$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer File: 22CBA337E0370365B681D563898357F37A7D4D97.cer (raw, json) Hash identifier: TStza5y523JuBrzGA9e1XpA8EhpghTnwfS/Ikg9w+os= Subject key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 56BD282EA25C3CEF3B87B089D1DC7A51EDAABFAF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft caRepository: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 19:21:19 +0000 Certificate not after: Tue 24 Mar 2026 19:26:19 +0000 Subordinate resources: AS: 268207 IP: 45.235.52.0/22 IP: 200.225.112.0/22 IP: 2804:4d98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bd:28:2e:a2:5c:3c:ef:3b:87:b0:89:d1:dc:7a:51:ed:aa:bf:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 19:21:19 2025 GMT Not After : Mar 24 19:26:19 2026 GMT Subject: CN=22CBA337E0370365B681D563898357F37A7D4D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:f4:8e:75:c7:fe:c4:1f:80:cd:fa:5a:b5: 12:72:e7:ca:da:40:a9:99:82:5e:32:2c:af:71:d8: 22:5e:e1:ef:5d:b2:76:0d:ac:fd:5b:69:9b:9c:bf: 0e:70:fe:e4:e2:4a:56:f5:fa:19:3d:96:68:f5:cc: 5a:82:f3:1b:e6:63:81:df:29:0e:31:da:c3:5c:00: d0:5b:6a:a8:91:1e:ab:ac:a3:cb:be:f2:09:f1:24: ac:49:78:36:9a:70:d1:c7:34:b9:90:98:a5:e7:f8: f8:ed:2b:97:39:1b:1a:da:0b:0f:07:58:44:7c:c3: 43:5a:68:4e:df:9b:00:3a:42:6c:84:a8:74:d8:2f: 97:cb:ea:5d:c6:4e:7c:0e:3d:16:c4:89:97:17:38: 1c:a3:82:1b:05:7b:65:58:e7:d1:45:51:a5:da:d5: a4:34:e6:11:a3:76:95:2a:bf:20:4f:5e:13:b8:18: 70:c1:dd:43:bb:91:e6:ee:6b:1a:13:ab:ec:03:72: 25:db:00:d0:ef:d9:70:b4:9b:f2:a5:53:b7:c3:73: 2f:80:68:d8:5f:18:f2:21:72:7e:16:cb:2f:5a:7a: 37:19:66:bc:e8:4b:86:1b:3c:96:ab:e5:82:db:cb: 2a:43:e4:96:3c:9b:9f:0d:2f:4f:2b:84:77:48:56: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.52.0/22 200.225.112.0/22 IPv6: 2804:4d98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268207 Signature Algorithm: sha256WithRSAEncryption 3f:4e:8d:63:81:01:07:13:13:43:52:08:a9:2b:0d:af:d4:4e: ae:68:c4:00:7d:9b:85:71:2c:06:45:1c:4f:6d:88:8a:36:1f: 35:0e:ca:8d:f6:ae:65:8d:e0:ca:38:15:35:8a:0b:02:43:b0: d5:5d:a4:a8:ad:e1:74:a5:0e:46:06:d3:4a:a7:03:f9:49:7f: 4f:a8:89:6d:57:89:7d:e5:1e:b4:fb:b0:1c:bf:1e:57:95:21: f4:e4:5c:ed:fc:e7:2e:11:9e:9c:ae:00:2e:10:c0:85:1f:f5: 11:eb:70:2f:cb:c5:52:d4:48:69:e6:1e:70:ec:88:fe:80:a9: 55:fb:1a:ec:90:d2:7a:2d:fe:4b:0f:28:fc:59:ae:f3:51:70: 8f:1f:06:31:af:66:7d:fb:aa:2e:4f:a1:77:3a:5b:39:b4:1d: ab:c6:43:f8:56:e5:ac:d5:55:4f:0d:16:4b:cd:0a:ca:f4:39: f9:22:69:a8:15:fd:70:d6:a2:13:4a:3a:fe:44:81:81:fd:b3: ae:62:a6:1f:54:94:49:b7:14:e1:d9:27:28:96:17:e8:2c:b1: 88:7d:e0:7a:f7:bb:57:19:4a:7f:58:4b:ef:c3:36:b0:bd:0d: 33:07:9e:4b:cb:c5:09:6f:81:b8:5a:5b:4c:2a:ae:e9:c1:cd: e7:97:9b:11 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVr0oLqJcPO87h7CJ0dx6Ue2qv68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUxOTIxMTlaFw0yNjAzMjQxOTI2MTlaMDMxMTAvBgNV BAMTKDIyQ0JBMzM3RTAzNzAzNjVCNjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEfSOdcf+xB+AzfpatRJy58ra QKmZgl4yLK9x2CJe4e9dsnYNrP1baZucvw5w/uTiSlb1+hk9lmj1zFqC8xvmY4Hf KQ4x2sNcANBbaqiRHquso8u+8gnxJKxJeDaacNHHNLmQmKXn+PjtK5c5GxraCw8H WER8w0NaaE7fmwA6QmyEqHTYL5fL6l3GTnwOPRbEiZcXOByjghsFe2VY59FFUaXa 1aQ05hGjdpUqvyBPXhO4GHDB3UO7kebuaxoTq+wDciXbANDv2XC0m/KlU7fDcy+A aNhfGPIhcn4Wyy9aejcZZrzoS4YbPJar5YLbyypD5JY8m58NL08rhHdIVkDDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiy6M34DcDZbaB 1WOJg1fzen1NlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzNw OXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cz cDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzIvMjJD QkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3QTdENEQ5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLes0AwQCyOFwMA0EAgACMAcDBQAoBE2YMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQXrzANBgkqhkiG9w0BAQsFAAOCAQEAP06NY4EB BxMTQ1IIqSsNr9ROrmjEAH2bhXEsBkUcT22IijYfNQ7KjfauZY3gyjgVNYoLAkOw 1V2kqK3hdKUORgbTSqcD+Ul/T6iJbVeJfeUetPuwHL8eV5Uh9ORc7fznLhGenK4A LhDAhR/1EetwL8vFUtRIaeYecOyI/oCpVfsa7JDSei3+Sw8o/Fmu81Fwjx8GMa9m ffuqLk+hdzpbObQdq8ZD+FblrNVVTw0WS80KyvQ5+SJpqBX9cNaiE0o6/kSBgf2z rmKmH1SUSbcU4dknKJYX6CyxiH3geve7VxlKf1hL78M2sL0NMweeS8vFCW+BuFpb TCqu6cHN55ebEQ== -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:23 2025 by rpki-client