$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer File: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer (raw, json) Hash identifier: mpeDdn+777568n0l0uBxMAfgiDHfJEMAXMfxQFhH6dc= Subject key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0645417892D576AD0A7E0DA7D8C21D93FE217883 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft caRepository: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 14:58:26 +0000 Certificate not after: Thu 05 Mar 2026 15:03:26 +0000 Subordinate resources: AS: 61610 IP: 187.87.28.0/22 IP: 200.225.48.0/21 IP: 2804:8ae0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:45:41:78:92:d5:76:ad:0a:7e:0d:a7:d8:c2:1d:93:fe:21:78:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 14:58:26 2025 GMT Not After : Mar 5 15:03:26 2026 GMT Subject: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:b1:68:78:a6:0b:f4:46:21:c1:41:62:39: 04:b1:7a:bb:72:24:94:e4:2f:49:07:69:41:3b:d1: 8e:f1:90:69:91:2d:ba:df:45:73:59:17:5a:c0:9b: 3a:2d:5a:de:0b:4d:cb:30:3b:5f:f7:1d:f7:23:67: 1e:9e:5e:c4:fd:fc:17:68:d5:c9:5b:37:dc:e6:82: 18:d3:ce:6b:c5:f2:46:c9:4f:04:5d:78:b6:58:5d: 8b:7a:28:fc:54:9a:01:16:56:f9:7e:20:7a:ab:1b: a0:8b:41:a6:ad:00:39:87:8f:fe:63:75:ce:69:51: 34:2d:a9:78:37:45:d6:7d:e5:17:8f:e6:9e:36:f4: 21:86:32:7c:3f:a8:00:37:91:38:3f:39:86:7b:7a: 28:61:be:23:ce:c3:04:0a:a2:a8:ba:6b:ce:15:6d: 66:70:df:45:1b:9c:4a:1c:dc:11:eb:99:15:90:49: a0:01:1a:17:7e:63:3e:02:ac:fe:c3:48:91:2d:86: c4:66:76:a0:7c:b9:c3:77:6c:ba:35:1e:d1:24:07: eb:99:d8:6d:06:4a:38:07:5f:eb:2d:8f:01:0e:d6: 5a:bb:ef:63:8f:af:42:15:9f:92:66:e1:6c:e9:93: 10:f4:f9:35:14:91:25:56:1e:2e:13:49:f4:bf:0a: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.87.28.0/22 200.225.48.0/21 IPv6: 2804:8ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61610 Signature Algorithm: sha256WithRSAEncryption 23:83:83:fa:03:ba:85:a1:9b:c3:df:23:1b:10:1e:77:36:c2: dc:cc:61:18:54:38:38:28:97:4e:5c:ff:68:2f:e1:a5:98:64: fe:0f:07:0a:61:96:50:c3:89:fe:20:a7:bf:dd:25:e5:bf:87: d5:0c:37:fc:d4:d6:ee:25:28:75:a3:52:68:2e:37:b8:27:17: 10:5a:c3:fc:e2:0c:a9:59:8e:1d:62:f2:e7:dd:dd:0d:eb:b1: 13:f1:74:fb:3f:65:22:11:71:5e:66:70:59:50:c3:6c:a5:47: be:63:0d:3f:30:91:a7:35:ba:52:4e:7c:75:56:31:37:eb:d2: 4b:3d:d8:67:f9:72:a1:98:7b:ed:3f:83:c3:72:63:08:12:58: 64:d2:1f:3f:a7:e0:9e:dc:6f:3a:8e:b3:99:2e:dd:12:ce:2e: 85:f3:fa:23:a2:e3:eb:ba:64:4c:4f:a4:ab:1e:bd:ad:66:db: 8c:4e:e8:66:9f:2a:0d:e2:b5:21:2b:cc:83:d5:07:56:1b:8f: 06:75:c3:c1:fb:c3:ef:dc:79:c7:2b:f7:d8:00:a0:6a:53:6e: 7b:a0:c6:c9:2a:f3:77:00:25:b9:38:5d:9c:ea:16:aa:22:45: 9b:b0:d7:21:43:a5:d4:85:ed:b8:69:9c:57:7c:d2:34:f8:af: 91:59:6b:ff -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBkVBeJLVdq0Kfg2n2MIdk/4heIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNDU4MjZaFw0yNjAzMDUxNTAzMjZaMDMxMTAvBgNV BAMTKDVBNjhCODhFMDI3RTVBMTJEQzY5RUFFQUFDMjAxMUVEMUQyODI1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P7FoeKYL9EYhwUFiOQSxerty JJTkL0kHaUE70Y7xkGmRLbrfRXNZF1rAmzotWt4LTcswO1/3HfcjZx6eXsT9/Bdo 1clbN9zmghjTzmvF8kbJTwRdeLZYXYt6KPxUmgEWVvl+IHqrG6CLQaatADmHj/5j dc5pUTQtqXg3RdZ95ReP5p429CGGMnw/qAA3kTg/OYZ7eihhviPOwwQKoqi6a84V bWZw30UbnEoc3BHrmRWQSaABGhd+Yz4CrP7DSJEthsRmdqB8ucN3bLo1HtEkB+uZ 2G0GSjgHX+stjwEO1lq772OPr0IVn5Jm4WzpkxD0+TUUkSVWHi4TSfS/CpFvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaaLiOAn5aEtxp 6uqsIBHtHSglojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODV0 QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1 dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzEvNUE2 OEI4OEUwMjdFNUExMkRDNjlFQUVBQUMyMDExRUQxRDI4MjVBMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCu1ccAwQDyOEwMA0EAgACMAcDBQAoBIrgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDwqjANBgkqhkiG9w0BAQsFAAOCAQEAI4OD+gO6 haGbw98jGxAedzbC3MxhGFQ4OCiXTlz/aC/hpZhk/g8HCmGWUMOJ/iCnv90l5b+H 1Qw3/NTW7iUodaNSaC43uCcXEFrD/OIMqVmOHWLy593dDeuxE/F0+z9lIhFxXmZw WVDDbKVHvmMNPzCRpzW6Uk58dVYxN+vSSz3YZ/lyoZh77T+Dw3JjCBJYZNIfP6fg ntxvOo6zmS7dEs4uhfP6I6Lj67pkTE+kqx69rWbbjE7oZp8qDeK1ISvMg9UHVhuP BnXDwfvD79x5xyv32ACgalNue6DGySrzdwAluThdnOoWqiJFm7DXIUOl1IXtuGmc V3zSNPivkVlr/w== -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:20 2025 by rpki-client