$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer File: FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer (raw, json) Hash identifier: Rezh22nm8eTPTLsN5KRPCOd9d/fN9ZtgzRxwRQIsat4= Subject key identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33486149BD6C2B6B394242FE502192ED512B6901 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft caRepository: rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 22:55:44 +0000 Certificate not after: Thu 05 Mar 2026 23:00:44 +0000 Subordinate resources: AS: 28215 IP: 189.113.144.0/20 IP: 2801:80:550::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:48:61:49:bd:6c:2b:6b:39:42:42:fe:50:21:92:ed:51:2b:69:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 22:55:44 2025 GMT Not After : Mar 5 23:00:44 2026 GMT Subject: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:7d:49:b5:f3:91:22:dc:65:ad:ed:1b:eb: 53:2c:38:48:21:44:2c:4d:48:76:90:b9:43:ad:38: ee:3f:e3:41:19:4e:cf:54:34:b2:0a:a8:b7:78:26: 65:f4:02:28:f2:d8:f5:26:45:a4:af:41:bc:9d:0c: 03:c0:f8:81:be:02:d2:6a:82:e5:c5:0e:a6:44:35: dc:00:9c:53:89:92:31:60:6d:07:26:02:61:c8:16: 82:f0:8a:9e:96:7d:c5:27:1d:c7:05:14:48:0e:6e: e8:57:49:54:20:5e:e0:a1:7b:14:10:d4:2b:30:c3: ce:ae:f0:ab:92:78:c9:c0:b7:bf:32:09:27:ec:a0: c9:30:40:68:de:ca:7c:f3:43:bb:5f:ab:44:17:fb: e2:70:72:8b:7e:f1:bf:c2:47:b7:7f:76:57:e9:21: ec:f9:71:e2:7c:57:ac:b1:c2:c3:01:13:13:aa:66: 3d:5d:0b:24:37:08:fd:37:c7:f4:87:65:fd:04:4e: 1a:a4:44:c2:2e:c8:cf:4f:a3:67:69:9a:36:be:24: 63:7a:a0:e9:b8:83:93:36:84:d8:a0:14:8f:9e:30: c0:6e:1f:02:08:4e:d9:5e:4c:39:28:71:af:ef:32: 5f:e0:b6:f9:13:d1:e4:67:61:e7:08:40:a2:f2:fc: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.113.144.0/20 IPv6: 2801:80:550::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28215 Signature Algorithm: sha256WithRSAEncryption 4b:db:3f:56:34:29:63:dc:88:7a:7f:95:eb:08:29:78:09:4d: c1:2c:3a:b1:94:db:d4:83:e0:07:e3:bc:96:f6:45:2d:a3:8f: cc:55:f9:ee:a1:6d:26:7e:5c:d7:63:98:b5:1f:96:34:ea:82: ba:e9:7f:51:f6:d1:34:57:a6:bd:5f:84:4f:8e:6d:a1:38:bd: 83:35:0e:2f:6c:03:13:1d:96:80:e9:03:d0:d6:7d:f6:f5:f4: c7:77:9e:6a:66:09:77:14:db:54:18:5b:86:9d:5a:59:bc:ad: ee:73:6d:7d:13:fd:1f:c3:cb:5b:b9:25:3a:de:2b:65:7d:11: 20:86:9c:fe:4e:ae:31:3e:9a:e3:74:f9:3b:47:a9:62:e9:0c: bc:e5:78:42:c2:9e:32:88:65:f2:85:6d:06:76:4c:5a:3c:14: 8b:19:f5:5b:83:c4:f3:27:73:40:7a:f9:3c:9e:7f:89:59:e0: a7:0f:92:8f:e9:c1:27:81:bb:6f:7d:42:1b:c8:a7:18:6e:a2: d6:0f:18:5d:d4:19:95:cd:11:b8:0b:54:23:79:9c:ea:f1:e8: 33:fd:79:63:04:4e:28:99:b9:cd:3a:82:a7:aa:75:b3:33:1b: 0c:2f:75:46:1c:35:18:73:39:23:60:2d:b2:48:d3:6c:87:d9: 78:62:ac:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM0hhSb1sK2s5QkL+UCGS7VEraQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMjU1NDRaFw0yNjAzMDUyMzAwNDRaMDMxMTAvBgNV BAMTKEZCQkU0MEJEM0Y3QTZCNTg5QzY1MkVDQUU5RjdEQ0MxQzA2NEUxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9n1JtfORItxlre0b61MsOEgh RCxNSHaQuUOtOO4/40EZTs9UNLIKqLd4JmX0Aijy2PUmRaSvQbydDAPA+IG+AtJq guXFDqZENdwAnFOJkjFgbQcmAmHIFoLwip6WfcUnHccFFEgObuhXSVQgXuChexQQ 1Csww86u8KuSeMnAt78yCSfsoMkwQGjeynzzQ7tfq0QX++Jwcot+8b/CR7d/dlfp Iez5ceJ8V6yxwsMBExOqZj1dCyQ3CP03x/SHZf0EThqkRMIuyM9Po2dpmja+JGN6 oOm4g5M2hNigFI+eMMBuHwIITtleTDkoca/vMl/gtvkT0eRnYecIQKLy/H1FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7vkC9P3prWJxl Lsrp99zBwGThjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQndV NERESExOY3FwZXI0djl5eGFtTHRudzJUcTlOWENhTml0SlhDQTQyWTkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQndV NERESExOY3FwZXI0djl5eGFtTHRudzJUcTlOWENhTml0SlhDQTQyWTkvMS9GQkJF NDBCRDNGN0E2QjU4OUM2NTJFQ0FFOUY3RENDMUMwNjRFMThFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB Af8EITAfMAwEAgABMAYDBAS9cZAwDwQCAAIwCQMHACgBAIAFUDAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJuNzANBgkqhkiG9w0BAQsFAAOCAQEAS9s/VjQpY9yIen+V 6wgpeAlNwSw6sZTb1IPgB+O8lvZFLaOPzFX57qFtJn5c12OYtR+WNOqCuul/UfbR NFemvV+ET45toTi9gzUOL2wDEx2WgOkD0NZ99vX0x3eeamYJdxTbVBhbhp1aWbyt 7nNtfRP9H8PLW7klOt4rZX0RIIac/k6uMT6a43T5O0epYukMvOV4QsKeMohl8oVt BnZMWjwUixn1W4PE8ydzQHr5PJ5/iVngpw+Sj+nBJ4G7b31CG8inGG6i1g8YXdQZ lc0RuAtUI3mc6vHoM/15YwROKJm5zTqCp6p1szMbDC91Rhw1GHM5I2AtskjTbIfZ eGKsAA== -----END CERTIFICATE-----Generated at Fri Apr 4 01:33:36 2025 by rpki-client