$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer File: 2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer (raw, json) Hash identifier: SQAGdQsaa8s3s51g2oJdsao0/ZMJ89PgLjaVsrHrF8g= Subject key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6BDDFEEFB55C0507ECEA5A665F715F585A82F536 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 20:54:40 +0000 Certificate not after: Wed 06 May 2026 20:59:40 +0000 Subordinate resources: AS: 264397 IP: 131.161.92.0/22 IP: 164.163.36.0/22 IP: 170.239.96.0/22 IP: 2804:1dd4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 18:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:dd:fe:ef:b5:5c:05:07:ec:ea:5a:66:5f:71:5f:58:5a:82:f5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 20:54:40 2025 GMT Not After : May 6 20:59:40 2026 GMT Subject: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:94:9a:42:53:74:fd:60:76:e1:f0:ac:f0: 7c:15:3b:32:9c:16:51:c9:16:65:b5:58:15:2c:1a: 2e:26:13:f2:60:28:c0:50:ef:d5:79:f1:2e:73:13: a9:e7:21:40:c9:ce:ed:eb:16:b3:d8:bd:f9:61:a8: 33:01:b4:b5:5f:4d:90:fd:7b:cf:fd:71:4e:d7:57: 21:c0:74:25:e4:df:a8:c3:71:b1:5e:be:bb:46:c5: 9b:82:22:73:67:0d:bb:52:72:d0:77:0f:f5:76:ac: 89:52:f3:c5:07:aa:41:5f:d3:c5:a8:e7:f6:50:41: d1:59:08:b2:82:83:f4:11:26:44:00:2c:dc:37:8e: 9c:0b:79:e7:4c:7d:c0:42:fe:d9:a8:c6:65:cd:68: 05:a0:47:f7:76:4d:7e:cc:58:f1:84:8f:7c:7a:cb: 2b:b9:65:f6:7a:a5:a6:69:e3:81:6a:b8:bd:22:25: e9:59:c6:8d:15:6c:74:f5:df:b4:f9:8f:f0:85:e3: c7:38:d7:6d:76:74:42:f8:20:dd:7a:20:27:e4:31: 3c:ee:92:f3:a6:1b:46:fc:1e:5a:da:42:3b:ae:44: 89:a6:9c:0f:f5:f3:03:a5:0f:7c:4c:1d:ad:d8:2d: d2:a9:f1:b1:72:7f:91:31:9e:4b:f7:58:7d:ea:08: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.92.0/22 164.163.36.0/22 170.239.96.0/22 IPv6: 2804:1dd4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264397 Signature Algorithm: sha256WithRSAEncryption 1d:15:d5:b4:14:cc:2d:dd:62:c1:52:b6:93:1c:2a:77:dc:60: 4c:95:10:83:a0:56:93:5f:fc:57:9b:42:b7:d5:ec:2b:f9:2d: d6:fc:53:11:62:b2:df:4e:af:6d:f7:33:57:e5:d8:54:36:20: 47:e9:6a:a3:bb:a8:71:bd:21:06:83:8b:8b:18:29:36:d8:92: d8:e0:79:c0:20:e3:a6:39:7d:01:ac:c8:25:14:a1:84:06:b4: fa:b8:dd:a6:3f:58:05:09:4c:1a:97:cf:70:d5:cc:69:d0:28: af:99:75:5f:df:c6:96:8c:1a:b1:63:20:6f:16:f8:4e:16:3a: 12:99:14:53:be:d6:ff:08:b6:7c:b3:19:ae:8f:b0:6e:0f:fe: 39:4a:f4:a6:8b:d8:7a:a5:84:30:dc:6c:d8:ae:94:a8:48:b3: ef:fc:20:55:51:47:ec:85:c1:1a:71:92:33:8b:86:94:7a:b1: a5:c5:62:fd:84:44:27:03:86:2f:e5:42:0e:04:24:71:25:18: 64:62:7b:6e:1a:7b:3c:1c:80:44:60:55:74:d8:d1:83:3f:f3: ce:dd:7c:a6:49:dc:4a:07:15:a1:90:95:e7:b7:11:09:fa:a5: c9:67:6f:f7:bc:ab:19:bf:b8:24:0f:f4:da:47:b1:56:4b:29: 1e:9c:4a:93 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUa93+77VcBQfs6lpmX3FfWFqC9TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcyMDU0NDBaFw0yNjA1MDYyMDU5NDBaMDMxMTAvBgNV BAMTKDJDNDdBNkUxODE1MUE4MjhBNTcwMEQyQjdFMTZDOUExRkNBQkQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1ZSaQlN0/WB24fCs8HwVOzKc FlHJFmW1WBUsGi4mE/JgKMBQ79V58S5zE6nnIUDJzu3rFrPYvflhqDMBtLVfTZD9 e8/9cU7XVyHAdCXk36jDcbFevrtGxZuCInNnDbtSctB3D/V2rIlS88UHqkFf08Wo 5/ZQQdFZCLKCg/QRJkQALNw3jpwLeedMfcBC/tmoxmXNaAWgR/d2TX7MWPGEj3x6 yyu5ZfZ6paZp44FquL0iJelZxo0VbHT137T5j/CF48c41212dEL4IN16ICfkMTzu kvOmG0b8HlraQjuuRImmnA/18wOlD3xMHa3YLdKp8bFyf5Exnkv3WH3qCDyxAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsR6bhgVGoKKVw DSt+Fsmh/KvSCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ296 WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNyOGEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nv elpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAvMkM0 N0E2RTE4MTUxQTgyOEE1NzAwRDJCN0UxNkM5QTFGQ0FCRDIwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCg6FcAwQCpKMkAwQCqu9gMA0EAgACMAcDBQAoBB3U MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQIzTANBgkqhkiG9w0BAQsFAAOCAQEA HRXVtBTMLd1iwVK2kxwqd9xgTJUQg6BWk1/8V5tCt9XsK/kt1vxTEWKy306vbfcz V+XYVDYgR+lqo7uocb0hBoOLixgpNtiS2OB5wCDjpjl9AazIJRShhAa0+rjdpj9Y BQlMGpfPcNXMadAor5l1X9/GlowasWMgbxb4ThY6EpkUU77W/wi2fLMZro+wbg/+ OUr0povYeqWEMNxs2K6UqEiz7/wgVVFH7IXBGnGSM4uGlHqxpcVi/YREJwOGL+VC DgQkcSUYZGJ7bhp7PByARGBVdNjRgz/zzt18pkncSgcVoZCV57cRCfqlyWdv97yr Gb+4JA/02kexVkspHpxKkw== -----END CERTIFICATE-----Generated at Mon Jun 16 18:59:35 2025 by rpki-client