$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer File: 56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer (raw, json) Hash identifier: l6za+W9JX/Upl4X/3DxBxyPaf9NOVQnvCbHYuwzJ+q0= Subject key identifier: 56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5AFA6B0760676FC2437AC044364BB46016901F3A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.mft caRepository: rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Apr 2025 14:20:16 +0000 Certificate not after: Wed 22 Apr 2026 14:25:16 +0000 Subordinate resources: AS: 262416 IP: 177.39.32.0/21 IP: 2804:41c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fa:6b:07:60:67:6f:c2:43:7a:c0:44:36:4b:b4:60:16:90:1f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 23 14:20:16 2025 GMT Not After : Apr 22 14:25:16 2026 GMT Subject: CN=56E5656D40ED3F974D3DE1BCCAF72E86A16DB487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:eb:d1:57:6a:87:ab:b5:37:f3:fa:4c:41: c8:c9:12:15:66:47:21:b6:82:c1:34:fd:f8:01:20: f2:2a:13:46:eb:4e:0e:68:cf:3c:4b:c7:a2:3d:53: 79:69:14:e1:00:51:b3:a7:8d:a5:7d:e9:28:fa:b5: c4:56:3a:cb:56:4b:d3:cf:0c:b9:90:89:74:e2:47: f2:9e:76:86:97:55:59:34:3d:f5:61:b6:61:39:5e: 79:fe:c2:bd:0e:73:9a:57:59:4f:6d:c3:e6:6d:09: 97:6f:cd:e0:e8:a7:39:0d:f1:98:73:a8:1a:77:49: 81:69:80:53:bf:50:84:66:90:70:64:9a:a1:d4:39: eb:79:4c:fc:88:a5:34:36:09:9e:82:c2:c2:d8:e6: 2f:72:f6:68:1c:fa:a4:d2:1e:a9:6a:6d:cd:b9:b4: 1b:6e:6a:80:1c:c9:76:b8:3a:64:86:33:19:7d:f4: 71:b1:24:66:ee:df:50:e8:01:ff:1b:fa:25:81:57: 58:0f:ca:59:ac:6c:9a:8b:12:d7:8f:f8:a1:2b:88: 2a:9d:70:6f:fd:ab:88:12:21:15:9b:66:1c:37:b1: 93:cb:74:d6:c7:b0:30:63:06:e6:bc:4c:3c:bf:55: 4b:9a:00:49:e9:62:54:59:06:01:ea:99:92:95:51: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.39.32.0/21 IPv6: 2804:41c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262416 Signature Algorithm: sha256WithRSAEncryption 45:e0:fa:68:68:58:39:ff:0d:2b:89:29:5d:34:33:41:fa:9a: d4:06:c4:98:76:01:93:a9:f8:10:3c:2b:ee:1b:21:87:95:50: 1e:5c:53:78:9c:90:37:30:3b:80:50:84:03:01:f2:91:e9:6c: a4:bd:6b:60:42:2c:97:9e:1d:c1:2b:ad:83:17:21:34:cd:b3: d5:55:69:1d:61:26:c9:91:1c:35:12:25:ce:88:fa:4c:41:c1: 6f:c4:61:50:32:3e:8b:85:3b:cc:78:c9:d3:40:d3:5d:a9:26: 4b:86:e0:4b:ce:05:94:a0:a4:1a:d8:e7:e5:c5:f2:7f:bf:e9: 01:28:7a:68:c7:a4:89:57:ba:d1:a8:81:3e:53:35:00:95:1c: 9b:cb:45:fb:8c:b1:9d:55:ff:5a:57:a9:31:bc:ea:a7:e0:72: c9:e8:7c:bb:65:5f:85:6d:d3:33:fe:80:a6:f9:7d:e4:4b:70: a2:76:de:b3:c1:b9:e6:df:fc:93:e1:1b:5a:c6:bc:42:a9:b3: b9:25:89:9b:6b:85:6e:4c:9f:e4:ce:a4:35:1a:4c:84:51:b4: ae:3f:3d:f5:48:fe:dc:05:5a:3e:bf:28:93:07:92:f1:d3:68: 13:e6:1a:b2:86:ab:ab:f5:ba:83:d6:8b:39:bb:af:41:23:17: 29:e6:c2:a0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWvprB2Bnb8JDesBENku0YBaQHzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjMxNDIwMTZaFw0yNjA0MjIxNDI1MTZaMDMxMTAvBgNV BAMTKDU2RTU2NTZENDBFRDNGOTc0RDNERTFCQ0NBRjcyRTg2QTE2REI0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XevRV2qHq7U38/pMQcjJEhVm RyG2gsE0/fgBIPIqE0brTg5ozzxLx6I9U3lpFOEAUbOnjaV96Sj6tcRWOstWS9PP DLmQiXTiR/KedoaXVVk0PfVhtmE5Xnn+wr0Oc5pXWU9tw+ZtCZdvzeDopzkN8Zhz qBp3SYFpgFO/UIRmkHBkmqHUOet5TPyIpTQ2CZ6CwsLY5i9y9mgc+qTSHqlqbc25 tBtuaoAcyXa4OmSGMxl99HGxJGbu31DoAf8b+iWBV1gPylmsbJqLEteP+KEriCqd cG/9q4gSIRWbZhw3sZPLdNbHsDBjBua8TDy/VUuaAEnpYlRZBgHqmZKVUejTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRW5WVtQO0/l009 4bzK9y6GoW20hzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTVH MnZkVldyTXI4WXJ5c3Rrd3B3MWFzQ2NMRlQ0VW10Smp2UjhxZDFGMlkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U1 RzJ2ZFZXck1yOFlyeXN0a3dwdzFhc0NjTEZUNFVtdEpqdlI4cWQxRjJZLzAvNTZF NTY1NkQ0MEVEM0Y5NzREM0RFMUJDQ0FGNzJFODZBMTZEQjQ4Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsScgMA0EAgACMAcDBQAoBAQcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBEDANBgkqhkiG9w0BAQsFAAOCAQEAReD6aGhYOf8NK4kp XTQzQfqa1AbEmHYBk6n4EDwr7hshh5VQHlxTeJyQNzA7gFCEAwHykelspL1rYEIs l54dwSutgxchNM2z1VVpHWEmyZEcNRIlzoj6TEHBb8RhUDI+i4U7zHjJ00DTXakm S4bgS84FlKCkGtjn5cXyf7/pASh6aMekiVe60aiBPlM1AJUcm8tF+4yxnVX/Wlep Mbzqp+Byyeh8u2VfhW3TM/6Apvl95Etwonbes8G55t/8k+EbWsa8QqmzuSWJm2uF bkyf5M6kNRpMhFG0rj899Uj+3AVaPr8okweS8dNoE+Yasoarq/W6g9aLObuvQSMX KebCoA== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:04 2025 by rpki-client