$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer File: 665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer (raw, json) Hash identifier: uzMEk7zRQ7pXDy8/Avo2xSMyLQZGQEFRGrpu9VRHm4Y= Subject key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 259640C662E794DCE01AC1F21C24E22B8FD73ADD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft caRepository: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 13:48:11 +0000 Certificate not after: Tue 02 Jun 2026 13:53:11 +0000 Subordinate resources: AS: 263290 IP: 170.150.208.0/22 IP: 201.7.164.0/22 IP: 2804:1688::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 15:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:96:40:c6:62:e7:94:dc:e0:1a:c1:f2:1c:24:e2:2b:8f:d7:3a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 3 13:48:11 2025 GMT Not After : Jun 2 13:53:11 2026 GMT Subject: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:28:59:82:c1:57:43:75:e5:ad:42:a1:26:82: 17:3a:d0:4c:74:8a:e5:e6:7b:0f:d5:05:5f:ee:74: aa:d4:0b:07:dd:21:cc:dd:53:2c:e8:2b:3c:97:d4: 3e:ba:4a:04:6a:3d:58:dd:ca:f2:a8:fd:55:8b:1f: 67:f4:1e:80:88:5c:e0:48:ed:51:60:c8:3c:90:63: ae:08:9b:91:f8:47:6e:95:7c:8f:87:5b:82:54:cd: 1b:b0:d8:4f:e1:23:c1:80:ab:9e:74:11:29:e1:1a: 7f:7b:3b:30:7e:80:74:2c:b9:86:9d:29:4c:87:02: 46:67:2c:de:96:fc:da:8b:23:69:ae:80:49:29:da: db:ae:cc:eb:1f:fc:19:8f:fe:90:b5:8c:73:d4:59: c9:7a:7b:33:bc:38:25:9b:6b:6d:43:bc:12:84:0b: 7b:06:f9:5d:1d:2f:c1:e1:a6:77:32:15:74:26:60: a4:c0:c6:5d:97:26:0b:34:da:99:70:46:69:10:28: c5:a6:bd:65:59:74:bb:fa:9a:e4:1a:e5:13:93:f7: 5c:ef:8a:1b:68:8e:fd:3f:e2:13:61:55:36:ff:20: 0b:6b:7b:45:17:a8:ee:85:43:bb:56:04:d4:37:c9: 28:7a:73:d1:aa:ff:45:89:ba:82:8e:b9:d3:15:75: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.208.0/22 201.7.164.0/22 IPv6: 2804:1688::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263290 Signature Algorithm: sha256WithRSAEncryption c7:e7:b5:29:3f:2f:3b:4d:de:b6:ec:af:49:23:bb:1a:45:ca: 60:41:bc:c0:aa:ef:a6:74:ff:7c:51:34:4b:3d:3e:03:ef:ef: 04:f5:db:08:fb:81:71:2a:b7:57:d2:c0:3a:c2:95:c7:32:78: d7:89:85:9f:30:8b:93:b1:d9:1b:f7:2b:1e:25:3b:0b:c1:0f: 8d:c7:ff:da:f7:b9:f2:e3:15:96:67:1c:1d:34:73:7f:c4:25: 1d:d3:6d:10:9b:d7:ed:c8:02:9e:4e:af:41:b1:88:d7:2f:e1: 9f:f0:15:6a:9a:da:16:fb:e2:90:bb:b3:f0:fa:e8:69:7c:35: ff:eb:aa:19:42:d6:32:23:23:c6:bf:b9:af:2a:a7:59:31:bb: e7:98:3d:a8:99:4d:02:5d:0f:fa:a4:ac:11:ea:03:53:db:c4: 17:1d:05:01:d3:a1:a1:9d:e8:20:e7:14:fc:1b:eb:87:a6:f8: 43:f0:27:1a:88:d9:b1:6f:44:51:22:26:48:69:c5:85:dd:b0: b1:ad:9f:58:c4:e5:c3:07:68:a1:2f:b9:d4:5c:b9:3d:74:14: 1a:d8:1f:c4:d2:10:9b:44:24:2e:c8:f3:55:e8:1b:27:52:9d: 91:df:9e:6d:e2:9c:18:9b:17:13:0f:96:b7:91:fa:3d:6e:f3: 5c:5a:79:65 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJZZAxmLnlNzgGsHyHCTiK4/XOt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDMxMzQ4MTFaFw0yNjA2MDIxMzUzMTFaMDMxMTAvBgNV BAMTKDY2NTM2MUNCM0FDQTQxOTdCNEFDRkQyNTdFQ0ZFQTNFMEQyMUM5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzKFmCwVdDdeWtQqEmghc60Ex0 iuXmew/VBV/udKrUCwfdIczdUyzoKzyX1D66SgRqPVjdyvKo/VWLH2f0HoCIXOBI 7VFgyDyQY64Im5H4R26VfI+HW4JUzRuw2E/hI8GAq550ESnhGn97OzB+gHQsuYad KUyHAkZnLN6W/NqLI2mugEkp2tuuzOsf/BmP/pC1jHPUWcl6ezO8OCWba21DvBKE C3sG+V0dL8HhpncyFXQmYKTAxl2XJgs02plwRmkQKMWmvWVZdLv6muQa5ROT91zv ihtojv0/4hNhVTb/IAtre0UXqO6FQ7tWBNQ3ySh6c9Gq/0WJuoKOudMVdcMRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmU2HLOspBl7Ss /SV+z+o+DSHJtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODg0 Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3b3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg4 NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAvNjY1 MzYxQ0IzQUNBNDE5N0I0QUNGRDI1N0VDRkVBM0UwRDIxQzlCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqpbQAwQCyQekMA0EAgACMAcDBQAoBBaIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEejANBgkqhkiG9w0BAQsFAAOCAQEAx+e1KT8v O03etuyvSSO7GkXKYEG8wKrvpnT/fFE0Sz0+A+/vBPXbCPuBcSq3V9LAOsKVxzJ4 14mFnzCLk7HZG/crHiU7C8EPjcf/2ve58uMVlmccHTRzf8QlHdNtEJvX7cgCnk6v QbGI1y/hn/AVapraFvvikLuz8ProaXw1/+uqGULWMiMjxr+5ryqnWTG755g9qJlN Al0P+qSsEeoDU9vEFx0FAdOhoZ3oIOcU/Bvrh6b4Q/AnGojZsW9EUSImSGnFhd2w sa2fWMTlwwdooS+51Fy5PXQUGtgfxNIQm0QkLsjzVegbJ1Kdkd+ebeKcGJsXEw+W t5H6PW7zXFp5ZQ== -----END CERTIFICATE-----Generated at Mon Jun 9 14:29:11 2025 by rpki-client