$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer File: C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer (raw, json) Hash identifier: +VDlFbG43ZupgPSsJRQTq+7JrVHY0ORtlKMtkMPWrZc= Subject key identifier: C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E6213575235CE2EC2413C3253329009FF9697CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft caRepository: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 15:49:55 +0000 Certificate not after: Wed 03 Jun 2026 15:54:55 +0000 Subordinate resources: AS: 272245 IP: 2804:8430::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:62:13:57:52:35:ce:2e:c2:41:3c:32:53:32:90:09:ff:96:97:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 15:49:55 2025 GMT Not After : Jun 3 15:54:55 2026 GMT Subject: CN=C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:d8:b4:80:3a:da:22:c6:36:f7:43:06:a7: c7:22:db:89:43:06:9c:48:dd:28:bb:ae:eb:c2:8c: 87:4f:f3:6a:b7:31:38:0d:95:9c:e1:a2:ae:42:9c: 33:37:b6:c6:4c:d0:af:d9:43:43:3a:07:7e:95:77: b6:23:65:47:1f:cd:d0:c1:e9:67:5d:c7:c2:42:d4: ca:1a:bc:a1:1f:9a:d6:e9:d3:59:ee:86:25:44:f8: c3:94:90:ab:92:c6:bf:a5:41:4b:92:f9:34:52:58: 98:e4:30:72:a5:22:99:ed:e1:e0:50:87:bb:39:86: 1a:68:19:44:f2:2f:da:53:de:9c:26:14:dd:4d:04: df:d2:b2:7b:38:33:d7:a6:1a:de:24:3c:f6:6e:25: 06:1a:fb:fe:d8:17:51:f0:c8:2f:d9:03:55:43:6f: b7:26:41:fd:94:cf:21:79:10:67:ad:64:e3:37:61: a9:8d:92:fe:53:d6:19:26:8f:8a:5f:04:17:8d:ac: 6b:41:74:c5:5d:c2:38:d3:5c:03:de:be:7b:62:54: 10:d3:65:94:11:ca:04:d5:5c:26:e1:5e:52:d5:21: bb:e1:5e:84:cd:72:58:c5:b1:a5:81:f8:9b:5e:78: 53:c5:4f:ba:9f:0a:db:3f:47:f3:66:c3:29:c4:ac: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272245 Signature Algorithm: sha256WithRSAEncryption ba:1e:12:d8:fd:01:2f:32:74:2e:8c:d7:ca:63:d6:ad:e8:20: 96:10:54:f2:68:78:60:52:3b:09:b9:02:b1:31:3c:db:a1:09: 67:39:e6:41:34:c8:c1:46:f0:41:ca:e2:5d:64:98:17:24:64: 68:e4:e0:9f:1f:4e:a6:97:d7:22:4d:c5:d8:c8:bf:d1:78:f4: 39:7f:1c:0e:5d:8e:9e:89:5d:4c:80:ab:19:f7:15:51:13:a9: 5f:3e:69:d9:7a:c1:4b:6b:aa:1a:02:1c:c4:0d:01:f5:aa:6f: 20:08:80:b4:94:17:84:c1:84:b9:a5:86:c2:12:8d:14:09:54: 84:68:51:d3:3d:c7:47:13:a7:bc:7e:24:c5:ef:7d:ce:f5:34: 05:59:36:40:b3:ab:54:4f:af:4f:34:4b:cb:2e:d6:da:60:33: 96:09:2f:7d:d8:2e:6c:44:ff:f2:70:a7:96:d0:80:3a:c7:69: 5f:2e:3f:f1:13:c6:c3:a1:eb:07:8e:a8:96:8e:03:ed:b7:3d: 3f:66:d1:4f:45:f1:32:45:eb:e1:4e:88:e7:30:8d:5b:53:d5: da:a3:5b:7b:7b:2c:74:bc:01:18:0b:8f:af:08:c9:f4:67:c9: 43:45:fc:3d:22:08:40:1d:17:63:22:24:6e:dd:48:21:41:4f: f1:9f:18:d6 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIULmITV1I1zi7CQTwyUzKQCf+Wl8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQxNTQ5NTVaFw0yNjA2MDMxNTU0NTVaMDMxMTAvBgNV BAMTKEM0QkYwRTRCQTNBNjQxRjYxQzNFOThEQjdCMkQzNjE2MTJBQkU2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Eti0gDraIsY290MGp8ci24lD BpxI3Si7ruvCjIdP82q3MTgNlZzhoq5CnDM3tsZM0K/ZQ0M6B36Vd7YjZUcfzdDB 6Wddx8JC1MoavKEfmtbp01nuhiVE+MOUkKuSxr+lQUuS+TRSWJjkMHKlIpnt4eBQ h7s5hhpoGUTyL9pT3pwmFN1NBN/Ssns4M9emGt4kPPZuJQYa+/7YF1HwyC/ZA1VD b7cmQf2UzyF5EGetZOM3YamNkv5T1hkmj4pfBBeNrGtBdMVdwjjTXAPevntiVBDT ZZQRygTVXCbhXlLVIbvhXoTNcljFsaWB+JteeFPFT7qfCts/R/NmwynErGXvAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEvw5Lo6ZB9hw+ mNt7LTYWEqvmoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmQ4 Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQZnAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jk OGd3QWFuM0xmS1VoTEJOcGFBeERrR0ZHZVdyeFVkTGN0bkp3ZVZIUGZwLzAvQzRC RjBFNEJBM0E2NDFGNjFDM0U5OERCN0IyRDM2MTYxMkFCRTZBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASEMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME J3UwDQYJKoZIhvcNAQELBQADggEBALoeEtj9AS8ydC6M18pj1q3oIJYQVPJoeGBS Owm5ArExPNuhCWc55kE0yMFG8EHK4l1kmBckZGjk4J8fTqaX1yJNxdjIv9F49Dl/ HA5djp6JXUyAqxn3FVETqV8+adl6wUtrqhoCHMQNAfWqbyAIgLSUF4TBhLmlhsIS jRQJVIRoUdM9x0cTp7x+JMXvfc71NAVZNkCzq1RPr080S8su1tpgM5YJL33YLmxE //Jwp5bQgDrHaV8uP/ETxsOh6weOqJaOA+23PT9m0U9F8TJF6+FOiOcwjVtT1dqj W3t7LHS8ARgLj68IyfRnyUNF/D0iCEAdF2MiJG7dSCFBT/GfGNY= -----END CERTIFICATE-----Generated at Wed Jun 11 04:28:10 2025 by rpki-client