$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer (raw, json) Hash identifier: k4luKTfNqZWlDmGpQK7B8qhImQdU7MZW+HpyvLDTbJ0= Subject key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33ECF4F4A68868D77AF1DF37005A96491AE6636C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft caRepository: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 08:20:27 +0000 Certificate not after: Fri 24 Apr 2026 08:25:27 +0000 Subordinate resources: AS: 268945 IP: 45.176.144.0/22 IP: 2804:5d00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ec:f4:f4:a6:88:68:d7:7a:f1:df:37:00:5a:96:49:1a:e6:63:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 08:20:27 2025 GMT Not After : Apr 24 08:25:27 2026 GMT Subject: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:eb:08:60:c0:ac:6c:53:4a:9f:aa:97:c5: ab:72:c0:5f:5d:0b:f1:f2:a4:66:ee:21:8d:07:78: 97:18:d1:33:a1:03:15:74:9b:82:20:e8:85:20:4c: 31:17:a2:95:fd:f8:94:e4:b9:4d:06:d4:6e:db:d1: 59:c2:77:5a:ed:37:98:21:7b:4f:80:74:e4:46:13: 63:b4:7e:71:94:e8:48:f8:ee:ed:09:0f:14:0c:24: 5e:50:99:e9:5b:e4:e0:8c:38:4a:04:58:65:eb:0d: 08:3d:96:50:92:14:58:e2:7c:02:67:53:bf:a1:b6: 59:44:ed:42:ac:d8:b0:e5:da:e5:42:7a:8f:d6:a1: 8d:d8:8b:3f:36:90:1c:8a:2f:9a:f4:da:7a:b8:81: 7d:a9:6f:eb:61:b3:4a:2f:30:91:2d:55:9b:c7:8f: 4b:9f:ec:a7:63:db:cb:7a:51:ef:e7:42:3a:d4:ea: 51:ae:90:df:82:60:f1:17:af:d0:ae:a5:03:ad:6b: 12:aa:bc:b1:af:62:25:af:d3:38:0d:7b:a1:93:fd: 66:e2:8e:de:39:85:52:f7:c8:91:4f:c9:69:99:45: 9c:0c:dc:c8:14:40:24:50:3e:a0:58:d8:6a:39:cf: 45:68:a4:a5:e2:88:09:0e:9a:a0:b3:d2:06:13:45: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.144.0/22 IPv6: 2804:5d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268945 Signature Algorithm: sha256WithRSAEncryption 68:ef:9a:02:3b:43:78:99:05:e1:1a:a2:a6:5a:28:ce:06:f8: e4:72:99:4b:63:81:ac:c7:c7:10:66:22:4b:81:a0:cd:3d:bf: 39:43:7d:26:83:d9:de:11:78:3c:e2:b9:e4:06:18:48:b9:dc: d5:9a:e6:56:22:a2:80:71:f5:27:8c:1a:7e:61:75:43:7f:64: 12:dc:6b:f8:38:42:8e:c5:0e:27:ab:29:a0:e5:54:c1:54:8c: 7e:11:3a:84:21:af:6b:1e:03:b1:58:8b:fc:aa:bc:03:fb:48: a0:32:51:bc:cf:06:2e:50:02:e5:d1:5e:a1:a7:d5:3f:b6:e2: 52:23:60:05:2b:57:2a:00:6a:84:79:d0:51:1c:f3:c3:9c:6e: bb:d9:78:c4:b8:05:35:5a:7e:ff:2e:76:ab:61:d3:f3:0e:8f: d9:10:47:21:1a:cf:a9:00:70:e1:0f:36:ef:2d:8c:e0:77:4b: a7:86:f2:40:8f:85:59:38:f4:e9:4e:82:9a:ab:bc:1b:8a:2d: c3:e5:b1:29:c1:90:55:97:c5:92:30:1b:e4:38:1a:f2:dc:5e: ef:39:a5:f7:97:56:69:d3:92:1e:e9:ea:34:98:c9:b3:0c:9a: 4f:7b:a5:d9:88:93:1f:75:c2:f9:29:46:f6:43:a9:8b:ab:41: 81:2e:ef:a4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM+z09KaIaNd68d83AFqWSRrmY2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjUwODIwMjdaFw0yNjA0MjQwODI1MjdaMDMxMTAvBgNV BAMTKDJCNUY4NEYzOUNBNkEyODQ1NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XOsIYMCsbFNKn6qXxatywF9d C/HypGbuIY0HeJcY0TOhAxV0m4Ig6IUgTDEXopX9+JTkuU0G1G7b0VnCd1rtN5gh e0+AdORGE2O0fnGU6Ej47u0JDxQMJF5Qmelb5OCMOEoEWGXrDQg9llCSFFjifAJn U7+htllE7UKs2LDl2uVCeo/WoY3Yiz82kByKL5r02nq4gX2pb+ths0ovMJEtVZvH j0uf7Kdj28t6Ue/nQjrU6lGukN+CYPEXr9CupQOtaxKqvLGvYiWv0zgNe6GT/Wbi jt45hVL3yJFPyWmZRZwM3MgUQCRQPqBY2Go5z0VopKXiiAkOmqCz0gYTRX0JAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrX4TznKaihFXe l08s9hR6Xh085jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFZ5 Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRW eUNEaVhIc1Axakc5aEFVS0prSkU0amN4eVpHSmhYdWozc3ZhUFYyenVlLzAvMkI1 Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1RTFEM0NFNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbCQMA0EAgACMAcDBQAoBF0AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQakTANBgkqhkiG9w0BAQsFAAOCAQEAaO+aAjtDeJkF4Rqi ploozgb45HKZS2OBrMfHEGYiS4GgzT2/OUN9JoPZ3hF4POK55AYYSLnc1ZrmViKi gHH1J4wafmF1Q39kEtxr+DhCjsUOJ6spoOVUwVSMfhE6hCGvax4DsViL/Kq8A/tI oDJRvM8GLlAC5dFeoafVP7biUiNgBStXKgBqhHnQURzzw5xuu9l4xLgFNVp+/y52 q2HT8w6P2RBHIRrPqQBw4Q827y2M4HdLp4byQI+FWTj06U6Cmqu8G4otw+WxKcGQ VZfFkjAb5Dga8txe7zml95dWadOSHunqNJjJswyaT3ul2YiTH3XC+SlG9kOpi6tB gS7vpA== -----END CERTIFICATE-----Generated at Sat Apr 26 21:58:15 2025 by rpki-client