$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FE0797FA3F96DBBF2FBE639EAF42ED5A7C84532.cer File: 5FE0797FA3F96DBBF2FBE639EAF42ED5A7C84532.cer (raw, json) Hash identifier: hJQs9eFVegj++vliIW6r1Ukl+6PdOOINRjQ8+NbQRb4= Subject key identifier: 5F:E0:79:7F:A3:F9:6D:BB:F2:FB:E6:39:EA:F4:2E:D5:A7:C8:45:32 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 16A2AA09A070AD2D2A1E26D8BB1DE9CCAF59FDCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/1/5FE0797FA3F96DBBF2FBE639EAF42ED5A7C84532.mft caRepository: rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 May 2025 23:20:48 +0000 Certificate not after: Fri 15 May 2026 23:25:48 +0000 Subordinate resources: AS: 266270 IP: 170.78.132.0/22 IP: 2804:3520::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a2:aa:09:a0:70:ad:2d:2a:1e:26:d8:bb:1d:e9:cc:af:59:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 23:20:48 2025 GMT Not After : May 15 23:25:48 2026 GMT Subject: CN=5FE0797FA3F96DBBF2FBE639EAF42ED5A7C84532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:b8:c1:39:ec:a1:4a:7c:05:a6:c9:14:96: 81:b7:7d:bf:7e:89:c2:b4:94:a9:7b:71:7f:f0:c7: fe:42:0b:00:15:b0:48:7b:b6:15:0d:d6:6b:51:74: d6:f9:6b:73:9e:52:7a:ee:d0:30:d9:ff:2d:84:0a: 9b:9c:5c:c9:13:c3:1c:46:36:3b:71:d5:f9:e3:99: e3:e9:c0:4c:20:8a:97:02:73:b6:c5:d0:b1:96:6a: d7:df:98:44:89:83:c4:0b:ee:ca:ce:f0:8c:81:c9: 4d:88:a9:21:5c:03:b6:1c:8e:35:b0:37:55:b5:f3: 1c:f6:25:67:13:c1:d9:54:77:1f:a3:16:12:3e:56: b4:42:70:58:ff:ce:3c:a5:a3:30:fe:8e:dc:08:f5: f5:20:d7:8c:d0:5f:f7:15:47:40:e4:b0:d1:93:f5: bf:54:c7:f6:c6:fe:ad:f6:7f:38:7b:6b:c1:ac:45: 4a:8f:2d:cd:8c:6c:9c:e6:d7:77:e5:ca:8b:23:b8: 68:f6:17:2a:44:c4:2a:42:86:f2:0f:13:2e:d4:cd: ef:0b:99:e5:68:10:0e:55:6f:92:45:e4:24:eb:08: 84:8f:c5:c9:57:bf:aa:18:f0:fa:7f:5d:c8:b6:43: 55:e1:70:af:60:94:45:bf:0f:c9:b1:e9:e6:7d:bf: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:E0:79:7F:A3:F9:6D:BB:F2:FB:E6:39:EA:F4:2E:D5:A7:C8:45:32 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/1/5FE0797FA3F96DBBF2FBE639EAF42ED5A7C84532.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.132.0/22 IPv6: 2804:3520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266270 Signature Algorithm: sha256WithRSAEncryption ad:82:b8:af:86:72:5e:9e:bd:3a:f0:68:a1:a6:3c:b2:9b:42: 2e:68:37:5a:ba:2a:06:66:a3:12:a7:42:bd:06:ff:e4:13:75: 08:18:b5:69:ac:f5:c4:03:03:1f:e3:bd:c7:b0:e2:14:af:46: 23:ba:1f:28:76:b9:2a:06:49:53:be:6f:62:9a:4b:ab:b1:41: 7a:b1:61:48:f7:6f:5a:20:1a:20:35:9d:92:7e:7a:20:b9:ca: 7b:c0:47:e7:12:78:b8:de:b2:86:be:bc:36:96:ed:49:f7:f6: 0e:ab:58:c0:18:5b:22:76:34:02:23:c9:73:62:93:5c:07:ec: 19:62:cc:7d:1c:32:b0:d2:45:2f:8a:a2:21:41:f8:4b:0d:f6: de:90:ff:cc:8f:c5:be:c1:59:e9:21:77:4f:aa:21:3f:52:97: 90:1b:c3:84:f4:6b:8f:ec:d6:16:3b:60:be:7d:d2:6e:cb:8a: c6:1d:7c:26:db:bf:3e:d4:c2:1b:e5:58:f1:a4:68:61:5a:76: de:1f:6c:ab:f5:59:39:81:45:c5:bd:6d:60:dc:01:c5:d6:73: 60:62:97:6a:a7:c9:ac:a3:f7:84:b7:61:87:4e:52:f1:38:62: 60:ba:24:c2:a4:7d:95:7b:7b:26:5f:42:ef:8e:a7:4e:e0:89: 72:bd:26:d7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFqKqCaBwrS0qHibYux3pzK9Z/cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTYyMzIwNDhaFw0yNjA1MTUyMzI1NDhaMDMxMTAvBgNV BAMTKDVGRTA3OTdGQTNGOTZEQkJGMkZCRTYzOUVBRjQyRUQ1QTdDODQ1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHbjBOeyhSnwFpskUloG3fb9+ icK0lKl7cX/wx/5CCwAVsEh7thUN1mtRdNb5a3OeUnru0DDZ/y2ECpucXMkTwxxG Njtx1fnjmePpwEwgipcCc7bF0LGWatffmESJg8QL7srO8IyByU2IqSFcA7YcjjWw N1W18xz2JWcTwdlUdx+jFhI+VrRCcFj/zjylozD+jtwI9fUg14zQX/cVR0DksNGT 9b9Ux/bG/q32fzh7a8GsRUqPLc2MbJzm13flyosjuGj2FypExCpChvIPEy7Uze8L meVoEA5Vb5JF5CTrCISPxclXv6oY8Pp/Xci2Q1XhcK9glEW/D8mx6eZ9vw4vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf4Hl/o/ltu/L7 5jnq9C7Vp8hFMjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWRl SGJvTEgxazNHaVpSYkQ5YmZzczdYeXF0emp5aGsxVGQ3d3p4WGpQYTgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVk ZUhib0xIMWszR2laUmJEOWJmc3M3WHlxdHpqeWhrMVRkN3d6eFhqUGE4LzEvNUZF MDc5N0ZBM0Y5NkRCQkYyRkJFNjM5RUFGNDJFRDVBN0M4NDUzMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk6EMA0EAgACMAcDBQAoBDUgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQHjANBgkqhkiG9w0BAQsFAAOCAQEArYK4r4ZyXp69OvBo oaY8sptCLmg3WroqBmajEqdCvQb/5BN1CBi1aaz1xAMDH+O9x7DiFK9GI7ofKHa5 KgZJU75vYppLq7FBerFhSPdvWiAaIDWdkn56ILnKe8BH5xJ4uN6yhr68NpbtSff2 DqtYwBhbInY0AiPJc2KTXAfsGWLMfRwysNJFL4qiIUH4Sw323pD/zI/FvsFZ6SF3 T6ohP1KXkBvDhPRrj+zWFjtgvn3SbsuKxh18Jtu/PtTCG+VY8aRoYVp23h9sq/VZ OYFFxb1tYNwBxdZzYGKXaqfJrKP3hLdhh05S8ThiYLokwqR9lXt7Jl9C746nTuCJ cr0m1w== -----END CERTIFICATE-----Generated at Wed Jun 4 10:37:44 2025 by rpki-client