$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer File: BE6164348043E6AA537C7ED74D50CC40298757FC.cer (raw, json) Hash identifier: G7lYdn5BICv08lAUaW4RrIgp7bxFAOFUTgaaJeM0h+4= Subject key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 193C6ECA2E6DC10AEE53D5EE45743AB9899D11B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft caRepository: rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 12:49:43 +0000 Certificate not after: Thu 05 Mar 2026 12:54:43 +0000 Subordinate resources: AS: 270413 IP: 170.0.76.0/22 IP: 190.89.244.0/22 IP: 2804:6ba0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3c:6e:ca:2e:6d:c1:0a:ee:53:d5:ee:45:74:3a:b9:89:9d:11:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 12:49:43 2025 GMT Not After : Mar 5 12:54:43 2026 GMT Subject: CN=BE6164348043E6AA537C7ED74D50CC40298757FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:30:62:64:95:06:27:88:03:b7:21:54:46: 54:5a:4d:bf:3d:b4:fd:f6:9c:ca:c2:af:e6:47:4f: 32:1f:ae:39:28:a6:db:43:19:2b:c9:ad:36:95:b3: e3:02:54:c2:05:f6:b3:db:71:f6:49:0b:64:1b:95: 56:89:bb:28:fa:e5:4f:a5:13:4d:55:c2:3b:bc:42: 8f:70:fb:48:62:9f:3f:1f:78:0f:8a:87:2c:21:1a: 37:88:5a:69:29:dd:6d:7e:a7:01:1b:13:7e:ca:93: 17:bc:ce:8e:1d:78:83:2f:6f:9b:65:2a:86:b4:bf: ae:5a:4b:a5:88:1c:e2:27:3a:86:8a:3b:71:9d:a0: d4:9e:c1:61:fd:37:84:9c:d7:43:9f:4d:f2:ae:d4: 75:af:2f:da:c1:d1:7e:48:93:7c:cb:cd:cc:81:d1: 1c:59:c0:ee:78:37:75:05:12:88:46:72:cc:3b:f1: c6:3b:07:90:48:82:da:50:2c:83:00:eb:f4:30:62: a9:3a:dd:f0:ce:d2:99:51:7c:f6:43:0f:75:ce:9c: c7:1a:74:af:4c:b2:29:aa:c3:76:10:6c:be:b8:96: 3a:e1:3c:bd:ac:4a:e0:bc:65:84:a5:04:f9:69:fc: 12:1f:df:16:45:df:c3:60:21:cf:be:0d:28:25:c4: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.0.76.0/22 190.89.244.0/22 IPv6: 2804:6ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270413 Signature Algorithm: sha256WithRSAEncryption 6a:1f:90:bc:45:bd:2c:e6:fe:79:fc:1b:5a:28:03:07:8d:db: 4b:63:e1:a6:b3:41:ff:77:d6:03:19:fa:0b:95:6b:36:20:29: 06:ea:1b:0c:fe:53:da:1e:4b:9f:56:cf:ca:c6:e3:bd:db:73: 7c:51:f3:d9:c6:a0:75:9b:98:fc:de:ad:6d:5e:78:53:01:3f: 9b:61:ec:1e:ad:23:73:34:d5:61:d3:87:14:7c:1e:e7:c5:8a: 2d:cd:e5:e3:45:94:fa:9f:ad:db:59:91:5c:56:c2:81:cd:0b: c4:85:5b:9a:c0:f6:67:12:a7:a8:f9:aa:84:42:18:8d:e0:bf: 79:b8:6d:2a:14:45:f5:23:0e:8c:e8:6d:60:89:46:a6:d7:d3: 15:e6:49:6d:28:8e:33:7a:54:c5:08:5c:1a:fe:4d:ab:b3:c8: 18:9c:9e:27:7d:42:fa:5a:4f:d6:11:46:80:83:90:13:17:7b: 3f:7f:bb:8d:18:0a:62:d3:59:5c:65:ce:9e:54:a6:9b:f4:8a: 39:57:fb:94:1c:25:4f:22:2f:22:dc:f5:ec:87:ad:f6:4f:37: f9:fa:dc:29:70:f8:f6:ed:23:db:45:6b:ae:e7:f7:48:e5:00: c0:d9:5c:bd:6e:41:0a:a1:7f:5d:10:0b:b6:92:5f:52:5e:15: 59:e4:ca:c8 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUGTxuyi5twQruU9XuRXQ6uYmdEbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMjQ5NDNaFw0yNjAzMDUxMjU0NDNaMDMxMTAvBgNV BAMTKEJFNjE2NDM0ODA0M0U2QUE1MzdDN0VENzRENTBDQzQwMjk4NzU3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4TBiZJUGJ4gDtyFURlRaTb89 tP32nMrCr+ZHTzIfrjkopttDGSvJrTaVs+MCVMIF9rPbcfZJC2QblVaJuyj65U+l E01Vwju8Qo9w+0hinz8feA+KhywhGjeIWmkp3W1+pwEbE37Kkxe8zo4deIMvb5tl Koa0v65aS6WIHOInOoaKO3GdoNSewWH9N4Sc10OfTfKu1HWvL9rB0X5Ik3zLzcyB 0RxZwO54N3UFEohGcsw78cY7B5BIgtpQLIMA6/QwYqk63fDO0plRfPZDD3XOnMca dK9Msimqw3YQbL64ljrhPL2sSuC8ZYSlBPlp/BIf3xZF38NgIc++DSglxKezAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+YWQ0gEPmqlN8 ftdNUMxAKYdX/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNk5n WlluQ2c0WlBqVG5lUjRMdDVZM3JMMVBjUXBQcXBaRGFnc0JTRzZoYUIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNk5n WlluQ2c0WlBqVG5lUjRMdDVZM3JMMVBjUXBQcXBaRGFnc0JTRzZoYUIvMS9CRTYx NjQzNDgwNDNFNkFBNTM3QzdFRDc0RDUwQ0M0MDI5ODc1N0ZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKqAEwDBAK+WfQwDQQCAAIwBwMFACgEa6AwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCBNMA0GCSqGSIb3DQEBCwUAA4IBAQBqH5C8Rb0s 5v55/BtaKAMHjdtLY+Gms0H/d9YDGfoLlWs2ICkG6hsM/lPaHkufVs/KxuO923N8 UfPZxqB1m5j83q1tXnhTAT+bYewerSNzNNVh04cUfB7nxYotzeXjRZT6n63bWZFc VsKBzQvEhVuawPZnEqeo+aqEQhiN4L95uG0qFEX1Iw6M6G1giUam19MV5kltKI4z elTFCFwa/k2rs8gYnJ4nfUL6Wk/WEUaAg5ATF3s/f7uNGApi01lcZc6eVKab9Io5 V/uUHCVPIi8i3PXsh632Tzf5+twpcPj27SPbRWuu5/dI5QDA2Vy9bkEKoX9dEAu2 kl9SXhVZ5MrI -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:12 2025 by rpki-client