$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer File: 22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer (raw, json) Hash identifier: VFE2jz8eJwdo8zeo/AK2hSIXlyVNjzaPZM+JGJkT4h0= Subject key identifier: 22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66C9B7E1FA10D89BF21F6AEC03DBC201BAE51C8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.mft caRepository: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 13:10:15 +0000 Certificate not after: Thu 04 Jun 2026 13:15:15 +0000 Subordinate resources: AS: 268308 IP: 45.238.4.0/22 IP: 2804:4f28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c9:b7:e1:fa:10:d8:9b:f2:1f:6a:ec:03:db:c2:01:ba:e5:1c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 5 13:10:15 2025 GMT Not After : Jun 4 13:15:15 2026 GMT Subject: CN=22384FCE6FE91AF1802DF9209B165E8A616D2AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:a4:2c:3f:45:d5:a7:1f:d5:f1:14:9f:20: 8e:c5:40:81:69:a8:e7:79:e7:29:1e:3c:96:f5:7e: b6:2d:ee:8f:88:a7:9c:7d:29:c7:7f:e0:16:2f:81: 69:6f:aa:e7:b9:72:19:f1:4e:a9:a8:8c:66:22:5f: 71:fa:b2:dd:e4:da:68:0d:df:b8:c6:dd:66:07:44: 61:ed:5c:ae:c5:25:c9:71:b5:a1:3b:3d:eb:dc:20: 7e:46:0d:33:de:8b:de:4e:3f:43:89:6e:5f:73:0e: 20:69:86:50:6c:7a:f1:12:de:50:c6:ef:36:1e:95: 0b:80:1d:7c:f7:7c:ec:3f:72:6c:fe:f4:53:99:64: 67:bb:cc:a0:fd:60:e8:ee:c6:50:d6:5a:97:f2:88: ac:26:9e:80:bf:5b:8b:50:ba:b1:8e:9e:4e:a8:a6: 83:d1:d0:da:27:9e:e5:9e:19:a7:42:f4:95:b2:23: eb:e1:1d:7e:ab:cc:03:ec:74:57:2a:6d:2e:35:dc: aa:60:f2:77:6f:90:50:cb:a2:fc:c6:47:8a:0e:05: 41:34:49:39:7a:78:c3:5f:d2:5b:dc:1a:2d:ba:30: ec:2d:7a:ad:1f:09:14:73:30:51:b6:b2:1a:f3:bc: 64:ee:3b:c3:a5:5f:db:8e:f7:c2:57:ff:b7:e9:64: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.4.0/22 IPv6: 2804:4f28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268308 Signature Algorithm: sha256WithRSAEncryption 4f:21:9c:a1:8f:7d:02:b5:60:c6:4b:d6:12:ba:88:e0:40:e9: f6:fb:03:64:d6:23:e9:62:b5:e9:1d:e1:2b:c6:74:1e:0d:79: da:8f:b1:47:cc:03:ae:b6:99:32:6c:8f:52:ba:41:07:99:cc: 84:29:57:7a:cc:77:6f:ce:b4:32:fa:66:88:ce:d1:88:e3:7b: cb:bc:7f:1e:73:ab:53:58:f1:a2:0b:b7:d5:3b:f6:af:e9:15: 49:85:5e:4b:05:ce:f1:25:42:be:41:18:68:72:08:2b:9e:29: c3:68:e2:eb:f3:0e:c8:6d:6a:1c:8c:78:e8:61:ca:67:95:59: e0:ca:c2:5e:92:56:fe:61:97:2f:9a:20:29:74:0d:7f:80:27: ef:ef:44:44:28:83:06:2d:b5:89:fe:7a:3d:19:9a:3a:ab:65: d6:1d:e8:a5:82:de:09:e3:29:da:6e:a4:1d:e7:1c:61:5b:f5: 78:0c:40:8d:bb:a8:56:9d:78:f4:8e:eb:e8:98:bc:56:88:a0: bd:89:22:37:fe:d0:e5:50:88:8b:e4:b1:2e:5f:1c:f8:d2:4b: d6:29:dc:5f:ee:67:bc:e7:4b:4c:17:ff:9d:dd:ce:dd:c8:29: d7:66:81:b6:de:06:a5:82:44:85:dd:75:bd:67:9c:25:63:a8: 5b:3b:64:d4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZsm34foQ2JvyH2rsA9vCAbrlHIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDUxMzEwMTVaFw0yNjA2MDQxMzE1MTVaMDMxMTAvBgNV BAMTKDIyMzg0RkNFNkZFOTFBRjE4MDJERjkyMDlCMTY1RThBNjE2RDJBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFKQsP0XVpx/V8RSfII7FQIFp qOd55ykePJb1frYt7o+Ip5x9Kcd/4BYvgWlvque5chnxTqmojGYiX3H6st3k2mgN 37jG3WYHRGHtXK7FJclxtaE7PevcIH5GDTPei95OP0OJbl9zDiBphlBsevES3lDG 7zYelQuAHXz3fOw/cmz+9FOZZGe7zKD9YOjuxlDWWpfyiKwmnoC/W4tQurGOnk6o poPR0NonnuWeGadC9JWyI+vhHX6rzAPsdFcqbS413Kpg8ndvkFDLovzGR4oOBUE0 STl6eMNf0lvcGi26MOwteq0fCRRzMFG2shrzvGTuO8OlX9uO98JX/7fpZH4RAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiOE/Ob+ka8YAt +SCbFl6KYW0qwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI1 REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3OW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcy NURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAvMjIz ODRGQ0U2RkU5MUFGMTgwMkRGOTIwOUIxNjVFOEE2MTZEMkFDMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe4EMA0EAgACMAcDBQAoBE8oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYFDANBgkqhkiG9w0BAQsFAAOCAQEATyGcoY99ArVgxkvW ErqI4EDp9vsDZNYj6WK16R3hK8Z0Hg152o+xR8wDrraZMmyPUrpBB5nMhClXesx3 b860MvpmiM7RiON7y7x/HnOrU1jxogu31Tv2r+kVSYVeSwXO8SVCvkEYaHIIK54p w2ji6/MOyG1qHIx46GHKZ5VZ4MrCXpJW/mGXL5ogKXQNf4An7+9ERCiDBi21if56 PRmaOqtl1h3opYLeCeMp2m6kHeccYVv1eAxAjbuoVp149I7r6Ji8VoigvYkiN/7Q 5VCIi+SxLl8c+NJL1incX+5nvOdLTBf/nd3O3cgp12aBtt4GpYJEhd11vWecJWOo Wztk1A== -----END CERTIFICATE-----Generated at Mon Jun 16 12:04:24 2025 by rpki-client