$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer File: C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer (raw, json) Hash identifier: pgVPmlIYhZWXwFnzZTYvXtp/G1yVSxZ4gCkQQALTTyc= Subject key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F75F4456B46BB7B3CB20146400A7BC693FEB576 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft caRepository: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 19:45:11 +0000 Certificate not after: Fri 06 Mar 2026 19:50:11 +0000 Subordinate resources: AS: 262589 IP: 177.84.160.0/21 IP: 177.136.80.0/22 IP: 186.219.0.0 -- 186.219.47.255 IP: 187.108.128.0/18 IP: 189.36.160.0/19 IP: 189.51.224.0/19 IP: 189.91.96.0/19 IP: 189.127.64.0/18 IP: 200.220.192.0/19 IP: 201.23.192.0/19 IP: 201.33.176.0/20 IP: 201.87.208.0/20 IP: 2804:3f8::/32 IP: 2804:680::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:f4:45:6b:46:bb:7b:3c:b2:01:46:40:0a:7b:c6:93:fe:b5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 19:45:11 2025 GMT Not After : Mar 6 19:50:11 2026 GMT Subject: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:99:2f:7e:f9:4c:13:e7:e3:90:89:f8:0b:96: a8:09:50:6b:0c:f9:aa:ea:d1:4c:b8:78:80:49:b0: f5:e0:d5:51:4e:7f:77:f2:71:7c:b2:8e:36:f4:6f: 89:7d:23:3c:68:32:d1:89:c7:9d:fc:c3:56:cc:e6: 52:1e:a7:e4:b7:67:0d:8c:98:67:2a:13:da:4e:a9: b1:58:73:a8:64:aa:01:1e:59:00:77:6f:82:41:61: 2c:6a:f0:1a:47:28:09:11:20:52:08:33:eb:72:71: 17:14:b9:13:54:e3:bc:f6:6b:1d:7a:ea:fb:28:1e: cb:16:0a:62:8a:2e:af:4f:11:58:4d:5a:52:86:f1: 31:81:7a:d1:b4:77:68:a4:b7:60:af:2b:f8:08:a7: 4b:bc:a0:db:74:80:55:ca:4c:ab:32:9f:af:26:aa: d7:b0:0f:09:27:e2:bb:9c:6c:e7:8b:f8:10:1e:3f: da:d4:b0:13:4d:a4:ed:9a:85:8b:7c:7e:dd:4d:4a: 97:cf:75:ae:1e:e0:be:33:71:8b:8f:b4:ee:67:3c: 2a:00:0a:bb:8e:af:7d:6d:a0:c6:56:31:ad:91:45: 7f:9e:e3:dd:ac:40:9c:0e:bf:92:e3:d3:4f:30:b1: 1d:0e:fd:a9:b7:05:9a:11:32:74:9a:cf:a3:6d:72: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.84.160.0/21 177.136.80.0/22 186.219.0.0-186.219.47.255 187.108.128.0/18 189.36.160.0/19 189.51.224.0/19 189.91.96.0/19 189.127.64.0/18 200.220.192.0/19 201.23.192.0/19 201.33.176.0/20 201.87.208.0/20 IPv6: 2804:3f8::/32 2804:680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262589 Signature Algorithm: sha256WithRSAEncryption 00:b1:76:91:6b:f4:4f:1e:34:92:17:4b:84:b3:61:be:85:06: 78:f5:3a:c6:d4:f6:49:41:a0:3d:11:20:7b:94:14:5c:ee:0c: c5:a3:ac:e1:15:2c:68:d7:e2:db:fe:62:77:9b:c3:84:62:a0: 14:d5:a9:de:07:b5:80:3d:58:ff:f2:c0:aa:d1:4b:83:49:82: a6:e4:4b:d2:8c:26:bb:51:3e:9f:7d:9b:cb:e2:9b:66:39:90: ee:8d:b0:05:12:76:0d:4c:51:2a:61:89:1d:cb:20:8b:8f:a4: 6e:d9:40:40:3e:f4:3e:52:63:9a:2c:d6:a7:a4:ba:b5:71:ee: 1c:6d:d5:05:de:6d:94:78:17:36:f1:ee:e8:bb:63:dd:e8:db: 43:da:b7:b0:ab:b0:e4:4e:9d:33:48:4f:8e:87:6a:20:c0:80: 9a:cb:d5:f9:27:73:cf:18:51:b6:fd:db:83:db:1f:ea:1b:3e: d0:b4:d7:f5:49:bf:d3:76:e1:3e:87:00:48:1a:c3:63:64:5c: 4b:7b:7e:cd:f3:18:d6:62:45:f5:97:43:b8:1d:ef:9c:3d:da: f5:34:1a:61:91:54:bd:01:8a:f4:58:b5:2e:f2:dc:b1:45:66: b8:5d:db:71:6f:23:d4:5e:83:9c:ee:9f:a1:cf:c8:78:d0:8b: fb:ad:3a:bd -----BEGIN CERTIFICATE----- MIIGgDCCBWigAwIBAgIUb3X0RWtGu3s8sgFGQAp7xpP+tXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxOTQ1MTFaFw0yNjAzMDYxOTUwMTFaMDMxMTAvBgNV BAMTKEM2OTNFOTYzOThDREE1RjVBNEUyNDJBM0ZEMDlCMTNFOEFFRDc2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymS9++UwT5+OQifgLlqgJUGsM +arq0Uy4eIBJsPXg1VFOf3fycXyyjjb0b4l9IzxoMtGJx538w1bM5lIep+S3Zw2M mGcqE9pOqbFYc6hkqgEeWQB3b4JBYSxq8BpHKAkRIFIIM+tycRcUuRNU47z2ax16 6vsoHssWCmKKLq9PEVhNWlKG8TGBetG0d2ikt2CvK/gIp0u8oNt0gFXKTKsyn68m qtewDwkn4rucbOeL+BAeP9rUsBNNpO2ahYt8ft1NSpfPda4e4L4zcYuPtO5nPCoA CruOr31toMZWMa2RRX+e492sQJwOv5Lj008wsR0O/am3BZoRMnSaz6NtcmEjAgMB AAGjggOKMIIDhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGk+ljmM2l9aTi QqP9CbE+iu12lzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTJO dXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZVbXcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Uy TnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzAvQzY5 M0U5NjM5OENEQTVGNUE0RTI0MkEzRkQwOUIxM0U4QUVENzY5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEH AQH/BG8wbTBVBAIAATBPAwQDsVSgAwQCsYhQMAsDAwC62wMEBLrbIAMEBrtsgAME Bb0koAMEBb0z4AMEBb1bYAMEBr1/QAMEBcjcwAMEBckXwAMEBMkhsAMEBMlX0DAU BAIAAjAOAwUAKAQD+AMFACgEBoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAG9 MA0GCSqGSIb3DQEBCwUAA4IBAQAAsXaRa/RPHjSSF0uEs2G+hQZ49TrG1PZJQaA9 ESB7lBRc7gzFo6zhFSxo1+Lb/mJ3m8OEYqAU1aneB7WAPVj/8sCq0UuDSYKm5EvS jCa7UT6ffZvL4ptmOZDujbAFEnYNTFEqYYkdyyCLj6Ru2UBAPvQ+UmOaLNanpLq1 ce4cbdUF3m2UeBc28e7ou2Pd6NtD2rewq7DkTp0zSE+Oh2ogwICay9X5J3PPGFG2 /duD2x/qGz7QtNf1Sb/TduE+hwBIGsNjZFxLe37N8xjWYkX1l0O4He+cPdr1NBph kVS9AYr0WLUu8tyxRWa4XdtxbyPUXoOc7p+hz8h40Iv7rTq9 -----END CERTIFICATE-----Generated at Fri Apr 4 16:45:20 2025 by rpki-client