$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer File: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer (raw, json) Hash identifier: XvdiSGPOhiz81QQ0Y16pBwAxfVgqIbwUhdKI+p+Xl+4= Subject key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 747EE7053CEC045E10823F5015B1BFC5B3D17047 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft caRepository: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:58 +0000 Certificate not after: Wed 04 Mar 2026 18:40:58 +0000 Subordinate resources: AS: 267470 IP: 192.141.72.0/22 IP: 2804:41fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7e:e7:05:3c:ec:04:5e:10:82:3f:50:15:b1:bf:c5:b3:d1:70:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:58 2025 GMT Not After : Mar 4 18:40:58 2026 GMT Subject: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:b4:78:b9:d6:3a:9d:9f:cf:94:2f:fc:a7: 3c:9d:9a:bb:1a:b1:3a:51:4d:e2:c9:df:3c:f8:c4: 3c:90:e6:92:4f:78:41:a6:76:e9:4a:46:3b:ab:2a: b2:9e:60:d6:52:d1:76:8c:c1:03:89:15:01:00:da: fd:92:0e:96:3f:75:29:fc:ae:bc:3c:b4:28:30:2d: 9f:21:e0:96:a3:76:df:5b:9a:d4:6c:3c:c0:af:6d: f1:15:99:a3:96:b9:05:80:cb:02:7a:84:f3:3b:b9: f0:ca:67:af:5a:19:53:9b:6e:76:ea:66:f9:7d:89: ae:81:5d:83:5a:d1:9f:81:7a:16:7f:21:52:51:55: d0:2c:3f:0f:d8:a8:85:57:a1:01:33:66:58:27:f6: 8e:28:8c:83:97:ee:e9:17:0c:fa:e9:c6:33:3f:9e: 4f:49:94:00:e2:dd:36:a8:50:55:b0:ba:65:86:23: a5:d5:16:65:ea:0c:30:47:c4:56:6d:f7:77:35:83: 2b:c8:e7:e6:8b:83:73:99:e9:df:4a:7a:3f:d7:35: 50:b5:ca:06:79:73:33:b9:18:af:72:4d:1b:5f:c1: f3:d0:19:c9:3c:89:fb:b5:ee:37:5f:0b:a2:e7:1a: 69:74:e1:4f:2b:02:45:d0:e5:f5:44:91:64:67:ac: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.72.0/22 IPv6: 2804:41fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267470 Signature Algorithm: sha256WithRSAEncryption 0b:2b:c0:e8:45:61:c4:23:38:b2:9c:99:c6:64:ea:01:08:98: 2e:f9:bd:5a:80:2a:80:b2:5d:a9:b0:79:b7:4a:bc:96:1e:c3: d2:9b:36:4a:d3:e8:d0:3a:99:8a:b7:7f:fa:29:9f:77:c4:d6: 42:8e:69:ba:3b:b2:81:a2:0c:2e:ad:39:05:be:fc:a4:5d:7a: 41:7f:16:7e:d3:03:ce:45:7e:ee:d8:90:1d:2b:1b:95:da:0b: 32:ce:d6:22:ff:8d:ed:74:c2:82:e6:e2:d8:52:f5:05:13:58: 5a:b1:d0:d5:ad:8c:c1:58:ae:f2:53:b1:98:a4:13:55:17:e0: 49:bd:bf:13:05:46:44:d3:99:7e:6c:88:57:ca:db:bb:06:c9: ef:a1:5a:03:e3:dc:e0:42:d5:fe:51:be:92:c2:c3:65:31:ee: f0:3b:94:17:f8:90:2f:58:d1:6a:5f:2f:dc:3c:2d:7c:c7:42: e1:cd:a0:ee:86:ed:4f:7d:37:0f:57:95:58:99:b4:36:9d:13: 16:da:90:90:7e:91:a9:1d:29:53:5e:ae:48:2c:78:c4:d9:10: 3b:b5:e1:cd:57:e5:5d:7f:b0:d6:b8:58:a6:27:e1:14:1e:a9: 22:57:35:df:6c:0b:5e:cd:95:c1:e3:16:37:27:a8:50:97:76: bd:e8:fb:ae -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdH7nBTzsBF4Qgj9QFbG/xbPRcEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NThaFw0yNjAzMDQxODQwNThaMDMxMTAvBgNV BAMTKEJGRDU2NTEyQzg1ODBEMEU2RDJGRDA1RjVEMTNDMzcxNEI0NUFBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLLR4udY6nZ/PlC/8pzydmrsa sTpRTeLJ3zz4xDyQ5pJPeEGmdulKRjurKrKeYNZS0XaMwQOJFQEA2v2SDpY/dSn8 rrw8tCgwLZ8h4Jajdt9bmtRsPMCvbfEVmaOWuQWAywJ6hPM7ufDKZ69aGVObbnbq Zvl9ia6BXYNa0Z+BehZ/IVJRVdAsPw/YqIVXoQEzZlgn9o4ojIOX7ukXDPrpxjM/ nk9JlADi3TaoUFWwumWGI6XVFmXqDDBHxFZt93c1gyvI5+aLg3OZ6d9Kej/XNVC1 ygZ5czO5GK9yTRtfwfPQGck8ifu17jdfC6LnGml04U8rAkXQ5fVEkWRnrCTnAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/1WUSyFgNDm0v 0F9dE8NxS0Wq6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzRM S1VWcDZpMzFxNEZSR2hBeGY3amFjOWMxZHI4SG1kR1dOZXdKWVVuOG4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzRM S1VWcDZpMzFxNEZSR2hBeGY3amFjOWMxZHI4SG1kR1dOZXdKWVVuOG4vMS9CRkQ1 NjUxMkM4NTgwRDBFNkQyRkQwNUY1RDEzQzM3MTRCNDVBQUVBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALAjUgwDQQCAAIwBwMFACgEQfwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBTOMA0GCSqGSIb3DQEBCwUAA4IBAQALK8DoRWHEIziynJnG ZOoBCJgu+b1agCqAsl2psHm3SryWHsPSmzZK0+jQOpmKt3/6KZ93xNZCjmm6O7KB ogwurTkFvvykXXpBfxZ+0wPORX7u2JAdKxuV2gsyztYi/43tdMKC5uLYUvUFE1ha sdDVrYzBWK7yU7GYpBNVF+BJvb8TBUZE05l+bIhXytu7BsnvoVoD49zgQtX+Ub6S wsNlMe7wO5QX+JAvWNFqXy/cPC18x0LhzaDuhu1PfTcPV5VYmbQ2nRMW2pCQfpGp HSlTXq5ILHjE2RA7teHNV+Vdf7DWuFimJ+EUHqkiVzXfbAtezZXB4xY3J6hQl3a9 6Puu -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:20 2025 by rpki-client