$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer File: FF378FCED112801045DB136F6CA069344BA08F50.cer (raw, json) Hash identifier: QcQ24EHjte81Mm769UI+N7DRHttW6PWTNyK9JPfQL6A= Subject key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35220F4BB603DAE2574E9A72750C4FF562F5484D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft caRepository: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 20:31:26 +0000 Certificate not after: Wed 03 Jun 2026 20:36:26 +0000 Subordinate resources: AS: 264295 IP: 138.121.116.0/22 IP: 168.181.152.0/22 IP: 170.246.16.0/22 IP: 2804:25b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 14:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:22:0f:4b:b6:03:da:e2:57:4e:9a:72:75:0c:4f:f5:62:f5:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 20:31:26 2025 GMT Not After : Jun 3 20:36:26 2026 GMT Subject: CN=FF378FCED112801045DB136F6CA069344BA08F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:3b:d6:8b:a0:e5:68:8f:25:fe:48:18:5b: 6e:c1:11:ce:3e:9a:b7:a7:5e:91:e1:05:e2:58:10: 4d:e4:26:b7:d0:2f:1b:fb:1e:93:49:0d:16:9f:38: 6b:23:80:71:59:90:60:31:be:5e:79:78:88:0c:a9: 61:fa:a3:e0:46:20:11:1a:86:b8:5c:58:a5:a7:15: cf:66:98:9b:83:1a:48:fd:7b:46:49:03:c3:3e:4c: 82:77:02:c2:e1:08:06:39:bb:28:bb:8d:af:77:35: 91:ce:d1:4c:c3:cb:e8:38:ac:81:c8:56:08:78:7e: bd:1a:04:5e:54:54:a4:05:c2:7b:db:ec:23:25:1c: 81:e1:e0:2c:17:78:23:b3:c0:57:d0:da:6f:43:73: 3d:9c:51:b2:cb:1d:63:6a:5a:fb:90:1c:c5:50:7d: 24:4e:e2:8a:7e:c2:6b:fa:4b:66:32:a6:51:c7:f7: 0a:18:4f:25:c0:b7:0e:e5:aa:74:bf:0c:3a:23:ce: 92:4e:83:9e:83:81:0a:1a:84:cd:09:a7:fc:b0:40: 41:e3:7e:f8:87:50:98:f2:4b:63:89:cb:4b:e5:0a: 41:cc:69:bc:26:bc:93:6d:d0:d8:27:70:5f:93:d1: 7c:67:da:d1:ad:e5:44:43:e0:82:36:ae:ce:6d:44: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.116.0/22 168.181.152.0/22 170.246.16.0/22 IPv6: 2804:25b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264295 Signature Algorithm: sha256WithRSAEncryption a9:11:9e:c0:8f:b2:90:66:9d:9b:1f:4d:ec:1c:8f:90:91:92: 16:8b:0d:4e:ff:69:38:f6:7a:aa:84:56:1d:9a:9a:99:c0:1a: 41:ab:32:80:4e:d5:3e:b1:74:d5:7d:cc:f6:e6:66:de:52:7b: 59:43:89:69:47:36:5f:38:6e:5d:3a:05:40:ec:41:7b:d2:27: c8:74:8f:d3:0a:85:0d:7e:86:30:d1:94:d6:11:a2:22:1b:42: 2d:f6:1f:12:56:98:2e:78:56:22:62:8a:77:c1:56:2a:53:a7: 51:db:56:6d:10:2c:e8:c6:bb:2f:45:25:98:3a:2a:79:6e:6a: f2:38:fb:f7:3c:a7:11:a7:85:e1:46:63:92:5f:50:2d:4b:91: 63:44:bc:71:db:89:c2:47:e7:e5:fb:c6:b3:ae:ff:cc:6d:c9: 1c:ef:51:d9:d4:ee:ff:e7:e9:88:28:04:28:20:7c:38:09:d0: ac:7a:95:eb:0a:d4:44:3a:66:5b:ad:bd:38:7f:73:49:5c:fc: 7f:b1:cd:3a:ff:19:d1:77:53:8a:2a:5e:7d:61:04:d4:69:e1: d9:70:5c:40:72:b6:59:0b:ec:00:c9:d1:33:30:6a:17:ad:28: dd:84:17:99:64:9a:0e:8b:0a:b4:21:06:59:b8:53:fe:52:39: 76:40:57:00 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIUNSIPS7YD2uJXTppydQxP9WL1SE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQyMDMxMjZaFw0yNjA2MDMyMDM2MjZaMDMxMTAvBgNV BAMTKEZGMzc4RkNFRDExMjgwMTA0NURCMTM2RjZDQTA2OTM0NEJBMDhGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMszvWi6DlaI8l/kgYW27BEc4+ mrenXpHhBeJYEE3kJrfQLxv7HpNJDRafOGsjgHFZkGAxvl55eIgMqWH6o+BGIBEa hrhcWKWnFc9mmJuDGkj9e0ZJA8M+TIJ3AsLhCAY5uyi7ja93NZHO0UzDy+g4rIHI Vgh4fr0aBF5UVKQFwnvb7CMlHIHh4CwXeCOzwFfQ2m9Dcz2cUbLLHWNqWvuQHMVQ fSRO4op+wmv6S2YyplHH9woYTyXAtw7lqnS/DDojzpJOg56DgQoahM0Jp/ywQEHj fviHUJjyS2OJy0vlCkHMabwmvJNt0NgncF+T0Xxn2tGt5URD4II2rs5tRGjbAgMB AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/N4/O0RKAEEXb E29soGk0S6CPUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcm40 WG9IbU5abmduZEdiRm9EQTlHN1g1dFpMY1NoRGN2Tk4zdDVCNFF4dy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcm40 WG9IbU5abmduZEdiRm9EQTlHN1g1dFpMY1NoRGN2Tk4zdDVCNFF4dy8wL0ZGMzc4 RkNFRDExMjgwMTA0NURCMTM2RjZDQTA2OTM0NEJBMDhGNTAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB /wQrMCkwGAQCAAEwEgMEAop5dAMEAqi1mAMEAqr2EDANBAIAAjAHAwUAKAQlsDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECGcwDQYJKoZIhvcNAQELBQADggEBAKkR nsCPspBmnZsfTewcj5CRkhaLDU7/aTj2eqqEVh2ampnAGkGrMoBO1T6xdNV9zPbm Zt5Se1lDiWlHNl84bl06BUDsQXvSJ8h0j9MKhQ1+hjDRlNYRoiIbQi32HxJWmC54 ViJiinfBVipTp1HbVm0QLOjGuy9FJZg6KnluavI4+/c8pxGnheFGY5JfUC1LkWNE vHHbicJH5+X7xrOu/8xtyRzvUdnU7v/n6YgoBCggfDgJ0Kx6lesK1EQ6ZlutvTh/ c0lc/H+xzTr/GdF3U4oqXn1hBNRp4dlwXEBytlkL7ADJ0TMwahetKN2EF5lkmg6L CrQhBlm4U/5SOXZAVwA= -----END CERTIFICATE-----Generated at Sun Jun 8 18:23:19 2025 by rpki-client