$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer File: 62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer (raw, json) Hash identifier: veoh/dg5I1VSxYCR9Vw39luo5GoXI7j1trIrfhWqiss= Subject key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70E4FAFE0347021AC92D1C101C9B7B2146DA555F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft caRepository: rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 May 2025 23:22:04 +0000 Certificate not after: Fri 29 May 2026 23:27:04 +0000 Subordinate resources: AS: 265229 IP: 168.0.52.0/22 IP: 170.247.208.0/22 IP: 2804:2c98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e4:fa:fe:03:47:02:1a:c9:2d:1c:10:1c:9b:7b:21:46:da:55:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 30 23:22:04 2025 GMT Not After : May 29 23:27:04 2026 GMT Subject: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:b4:94:4b:b8:35:91:10:af:40:b2:e2:42: 5b:19:4c:ae:60:60:8e:9e:e1:14:0f:96:7f:80:2b: 22:d3:96:9a:58:a8:66:85:bd:0c:ed:16:11:c4:99: dd:15:d6:8b:cc:55:9b:53:d1:0d:55:54:13:ae:61: 6b:d1:98:4e:27:8d:22:d1:96:7b:08:32:81:5f:3b: a7:33:4a:89:4c:ed:be:a1:e9:72:39:76:56:3d:81: cc:84:ff:32:87:59:2a:8b:14:2a:d1:0f:70:7e:cd: 4d:76:3a:a3:f1:d2:aa:35:2f:d6:7c:c0:7d:83:3c: 34:6e:5b:5b:98:7b:fb:c8:f4:bd:7a:0c:96:18:b2: f8:6a:1e:16:f9:b5:2e:44:7f:29:53:f5:a3:da:43: 5a:eb:92:76:0f:fa:5a:ed:9e:f9:37:5f:e2:a9:7d: 70:cf:07:49:42:bc:ab:bb:07:0f:bc:c8:2f:38:b5: 02:6c:46:3a:c6:55:28:81:e8:fd:8c:36:5c:6b:e9: 69:d9:0f:60:ab:51:fe:e7:f1:25:6c:f2:21:1e:23: 3d:8b:f7:6d:0c:66:42:91:f0:0f:5b:9c:10:ed:60: 6b:aa:29:48:e8:97:af:e0:99:e4:02:d9:c3:0c:19: 94:e2:73:be:d9:e7:27:b2:d0:1b:ab:67:4f:69:04: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.52.0/22 170.247.208.0/22 IPv6: 2804:2c98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265229 Signature Algorithm: sha256WithRSAEncryption bf:59:9f:c8:35:81:7c:0b:82:d4:b6:b8:20:4c:dd:84:8f:89: 25:77:76:95:1b:ae:4f:7d:40:16:97:11:95:a3:1b:6f:b4:60: 95:66:1a:c6:8a:69:4f:1c:4d:95:41:82:9f:2b:d6:b1:8c:79: 6f:4d:db:c3:1e:3a:06:3c:25:0f:1f:d1:9b:c7:d6:c2:91:a3: b1:e6:be:3d:50:37:c3:b6:82:a9:b5:85:6c:8b:be:06:25:02: 6f:3d:92:82:5b:3f:52:2d:bb:62:99:c0:b9:2d:b0:90:b6:46: d0:a9:a0:79:15:89:54:80:78:4d:00:26:f6:bc:bf:21:d1:a8: 60:7e:29:a7:cd:af:13:86:09:d5:ca:bd:86:46:3a:4d:6e:38: b7:5c:ec:e2:d0:ff:d6:13:1a:49:28:1a:71:56:9c:ae:77:60: 18:4d:3a:32:54:7b:77:8a:59:71:22:94:0a:90:0a:ef:d7:19: 85:24:5d:b3:55:10:15:ab:98:6e:2e:b5:61:02:14:f9:6a:a9: 7c:d6:bf:4c:4b:d7:34:f4:11:82:39:61:f0:ef:6f:db:48:76: 4b:15:9a:00:80:36:8d:68:cc:47:fe:cc:77:31:9a:96:45:32: 94:37:98:80:e1:fc:fa:41:5f:4b:31:bc:4c:c8:9c:8a:5e:32: 2b:ec:4f:41 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUcOT6/gNHAhrJLRwQHJt7IUbaVV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MzAyMzIyMDRaFw0yNjA1MjkyMzI3MDRaMDMxMTAvBgNV BAMTKDYyRTNEQUYyQkEwQUY4OEYxM0U2RDhCOEE2QjQ2QTMxODIyNjY1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDrSUS7g1kRCvQLLiQlsZTK5g YI6e4RQPln+AKyLTlppYqGaFvQztFhHEmd0V1ovMVZtT0Q1VVBOuYWvRmE4njSLR lnsIMoFfO6czSolM7b6h6XI5dlY9gcyE/zKHWSqLFCrRD3B+zU12OqPx0qo1L9Z8 wH2DPDRuW1uYe/vI9L16DJYYsvhqHhb5tS5EfylT9aPaQ1rrknYP+lrtnvk3X+Kp fXDPB0lCvKu7Bw+8yC84tQJsRjrGVSiB6P2MNlxr6WnZD2CrUf7n8SVs8iEeIz2L 920MZkKR8A9bnBDtYGuqKUjol6/gmeQC2cMMGZTic77Z5yey0BurZ09pBFknAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRi49ryugr4jxPm 2LimtGoxgiZlajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8va0E2 YmlKZG9KeXFCd1FOcnViWGdWNGdaMjJmRkJ4a0dVdGJMOXhOeGg0VS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8va0E2 YmlKZG9KeXFCd1FOcnViWGdWNGdaMjJmRkJ4a0dVdGJMOXhOeGg0VS8wLzYyRTNE QUYyQkEwQUY4OEYxM0U2RDhCOEE2QjQ2QTMxODIyNjY1NkEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAqgANAMEAqr30DANBAIAAjAHAwUAKAQsmDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEDA0wDQYJKoZIhvcNAQELBQADggEBAL9Zn8g1gXwL gtS2uCBM3YSPiSV3dpUbrk99QBaXEZWjG2+0YJVmGsaKaU8cTZVBgp8r1rGMeW9N 28MeOgY8JQ8f0ZvH1sKRo7Hmvj1QN8O2gqm1hWyLvgYlAm89koJbP1Itu2KZwLkt sJC2RtCpoHkViVSAeE0AJva8vyHRqGB+KafNrxOGCdXKvYZGOk1uOLdc7OLQ/9YT GkkoGnFWnK53YBhNOjJUe3eKWXEilAqQCu/XGYUkXbNVEBWrmG4utWECFPlqqXzW v0xL1zT0EYI5YfDvb9tIdksVmgCANo1ozEf+zHcxmpZFMpQ3mIDh/PpBX0sxvEzI nIpeMivsT0E= -----END CERTIFICATE-----Generated at Sun Jun 15 17:34:37 2025 by rpki-client