$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer File: F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer (raw, json) Hash identifier: uK4ZLlVl3/dfNSKm0PeFfxUX6trR5h/TpTR9OzBjN3s= Subject key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A36140593D0B3F64C62942585D8BE712A9B5927 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 22 May 2025 12:17:35 +0000 Certificate not after: Thu 21 May 2026 12:22:35 +0000 Subordinate resources: AS: 28220 IP: 45.4.64.0/22 IP: 131.108.228.0/22 IP: 138.0.100.0/22 IP: 138.255.216.0/22 IP: 168.121.148.0/22 IP: 168.227.108.0/22 IP: 168.228.68.0/22 IP: 170.82.92.0/22 IP: 170.82.132.0/22 IP: 177.8.48.0/21 IP: 177.55.48.0/20 IP: 177.89.0.0/16 IP: 177.137.192.0/20 IP: 179.96.192.0/21 IP: 179.96.240.0/20 IP: 179.190.128.0/17 IP: 186.192.16.0/20 IP: 186.193.96.0/20 IP: 186.208.208.0/21 IP: 186.235.0.0/20 IP: 186.236.192.0/19 IP: 186.251.112.0/21 IP: 187.49.192.0/20 IP: 187.60.64.0/19 IP: 187.61.128.0/17 IP: 187.73.192.0/19 IP: 187.86.96.0/20 IP: 187.87.112.0/20 IP: 187.108.64.0/20 IP: 187.109.176.0/20 IP: 187.111.224.0/19 IP: 189.45.16.0/20 IP: 189.124.128.0/17 IP: 191.241.40.0/21 IP: 200.233.80.0/20 IP: 201.148.188.0/22 IP: 2804:54::/32 IP: 2804:a3c::/32 IP: 2804:fec::/32 IP: 2804:1d2c::/32 IP: 2804:2140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:36:14:05:93:d0:b3:f6:4c:62:94:25:85:d8:be:71:2a:9b:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 22 12:17:35 2025 GMT Not After : May 21 12:22:35 2026 GMT Subject: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:4b:65:a4:26:52:9a:2d:35:b3:54:9f:6a: 85:43:48:d3:62:10:e7:cd:61:23:e5:4b:d0:e5:9f: 0a:06:7b:ca:66:7c:b2:0b:38:3e:a9:4b:c2:2e:b6: a8:30:d6:33:97:e1:b0:0c:f2:4f:b7:08:cb:17:2b: 70:53:76:3c:20:dc:5c:17:22:02:e7:b5:ce:cd:af: c9:37:6f:d7:21:07:9e:6e:4e:e8:c7:ca:b7:8b:d9: 4c:0d:fc:bf:b6:1e:2a:fe:a1:81:56:9e:e6:bf:45: 04:c1:31:b3:8e:7e:05:8b:bc:91:31:c1:10:59:77: 32:44:b6:96:0c:b5:97:cd:53:4a:92:9d:76:b8:93: 85:0c:af:b3:85:cd:3b:00:d5:a8:68:4f:e2:40:5e: ce:f4:bb:be:05:7a:c9:20:0e:aa:a8:ff:b1:75:57: 0c:72:3f:7c:84:c9:7a:34:20:a6:27:00:4b:18:cd: 7a:20:da:6d:f0:47:89:97:0b:30:70:de:cb:5e:a0: dd:25:16:10:c0:a3:a7:7e:e4:5c:2a:60:b6:9e:19: 3b:c7:b8:48:ce:58:af:45:78:ed:49:9d:12:46:d5: 1f:6d:18:c8:50:c7:b7:4c:c9:a4:3e:6c:cf:b6:e0: 89:7a:88:92:3f:ad:12:d5:e9:fa:1a:62:3d:3e:3f: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.64.0/22 131.108.228.0/22 138.0.100.0/22 138.255.216.0/22 168.121.148.0/22 168.227.108.0/22 168.228.68.0/22 170.82.92.0/22 170.82.132.0/22 177.8.48.0/21 177.55.48.0/20 177.89.0.0/16 177.137.192.0/20 179.96.192.0/21 179.96.240.0/20 179.190.128.0/17 186.192.16.0/20 186.193.96.0/20 186.208.208.0/21 186.235.0.0/20 186.236.192.0/19 186.251.112.0/21 187.49.192.0/20 187.60.64.0/19 187.61.128.0/17 187.73.192.0/19 187.86.96.0/20 187.87.112.0/20 187.108.64.0/20 187.109.176.0/20 187.111.224.0/19 189.45.16.0/20 189.124.128.0/17 191.241.40.0/21 200.233.80.0/20 201.148.188.0/22 IPv6: 2804:54::/32 2804:a3c::/32 2804:fec::/32 2804:1d2c::/32 2804:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28220 Signature Algorithm: sha256WithRSAEncryption c4:55:10:57:e9:39:49:cb:90:7e:fa:ae:54:aa:97:b0:17:8f: 8d:19:8c:57:f2:85:47:0d:8e:1a:31:e5:63:58:ec:44:83:ef: 52:af:6e:e5:66:d4:96:8c:2a:81:10:35:af:dc:00:37:75:a1: 10:71:3d:89:92:02:06:fa:82:62:3b:54:25:3b:88:e3:9f:50: 8a:1a:18:57:3d:b6:0c:bf:0f:10:7b:62:c2:54:ff:34:94:5b: c8:2b:b5:c3:10:00:f8:2c:49:66:35:bd:2c:0c:14:22:dc:b8: 59:9b:f1:79:2b:b7:90:2c:70:d0:56:8b:58:86:48:72:d2:15: c6:8f:1e:fa:26:32:33:a3:ce:b4:22:14:c3:88:e8:76:6c:a1: 07:f9:d7:49:2a:10:b2:de:f8:bc:20:37:d5:8d:14:21:59:be: 93:2d:39:dd:3a:53:21:6a:b2:42:b7:55:e1:21:7f:03:a2:3e: bb:34:cc:8d:c6:77:30:b9:6d:59:25:22:f8:9c:ad:dc:ec:ab: e0:a0:6e:dc:94:da:7e:f2:5e:21:0f:f6:a1:5c:b1:d3:fe:54: c8:63:27:42:93:2f:05:18:96:cb:7a:ce:19:fb:79:bc:20:d7: 2f:d1:97:ea:4f:77:d1:05:bb:61:c6:91:f4:4d:fc:af:89:e1: 6e:44:8e:27 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUCjYUBZPQs/ZMYpQlhdi+cSqbWScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjIxMjE3MzVaFw0yNjA1MjExMjIyMzVaMDMxMTAvBgNV BAMTKEY2MkZBNTQwRTU5Qjg1NzAyMEM0QjIwOTU0MjMwRTBDMEFFOENBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcUtlpCZSmi01s1SfaoVDSNNi EOfNYSPlS9DlnwoGe8pmfLILOD6pS8Iutqgw1jOX4bAM8k+3CMsXK3BTdjwg3FwX IgLntc7Nr8k3b9chB55uTujHyreL2UwN/L+2Hir+oYFWnua/RQTBMbOOfgWLvJEx wRBZdzJEtpYMtZfNU0qSnXa4k4UMr7OFzTsA1ahoT+JAXs70u74FeskgDqqo/7F1 VwxyP3yEyXo0IKYnAEsYzXog2m3wR4mXCzBw3steoN0lFhDAo6d+5FwqYLaeGTvH uEjOWK9FeO1JnRJG1R9tGMhQx7dMyaQ+bM+24Il6iJI/rRLV6foaYj0+P2N3AgMB AAGjggQuMIIEKjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2L6VA5ZuFcCDE sglUIw4MCujKDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvRjYy RkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMwQUU4Q0EwRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUH AQcBAf8EggEQMIIBDDCB3gQCAAEwgdcDBAItBEADBAKDbOQDBAKKAGQDBAKK/9gD BAKoeZQDBAKo42wDBAKo5EQDBAKqUlwDBAKqUoQDBAOxCDADBASxNzADAwCxWQME BLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ0AMEBLrrAAME BbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBbtJwAMEBLtWYAMEBLtXcAME BLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmUvDAp BAIAAjAjAwUAKAQAVAMFACgECjwDBQAoBA/sAwUAKAQdLAMFACgEIUAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbjwwDQYJKoZIhvcNAQELBQADggEBAMRVEFfpOUnL kH76rlSql7AXj40ZjFfyhUcNjhox5WNY7ESD71KvbuVm1JaMKoEQNa/cADd1oRBx PYmSAgb6gmI7VCU7iOOfUIoaGFc9tgy/DxB7YsJU/zSUW8grtcMQAPgsSWY1vSwM FCLcuFmb8Xkrt5AscNBWi1iGSHLSFcaPHvomMjOjzrQiFMOI6HZsoQf510kqELLe +LwgN9WNFCFZvpMtOd06UyFqskK3VeEhfwOiPrs0zI3GdzC5bVklIvicrdzsq+Cg btyU2n7yXiEP9qFcsdP+VMhjJ0KTLwUYlst6zhn7ebwg1y/Rl+pPd9EFu2HGkfRN /K+J4W5Ejic= -----END CERTIFICATE-----Generated at Wed Jun 4 11:17:54 2025 by rpki-client