$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer (raw, json) Hash identifier: rEaHZOe6jC37QGfNOBaHIqd0ekFcVvdYCDvBpo0Tbzw= Subject key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 460B830DDD14C28581F2D386A75FF0E0C13EAE76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft caRepository: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 21:32:25 +0000 Certificate not after: Thu 26 Mar 2026 21:37:25 +0000 Subordinate resources: AS: 268262 IP: 45.237.24.0/22 IP: 2804:4e74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0b:83:0d:dd:14:c2:85:81:f2:d3:86:a7:5f:f0:e0:c1:3e:ae:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 21:32:25 2025 GMT Not After : Mar 26 21:37:25 2026 GMT Subject: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:92:00:af:00:18:33:81:9a:37:6c:be:2e: 45:dc:0f:06:69:0b:2b:3d:24:9c:5c:3b:14:ba:f0: 95:25:4b:63:2a:05:cd:44:9f:1b:2a:7d:bb:9e:9c: b8:37:c6:2d:00:b7:af:b8:bd:66:85:d6:f2:5d:74: 11:7e:47:8b:fc:b9:89:99:10:38:70:61:31:83:4c: a2:76:89:3a:40:8b:8b:8d:50:1a:1e:1a:14:2e:33: fb:6a:e0:d0:a0:27:f8:53:8c:a8:f2:63:ef:e3:fc: a1:4c:3e:a5:f2:e5:dc:2c:17:c4:05:31:0e:70:84: c5:8b:ac:62:7f:cc:12:16:4f:a2:e0:c6:79:c8:f6: 21:d1:ed:98:2a:dd:3f:df:c1:e6:8d:a6:65:7e:46: 98:38:68:b6:37:43:44:4f:1e:99:96:58:58:77:54: 53:d3:f8:41:9a:79:3d:fb:6b:63:54:4f:67:f3:df: e2:ae:3f:27:b4:b0:0c:fe:f0:2c:f7:a5:10:5c:9e: ae:b4:17:9a:59:77:37:a6:87:88:e2:21:63:8a:aa: 69:37:64:e2:ed:89:67:aa:05:0d:fb:01:92:6a:b9: 11:5a:15:4f:c7:ad:bd:8c:d0:1c:c0:ff:bb:ba:0f: d6:69:68:95:e6:02:3b:5e:9f:89:2f:8a:2e:ae:69: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.24.0/22 IPv6: 2804:4e74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268262 Signature Algorithm: sha256WithRSAEncryption 73:a4:24:7f:34:d3:b3:68:9f:63:4e:a4:b0:87:ba:af:bb:2c: 21:4a:b7:ed:24:b9:2b:84:96:d5:aa:29:a6:10:3e:5d:b3:ed: a1:d8:48:93:f4:fd:73:5f:b4:ad:fd:d8:09:43:c9:f0:da:09: b2:6f:a8:88:a1:5b:8f:92:58:03:f9:d9:fb:69:31:ab:f0:a7: 01:69:f1:b2:8a:d5:ee:1c:ca:b5:75:d7:e4:9e:bb:06:a8:18: 59:31:9a:cd:91:c1:02:61:aa:e5:f9:01:9d:0e:1d:e3:17:5a: 4b:0b:ab:58:9b:77:df:e9:18:86:74:4b:5b:73:30:17:d0:51: 94:a5:b5:7f:33:aa:83:1d:26:4d:8c:d4:e9:8f:fa:9a:24:37: a6:7c:34:a4:ff:7a:05:fb:63:80:89:8c:92:7a:f1:17:1c:7e: 8d:04:54:ea:78:74:2a:8f:e4:45:8d:21:61:63:5d:d7:40:ce: 85:dc:a9:84:c4:3c:0e:c2:98:ce:d0:7b:97:bb:7c:cc:6c:32: ba:18:3e:a6:b3:c0:63:6c:5d:22:13:45:4d:b4:6f:5b:b9:c1: 80:33:f8:85:7a:8b:94:1a:27:bf:4f:3d:75:46:b2:9f:9e:a2: 82:c2:73:16:ca:1c:e9:98:b8:c4:c3:8e:db:70:11:f1:7e:b4: 81:c5:26:49 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURguDDd0UwoWB8tOGp1/w4ME+rnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcyMTMyMjVaFw0yNjAzMjYyMTM3MjVaMDMxMTAvBgNV BAMTKERGQkJFNTNBQTQwQUNCNDVFRDc2REFDMEU2RjgzM0IyOEJFRDhBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ipIArwAYM4GaN2y+LkXcDwZp Cys9JJxcOxS68JUlS2MqBc1EnxsqfbuenLg3xi0At6+4vWaF1vJddBF+R4v8uYmZ EDhwYTGDTKJ2iTpAi4uNUBoeGhQuM/tq4NCgJ/hTjKjyY+/j/KFMPqXy5dwsF8QF MQ5whMWLrGJ/zBIWT6LgxnnI9iHR7Zgq3T/fweaNpmV+Rpg4aLY3Q0RPHpmWWFh3 VFPT+EGaeT37a2NUT2fz3+KuPye0sAz+8Cz3pRBcnq60F5pZdzemh4jiIWOKqmk3 ZOLtiWeqBQ37AZJquRFaFU/Hrb2M0BzA/7u6D9ZpaJXmAjten4kvii6uaXptAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfu+U6pArLRe12 2sDm+DOyi+2KaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3RY aE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N0 WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAvREZC QkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4QkVEOEE2OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe0YMA0EAgACMAcDBQAoBE50MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX5jANBgkqhkiG9w0BAQsFAAOCAQEAc6QkfzTTs2ifY06k sIe6r7ssIUq37SS5K4SW1aopphA+XbPtodhIk/T9c1+0rf3YCUPJ8NoJsm+oiKFb j5JYA/nZ+2kxq/CnAWnxsorV7hzKtXXX5J67BqgYWTGazZHBAmGq5fkBnQ4d4xda SwurWJt33+kYhnRLW3MwF9BRlKW1fzOqgx0mTYzU6Y/6miQ3pnw0pP96BftjgImM knrxFxx+jQRU6nh0Ko/kRY0hYWNd10DOhdyphMQ8DsKYztB7l7t8zGwyuhg+prPA Y2xdIhNFTbRvW7nBgDP4hXqLlBonv089dUayn56igsJzFsoc6Zi4xMOO23AR8X60 gcUmSQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:47 2025 by rpki-client