$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer File: D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer (raw, json) Hash identifier: 65aYMTuLkETvM0jmVCYtFdFi+LfmDqstE3mC51G+eY0= Subject key identifier: D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 350D8C994FC9C6928208E1135151FA87464A2F1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft caRepository: rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 18:23:53 +0000 Certificate not after: Thu 04 Jun 2026 18:28:53 +0000 Subordinate resources: AS: 264866 IP: 168.205.220.0/22 IP: 2804:2f04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 22:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0d:8c:99:4f:c9:c6:92:82:08:e1:13:51:51:fa:87:46:4a:2f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 5 18:23:53 2025 GMT Not After : Jun 4 18:28:53 2026 GMT Subject: CN=D6B9EE6613E3E32F3534176202CB552DAD0B77CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:39:b2:94:dc:bf:f3:67:6a:d4:34:4d:e2: c4:b4:c0:f9:f3:36:d9:be:19:7e:1b:0c:2b:93:a9: 71:33:29:13:a2:b2:28:b7:17:a0:27:04:4a:81:48: 18:85:b0:18:8f:03:af:2d:7a:3a:6e:7b:46:6f:e1: 57:b4:30:76:b5:25:47:73:e7:5a:e0:5f:d1:81:a8: 72:e0:28:5c:a6:0a:e1:bc:35:5a:00:38:89:b6:83: 7f:f0:30:87:ab:ff:e6:ce:a8:df:9a:01:86:a9:a4: 79:d3:e1:5a:8b:0d:04:4c:84:e7:c9:87:f0:53:20: 63:44:3d:3a:32:53:64:7f:95:dc:89:16:91:a1:70: 71:af:9c:81:d3:ea:64:00:a7:56:be:c3:7e:a3:58: 79:2d:c1:f2:13:85:eb:19:e4:32:8d:ec:0b:36:e6: e6:61:18:8a:60:78:87:03:6c:7a:b5:1e:24:0f:7f: 86:9b:85:3c:12:d7:29:35:ba:d5:03:9b:c2:a9:d7: 52:cf:69:02:87:07:e4:2b:ff:b5:d5:0c:69:9e:82: e4:df:85:58:67:1a:f4:94:3e:cb:8b:0d:e9:2d:c6: f0:57:c9:13:ff:0b:56:8f:e3:66:eb:09:8b:bb:f6: fb:11:d3:98:fb:0f:f6:88:00:a8:6d:e6:ab:ea:06: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.220.0/22 IPv6: 2804:2f04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264866 Signature Algorithm: sha256WithRSAEncryption 64:c9:d3:7d:c1:03:68:59:0b:5b:7f:7c:7c:59:0e:c9:85:55: 96:2d:42:f2:89:19:5e:7e:c7:bc:c9:ab:3d:f6:fa:f5:53:2c: b2:47:19:ae:4f:f0:10:18:13:9d:b2:df:3a:60:75:71:25:dd: 35:6f:f1:9b:4d:e9:ea:09:80:95:0f:94:73:d6:5e:93:bf:76: 31:7d:07:c8:3c:57:47:fd:86:f0:7b:82:b5:3c:fa:48:c1:0e: af:80:2d:1b:ae:30:3b:c3:9b:a0:04:ac:bb:f6:b4:3e:91:ab: 6d:c2:cd:6f:26:f8:fc:35:bf:1c:8e:93:ea:99:c6:a9:2c:8d: 07:a3:fe:79:e2:81:52:64:17:77:a7:86:e1:54:07:0e:27:0d: c6:aa:e2:23:c0:88:6a:01:44:a4:b3:4e:e8:51:78:c4:a4:ab: 8f:4e:33:11:0e:ef:18:3c:84:d2:7d:35:b8:1a:76:8c:87:f6: 34:23:50:9b:8a:72:9c:21:1b:ff:39:3a:1d:59:07:b4:e4:83: 97:7b:40:a5:8c:33:50:f9:34:75:c0:e5:ea:35:35:87:d5:78: 41:58:71:9a:79:da:d2:ad:9b:1c:86:a0:76:49:fe:be:1a:28: a7:a2:df:8b:de:31:1f:2f:a7:6a:ac:8f:03:3b:91:fa:ea:07: b5:99:27:40 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNQ2MmU/JxpKCCOETUVH6h0ZKLx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDUxODIzNTNaFw0yNjA2MDQxODI4NTNaMDMxMTAvBgNV BAMTKEQ2QjlFRTY2MTNFM0UzMkYzNTM0MTc2MjAyQ0I1NTJEQUQwQjc3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsjmylNy/82dq1DRN4sS0wPnz Ntm+GX4bDCuTqXEzKROisii3F6AnBEqBSBiFsBiPA68tejpue0Zv4Ve0MHa1JUdz 51rgX9GBqHLgKFymCuG8NVoAOIm2g3/wMIer/+bOqN+aAYappHnT4VqLDQRMhOfJ h/BTIGNEPToyU2R/ldyJFpGhcHGvnIHT6mQAp1a+w36jWHktwfIThesZ5DKN7As2 5uZhGIpgeIcDbHq1HiQPf4abhTwS1yk1utUDm8Kp11LPaQKHB+Qr/7XVDGmeguTf hVhnGvSUPsuLDektxvBXyRP/C1aP42brCYu79vsR05j7D/aIAKht5qvqBjKTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWue5mE+PjLzU0 F2ICy1UtrQt3yzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDFV TWZUdWJuYmJWbUpteDhDbkhUMm1TcGN2bThQZXBaeXlMeGtVVnd3NEYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gx VU1mVHVibmJiVm1KbXg4Q25IVDJtU3Bjdm04UGVwWnl5THhrVVZ3dzRGLzAvRDZC OUVFNjYxM0UzRTMyRjM1MzQxNzYyMDJDQjU1MkRBRDBCNzdDQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqM3cMA0EAgACMAcDBQAoBC8EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQKojANBgkqhkiG9w0BAQsFAAOCAQEAZMnTfcEDaFkLW398 fFkOyYVVli1C8okZXn7HvMmrPfb69VMsskcZrk/wEBgTnbLfOmB1cSXdNW/xm03p 6gmAlQ+Uc9Zek792MX0HyDxXR/2G8HuCtTz6SMEOr4AtG64wO8OboASsu/a0PpGr bcLNbyb4/DW/HI6T6pnGqSyNB6P+eeKBUmQXd6eG4VQHDicNxqriI8CIagFEpLNO 6FF4xKSrj04zEQ7vGDyE0n01uBp2jIf2NCNQm4pynCEb/zk6HVkHtOSDl3tApYwz UPk0dcDl6jU1h9V4QVhxmnna0q2bHIagdkn+vhoop6Lfi94xHy+naqyPAzuR+uoH tZknQA== -----END CERTIFICATE-----Generated at Sat Jun 7 03:56:30 2025 by rpki-client