$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer File: DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer (raw, json) Hash identifier: 1fBH/FXFFhlY08vhQx2PX5KEtWoH97gK04bHhk0NHDg= Subject key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 118D6D858BD87D18EB274A8890BC01E7E34BA573 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.mft caRepository: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 18:57:41 +0000 Certificate not after: Fri 20 Mar 2026 19:02:41 +0000 Subordinate resources: AS: 273663 IP: 177.8.71.0/24 IP: 200.124.78.0/23 IP: 2804:8a58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:6d:85:8b:d8:7d:18:eb:27:4a:88:90:bc:01:e7:e3:4b:a5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 18:57:41 2025 GMT Not After : Mar 20 19:02:41 2026 GMT Subject: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:1e:29:f9:a1:81:c7:ab:71:39:96:da:5c: 27:c8:83:d0:dd:fe:03:0c:7f:d6:5a:a1:16:51:54: a3:c6:65:c9:47:5d:bb:ce:97:dc:ff:d6:08:46:3c: cd:9b:b5:03:8f:75:74:ae:d3:d0:97:35:f0:73:30: ef:5f:8b:d8:37:29:f6:d2:3d:bb:5f:f3:55:8d:3c: 7d:61:57:98:fa:ed:0f:c0:55:88:b8:b3:60:77:0e: 6b:3d:dd:a3:9e:a1:fb:7e:77:6b:ad:64:72:8a:eb: 4b:91:64:3f:4d:f8:a4:0d:49:7e:d5:52:41:a4:35: 36:f1:2e:8c:1f:9f:a1:d4:5e:40:75:7b:4e:2e:d8: 0e:58:6d:f1:d5:e3:fd:95:ab:01:b1:f1:0f:85:d3: 26:07:ad:ed:81:0b:cd:11:c0:37:3f:6f:3f:76:07: 17:25:13:15:4b:40:b1:66:c6:98:24:9b:f0:81:c0: ff:04:00:83:ea:08:e5:18:3d:d6:56:e3:d4:38:37: 7f:e5:67:da:4e:35:9c:18:18:4a:4d:11:a5:84:b3: 2d:82:b1:94:fb:c5:16:79:04:fd:69:49:9a:e0:92: bb:82:ec:b4:83:f9:12:55:3f:7e:09:89:7a:28:53: d7:b3:01:5e:f0:e9:4e:46:de:dc:f9:34:56:af:3a: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.8.71.0/24 200.124.78.0/23 IPv6: 2804:8a58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273663 Signature Algorithm: sha256WithRSAEncryption 13:3f:2e:67:1e:a3:ea:30:c9:f1:99:0c:cf:fa:b0:e4:1a:85: 1d:ff:d4:fc:19:72:51:14:64:e1:0d:ba:98:f4:6b:4a:f8:2e: e9:40:1c:10:e4:65:e5:f7:e7:6c:40:cc:40:8d:15:c3:09:d0: 46:6a:4b:22:b8:f6:30:d5:62:52:fc:d7:6b:bb:ef:4e:ae:e7: 06:e9:26:14:c4:9b:01:af:a5:02:81:26:00:04:5b:0a:29:d5: 7d:ae:d1:36:40:c2:a3:c3:38:15:f4:ab:7b:fe:01:59:6b:1c: 9e:12:ff:ef:92:0f:b1:fb:25:50:35:63:02:57:1a:a3:2b:6c: 37:90:11:4c:08:c5:b8:53:f7:0b:a4:a9:a4:05:75:bc:30:d6: 3a:bd:8d:0a:e0:ef:20:bb:e9:8e:2f:0d:69:80:98:85:94:0f: e6:4b:48:26:4c:c5:e8:01:a5:41:d5:a7:45:b9:04:60:53:d8: 07:02:23:f3:1c:f6:35:64:26:50:20:e5:fb:27:2d:46:92:64: 9c:92:c7:11:90:45:dd:be:d7:b9:a4:8a:3f:44:c5:d4:96:a8: f6:8b:7f:ca:e4:99:20:1a:d0:be:b2:96:f1:86:84:9d:7f:9d: 5f:50:8e:52:59:4a:f0:81:0c:9a:fc:f2:27:46:f4:e5:82:b9: 1a:bb:47:7d -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUEY1thYvYfRjrJ0qIkLwB5+NLpXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjExODU3NDFaFw0yNjAzMjAxOTAyNDFaMDMxMTAvBgNV BAMTKERCNjQzOUM2NUI3RThBM0U5NUFFODBDMUY0QkNGQ0JGODZDQjZDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqB4p+aGBx6txOZbaXCfIg9Dd /gMMf9ZaoRZRVKPGZclHXbvOl9z/1ghGPM2btQOPdXSu09CXNfBzMO9fi9g3KfbS Pbtf81WNPH1hV5j67Q/AVYi4s2B3Dms93aOeoft+d2utZHKK60uRZD9N+KQNSX7V UkGkNTbxLowfn6HUXkB1e04u2A5YbfHV4/2VqwGx8Q+F0yYHre2BC80RwDc/bz92 BxclExVLQLFmxpgkm/CBwP8EAIPqCOUYPdZW49Q4N3/lZ9pONZwYGEpNEaWEsy2C sZT7xRZ5BP1pSZrgkruC7LSD+RJVP34JiXooU9ezAV7w6U5G3tz5NFavOtVvAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbZDnGW36KPpWu gMH0vPy/hstsUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wL0RCNjQz OUM2NUI3RThBM0U5NUFFODBDMUY0QkNGQ0JGODZDQjZDNTMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEALEIRwMEAch8TjANBAIAAjAHAwUAKASKWDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMELP8wDQYJKoZIhvcNAQELBQADggEBABM/Lmceo+ow yfGZDM/6sOQahR3/1PwZclEUZOENupj0a0r4LulAHBDkZeX352xAzECNFcMJ0EZq SyK49jDVYlL812u7706u5wbpJhTEmwGvpQKBJgAEWwop1X2u0TZAwqPDOBX0q3v+ AVlrHJ4S/++SD7H7JVA1YwJXGqMrbDeQEUwIxbhT9wukqaQFdbww1jq9jQrg7yC7 6Y4vDWmAmIWUD+ZLSCZMxegBpUHVp0W5BGBT2AcCI/Mc9jVkJlAg5fsnLUaSZJyS xxGQRd2+17mkij9ExdSWqPaLf8rkmSAa0L6ylvGGhJ1/nV9QjlJZSvCBDJr88idG 9OWCuRq7R30= -----END CERTIFICATE-----Generated at Sat Apr 5 02:38:50 2025 by rpki-client