$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.cer File: B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.cer (raw, json) Hash identifier: M9KHQXtsPRNVkc0uu4YuA70KON/gefarZSdbGAL4Hmc= Subject key identifier: B4:84:D0:D2:50:DA:2E:F1:A1:A5:04:D3:93:32:CA:2C:CA:15:65:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E762C5FA45D6E5CDADC2D47E65B80F155B50122 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.mft caRepository: rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 15 May 2025 21:46:28 +0000 Certificate not after: Thu 14 May 2026 21:51:28 +0000 Subordinate resources: AS: 268836 IP: 45.174.28.0/22 IP: 2804:5b58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:2c:5f:a4:5d:6e:5c:da:dc:2d:47:e6:5b:80:f1:55:b5:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 15 21:46:28 2025 GMT Not After : May 14 21:51:28 2026 GMT Subject: CN=B484D0D250DA2EF1A1A504D39332CA2CCA1565FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:a3:99:d5:c2:20:48:da:13:d1:61:e6:48: 09:e2:7c:5b:d0:38:3c:42:9c:8a:9e:e1:56:23:43: 32:69:7d:e2:7d:1a:fb:b6:7e:f1:3c:ba:9c:c4:f4: db:e0:f8:35:2d:1f:64:39:97:15:dc:d7:a5:bd:b5: 8a:73:a5:a9:d5:d8:3b:55:f2:38:40:b8:dc:f2:bc: 00:f5:10:ed:bc:df:14:9f:82:db:58:d5:32:79:8a: fc:b4:68:d2:46:ee:a4:8c:45:e5:9f:18:50:ae:d1: 07:c2:5d:78:5c:51:c6:ae:20:ac:34:86:07:c6:db: 66:3d:3f:e8:2e:79:c0:8f:ff:89:e6:47:c1:1c:23: 06:23:5d:fc:f5:b2:2e:85:04:6c:89:19:f6:21:a0: 67:f3:4d:21:b3:71:f7:88:6d:d4:8c:d2:55:05:49: 7d:d6:6f:f4:52:54:c7:15:71:a3:c9:5c:2c:9f:be: ad:37:7c:59:1a:3b:9b:1c:ce:34:69:cb:ea:d0:ad: 9d:36:04:55:c6:21:0f:9f:58:10:de:f2:39:7a:be: 46:1a:cb:ca:5a:8a:0d:b7:33:f2:b1:12:bc:7e:45: 8d:e1:cf:83:02:aa:61:7b:ef:29:ee:62:fd:f3:f7: 31:01:9c:dc:e8:ec:b4:4e:0b:3c:3c:68:4c:1b:0a: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:84:D0:D2:50:DA:2E:F1:A1:A5:04:D3:93:32:CA:2C:CA:15:65:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/B484D0D250DA2EF1A1A504D39332CA2CCA1565FF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.28.0/22 IPv6: 2804:5b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268836 Signature Algorithm: sha256WithRSAEncryption be:54:b1:d5:9f:72:2f:b2:73:4d:4a:dd:ff:02:67:e7:68:ca: 0d:a9:4d:a2:75:ff:70:ff:ff:74:b7:44:d1:c4:38:00:5c:bd: 0c:52:9b:22:e7:9e:b5:17:48:ec:c9:d8:59:f5:a3:c8:2f:aa: 98:ba:5b:85:21:3b:88:12:bf:f1:0c:c6:df:fc:02:58:cf:f1: 14:58:4a:cb:ad:9b:a9:28:5c:c2:d9:55:39:6e:95:01:15:f1: 93:72:a6:2f:87:c0:4d:66:b3:1b:21:cf:82:ba:9a:45:b6:5c: 31:3a:2d:50:92:d8:5f:30:59:0e:c1:b0:84:1e:68:a9:0a:05: 0b:15:d8:6e:b5:04:68:81:df:08:40:ff:87:05:46:88:f7:33: d1:6a:b2:47:45:a9:ec:88:81:c9:a4:e1:e8:c0:91:0e:e6:15: 39:6c:e5:7b:45:54:1c:56:66:a8:5a:ac:ee:d0:ba:e1:b1:ce: f5:c7:4b:8a:ad:fb:2e:33:c3:4c:0a:c6:e0:7f:76:f2:f3:17: 2a:2b:a0:fc:bb:b1:76:08:09:77:33:3d:62:c5:fd:6b:5d:75: e5:66:c3:83:7b:d1:81:89:91:cf:43:ae:ba:f7:d3:3a:aa:c8: 23:10:25:c1:06:eb:41:55:01:9c:8b:60:57:9a:18:24:d4:c9: 47:38:7c:46 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXnYsX6Rdblza3C1H5luA8VW1ASIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTUyMTQ2MjhaFw0yNjA1MTQyMTUxMjhaMDMxMTAvBgNV BAMTKEI0ODREMEQyNTBEQTJFRjFBMUE1MDREMzkzMzJDQTJDQ0ExNTY1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom6OZ1cIgSNoT0WHmSAnifFvQ ODxCnIqe4VYjQzJpfeJ9Gvu2fvE8upzE9Nvg+DUtH2Q5lxXc16W9tYpzpanV2DtV 8jhAuNzyvAD1EO283xSfgttY1TJ5ivy0aNJG7qSMReWfGFCu0QfCXXhcUcauIKw0 hgfG22Y9P+guecCP/4nmR8EcIwYjXfz1si6FBGyJGfYhoGfzTSGzcfeIbdSM0lUF SX3Wb/RSVMcVcaPJXCyfvq03fFkaO5sczjRpy+rQrZ02BFXGIQ+fWBDe8jl6vkYa y8paig23M/KxErx+RY3hz4MCqmF77ynuYv3z9zEBnNzo7LROCzw8aEwbCp1BAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0hNDSUNou8aGl BNOTMsosyhVl/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlRz eExCd253dk5DWDNpR0dGTVBnU2ptd0Jad1hKbWV4Z3k2QVpRZVp3Tm0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZU c3hMQndud3ZOQ1gzaUdHRk1QZ1NqbXdCWndYSm1leGd5NkFaUWVad05tLzAvQjQ4 NEQwRDI1MERBMkVGMUExQTUwNEQzOTMzMkNBMkNDQTE1NjVGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa4cMA0EAgACMAcDBQAoBFtYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaJDANBgkqhkiG9w0BAQsFAAOCAQEAvlSx1Z9yL7JzTUrd /wJn52jKDalNonX/cP//dLdE0cQ4AFy9DFKbIueetRdI7MnYWfWjyC+qmLpbhSE7 iBK/8QzG3/wCWM/xFFhKy62bqShcwtlVOW6VARXxk3KmL4fATWazGyHPgrqaRbZc MTotUJLYXzBZDsGwhB5oqQoFCxXYbrUEaIHfCED/hwVGiPcz0WqyR0Wp7IiByaTh 6MCRDuYVOWzle0VUHFZmqFqs7tC64bHO9cdLiq37LjPDTArG4H928vMXKiug/Lux dggJdzM9YsX9a1115WbDg3vRgYmRz0OuuvfTOqrIIxAlwQbrQVUBnItgV5oYJNTJ Rzh8Rg== -----END CERTIFICATE-----Generated at Wed Jun 4 10:39:27 2025 by rpki-client