$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer File: 5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer (raw, json) Hash identifier: E7oxDbRPjeEajLo+ZXnCCxcx8TyTUx4zo+6budG7B8w= Subject key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E1A970B52E14AF9D9BD6BD5759A9E0D68BA2EAC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft caRepository: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 15:52:29 +0000 Certificate not after: Wed 29 Apr 2026 15:57:29 +0000 Subordinate resources: AS: 268153 IP: 45.170.72.0/22 IP: 2804:58d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 00:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1a:97:0b:52:e1:4a:f9:d9:bd:6b:d5:75:9a:9e:0d:68:ba:2e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 15:52:29 2025 GMT Not After : Apr 29 15:57:29 2026 GMT Subject: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:64:c9:1e:85:78:4f:ab:7b:44:9d:8f:ce: 72:44:22:98:66:eb:9d:42:0e:08:f1:f8:76:2d:40: f8:4f:dc:1f:f9:fa:77:08:c1:29:ef:1a:df:0b:18: 8d:a9:08:c2:6c:5c:dd:52:4e:84:58:23:0d:cc:e1: 20:76:8d:31:75:bc:84:ef:68:ae:d9:97:57:a0:ab: e5:cf:4a:5a:20:d8:b2:c1:38:c6:8e:2a:17:1b:e2: be:17:3b:f1:15:4e:9c:db:90:48:45:38:e8:34:87: 40:d4:81:a8:02:c4:fc:30:01:b6:07:29:54:1c:a1: 11:cb:02:4d:e6:49:7e:70:83:a7:48:0b:ac:9b:29: 08:04:89:06:65:cc:0b:8c:0f:c7:a8:6e:a9:fa:74: 29:70:39:27:f1:48:41:71:80:8d:cf:58:6b:e5:21: 03:2d:86:73:11:9a:57:74:b7:77:c7:23:43:1d:7a: 17:89:f1:a4:59:c4:b6:99:c9:22:1a:fe:ce:b0:96: e2:56:dc:c3:b9:72:12:f3:0e:25:22:fe:e7:41:56: d8:ae:36:bc:61:80:1a:02:c8:77:3d:7a:62:af:86: 06:f9:4a:a7:67:2e:63:f0:61:0b:19:d8:e4:6a:8e: 1e:e1:21:9e:3d:a7:26:3d:a5:27:14:10:9e:44:0d: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.72.0/22 IPv6: 2804:58d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268153 Signature Algorithm: sha256WithRSAEncryption b2:ae:ef:f0:30:70:17:11:99:7b:e3:18:38:5a:d5:5c:74:c9: 57:9b:3a:ef:59:c1:38:b8:31:e7:b9:7f:4c:70:2d:3e:a7:17: 4e:c6:47:e7:b4:6b:4f:33:db:18:96:1d:e9:bf:65:4a:cd:81: e0:5e:90:cd:1f:65:6d:97:43:2d:f1:53:1a:b6:02:13:15:60: 0d:80:15:ed:29:97:67:88:05:8e:93:c3:ff:8a:58:07:e5:f9: 1e:a2:9d:9e:5f:17:13:af:ea:5c:9d:08:2a:cf:ed:31:67:13: 45:eb:d7:b1:a1:76:ec:76:22:eb:53:78:1f:bd:50:95:91:7b: 2d:0d:2a:39:26:cf:ac:90:52:b2:37:85:ee:a3:92:e5:94:36: 72:9c:84:0c:09:e6:dc:a1:e8:cf:17:07:44:f2:8e:8b:c0:d1: b0:4f:6d:ed:43:14:ae:61:59:31:04:f3:7a:d3:ee:cf:ac:23: e5:cf:4c:03:a5:1b:be:0a:ce:02:a8:ae:df:5b:a4:0e:0d:bc: 80:3e:e7:b6:1b:28:17:1d:5a:98:1e:26:d4:86:b8:48:d2:a7: 7f:7c:94:83:c7:4f:97:59:db:76:ab:45:81:ef:7a:cc:65:c0: 2b:b1:2b:5d:24:ff:57:11:e2:b9:71:ec:8c:12:1b:73:2a:04: ca:ca:f7:54 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULhqXC1LhSvnZvWvVdZqeDWi6LqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxNTUyMjlaFw0yNjA0MjkxNTU3MjlaMDMxMTAvBgNV BAMTKDVGQTdDQkJCRDFEMUY3OTUxM0MyRUZENTI0N0MzQUE0MkZEMEU3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4mTJHoV4T6t7RJ2PznJEIphm 651CDgjx+HYtQPhP3B/5+ncIwSnvGt8LGI2pCMJsXN1SToRYIw3M4SB2jTF1vITv aK7Zl1egq+XPSlog2LLBOMaOKhcb4r4XO/EVTpzbkEhFOOg0h0DUgagCxPwwAbYH KVQcoRHLAk3mSX5wg6dIC6ybKQgEiQZlzAuMD8eobqn6dClwOSfxSEFxgI3PWGvl IQMthnMRmld0t3fHI0MdeheJ8aRZxLaZySIa/s6wluJW3MO5chLzDiUi/udBVtiu NrxhgBoCyHc9emKvhgb5SqdnLmPwYQsZ2ORqjh7hIZ49pyY9pScUEJ5EDUT5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfp8u70dH3lRPC 79UkfDqkL9DnbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUQ2 OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4SzEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FE NjhvdlFNZ0tmUzg1QjdUNXM2S293WWNxTDM0VWRIdkVoMmNCems5OEsxLzAvNUZB N0NCQkJEMUQxRjc5NTEzQzJFRkQ1MjQ3QzNBQTQyRkQwRTc2Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLapIMA0EAgACMAcDBQAoBFjYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXeTANBgkqhkiG9w0BAQsFAAOCAQEAsq7v8DBwFxGZe+MY OFrVXHTJV5s671nBOLgx57l/THAtPqcXTsZH57RrTzPbGJYd6b9lSs2B4F6QzR9l bZdDLfFTGrYCExVgDYAV7SmXZ4gFjpPD/4pYB+X5HqKdnl8XE6/qXJ0IKs/tMWcT RevXsaF27HYi61N4H71QlZF7LQ0qOSbPrJBSsjeF7qOS5ZQ2cpyEDAnm3KHozxcH RPKOi8DRsE9t7UMUrmFZMQTzetPuz6wj5c9MA6UbvgrOAqiu31ukDg28gD7nthso Fx1amB4m1Ia4SNKnf3yUg8dPl1nbdqtFge96zGXAK7ErXST/VxHiuXHsjBIbcyoE ysr3VA== -----END CERTIFICATE-----Generated at Tue May 6 01:50:13 2025 by rpki-client