$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer (raw, json) Hash identifier: Kl5mnQG6ih6xoYNpwEbxA5BOOl1AOM6Mfa3PKrh2qmo= Subject key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55D084050B9E8183890B5FC33AA8EFEBF2BE0EC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft caRepository: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 08 Jun 2025 08:22:01 +0000 Certificate not after: Sun 07 Jun 2026 08:27:01 +0000 Subordinate resources: AS: 266650 IP: 128.201.216.0/22 IP: 2804:3f48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d0:84:05:0b:9e:81:83:89:0b:5f:c3:3a:a8:ef:eb:f2:be:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 8 08:22:01 2025 GMT Not After : Jun 7 08:27:01 2026 GMT Subject: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:c4:36:1c:38:19:ad:e8:2c:06:e3:f6:a4: 01:c7:d0:a0:2c:16:6b:06:0a:51:1c:cc:ed:e7:b0: 05:52:a3:9c:83:7a:3e:0b:3a:9d:4b:e5:a9:b0:51: 7c:3d:54:e1:70:34:e5:e1:6e:ca:cd:81:4a:df:cc: ea:4d:f7:92:c6:76:31:0e:94:0b:70:a5:ca:6f:01: 8d:e3:22:72:24:7b:25:f9:3b:3b:4a:e4:3d:96:d9: 2e:07:85:e3:13:9f:8e:68:75:e0:68:4d:0a:82:9d: 57:9c:54:07:3e:a8:f3:00:95:70:cb:88:a6:8f:06: 7b:0d:19:c7:1a:62:b0:fa:71:a5:e8:63:39:25:f6: f5:66:42:f8:34:a1:67:88:39:07:cf:43:cd:13:7f: 1a:81:06:69:00:86:63:a8:c6:9b:cf:08:07:c1:4b: de:52:02:bf:38:df:a5:c4:b7:2d:5c:99:95:1d:9d: 6a:55:f9:b6:ab:7d:56:fc:39:b2:02:d0:aa:2b:ed: 18:85:4b:23:3e:c2:4d:4b:2c:21:10:17:2c:e0:21: 6d:76:5c:5a:34:8a:6b:97:44:27:4c:cc:4d:cd:36: 5f:24:6d:d8:c4:ad:47:ca:d4:ac:aa:b6:34:31:cb: c9:8a:84:58:21:db:de:a1:0c:0d:e0:b0:71:6f:a7: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.216.0/22 IPv6: 2804:3f48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266650 Signature Algorithm: sha256WithRSAEncryption 4b:6a:01:3d:04:70:9e:9e:67:08:5b:a6:35:a1:bf:cd:9a:be: ab:82:63:29:cc:f0:3b:c0:78:a9:7b:24:77:75:a7:39:0e:21: be:0d:0f:62:19:ef:00:26:1f:11:9f:b3:8f:b3:61:62:7a:53: 22:16:71:e9:09:82:f2:8a:c3:16:73:22:2b:0d:2e:d9:70:c5: 0d:1b:0c:52:52:1a:a5:f0:83:e7:39:64:ca:45:c4:c2:b7:1b: 8c:75:9b:b1:19:90:b6:5a:22:38:8d:9a:2a:9e:da:dc:41:6e: 93:6a:09:5f:ec:6a:4c:71:ab:d4:3e:b0:00:8f:5d:34:dd:a3: 93:8c:7c:3d:52:f4:e7:ea:be:57:df:7f:b9:d5:06:d2:ae:f7: 4d:9a:c8:8e:54:cd:7b:23:4f:26:f0:00:cd:a7:72:00:68:25: 6f:b3:48:7d:c4:0d:7f:12:73:72:8f:16:df:7a:b9:95:25:9d: 31:8c:88:d0:0c:47:c8:04:bd:df:be:d9:d8:aa:63:3f:6b:00: 6d:83:75:8c:15:cb:d0:4b:40:d7:5a:79:bd:ce:2c:2b:19:87: 95:fe:a3:61:9e:53:f6:10:cb:f1:51:6c:45:a4:26:c0:99:9b: e4:13:c2:80:1f:0c:ca:ee:d9:00:54:98:22:76:be:27:9a:2b: 49:8d:3e:e0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVdCEBQuegYOJC1/DOqjv6/K+DsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDgwODIyMDFaFw0yNjA2MDcwODI3MDFaMDMxMTAvBgNV BAMTKDIzQUNBODM5RUNCNDZDQzNCNUJENkM4NkJGNjk5N0MxOEU4Mjc3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+icQ2HDgZregsBuP2pAHH0KAs FmsGClEczO3nsAVSo5yDej4LOp1L5amwUXw9VOFwNOXhbsrNgUrfzOpN95LGdjEO lAtwpcpvAY3jInIkeyX5OztK5D2W2S4HheMTn45odeBoTQqCnVecVAc+qPMAlXDL iKaPBnsNGccaYrD6caXoYzkl9vVmQvg0oWeIOQfPQ80TfxqBBmkAhmOoxpvPCAfB S95SAr8436XEty1cmZUdnWpV+barfVb8ObIC0Kor7RiFSyM+wk1LLCEQFyzgIW12 XFo0imuXRCdMzE3NNl8kbdjErUfK1KyqtjQxy8mKhFgh296hDA3gsHFvp0btAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjrKg57LRsw7W9 bIa/aZfBjoJ32jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTJY Ylp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ey WGJaeVZiQVBEWU5HazZrTTg1VkUzcjI0RWpHYVg2d1lDbVFGTHVaOTJRLzAvMjNB Q0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4RTgyNzdEQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgMnYMA0EAgACMAcDBQAoBD9IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRmjANBgkqhkiG9w0BAQsFAAOCAQEAS2oBPQRwnp5nCFum NaG/zZq+q4JjKczwO8B4qXskd3WnOQ4hvg0PYhnvACYfEZ+zj7NhYnpTIhZx6QmC 8orDFnMiKw0u2XDFDRsMUlIapfCD5zlkykXEwrcbjHWbsRmQtloiOI2aKp7a3EFu k2oJX+xqTHGr1D6wAI9dNN2jk4x8PVL05+q+V99/udUG0q73TZrIjlTNeyNPJvAA zadyAGglb7NIfcQNfxJzco8W33q5lSWdMYyI0AxHyAS9377Z2KpjP2sAbYN1jBXL 0EtA11p5vc4sKxmHlf6jYZ5T9hDL8VFsRaQmwJmb5BPCgB8Myu7ZAFSYIna+J5or SY0+4A== -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:45 2025 by rpki-client