$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B922140BC53E1C85FC2E0891EF246C829930B1F.cer File: 9B922140BC53E1C85FC2E0891EF246C829930B1F.cer (raw, json) Hash identifier: x1jGCg8sHHD8Z+Mn4a1IYznuQh39oEzyh4o4/kgCSsg= Subject key identifier: 9B:92:21:40:BC:53:E1:C8:5F:C2:E0:89:1E:F2:46:C8:29:93:0B:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C593977FCCCEF550BA1F6EC7FE217CF42B44D78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/9B922140BC53E1C85FC2E0891EF246C829930B1F.mft caRepository: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 20 May 2025 12:23:13 +0000 Certificate not after: Tue 19 May 2026 12:28:13 +0000 Subordinate resources: AS: 262278 IP: 45.190.220.0/22 IP: 177.11.40.0/21 IP: 2804:1ec4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Jun 2025 18:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:59:39:77:fc:cc:ef:55:0b:a1:f6:ec:7f:e2:17:cf:42:b4:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 12:23:13 2025 GMT Not After : May 19 12:28:13 2026 GMT Subject: CN=9B922140BC53E1C85FC2E0891EF246C829930B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:f6:1a:69:f6:af:d9:ae:70:b9:b8:39:50: d2:9c:a2:08:f2:ab:f6:63:5b:c7:86:1a:43:5f:84: d4:64:59:c4:d1:6c:dd:ba:95:73:1d:7e:dd:f9:84: 7e:77:2d:06:58:bb:21:ec:0c:c6:aa:72:61:5c:1e: 46:bb:8a:09:10:fb:6c:32:81:77:fb:02:4f:de:71: 42:6c:b3:29:1b:48:27:4e:22:41:12:d6:34:71:b4: 71:1a:f5:e4:3e:eb:5a:68:7e:a6:fc:ec:0f:dd:b2: 6f:a1:e9:b6:9c:68:79:4e:a7:8a:a7:a9:30:5c:88: 93:03:e1:7b:d3:0c:64:31:32:bb:50:ab:be:fe:5a: 1c:e2:88:f1:50:7b:66:6c:cf:fb:ae:00:e9:44:cd: 35:80:9f:aa:1f:d9:8c:60:81:4c:10:7b:05:ee:ab: 21:20:de:f7:54:4c:50:29:74:89:af:0f:42:84:73: 29:b6:1f:49:30:f7:e9:0b:91:30:9c:bf:15:5f:7d: 0e:28:0e:f1:29:b2:9e:16:50:12:44:06:4a:af:de: 11:50:b8:2b:18:47:b6:6a:36:a3:a7:13:fe:cb:8c: 3c:eb:81:bf:9c:e3:d7:f8:f7:14:ab:d4:f1:27:3d: 04:9b:d3:51:08:7a:7c:e9:fc:6e:56:29:54:d4:99: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:92:21:40:BC:53:E1:C8:5F:C2:E0:89:1E:F2:46:C8:29:93:0B:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/9B922140BC53E1C85FC2E0891EF246C829930B1F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.220.0/22 177.11.40.0/21 IPv6: 2804:1ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262278 Signature Algorithm: sha256WithRSAEncryption a6:8b:b0:fd:4b:b3:16:6f:4c:60:20:02:4e:fd:b3:eb:1f:7f: ae:85:79:e9:95:9a:72:e8:1d:41:dc:a9:6f:b1:bf:f1:99:1b: 11:55:05:f0:a0:c1:d1:01:dc:4f:3e:09:5a:46:47:a6:03:23: a3:43:89:ce:40:d9:11:72:cf:fd:d7:a1:86:c8:2c:9d:99:57: dc:c4:58:dc:78:95:0a:44:05:67:25:8d:0e:fc:bc:aa:17:e1: e8:94:40:cf:fb:65:d0:83:87:59:d1:76:7c:da:eb:91:78:bd: 0c:8b:fe:17:66:24:81:1c:56:32:79:e5:6b:a3:7a:8b:d1:86: 8b:9b:02:1e:79:0e:b3:11:57:d2:41:79:00:44:da:4e:a4:8d: 88:92:4a:49:17:e0:b1:7e:e6:28:d6:b9:2a:2f:59:a2:85:a0: 49:c2:6e:62:f5:61:3b:45:b0:d1:3c:1f:42:76:05:b2:6c:7f: 36:fc:01:6b:79:1c:06:a2:d8:55:54:95:1c:dd:cd:50:1e:d5: f3:51:68:e1:00:aa:b1:a4:eb:04:f6:4c:18:a2:e7:49:e4:ff: 3d:c8:73:17:14:99:5d:ac:32:f7:2e:99:44:d5:8b:c8:94:af: a0:68:e7:e3:8f:8c:59:5e:18:00:f9:53:a6:af:8c:fa:a3:51: 30:83:ca:fd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDFk5d/zM71ULofbsf+IXz0K0TXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjAxMjIzMTNaFw0yNjA1MTkxMjI4MTNaMDMxMTAvBgNV BAMTKDlCOTIyMTQwQkM1M0UxQzg1RkMyRTA4OTFFRjI0NkM4Mjk5MzBCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDPYaafav2a5wubg5UNKcogjy q/ZjW8eGGkNfhNRkWcTRbN26lXMdft35hH53LQZYuyHsDMaqcmFcHka7igkQ+2wy gXf7Ak/ecUJssykbSCdOIkES1jRxtHEa9eQ+61pofqb87A/dsm+h6bacaHlOp4qn qTBciJMD4XvTDGQxMrtQq77+WhziiPFQe2Zsz/uuAOlEzTWAn6of2YxggUwQewXu qyEg3vdUTFApdImvD0KEcym2H0kw9+kLkTCcvxVffQ4oDvEpsp4WUBJEBkqv3hFQ uCsYR7ZqNqOnE/7LjDzrgb+c49f49xSr1PEnPQSb01EIenzp/G5WKVTUmXxbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbkiFAvFPhyF/C 4Ike8kbIKZMLHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmdQ RFlqTURTVjR6Z3k1Y21MVHlrRFJ6eGJ2b2dMZHlvNUs2SGRyVHM3REYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZn UERZak1EU1Y0emd5NWNtTFR5a0RSenhidm9nTGR5bzVLNkhkclRzN0RGLzAvOUI5 MjIxNDBCQzUzRTFDODVGQzJFMDg5MUVGMjQ2QzgyOTkzMEIxRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb7cAwQDsQsoMA0EAgACMAcDBQAoBB7EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAhjANBgkqhkiG9w0BAQsFAAOCAQEApouw/Uuz Fm9MYCACTv2z6x9/roV56ZWacugdQdypb7G/8ZkbEVUF8KDB0QHcTz4JWkZHpgMj o0OJzkDZEXLP/dehhsgsnZlX3MRY3HiVCkQFZyWNDvy8qhfh6JRAz/tl0IOHWdF2 fNrrkXi9DIv+F2YkgRxWMnnla6N6i9GGi5sCHnkOsxFX0kF5AETaTqSNiJJKSRfg sX7mKNa5Ki9ZooWgScJuYvVhO0Ww0TwfQnYFsmx/NvwBa3kcBqLYVVSVHN3NUB7V 81Fo4QCqsaTrBPZMGKLnSeT/PchzFxSZXawy9y6ZRNWLyJSvoGjn44+MWV4YAPlT pq+M+qNRMIPK/Q== -----END CERTIFICATE-----Generated at Mon Jun 2 17:03:18 2025 by rpki-client