$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer File: 9BE05977B60E4F720D421198D070234D3CC75446.cer (raw, json) Hash identifier: +lFI4ECGkk/I1ZyTxJgkSd5AEEYBGcPCSlBsVKyvd/I= Subject key identifier: 9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 782305A045BD26801071765281A6FD02A43E1259 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft caRepository: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 20 May 2025 14:52:50 +0000 Certificate not after: Tue 19 May 2026 14:57:50 +0000 Subordinate resources: AS: 266583 IP: 45.7.100.0/22 IP: 45.228.12.0/22 IP: 2804:3e40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 22:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:23:05:a0:45:bd:26:80:10:71:76:52:81:a6:fd:02:a4:3e:12:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 14:52:50 2025 GMT Not After : May 19 14:57:50 2026 GMT Subject: CN=9BE05977B60E4F720D421198D070234D3CC75446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:f2:00:56:8c:46:ae:c5:d7:54:8e:91:52: 0b:f0:49:5c:9b:4b:e3:ab:21:5f:fd:3e:f7:c8:28: ee:f6:aa:91:90:ed:c4:27:d3:41:6c:45:0d:07:f1: 96:2a:9c:55:0b:ab:2f:90:49:88:70:15:2b:5b:af: 50:37:e9:27:49:dc:94:26:a2:d3:48:25:ef:3f:da: 6d:e5:75:c1:85:45:c1:64:80:b1:1d:3f:02:fd:95: 08:bf:9b:2f:dd:55:24:fb:89:8a:8d:49:ad:7e:0d: b8:36:dd:3e:44:9a:4d:9c:93:fd:bd:3e:ab:e1:30: 81:a2:8e:9a:93:4b:8b:e2:e7:ff:2e:d6:cc:88:6a: e4:55:80:de:44:8f:33:0f:9c:33:45:ba:b9:27:38: 76:57:52:e3:c8:11:6b:f8:47:66:2c:ee:ba:ca:76: 2b:10:c9:99:e7:67:02:88:08:b2:5d:11:45:e2:87: 9d:3e:6a:92:4b:9d:cb:47:82:fa:f3:f5:a9:b8:2d: 93:c9:bb:cf:b4:33:79:eb:0c:f9:78:2b:ec:e2:07: cd:e0:12:42:df:bd:2f:86:a6:70:1c:f3:80:a1:e7: 6f:e4:70:9e:9c:bf:52:32:d7:09:38:d4:b0:87:c9: 32:6f:7b:c2:21:82:50:7e:00:53:da:e5:e6:28:eb: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.100.0/22 45.228.12.0/22 IPv6: 2804:3e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266583 Signature Algorithm: sha256WithRSAEncryption 66:d2:f6:92:30:6a:0e:98:8e:5b:00:c1:49:ad:01:86:82:d0: b7:44:21:f6:d7:d1:1e:86:63:9a:81:2e:e3:7e:1a:2e:47:7c: 3e:52:dd:6c:9b:f6:ac:b1:98:d1:c6:75:ed:d1:51:ef:9b:7d: bd:cc:29:44:ff:a7:76:05:5c:90:24:0c:5a:fd:b3:e8:36:01: 54:09:80:e3:71:57:87:47:9d:e8:99:bf:86:c1:45:c4:b4:10: ac:c7:d8:af:39:a1:8a:95:f5:3d:1e:41:38:f9:08:27:f7:6b: 64:1e:af:6e:11:46:ab:63:47:23:d4:40:21:7c:04:6c:dc:21: cd:4f:b7:6c:d4:25:4c:c1:bc:ef:e4:88:f8:0b:d5:92:ae:e7: e0:e4:7c:e6:a5:25:29:8c:30:84:da:67:64:fe:31:c2:94:b5: d5:50:68:6e:11:83:60:d9:5d:05:eb:83:09:c2:c1:b7:22:d9: 84:e2:ab:76:0c:9e:76:55:e7:f7:23:48:ce:63:16:67:12:8b: fc:8d:75:75:3f:16:23:29:a1:89:cf:bc:c4:11:55:77:65:08: 28:22:98:71:08:77:bc:58:03:c1:db:1d:1a:b2:50:ca:ee:15: bf:da:da:04:2b:63:35:d3:70:1f:85:b3:82:58:d2:ec:0d:17: 33:d3:6d:2b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUeCMFoEW9JoAQcXZSgab9AqQ+ElkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjAxNDUyNTBaFw0yNjA1MTkxNDU3NTBaMDMxMTAvBgNV BAMTKDlCRTA1OTc3QjYwRTRGNzIwRDQyMTE5OEQwNzAyMzREM0NDNzU0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf//IAVoxGrsXXVI6RUgvwSVyb S+OrIV/9PvfIKO72qpGQ7cQn00FsRQ0H8ZYqnFULqy+QSYhwFStbr1A36SdJ3JQm otNIJe8/2m3ldcGFRcFkgLEdPwL9lQi/my/dVST7iYqNSa1+Dbg23T5Emk2ck/29 PqvhMIGijpqTS4vi5/8u1syIauRVgN5EjzMPnDNFurknOHZXUuPIEWv4R2Ys7rrK disQyZnnZwKICLJdEUXih50+apJLnctHgvrz9am4LZPJu8+0M3nrDPl4K+ziB83g EkLfvS+GpnAc84Ch52/kcJ6cv1Iy1wk41LCHyTJve8IhglB+AFPa5eYo62h1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSb4Fl3tg5Pcg1C EZjQcCNNPMdURjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDVE bkxINkRzR0Z4ZWFTR1dWeTVOWkZQTkNIYXlDZjhzN0pIaWtXZkt1QXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1 RG5MSDZEc0dGeGVhU0dXVnk1TlpGUE5DSGF5Q2Y4czdKSGlrV2ZLdUFwLzAvOUJF MDU5NzdCNjBFNEY3MjBENDIxMTk4RDA3MDIzNEQzQ0M3NTQ0Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQdkAwQCLeQMMA0EAgACMAcDBQAoBD5AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQRVzANBgkqhkiG9w0BAQsFAAOCAQEAZtL2kjBq DpiOWwDBSa0BhoLQt0Qh9tfRHoZjmoEu434aLkd8PlLdbJv2rLGY0cZ17dFR75t9 vcwpRP+ndgVckCQMWv2z6DYBVAmA43FXh0ed6Jm/hsFFxLQQrMfYrzmhipX1PR5B OPkIJ/drZB6vbhFGq2NHI9RAIXwEbNwhzU+3bNQlTMG87+SI+AvVkq7n4OR85qUl KYwwhNpnZP4xwpS11VBobhGDYNldBeuDCcLBtyLZhOKrdgyedlXn9yNIzmMWZxKL /I11dT8WIymhic+8xBFVd2UIKCKYcQh3vFgDwdsdGrJQyu4Vv9raBCtjNdNwH4Wz gljS7A0XM9NtKw== -----END CERTIFICATE-----Generated at Sat Jun 7 04:36:42 2025 by rpki-client