$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer File: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer (raw, json) Hash identifier: FY6ob8sXcYc8UbKs0WQUgBVwaT3z7yP/Oid85DIXg8w= Subject key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AA92BED16C736F4EE608D286515822C2B904C37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft caRepository: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Mar 2025 01:13:54 +0000 Certificate not after: Mon 23 Mar 2026 01:18:54 +0000 Subordinate resources: AS: 269034 IP: 45.178.108.0/22 IP: 2804:5e74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a9:2b:ed:16:c7:36:f4:ee:60:8d:28:65:15:82:2c:2b:90:4c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 01:13:54 2025 GMT Not After : Mar 23 01:18:54 2026 GMT Subject: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:16:5e:d6:df:fc:92:c6:2b:0b:14:b8:7c: 4d:f7:5e:89:7a:95:f5:04:e6:9f:26:ca:a8:fb:3c: ee:0c:d7:20:1d:02:54:94:45:ad:74:e9:bd:24:7c: 8d:9f:35:a6:9b:17:45:f5:44:a5:ce:4b:e8:b7:8b: d8:ff:f7:8f:4d:34:6b:eb:31:1a:8d:34:7c:a1:31: ba:01:36:ca:ad:16:14:84:d1:11:7c:6f:fe:65:5b: c5:46:72:71:2a:79:c5:a5:6e:20:e6:25:4e:02:63: a5:37:42:b3:67:5b:9c:5c:06:b6:f5:90:a0:d2:a1: a5:d4:67:f9:40:8e:71:d9:25:3e:03:e1:28:78:37: dc:40:3f:8c:9b:ac:ab:0a:81:fc:51:eb:b2:16:32: eb:51:88:2c:39:0f:1d:65:b4:da:9c:36:d5:55:7a: 0f:14:20:de:80:5f:1e:8a:99:0f:c9:b1:24:f3:d7: 46:6b:c7:43:95:7f:3b:bc:85:92:72:a0:28:f8:e3: 9a:37:fc:e0:5a:c9:b3:a6:c0:99:89:0e:95:8c:22: b1:c4:d1:fb:25:f5:27:7b:93:13:83:06:aa:87:c2: 36:6b:cd:8e:a5:32:9e:d0:61:14:4c:52:66:62:68: d5:f0:af:d7:40:61:7c:ea:7f:49:ec:09:03:13:a2: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.108.0/22 IPv6: 2804:5e74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269034 Signature Algorithm: sha256WithRSAEncryption 50:b7:70:73:8b:de:f2:b9:59:21:cf:80:3d:76:c9:be:9c:a1: a7:e1:9b:a7:83:41:9c:13:0c:b2:d1:73:39:6d:e9:cf:b5:b9: b5:f1:e3:d9:6a:64:9e:c2:af:77:4c:6a:3b:a0:e8:f0:6f:98: 93:2a:71:c1:6c:ff:f4:f1:37:09:88:72:ad:5b:34:2f:34:12: 80:62:a6:40:5b:b2:75:6a:b4:4e:b2:2b:71:0b:22:69:2a:29: ab:ed:2f:87:e1:3f:7e:7e:c7:8c:b7:67:30:d7:0d:68:46:3c: 84:3d:ac:70:89:4c:05:aa:98:2a:cb:f1:04:b8:06:4d:3c:16: b7:9f:75:cf:ba:e1:08:55:82:7a:fe:7b:8d:9a:12:91:bc:ee: 20:7f:f4:4f:58:b6:12:c9:32:0f:79:da:6c:57:65:cd:b6:33: 33:f7:bf:35:d8:1b:96:b3:12:9c:a8:71:88:0b:50:8d:e9:a9: 1d:14:48:19:d1:1c:f2:61:fc:b0:db:06:47:67:07:55:f1:c5: 09:12:69:8a:d1:1f:1c:ca:ce:48:1b:ec:e1:28:9a:41:0d:ad: 82:9a:06:cf:82:02:f5:d9:5b:56:7c:b5:e9:4d:ad:5f:d6:00: 7d:be:7d:a6:ef:1d:44:95:46:c2:f8:54:fe:a3:45:af:24:a7: 3b:61:00:b9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKqkr7RbHNvTuYI0oZRWCLCuQTDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjQwMTEzNTRaFw0yNjAzMjMwMTE4NTRaMDMxMTAvBgNV BAMTKEJEQzgyREYxQkU2MENFQUZFRjVFOTg3MTFBQ0FBNzFFOUEwQjZGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0hZe1t/8ksYrCxS4fE33Xol6 lfUE5p8myqj7PO4M1yAdAlSURa106b0kfI2fNaabF0X1RKXOS+i3i9j/949NNGvr MRqNNHyhMboBNsqtFhSE0RF8b/5lW8VGcnEqecWlbiDmJU4CY6U3QrNnW5xcBrb1 kKDSoaXUZ/lAjnHZJT4D4Sh4N9xAP4ybrKsKgfxR67IWMutRiCw5Dx1ltNqcNtVV eg8UIN6AXx6KmQ/JsSTz10Zrx0OVfzu8hZJyoCj445o3/OBaybOmwJmJDpWMIrHE 0fsl9Sd7kxODBqqHwjZrzY6lMp7QYRRMUmZiaNXwr9dAYXzqf0nsCQMTorU3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9yC3xvmDOr+9e mHEayqcemgtvZjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHdn NnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExHM3AvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR3 ZzZ6bnlxMktrR3RRQWt1VXJuU1R2U3NrUkdzTWZyUHJTYnB3akhMRzNwLzEvQkRD ODJERjFCRTYwQ0VBRkVGNUU5ODcxMUFDQUE3MUU5QTBCNkY2Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbJsMA0EAgACMAcDBQAoBF50MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQa6jANBgkqhkiG9w0BAQsFAAOCAQEAULdwc4ve8rlZIc+A PXbJvpyhp+Gbp4NBnBMMstFzOW3pz7W5tfHj2WpknsKvd0xqO6Do8G+YkypxwWz/ 9PE3CYhyrVs0LzQSgGKmQFuydWq0TrIrcQsiaSopq+0vh+E/fn7HjLdnMNcNaEY8 hD2scIlMBaqYKsvxBLgGTTwWt591z7rhCFWCev57jZoSkbzuIH/0T1i2EskyD3na bFdlzbYzM/e/NdgblrMSnKhxiAtQjempHRRIGdEc8mH8sNsGR2cHVfHFCRJpitEf HMrOSBvs4SiaQQ2tgpoGz4IC9dlbVny16U2tX9YAfb59pu8dRJVGwvhU/qNFrySn O2EAuQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:18:32 2025 by rpki-client