$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer File: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer (raw, json) Hash identifier: nxUCvBynO2+iPPF3nfgoeUaRdY5L9vLpQlNXryZn7Rw= Subject key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D4841FDBDBE0ECDB80AF09BE9E0F49011AA1601 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft caRepository: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 18:52:49 +0000 Certificate not after: Thu 05 Mar 2026 18:57:49 +0000 Subordinate resources: AS: 269382 IP: 45.184.136.0/22 IP: 2804:63c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:41:fd:bd:be:0e:cd:b8:0a:f0:9b:e9:e0:f4:90:11:aa:16:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:52:49 2025 GMT Not After : Mar 5 18:57:49 2026 GMT Subject: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:96:a9:4d:bf:5c:ea:4a:2e:3c:13:af:5d: 3c:48:28:1c:3c:19:61:22:4b:fe:fa:5a:07:bc:fd: 9c:7c:f8:aa:f2:14:39:bc:7c:23:f7:e3:85:59:21: a3:c6:b2:c0:23:3b:c2:22:e1:77:b2:f8:cb:fa:0e: 37:c3:23:5c:a0:32:5a:37:8d:8f:c1:85:97:4b:7b: ac:b5:7c:14:09:3e:91:2c:33:73:f2:6a:e3:a9:44: 10:e3:d4:d7:a7:b3:c9:94:1f:66:84:ee:39:87:ed: 7f:bd:2a:51:96:d0:6f:5e:23:87:54:b8:8b:fe:d0: 54:bb:ec:7c:f5:38:44:62:a3:e1:47:98:12:a2:9d: 10:ca:c3:04:85:6f:5d:42:b9:f2:8d:74:a4:98:7f: 6b:bf:ce:1c:8d:b0:01:5f:2b:8c:07:f1:56:63:7f: 1a:8c:3a:2c:1a:63:9f:55:a9:6b:8d:d7:17:ca:79: aa:47:0d:2e:fb:70:2f:74:3e:f1:09:c4:b8:0c:29: a9:e3:34:aa:e8:90:12:89:45:f4:d2:ba:8e:78:1a: 48:7f:f6:62:20:c8:8c:6d:78:04:f8:b7:60:24:30: b5:36:47:3f:96:5e:67:82:5f:6e:a1:a8:00:60:65: 28:49:5a:ee:ea:34:35:e8:6a:9e:61:41:e2:3f:1e: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.184.136.0/22 IPv6: 2804:63c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269382 Signature Algorithm: sha256WithRSAEncryption 2f:1d:9b:8b:c1:e7:50:ef:c4:c4:0c:83:71:75:7f:89:2b:5f: d7:88:a5:7b:18:37:7a:d0:17:b7:94:26:7c:0a:86:96:de:0d: 9b:e9:98:64:7e:0d:67:61:03:37:9a:ed:f0:f1:2f:4d:7a:8f: f4:c6:3a:ab:3e:d4:b9:d5:86:6e:fc:6a:3e:7c:10:a6:00:87: 11:e1:32:54:7b:3e:08:2c:b8:56:55:8a:67:f0:44:31:fb:21: 4f:47:d9:d7:80:19:30:1d:84:b1:4e:db:3f:bb:21:a8:88:c0: 40:06:3b:d5:e4:97:8e:5a:54:2e:b5:0b:65:db:f3:c4:cd:37: 82:c1:65:98:a6:c0:6b:ac:b7:73:ff:bb:8f:ce:35:52:64:c8: 39:e3:f8:79:7d:86:f2:38:fe:7c:17:0a:f5:da:21:20:c0:70: f6:1c:48:c0:63:49:3d:08:c4:b5:13:cc:e4:73:6b:26:c1:45: 4a:e1:65:c9:55:cc:44:79:77:9f:59:ca:7e:61:af:8d:9e:4f: f1:59:26:36:27:ed:0e:12:4c:b8:72:18:1b:a7:88:ee:5c:ea: 5c:ff:fc:35:28:19:66:1b:86:88:ec:3b:cc:c0:7e:6a:96:b5: 06:f5:64:1d:0a:68:96:74:1c:8d:f9:c0:b4:35:64:42:7f:63: df:a1:1c:d4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULUhB/b2+Ds24CvCb6eD0kBGqFgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxODUyNDlaFw0yNjAzMDUxODU3NDlaMDMxMTAvBgNV BAMTKEJFRTlCMTU2RTBGNTg3QzlCQTA3MzkyODZGNzlBOUZCODVDODBCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPF5apTb9c6kouPBOvXTxIKBw8 GWEiS/76Wge8/Zx8+KryFDm8fCP344VZIaPGssAjO8Ii4Xey+Mv6DjfDI1ygMlo3 jY/BhZdLe6y1fBQJPpEsM3PyauOpRBDj1Nens8mUH2aE7jmH7X+9KlGW0G9eI4dU uIv+0FS77Hz1OERio+FHmBKinRDKwwSFb11CufKNdKSYf2u/zhyNsAFfK4wH8VZj fxqMOiwaY59VqWuN1xfKeapHDS77cC90PvEJxLgMKanjNKrokBKJRfTSuo54Gkh/ 9mIgyIxteAT4t2AkMLU2Rz+WXmeCX26hqABgZShJWu7qNDXoap5hQeI/Hi0hAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+6bFW4PWHyboH OShvean7hcgLwzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnpB YVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25MTG8vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnpB YVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25MTG8vMS9CRUU5 QjE1NkUwRjU4N0M5QkEwNzM5Mjg2Rjc5QTlGQjg1QzgwQkMzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItuIgwDQQCAAIwBwMFACgEY8QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBxGMA0GCSqGSIb3DQEBCwUAA4IBAQAvHZuLwedQ78TEDINx dX+JK1/XiKV7GDd60Be3lCZ8CoaW3g2b6Zhkfg1nYQM3mu3w8S9Neo/0xjqrPtS5 1YZu/Go+fBCmAIcR4TJUez4ILLhWVYpn8EQx+yFPR9nXgBkwHYSxTts/uyGoiMBA BjvV5JeOWlQutQtl2/PEzTeCwWWYpsBrrLdz/7uPzjVSZMg54/h5fYbyOP58Fwr1 2iEgwHD2HEjAY0k9CMS1E8zkc2smwUVK4WXJVcxEeXefWcp+Ya+Nnk/xWSY2J+0O Eky4chgbp4juXOpc//w1KBlmG4aI7DvMwH5qlrUG9WQdCmiWdByN+cC0NWRCf2Pf oRzU -----END CERTIFICATE-----Generated at Fri Apr 4 20:14:45 2025 by rpki-client