$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer File: 22AB1A545CAF610816572F26872DE7E11F24C4BC.cer (raw, json) Hash identifier: tCDQDPIBXzAcSf9eHTjkisglMF3/Yczr4gl+eHsG3C0= Subject key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75D5A9FE88894A58D751F9D5893E2A25A9AA7BF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft caRepository: rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 17:41:48 +0000 Certificate not after: Fri 05 Jun 2026 17:46:48 +0000 Subordinate resources: AS: 271045 IP: 45.65.164.0/22 IP: 177.67.160.0/21 IP: 201.54.184.0/24 IP: 201.54.186.0/23 IP: 2804:756c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d5:a9:fe:88:89:4a:58:d7:51:f9:d5:89:3e:2a:25:a9:aa:7b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 6 17:41:48 2025 GMT Not After : Jun 5 17:46:48 2026 GMT Subject: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:80:21:44:f6:73:28:c6:a6:f4:48:b6:b8: 00:da:ef:77:06:cf:ea:07:79:9c:78:89:59:40:b0: 14:c1:65:7f:60:3b:45:73:52:e7:01:6f:f0:56:fa: ec:1a:b2:0e:8c:6f:55:c5:77:0c:d7:a9:1a:5d:f7: 01:36:3a:02:56:4e:b6:5f:34:9f:ee:32:a7:be:39: 77:72:20:99:6d:fa:b4:55:36:9e:82:3c:e9:39:b5: 3c:cd:0d:f8:7f:90:62:31:e3:6c:af:99:9a:70:41: 56:9f:70:3d:28:1a:46:27:53:0b:16:db:a1:8b:9d: 2d:0b:37:1b:b4:50:56:08:da:5b:b0:8f:80:90:05: 0b:67:cb:c2:a0:56:46:79:72:93:3a:27:30:6a:1a: cb:5e:6a:69:aa:cf:5f:85:20:8c:3f:cb:27:88:0d: 32:1a:3b:a4:bf:97:da:b9:09:ae:8f:5b:29:bb:60: bc:a1:2d:72:bc:01:eb:03:f5:c2:7a:7d:75:aa:c1: 21:19:03:f8:a8:c5:0d:75:86:c8:f6:57:8e:3d:f8: 5f:83:89:40:d0:b6:80:dd:1f:ad:cc:2c:d2:e2:00: 50:0b:18:28:d9:fa:f3:32:09:5e:83:e0:f7:55:7e: 30:8d:01:22:3b:99:73:57:30:cf:49:13:af:69:8a: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.164.0/22 177.67.160.0/21 201.54.184.0/24 201.54.186.0/23 IPv6: 2804:756c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271045 Signature Algorithm: sha256WithRSAEncryption ad:4e:13:62:18:93:f1:a3:f3:0c:69:ee:32:10:8b:6c:f1:2d: 4a:ae:1c:24:0a:86:b3:66:e6:ab:72:34:ba:1a:d2:2e:1e:02: d8:15:c9:ef:dd:3d:19:d6:60:53:06:f4:a9:f2:4c:0b:6f:18: 25:42:24:24:cc:85:b5:c1:3b:b4:57:a7:8d:3f:a0:66:95:f7: 23:a0:de:5e:e2:ed:c9:a8:0e:e0:82:78:47:d6:f8:bb:2e:f3: 4c:35:e7:2f:c5:05:3a:1a:45:aa:52:3e:ab:e1:5a:69:a8:59: f3:e1:33:ab:5c:0d:c1:ca:b9:16:db:86:6c:f7:80:9c:75:d4: 92:b7:36:6b:45:87:20:39:25:4a:90:b2:68:ec:7e:d7:3a:70: 1b:b2:1e:4b:f0:87:b6:89:35:99:f4:22:ce:f4:98:ee:ff:b2: 61:e1:9d:f1:ec:4e:e3:c3:05:5f:a4:c6:16:ba:57:e0:ae:ac: a0:56:f4:2e:aa:11:d1:db:24:8f:91:22:9f:32:4d:ed:57:dd: f2:9b:97:9f:77:c0:b6:f9:b6:2e:4e:84:03:bd:ed:54:95:c4: 46:13:25:d1:0f:9f:54:01:b9:d6:8f:a7:6d:b8:36:16:42:c2: bd:69:d5:ab:8e:12:b9:17:85:41:52:56:37:f5:18:d0:dd:e1: be:8a:3b:f4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUddWp/oiJSljXUfnViT4qJamqe/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDYxNzQxNDhaFw0yNjA2MDUxNzQ2NDhaMDMxMTAvBgNV BAMTKDIyQUIxQTU0NUNBRjYxMDgxNjU3MkYyNjg3MkRFN0UxMUYyNEM0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2IAhRPZzKMam9Ei2uADa73cG z+oHeZx4iVlAsBTBZX9gO0VzUucBb/BW+uwasg6Mb1XFdwzXqRpd9wE2OgJWTrZf NJ/uMqe+OXdyIJlt+rRVNp6CPOk5tTzNDfh/kGIx42yvmZpwQVafcD0oGkYnUwsW 26GLnS0LNxu0UFYI2luwj4CQBQtny8KgVkZ5cpM6JzBqGsteammqz1+FIIw/yyeI DTIaO6S/l9q5Ca6PWym7YLyhLXK8AesD9cJ6fXWqwSEZA/ioxQ11hsj2V449+F+D iUDQtoDdH63MLNLiAFALGCjZ+vMyCV6D4PdVfjCNASI7mXNXMM9JE69pitbLAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiqxpUXK9hCBZX LyaHLefhHyTEvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGNI VndkbnBiWGtLR21oMlZKODhiS05jMzg2ODdXTXhzWUtnY294MTlHZWcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rj SFZ3ZG5wYlhrS0dtaDJWSjg4YktOYzM4Njg3V014c1lLZ2NveDE5R2VnLzAvMjJB QjFBNTQ1Q0FGNjEwODE2NTcyRjI2ODcyREU3RTExRjI0QzRCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLUGkAwQDsUOgAwQAyTa4AwQByTa6MA0EAgACMAcD BQAoBHVsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQixTANBgkqhkiG9w0BAQsF AAOCAQEArU4TYhiT8aPzDGnuMhCLbPEtSq4cJAqGs2bmq3I0uhrSLh4C2BXJ7909 GdZgUwb0qfJMC28YJUIkJMyFtcE7tFenjT+gZpX3I6DeXuLtyagO4IJ4R9b4uy7z TDXnL8UFOhpFqlI+q+FaaahZ8+Ezq1wNwcq5FtuGbPeAnHXUkrc2a0WHIDklSpCy aOx+1zpwG7IeS/CHtok1mfQizvSY7v+yYeGd8exO48MFX6TGFrpX4K6soFb0LqoR 0dskj5EinzJN7Vfd8puXn3fAtvm2Lk6EA73tVJXERhMl0Q+fVAG51o+nbbg2FkLC vWnVq44SuReFQVJWN/UY0N3hvoo79A== -----END CERTIFICATE-----Generated at Mon Jun 16 10:13:48 2025 by rpki-client