$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer File: 8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer (raw, json) Hash identifier: rDHPiQGgqnuZ18JU+5oTo0Q3SCMUvxVQpkkrDQk4EDk= Subject key identifier: 8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58B759FD0CB1DF4D4D04C9275BFBF87990B04FC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft caRepository: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 28 May 2025 15:12:44 +0000 Certificate not after: Wed 27 May 2026 15:17:44 +0000 Subordinate resources: AS: 272735 IP: 2804:87d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 15:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b7:59:fd:0c:b1:df:4d:4d:04:c9:27:5b:fb:f8:79:90:b0:4f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 28 15:12:44 2025 GMT Not After : May 27 15:17:44 2026 GMT Subject: CN=8DC5703AD0324D7A377BEF20819C04406FA9A81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:4a:a7:da:ba:d9:35:c2:63:bc:58:91:79: c8:0a:9b:b2:26:55:c8:a6:1b:ed:2b:33:8a:ba:14: ec:80:95:12:9d:24:72:93:93:1c:2f:e8:39:49:d2: dd:70:2b:94:ec:1a:42:e1:32:c2:11:51:17:e3:09: 0d:77:53:72:64:a7:4a:2c:73:33:9f:ed:dd:d7:8a: 93:4e:49:18:bc:5a:66:50:03:f2:a9:7a:3d:80:f1: 9c:da:97:81:e4:33:90:a5:4c:a4:55:30:4f:cb:92: b6:ea:17:79:4b:fb:b0:28:c7:e9:08:74:f7:69:ff: 04:74:32:2d:76:78:3b:42:67:82:2e:1b:5f:b5:9e: 45:31:96:ed:f2:b9:47:26:e5:7c:ab:a2:b7:4e:54: 02:41:2d:f4:11:7f:4a:d9:0f:29:f9:3e:60:af:c2: 31:ca:b4:d2:c3:5f:5d:66:a4:c8:2a:e8:6d:4f:33: d6:0e:29:0d:44:cb:fa:ae:a3:56:74:3f:94:00:cb: e3:69:cf:45:76:8c:3f:1f:4e:e2:3f:9e:cf:53:cf: b8:69:e2:02:06:64:41:d6:0c:cb:98:99:ab:b6:71: fe:d1:f9:c6:3c:ec:f4:8a:a1:97:cc:11:b5:13:85: 12:f3:a0:30:bc:0e:18:ba:e7:22:ae:49:ee:9b:f4: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272735 Signature Algorithm: sha256WithRSAEncryption 14:52:07:39:51:18:41:9f:a5:21:67:99:34:ec:49:45:77:0f: 3d:44:95:d0:0c:58:64:f8:57:42:77:61:12:c3:2c:fd:e9:51: 05:d7:3e:e9:07:b0:f4:ed:06:af:8a:a8:86:e1:4a:14:4e:4f: 13:47:fd:01:e1:15:e6:fa:d8:ea:a4:b7:35:41:41:70:71:3d: e6:c8:d0:80:7e:b9:eb:a2:a0:a5:0e:78:e9:84:16:65:df:24: cc:67:07:12:9a:ca:ae:5f:35:d9:1a:81:71:83:ce:96:73:c6: dd:2d:e7:5a:da:3a:53:8d:17:0d:d6:7f:33:1e:6c:c2:27:f5: d2:ee:9f:23:94:31:36:f3:71:0b:2a:73:d5:3b:b9:8c:f4:04: 5e:dc:de:90:a8:03:dc:57:92:10:6a:2e:a9:8d:0b:19:1a:6d: d0:68:b4:d1:4f:a4:71:15:72:dd:57:b3:c0:68:4a:96:14:5f: 67:15:11:1d:82:85:a4:b2:3a:cc:7d:a8:17:53:f7:02:36:95: 0f:b1:d9:59:5f:ff:d9:a9:a8:46:18:df:57:00:1a:4a:f3:b8: 2f:82:6a:d7:00:8e:eb:fb:e9:5f:6d:7f:88:e1:2b:c5:ea:ed: 4f:e0:9f:cc:ee:2d:83:a1:01:d9:6a:28:f7:39:a2:a7:f1:56: 56:81:ac:a4 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWLdZ/Qyx301NBMknW/v4eZCwT8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjgxNTEyNDRaFw0yNjA1MjcxNTE3NDRaMDMxMTAvBgNV BAMTKDhEQzU3MDNBRDAzMjREN0EzNzdCRUYyMDgxOUMwNDQwNkZBOUE4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PEqn2rrZNcJjvFiRecgKm7Im VcimG+0rM4q6FOyAlRKdJHKTkxwv6DlJ0t1wK5TsGkLhMsIRURfjCQ13U3Jkp0os czOf7d3XipNOSRi8WmZQA/Kpej2A8Zzal4HkM5ClTKRVME/LkrbqF3lL+7Aox+kI dPdp/wR0Mi12eDtCZ4IuG1+1nkUxlu3yuUcm5XyrordOVAJBLfQRf0rZDyn5PmCv wjHKtNLDX11mpMgq6G1PM9YOKQ1Ey/quo1Z0P5QAy+Npz0V2jD8fTuI/ns9Tz7hp 4gIGZEHWDMuYmau2cf7R+cY87PSKoZfMEbUThRLzoDC8Dhi65yKuSe6b9BjHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNxXA60DJNejd7 7yCBnARAb6moHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnZZ Ym54aHVtRDdTZkc3cmV6NEZKRHBUc0hkU1FaaGJoY0Zmc2VjRDFONXgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ2 WWJueGh1bUQ3U2ZHN3JlejRGSkRwVHNIZFNRWmhiaGNGZnNlY0QxTjV4LzAvOERD NTcwM0FEMDMyNEQ3QTM3N0JFRjIwODE5QzA0NDA2RkE5QTgxRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASH2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KV8wDQYJKoZIhvcNAQELBQADggEBABRSBzlRGEGfpSFnmTTsSUV3Dz1EldAMWGT4 V0J3YRLDLP3pUQXXPukHsPTtBq+KqIbhShROTxNH/QHhFeb62OqktzVBQXBxPebI 0IB+ueuioKUOeOmEFmXfJMxnBxKayq5fNdkagXGDzpZzxt0t51raOlONFw3WfzMe bMIn9dLunyOUMTbzcQsqc9U7uYz0BF7c3pCoA9xXkhBqLqmNCxkabdBotNFPpHEV ct1Xs8BoSpYUX2cVER2ChaSyOsx9qBdT9wI2lQ+x2Vlf/9mpqEYY31cAGkrzuC+C atcAjuv76V9tf4jhK8Xq7U/gn8zuLYOhAdlqKPc5oqfxVlaBrKQ= -----END CERTIFICATE-----Generated at Fri Jun 6 18:21:15 2025 by rpki-client