$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer File: B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer (raw, json) Hash identifier: 3w05TN0kqGRG1JKV8O1hpzXl6tAdjJM161CmVSR11BQ= Subject key identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 412D93BD58F3E9A6FFAB997C775274A37E36EF6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft caRepository: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 May 2025 22:34:06 +0000 Certificate not after: Fri 15 May 2026 22:39:06 +0000 Subordinate resources: AS: 269704 IP: 45.189.160.0/22 IP: 45.191.104.0/22 IP: 2804:689c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Jun 2025 18:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2d:93:bd:58:f3:e9:a6:ff:ab:99:7c:77:52:74:a3:7e:36:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 22:34:06 2025 GMT Not After : May 15 22:39:06 2026 GMT Subject: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:23:bb:ab:8f:3e:4c:8a:78:85:12:53:67: ad:93:0f:aa:fb:01:74:f7:03:6f:bb:c0:0f:33:88: e5:82:c2:ee:14:d1:cd:05:12:15:73:b1:f2:11:9f: 7f:1d:d9:21:9d:a9:1c:09:d2:a2:21:ba:d0:f1:cd: d3:6e:0d:0e:10:61:84:15:2e:01:33:16:33:65:8b: 9f:4e:c4:84:2e:87:93:0f:e2:bd:4b:d7:7c:14:97: 5f:68:c9:39:47:fa:b8:eb:3d:2d:4a:be:3c:01:9e: 76:f7:92:8b:c2:ab:0f:74:da:2a:c0:7f:6d:49:50: a5:7b:ee:f3:a6:52:2f:9a:38:87:d1:73:cd:ea:a8: 3a:0a:bf:61:be:c9:b6:89:a9:11:9b:bf:b8:ab:d1: d2:3e:30:75:cb:ad:7e:7b:12:2d:d8:a2:ab:de:21: 44:35:66:10:8a:0c:8e:0f:49:87:9f:44:10:4c:5f: 5a:ce:92:ac:e8:a2:df:e2:6b:d1:7e:f5:8f:30:07: fc:bf:6b:c5:bf:5c:8e:38:9a:86:5b:88:a2:6c:5e: 7a:54:17:01:de:f1:bb:6f:6f:9d:cf:20:c4:ce:49: 60:6d:a9:0e:60:5b:7d:d5:d4:34:aa:df:49:d5:22: c2:09:39:1b:39:45:75:b5:ff:8c:b5:e0:e0:ee:bc: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.160.0/22 45.191.104.0/22 IPv6: 2804:689c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269704 Signature Algorithm: sha256WithRSAEncryption 66:74:b7:03:d5:db:eb:99:56:4b:1d:e4:b7:1a:98:96:5b:58: 8e:07:95:16:64:67:22:ad:d3:af:12:13:7a:9a:69:48:77:31: 20:56:c1:2f:f4:b0:d5:93:a3:51:b4:4e:7b:b4:36:7e:82:66: 84:55:dd:ae:24:68:4c:14:fc:eb:3f:8a:59:e5:ae:d7:f4:19: 97:f6:b9:af:ed:a1:9e:a2:3c:14:f9:0a:b9:e1:f7:ae:9c:ff: 1b:e3:52:b3:95:bf:01:f9:df:8d:5b:67:21:88:8d:fc:cd:c5: 15:56:df:fa:24:d8:01:21:0c:6b:25:27:a0:a4:1c:1e:dd:bc: e1:8b:92:2c:49:50:4c:47:32:32:3c:36:57:b7:90:10:58:c2: 15:6c:32:a8:0d:35:72:6e:fb:a5:d5:b7:b9:14:c9:b6:6c:65: 6b:33:5a:d8:b4:fe:1c:08:18:1e:d4:81:38:34:56:24:b8:18: 6b:18:42:42:03:c3:92:72:55:67:d2:7e:79:48:97:c4:36:67: 85:b0:7c:38:0f:59:b9:71:b6:46:62:0a:5e:8c:9a:ee:5b:c1: 00:76:82:22:c8:25:dc:6e:61:ad:87:c7:83:7f:eb:97:2d:39: 0d:23:2b:10:40:2d:9c:79:81:26:87:4a:97:26:76:5c:60:ee: 95:c6:12:f7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQS2TvVjz6ab/q5l8d1J0o342724wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTYyMjM0MDZaFw0yNjA1MTUyMjM5MDZaMDMxMTAvBgNV BAMTKEIwQzNDNkI5ODM3NDdGODcxQkIxQUU4Q0U5OTJFQUM3NzZCNzZBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7yO7q48+TIp4hRJTZ62TD6r7 AXT3A2+7wA8ziOWCwu4U0c0FEhVzsfIRn38d2SGdqRwJ0qIhutDxzdNuDQ4QYYQV LgEzFjNli59OxIQuh5MP4r1L13wUl19oyTlH+rjrPS1KvjwBnnb3kovCqw902irA f21JUKV77vOmUi+aOIfRc83qqDoKv2G+ybaJqRGbv7ir0dI+MHXLrX57Ei3Yoqve IUQ1ZhCKDI4PSYefRBBMX1rOkqzoot/ia9F+9Y8wB/y/a8W/XI44moZbiKJsXnpU FwHe8btvb53PIMTOSWBtqQ5gW33V1DSq30nVIsIJORs5RXW1/4y14ODuvL6rAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSww8a5g3R/hxux rozpkurHdrdqszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1py aWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZY0EvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNa cmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzEvQjBD M0M2Qjk4Mzc0N0Y4NzFCQjFBRThDRTk5MkVBQzc3NkI3NkFCMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb2gAwQCLb9oMA0EAgACMAcDBQAoBGicMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQdiDANBgkqhkiG9w0BAQsFAAOCAQEAZnS3A9Xb 65lWSx3ktxqYlltYjgeVFmRnIq3TrxITepppSHcxIFbBL/Sw1ZOjUbROe7Q2foJm hFXdriRoTBT86z+KWeWu1/QZl/a5r+2hnqI8FPkKueH3rpz/G+NSs5W/AfnfjVtn IYiN/M3FFVbf+iTYASEMayUnoKQcHt284YuSLElQTEcyMjw2V7eQEFjCFWwyqA01 cm77pdW3uRTJtmxlazNa2LT+HAgYHtSBODRWJLgYaxhCQgPDknJVZ9J+eUiXxDZn hbB8OA9ZuXG2RmIKXoya7lvBAHaCIsgl3G5hrYfHg3/rly05DSMrEEAtnHmBJodK lyZ2XGDulcYS9w== -----END CERTIFICATE-----Generated at Mon Jun 2 16:32:35 2025 by rpki-client