$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer File: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer (raw, json) Hash identifier: CWgmEqBAB2N+V5/DEGaSBiHZHAK53sl6jChdotb9JP0= Subject key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 153787DD618ABF588B11C7BB9AE57E33C25A4665 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft caRepository: rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 14:14:16 +0000 Certificate not after: Thu 05 Mar 2026 14:19:16 +0000 Subordinate resources: AS: 268819 IP: 45.173.88.0/22 IP: 2804:5b1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:87:dd:61:8a:bf:58:8b:11:c7:bb:9a:e5:7e:33:c2:5a:46:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 14:14:16 2025 GMT Not After : Mar 5 14:19:16 2026 GMT Subject: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:f5:64:f4:e3:cb:5c:78:05:77:be:a6:b1: 9a:0d:38:4b:1c:ec:56:9d:db:b3:ce:1f:6f:d7:71: 75:42:f7:83:4c:4a:ae:5f:9c:bf:11:75:e4:ea:b8: a2:10:1d:3c:b7:e9:f5:1a:3a:40:fc:a0:00:17:9f: 74:74:1b:bc:0a:74:2d:04:bc:cd:51:a6:17:81:e8: 6d:f4:b2:af:2d:e9:3d:51:e0:d7:f2:eb:6b:02:95: 87:c1:6b:2d:6c:a1:41:a6:ca:a0:70:8d:b2:f0:54: 00:32:04:61:a0:da:56:8e:63:69:ee:72:82:63:8a: 9a:29:90:4a:5d:a4:4d:c1:b0:da:9f:07:ec:0d:ec: 01:85:07:62:4d:0b:bc:01:7c:d7:1e:80:07:9e:36: b8:4c:dc:fd:9c:28:c9:f1:75:9f:71:93:bb:c2:ad: 49:de:0c:70:48:6f:d2:22:d3:a9:d2:12:2d:49:cb: ca:38:75:9a:00:80:70:74:11:cd:2d:fa:3a:a8:41: 6e:fa:b2:68:af:c5:b3:67:06:be:f0:aa:5e:60:52: 49:cd:5e:a3:32:b3:b5:96:67:df:be:f6:f3:3c:94: 8c:8e:86:46:19:d0:af:33:7f:b5:0c:1f:ed:35:a9: 78:b2:97:f3:50:a3:a5:8d:4e:67:fe:b4:88:30:5e: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.88.0/22 IPv6: 2804:5b1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268819 Signature Algorithm: sha256WithRSAEncryption 1a:93:23:1f:c6:70:dc:ae:83:f8:dc:06:79:7e:56:60:51:de: bf:97:ba:6f:42:5d:c2:f7:d2:c4:e4:a7:e7:c6:01:90:08:c3: 54:41:8a:82:d6:24:db:5c:55:11:03:ec:f8:0a:ba:97:cd:7c: f3:ee:ca:90:73:84:03:92:2b:f3:76:89:8a:13:2d:58:f6:e5: 36:23:cb:f4:a1:e6:56:8b:7b:0f:87:93:5e:e3:fe:85:5c:6d: 27:73:07:f1:6b:6a:d2:9b:61:97:43:62:32:9f:23:c8:0a:b5: b4:a4:33:74:d9:03:41:3c:1b:a4:c6:d3:f8:27:e9:b9:b9:5b: 59:81:de:1b:d1:92:d8:1b:8f:ea:62:58:fb:97:ce:91:80:85: ea:5e:85:82:eb:34:19:bd:13:25:08:df:4d:17:5a:f3:7d:11: f6:66:c7:54:d0:51:7b:39:ed:f9:86:43:5a:7a:f8:16:6b:b2: eb:4c:59:6f:85:50:0d:0b:65:fe:ba:46:e2:86:c8:14:f1:6a: f2:2f:7c:b1:a4:1d:01:7f:16:0e:e7:66:6c:a8:96:70:ff:af: 4b:e4:c3:82:19:d0:d3:57:9b:e4:5f:08:81:6d:a0:7c:30:22: a3:54:c1:f1:07:9f:56:a7:3f:eb:c2:c2:b8:31:e0:f3:35:28: 29:b8:bb:da -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFTeH3WGKv1iLEce7muV+M8JaRmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNDE0MTZaFw0yNjAzMDUxNDE5MTZaMDMxMTAvBgNV BAMTKEJFQTU5NTk4M0ZDNjhDOEVGOUE1NDZEN0U5QTRBNDhERkUyQTg4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChC/Vk9OPLXHgFd76msZoNOEsc 7Fad27POH2/XcXVC94NMSq5fnL8RdeTquKIQHTy36fUaOkD8oAAXn3R0G7wKdC0E vM1RpheB6G30sq8t6T1R4Nfy62sClYfBay1soUGmyqBwjbLwVAAyBGGg2laOY2nu coJjipopkEpdpE3BsNqfB+wN7AGFB2JNC7wBfNcegAeeNrhM3P2cKMnxdZ9xk7vC rUneDHBIb9Ii06nSEi1Jy8o4dZoAgHB0Ec0t+jqoQW76smivxbNnBr7wql5gUknN XqMys7WWZ9++9vM8lIyOhkYZ0K8zf7UMH+01qXiyl/NQo6WNTmf+tIgwXlvFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+pZWYP8aMjvml RtfppKSN/iqI0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTNi ZWNFUFBnOGcyVUdaTEZLZG1MblhtZ0EzbTh0NXY5cVRoY1k5VFAzMXkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUz YmVjRVBQZzhnMlVHWkxGS2RtTG5YbWdBM204dDV2OXFUaGNZOVRQMzF5LzEvQkVB NTk1OTgzRkM2OEM4RUY5QTU0NkQ3RTlBNEE0OERGRTJBODhEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa1YMA0EAgACMAcDBQAoBFscMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaEzANBgkqhkiG9w0BAQsFAAOCAQEAGpMjH8Zw3K6D+NwG eX5WYFHev5e6b0JdwvfSxOSn58YBkAjDVEGKgtYk21xVEQPs+Aq6l8188+7KkHOE A5Ir83aJihMtWPblNiPL9KHmVot7D4eTXuP+hVxtJ3MH8Wtq0pthl0NiMp8jyAq1 tKQzdNkDQTwbpMbT+CfpublbWYHeG9GS2BuP6mJY+5fOkYCF6l6Fgus0Gb0TJQjf TRda830R9mbHVNBReznt+YZDWnr4Fmuy60xZb4VQDQtl/rpG4obIFPFq8i98saQd AX8WDudmbKiWcP+vS+TDghnQ01eb5F8IgW2gfDAio1TB8QefVqc/68LCuDHg8zUo Kbi72g== -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:17 2025 by rpki-client