$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF89EDA5B266281791C7B4E6530567E41282E06E.cer File: CF89EDA5B266281791C7B4E6530567E41282E06E.cer (raw, json) Hash identifier: bcPYrIshA2hmJQzG7WDMWX+FY/XPxqQeYxzMtdcpXmo= Subject key identifier: CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FA1A8DB47865B24DA5F9C9A5167CFE28ADA65AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft caRepository: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 12:39:48 +0000 Certificate not after: Fri 05 Jun 2026 12:44:48 +0000 Subordinate resources: AS: 272724 IP: 177.55.92.0/23 IP: 2804:87a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 06:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a1:a8:db:47:86:5b:24:da:5f:9c:9a:51:67:cf:e2:8a:da:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 6 12:39:48 2025 GMT Not After : Jun 5 12:44:48 2026 GMT Subject: CN=CF89EDA5B266281791C7B4E6530567E41282E06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:61:80:32:37:b6:2c:fa:bf:3e:c2:a0:85: b6:7a:39:bf:e1:68:30:57:cf:0f:ee:55:aa:54:68: cd:90:4c:0c:63:6c:80:9a:47:f0:0c:af:a2:1e:24: 39:ff:e5:fa:f0:d7:90:13:18:20:35:df:4d:6a:87: 02:be:2b:28:03:4d:05:ae:c6:b9:48:b4:00:73:46: f0:18:4d:25:fd:38:2a:f2:4d:ac:13:7f:44:84:5b: 87:41:e6:9e:94:b1:c5:20:66:45:7a:ad:cb:69:5d: 48:43:f9:d1:39:11:b1:42:aa:22:00:98:de:b6:c0: f8:30:45:de:72:11:c2:93:fb:e4:4d:15:8e:18:d0: 2b:52:b0:80:51:ee:dd:ef:0b:72:06:ec:d3:1f:a4: 1b:66:d5:86:e7:54:37:54:65:c9:af:43:7d:43:bd: af:36:a0:73:bc:94:1b:fd:e9:39:dd:37:1c:63:94: ac:0f:66:ab:86:36:ab:bc:17:18:97:2e:a0:f7:44: a9:46:69:22:3d:a9:83:84:28:23:c9:8e:af:c6:a3: 7c:25:4b:db:8d:c2:61:4e:7f:a5:24:4d:61:d2:df: 1b:0e:90:bb:8b:0d:bd:d6:1b:7a:d9:49:fa:42:73: c6:7f:25:fa:11:0f:67:7e:7c:1a:89:b8:d0:d6:9a: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.55.92.0/23 IPv6: 2804:87a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272724 Signature Algorithm: sha256WithRSAEncryption 9b:3a:93:53:7d:e2:52:87:b0:88:ef:5f:9d:78:92:2e:09:88: d7:d6:04:9c:35:78:48:82:7d:05:79:fb:3b:cf:25:f6:fb:17: 1b:c6:3a:fa:c8:e7:89:8d:9a:a7:a3:41:19:d6:86:5a:ee:8b: f2:a8:9a:f3:21:c6:f5:38:6b:12:00:b5:a9:2a:31:97:ee:cc: 91:0c:b7:44:86:54:4a:a6:15:9f:07:e6:7c:d7:7d:58:38:68: 82:b1:60:18:d8:f9:e8:8f:bc:74:2a:8c:eb:68:bc:5c:d4:87: d3:b3:15:df:d4:84:50:6c:72:89:e6:7d:4b:f5:be:c8:12:4e: 93:e9:f9:c2:36:a2:4a:07:c6:3b:0b:68:fa:69:6f:d2:2e:d1: ab:a3:3b:77:e7:b4:cc:68:7b:17:f3:47:22:30:5b:05:18:15: 7c:cf:71:8d:e9:a6:e1:e4:22:21:f9:bc:a6:bc:62:28:2d:92: 0b:d2:7e:f8:c0:8e:3f:80:5a:d9:25:4a:6f:37:0f:48:ca:d8: 8f:22:b2:f9:c2:e8:d2:14:72:2f:6f:76:e3:e3:a0:3f:df:dc: 02:70:3a:f5:51:29:de:93:d8:21:f7:7b:a5:af:de:eb:76:d7: d7:ea:49:0d:8e:cf:f4:b1:19:3d:fc:72:4e:15:0a:d8:92:f7: 63:ec:9f:65 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUP6Go20eGWyTaX5yaUWfP4oraZaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDYxMjM5NDhaFw0yNjA2MDUxMjQ0NDhaMDMxMTAvBgNV BAMTKENGODlFREE1QjI2NjI4MTc5MUM3QjRFNjUzMDU2N0U0MTI4MkUwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIimGAMje2LPq/PsKghbZ6Ob/h aDBXzw/uVapUaM2QTAxjbICaR/AMr6IeJDn/5frw15ATGCA1301qhwK+KygDTQWu xrlItABzRvAYTSX9OCryTawTf0SEW4dB5p6UscUgZkV6rctpXUhD+dE5EbFCqiIA mN62wPgwRd5yEcKT++RNFY4Y0CtSsIBR7t3vC3IG7NMfpBtm1YbnVDdUZcmvQ31D va82oHO8lBv96TndNxxjlKwPZquGNqu8FxiXLqD3RKlGaSI9qYOEKCPJjq/Go3wl S9uNwmFOf6UkTWHS3xsOkLuLDb3WG3rZSfpCc8Z/JfoRD2d+fBqJuNDWmuN9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPie2lsmYoF5HH tOZTBWfkEoLgbjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMllq Nnd0VVloYVlZM0RwMUthUUNleHB1OG1wMzZyc012eVRxZ3kxbzZ1TmkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJZ ajZ3dFVZaGFZWTNEcDFLYVFDZXhwdThtcDM2cnNNdnlUcWd5MW82dU5pLzAvQ0Y4 OUVEQTVCMjY2MjgxNzkxQzdCNEU2NTMwNTY3RTQxMjgyRTA2RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBsTdcMA0EAgACMAcDBQAoBIeoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQpVDANBgkqhkiG9w0BAQsFAAOCAQEAmzqTU33iUoewiO9f nXiSLgmI19YEnDV4SIJ9BXn7O88l9vsXG8Y6+sjniY2ap6NBGdaGWu6L8qia8yHG 9ThrEgC1qSoxl+7MkQy3RIZUSqYVnwfmfNd9WDhogrFgGNj56I+8dCqM62i8XNSH 07MV39SEUGxyieZ9S/W+yBJOk+n5wjaiSgfGOwto+mlv0i7Rq6M7d+e0zGh7F/NH IjBbBRgVfM9xjemm4eQiIfm8prxiKC2SC9J++MCOP4Ba2SVKbzcPSMrYjyKy+cLo 0hRyL2924+OgP9/cAnA69VEp3pPYIfd7pa/e63bX1+pJDY7P9LEZPfxyThUK2JL3 Y+yfZQ== -----END CERTIFICATE-----Generated at Fri Jun 13 10:44:08 2025 by rpki-client