$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer File: BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer (raw, json) Hash identifier: fP3WVUjM8Nmow1C4WSbhjCKBG94mnspTFmTtd3EH8Wk= Subject key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A2EA442CEE048421B72311FF3B1BCD84BE581 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft caRepository: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 23:39:32 +0000 Certificate not after: Fri 06 Mar 2026 23:44:32 +0000 Subordinate resources: AS: 269649 IP: 45.189.20.0/22 IP: 2804:67c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2e:a4:42:ce:e0:48:42:1b:72:31:1f:f3:b1:bc:d8:4b:e5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 23:39:32 2025 GMT Not After : Mar 6 23:44:32 2026 GMT Subject: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:48:37:9c:4e:0c:c2:6e:15:3a:b1:59:57: 8a:3e:3c:cc:7f:b9:5a:4b:8f:8f:7d:d3:94:01:37: 65:87:64:b8:7c:4a:8c:67:6e:1a:53:99:8e:28:eb: 30:a3:8a:cb:3e:b2:fb:5a:72:07:95:ed:08:58:8b: 9b:27:85:97:28:c2:da:e3:6a:cd:66:29:34:0e:43: e0:07:e7:cf:17:3d:bc:8b:4a:19:fb:a5:f6:b0:17: ef:e8:f6:5d:81:b7:48:2d:53:10:1b:2e:8b:70:62: ad:26:67:29:b3:1d:1c:d9:7e:f5:99:4c:db:40:03: 0a:c9:b7:85:69:94:37:fe:18:ec:0c:2b:d6:1d:23: b9:a6:83:b9:d2:5c:55:73:7e:ae:9b:7b:5c:2c:e0: 18:e9:76:86:63:1c:ae:9d:d9:cf:62:18:87:6a:85: 21:63:02:f5:22:4c:55:6e:71:b6:7d:ae:40:de:cc: f4:94:00:d5:86:d7:78:70:ae:d3:a4:5f:b6:9a:62: 18:e1:05:33:2b:41:73:f0:b3:36:1a:fb:3c:62:43: 3d:3f:c4:d7:f1:82:1e:8c:aa:f6:e6:88:ea:fc:19: 18:52:3d:08:66:3b:5f:7a:73:db:0b:78:4b:68:d3: b2:94:9e:df:13:b8:85:da:3d:72:6a:74:ef:60:2f: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.20.0/22 IPv6: 2804:67c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269649 Signature Algorithm: sha256WithRSAEncryption b5:76:00:33:f7:d7:2b:5b:e8:14:0b:aa:e1:37:e6:a9:2f:7e: 03:38:7e:dd:cc:e2:05:49:c0:f0:0e:09:b2:5d:d8:76:4e:a3: 81:b4:be:f8:77:5f:04:5a:11:09:94:0b:4e:c2:74:9a:79:ce: de:48:d7:30:59:5b:68:d5:22:a3:53:dc:45:e1:2e:e3:28:79: c1:e9:0b:6d:11:f2:17:4e:8e:6b:1a:db:01:6a:73:6e:d5:aa: 6a:87:28:97:58:69:bc:78:63:30:22:63:85:f2:53:bd:3e:d8: 78:ab:5e:98:3e:90:b9:9d:e4:8e:e2:60:7d:e6:02:62:ef:38: 85:7e:81:53:98:db:90:55:09:ef:91:f0:bb:38:63:61:ac:fc: 09:e0:86:b0:58:a3:09:cf:33:d4:71:26:84:43:36:98:f0:00: 1c:31:36:f3:b8:ff:c1:61:8b:89:98:ae:ba:43:78:94:d3:66: 59:17:8b:0a:8b:53:d3:64:e7:9d:01:23:9a:75:35:e5:af:cc: d6:b1:b1:67:d4:b1:1d:35:81:9e:df:30:5c:63:b4:16:fe:82: 42:85:06:b4:a4:43:fc:39:09:2e:62:b0:f4:5f:22:03:38:91: 82:d8:a6:c7:bd:d5:9d:aa:62:29:a9:c1:2d:68:e4:d1:a0:11: 20:2d:f0:88 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgITai6kQs7gSEIbcjEf87G82EvlgTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI1MDMwNzIzMzkzMloXDTI2MDMwNjIzNDQzMlowMzExMC8GA1UE AxMoQkJEMTFERjQ5MjczRDFDNUIxMzAxNjVFQkQ3MTYxQTNFOTNEMTYyOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANzJSDecTgzCbhU6sVlXij48zH+5 WkuPj33TlAE3ZYdkuHxKjGduGlOZjijrMKOKyz6y+1pyB5XtCFiLmyeFlyjC2uNq zWYpNA5D4Afnzxc9vItKGful9rAX7+j2XYG3SC1TEBsui3BirSZnKbMdHNl+9ZlM 20ADCsm3hWmUN/4Y7Awr1h0juaaDudJcVXN+rpt7XCzgGOl2hmMcrp3Zz2IYh2qF IWMC9SJMVW5xtn2uQN7M9JQA1YbXeHCu06RftppiGOEFMytBc/CzNhr7PGJDPT/E 1/GCHoyq9uaI6vwZGFI9CGY7X3pz2wt4S2jTspSe3xO4hdo9cmp072Av3KsCAwEA AaOCAzkwggM1MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLvRHfSSc9HFsTAW Xr1xYaPpPRYpMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBdBggr BgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FQnBl WkxxdlVkWjhXVWNRTXpSaXlBdEN2NFNaS1BMNVZ0VlRMdlpGaUNjTi8xMIGKBggr BgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FQnBl WkxxdlVkWjhXVWNRTXpSaXlBdEN2NFNaS1BMNVZ0VlRMdlpGaUNjTi8xL0JCRDEx REY0OTI3M0QxQzVCMTMwMTY1RUJENzE2MUEzRTkzRDE2MjkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi29FDANBAIAAjAHAwUAKARnxDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEHVEwDQYJKoZIhvcNAQELBQADggEBALV2ADP31ytb6BQLquE3 5qkvfgM4ft3M4gVJwPAOCbJd2HZOo4G0vvh3XwRaEQmUC07CdJp5zt5I1zBZW2jV IqNT3EXhLuMoecHpC20R8hdOjmsa2wFqc27VqmqHKJdYabx4YzAiY4XyU70+2Hir Xpg+kLmd5I7iYH3mAmLvOIV+gVOY25BVCe+R8Ls4Y2Gs/AnghrBYownPM9RxJoRD NpjwABwxNvO4/8Fhi4mYrrpDeJTTZlkXiwqLU9Nk550BI5p1NeWvzNaxsWfUsR01 gZ7fMFxjtBb+gkKFBrSkQ/w5CS5isPRfIgM4kYLYpse91Z2qYimpwS1o5NGgESAt 8Ig= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:59 2025 by rpki-client