimsxm4usDBHv7knbAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE9tg74PpdOyCc uJtRj3TaDNK6mjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRU NDFTbTZjWlByM0R5VXVBTTdKVDdQZnJ4aU54a1paZGZ2UFpETmo3WXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0 VDQxU202Y1pQcjNEeVV1QU03SlQ3UGZyeGlOeGtaWmRmdlBaRE5qN1lwLzAvNDRG NkQ4M0JFMEZBNUQzQjIwOUNCODlCNTE4Rjc0REEwQ0QyQkE5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAIttjwDBAAttj4wDQQCAAIwBwMFACgEYTQwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBBukMA0GCSqGSIb3DQEBCwUAA4IBAQCKyLxc pGeEp1eVGkRw1n2R2u+jTdyUJ3ZB9VnS//8q0CL13LQce19ijcrxylAoXGH+hr9q FGUYEwm1HPUv+3gzT2sWQHSlHxPRb+SNYQVztZydtvRAGnfHHDc/UD/xdpBWB5xy Jt/mZi1NdAvQvN2M4Et6bywnCWnSHFoAc8uXaQfyf5Cs0fYI6Jq5MiVKs0sBMlcT rwcAjiPkBCBVZpzoHVplgXUf+RA/6bKT6ZNH1iPBakcFrWAIZIVnZiJgA67eWWG0 iOmHeXl+/XxaGzExNYuTPRkL3OM0AgYtYbZCcnHbp2pXMowhqe0AKDOJ3Cgeq8vT s/JGQyUTO2UOYzKQ -----END CERTIFICATE-----Generated at Sat Jun 7 11:44:33 2025 by rpki-client