$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer (raw, json) Hash identifier: d9G6tyHhb8Dpl9Sokc+4/vITZykoIUhFRY13JgJ8TSI= Subject key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AFC9C0AEBA08D84CBD794CA8FFB3234BE475121 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft caRepository: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 May 2025 19:35:09 +0000 Certificate not after: Mon 11 May 2026 19:40:09 +0000 Subordinate resources: AS: 267489 IP: 192.141.162.0/23 IP: 2804:4244::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fc:9c:0a:eb:a0:8d:84:cb:d7:94:ca:8f:fb:32:34:be:47:51:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 19:35:09 2025 GMT Not After : May 11 19:40:09 2026 GMT Subject: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:4d:3c:77:13:19:05:0c:75:29:e6:15:06: 0d:61:d9:4b:e6:6e:52:a1:58:e5:a1:b6:af:ab:aa: 27:12:3b:1b:41:b7:bb:09:21:97:cf:b0:18:eb:f1: 81:1e:bf:3e:b6:9e:5f:7e:7c:8b:45:e1:e1:fb:34: c8:70:f1:c8:12:10:5e:e3:34:0c:b3:d1:4e:3f:79: 9e:55:4c:6a:70:e7:a1:19:7b:d4:e8:2e:53:fd:ee: cf:bf:0e:1a:71:48:77:06:06:57:92:65:a2:6f:02: c8:c0:f2:3d:82:e1:d2:e4:56:e2:2e:93:1a:10:99: 9d:8b:50:8b:ca:dd:fc:9b:8e:23:19:04:33:38:ee: e8:26:57:a2:9e:22:02:04:2f:77:4c:b3:b4:82:3a: 4a:76:97:b4:9c:bd:95:ed:93:ee:b5:af:dd:11:22: fd:c5:a5:6c:86:9e:74:85:eb:02:a7:a8:eb:fc:45: 59:3e:8b:9b:35:c6:aa:ab:03:6d:48:04:48:12:d2: 2c:49:dd:10:71:bb:1d:2b:02:ea:3b:e0:26:ca:f2: 1e:a3:e0:4f:d7:9e:e9:a0:49:d6:dd:ee:6d:6e:f8: 7e:b7:93:fa:e5:eb:7f:19:bb:ab:95:08:f3:0c:c8: 73:00:2c:40:35:91:f1:02:0f:16:dc:5f:fe:10:b2: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.162.0/23 IPv6: 2804:4244::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267489 Signature Algorithm: sha256WithRSAEncryption 6a:d1:0b:4d:d2:5a:b0:e3:a1:3f:59:92:32:79:28:24:92:73: 59:43:87:2b:1e:1e:72:f5:11:99:9a:d3:4d:e6:a4:74:fd:3d: f5:19:a1:ff:ce:e6:db:0a:c0:73:fc:58:9d:dd:65:26:35:a3: c6:a5:89:d7:a3:e7:e9:a3:b9:f3:07:4d:ca:58:00:15:54:7a: 00:87:4b:59:6c:a5:7d:73:8d:36:a3:cf:16:b9:a6:95:83:99: bf:7e:76:92:c3:60:14:e2:74:77:38:54:43:34:a6:36:68:b6: 4c:c9:2a:85:42:75:eb:96:cd:e6:b4:8e:b8:89:d4:27:87:96: ce:46:3b:ea:20:01:9f:f6:d2:ca:85:a0:14:e7:f4:21:da:36: 35:fa:a9:3c:28:2f:dd:4a:2e:4b:97:76:d9:2a:d0:19:a1:1f: 61:6d:22:fb:fd:55:6a:28:ff:a4:2d:aa:3b:09:df:b2:08:ed: 3f:8e:7c:36:a8:f8:b7:ff:d8:e7:da:a0:fb:34:6a:cf:b5:99: fe:b7:34:fa:f6:c1:cb:ce:c9:82:88:d5:f0:c8:a1:63:06:53: 4f:ff:d9:0e:35:f6:8b:20:c5:7a:c4:97:46:04:b2:6e:7e:92: 6b:b9:90:8e:f5:9f:a0:88:5d:37:37:6e:b6:8e:41:42:9d:5c: f1:77:02:59 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUOvycCuugjYTL15TKj/syNL5HUSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTIxOTM1MDlaFw0yNjA1MTExOTQwMDlaMDMxMTAvBgNV BAMTKDIzRUNENEQxQUY4OENFMkUxQjNERjZERjg3RkM3NkNDMTU3QTA3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDE08dxMZBQx1KeYVBg1h2Uvm blKhWOWhtq+rqicSOxtBt7sJIZfPsBjr8YEevz62nl9+fItF4eH7NMhw8cgSEF7j NAyz0U4/eZ5VTGpw56EZe9ToLlP97s+/DhpxSHcGBleSZaJvAsjA8j2C4dLkVuIu kxoQmZ2LUIvK3fybjiMZBDM47ugmV6KeIgIEL3dMs7SCOkp2l7ScvZXtk+61r90R Iv3FpWyGnnSF6wKnqOv8RVk+i5s1xqqrA21IBEgS0ixJ3RBxux0rAuo74CbK8h6j 4E/XnumgSdbd7m1u+H63k/rl638Zu6uVCPMMyHMALEA1kfECDxbcX/4QshFZAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj7NTRr4jOLhs9 9t+H/HbMFXoHwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMS8yM0VD RDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0EwN0MxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAHAjaIwDQQCAAIwBwMFACgEQkQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBThMA0GCSqGSIb3DQEBCwUAA4IBAQBq0QtN0lqw46E/WZIy eSgkknNZQ4crHh5y9RGZmtNN5qR0/T31GaH/zubbCsBz/Fid3WUmNaPGpYnXo+fp o7nzB03KWAAVVHoAh0tZbKV9c402o88WuaaVg5m/fnaSw2AU4nR3OFRDNKY2aLZM ySqFQnXrls3mtI64idQnh5bORjvqIAGf9tLKhaAU5/Qh2jY1+qk8KC/dSi5Ll3bZ KtAZoR9hbSL7/VVqKP+kLao7Cd+yCO0/jnw2qPi3/9jn2qD7NGrPtZn+tzT69sHL zsmCiNXwyKFjBlNP/9kONfaLIMV6xJdGBLJufpJruZCO9Z+giF03N262jkFCnVzx dwJZ -----END CERTIFICATE-----Generated at Sun Jun 15 06:24:35 2025 by rpki-client