$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer File: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer (raw, json) Hash identifier: 7nUeQrFooowNGQEuOHCRtVWZw0Nr8yco+K4g9kmXQoQ= Subject key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46FF6DE17A351B4122051C37B92D8E1692249CE9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft caRepository: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 15 May 2025 19:05:14 +0000 Certificate not after: Thu 14 May 2026 19:10:14 +0000 Subordinate resources: AS: 266129 IP: 45.6.92.0/22 IP: 45.165.54.0/23 IP: 177.36.20.0/22 IP: 2804:3b18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ff:6d:e1:7a:35:1b:41:22:05:1c:37:b9:2d:8e:16:92:24:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 15 19:05:14 2025 GMT Not After : May 14 19:10:14 2026 GMT Subject: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:41:56:f7:98:e2:57:34:da:13:4f:38:77: a9:54:2b:c5:b3:96:f2:44:c1:26:97:0f:d4:53:7c: ef:f1:ae:05:4e:e0:a8:dc:85:3f:74:6e:82:3a:5f: 35:9c:d5:6e:8d:6b:2e:fe:c6:c6:fe:47:f5:6c:95: 12:1d:ed:2a:06:c5:99:9e:8d:12:54:72:32:3a:ff: b8:e3:71:71:a1:7c:07:a8:59:8a:56:85:01:3d:4d: 0f:79:7e:39:6d:cb:88:d1:cb:9c:1b:7b:34:b7:b7: ab:aa:7e:89:f1:c6:5d:87:53:15:35:01:57:50:eb: d1:36:89:03:c1:3b:b0:06:63:7e:31:60:1c:a7:3f: 10:f6:9f:41:2b:18:fd:14:8e:95:1b:4e:6d:08:28: 21:68:6f:a1:43:28:33:3f:e5:d7:a0:02:df:88:d0: 07:fa:8d:30:34:46:05:c6:a1:e3:99:c5:a2:61:dd: 6a:73:67:a6:51:f2:c6:75:cc:5e:4c:70:fe:a1:fc: c4:aa:e9:0f:70:fa:0a:4c:35:89:4b:a6:0b:2a:a4: e0:21:74:9b:7c:ba:01:08:2f:74:37:02:37:4d:f1: ba:8e:de:02:b0:df:08:25:63:1d:a2:5c:58:e3:d0: bf:72:a6:2c:f3:8a:9a:0d:b3:6f:24:dd:77:b0:bf: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.92.0/22 45.165.54.0/23 177.36.20.0/22 IPv6: 2804:3b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266129 Signature Algorithm: sha256WithRSAEncryption 40:c3:bb:9f:ec:93:20:b8:99:0b:ab:dd:93:17:39:6e:1c:ce: d5:24:e5:0e:0b:25:27:4c:9e:d9:f9:ac:70:fe:e2:66:c6:20: 51:e4:a1:6b:af:fb:fa:d7:69:33:b1:7b:7e:93:8c:8b:e6:35: 72:7c:c7:b5:44:2a:54:6d:da:36:7d:8d:1f:f0:1c:2e:b5:cf: db:e0:38:a7:a7:5a:cb:fe:8d:90:61:9d:85:9b:46:57:da:ba: 35:c0:09:ec:78:99:3c:97:b7:f3:a9:f9:1e:1e:fe:27:b9:d7: 00:cb:fd:54:30:37:09:de:86:db:9a:58:92:86:09:8a:46:86: 55:f3:ed:09:b7:f1:1a:d7:66:63:c9:64:c0:fc:de:3d:1c:cc: 54:03:c6:94:55:0b:2a:4e:d5:11:8d:cf:b0:39:2f:6e:fe:73: c4:61:7c:66:91:42:22:7e:1e:17:c5:d1:8c:4f:54:db:5a:88: c4:76:89:48:ad:80:e4:86:7b:27:55:92:3a:9d:0e:9f:23:08: d1:22:57:f5:f0:24:99:df:8f:08:36:79:8c:b0:92:84:c3:35: bd:a4:be:e4:27:be:bd:42:8d:ac:51:65:c8:41:64:ee:96:5b: 00:67:b8:9e:77:4e:ed:da:f7:19:a9:e4:4d:2f:4f:bf:61:9e: d0:be:74:91 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIURv9t4Xo1G0EiBRw3uS2OFpIknOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTUxOTA1MTRaFw0yNjA1MTQxOTEwMTRaMDMxMTAvBgNV BAMTKDhFODRGRjkxMjFEOTI1NzM3NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoUFW95jiVzTaE084d6lUK8Wz lvJEwSaXD9RTfO/xrgVO4KjchT90boI6XzWc1W6Nay7+xsb+R/VslRId7SoGxZme jRJUcjI6/7jjcXGhfAeoWYpWhQE9TQ95fjlty4jRy5wbezS3t6uqfonxxl2HUxU1 AVdQ69E2iQPBO7AGY34xYBynPxD2n0ErGP0UjpUbTm0IKCFob6FDKDM/5degAt+I 0Af6jTA0RgXGoeOZxaJh3WpzZ6ZR8sZ1zF5McP6h/MSq6Q9w+gpMNYlLpgsqpOAh dJt8ugEIL3Q3AjdN8bqO3gKw3wglYx2iXFjj0L9ypizzipoNs28k3Xewv5dTAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOhP+RIdklc3bX d6CSUz2M7bnunjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMS84RTg0 RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAItBlwDBAEtpTYDBAKxJBQwDQQCAAIwBwMFACgEOxgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA+RMA0GCSqGSIb3DQEBCwUAA4IBAQBA w7uf7JMguJkLq92TFzluHM7VJOUOCyUnTJ7Z+axw/uJmxiBR5KFrr/v612kzsXt+ k4yL5jVyfMe1RCpUbdo2fY0f8Bwutc/b4Dinp1rL/o2QYZ2Fm0ZX2ro1wAnseJk8 l7fzqfkeHv4nudcAy/1UMDcJ3obbmliShgmKRoZV8+0Jt/Ea12ZjyWTA/N49HMxU A8aUVQsqTtURjc+wOS9u/nPEYXxmkUIifh4XxdGMT1TbWojEdolIrYDkhnsnVZI6 nQ6fIwjRIlf18CSZ348INnmMsJKEwzW9pL7kJ769Qo2sUWXIQWTullsAZ7ied07t 2vcZqeRNL0+/YZ7QvnSR -----END CERTIFICATE-----Generated at Wed Jun 4 11:08:52 2025 by rpki-client