$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer File: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer (raw, json) Hash identifier: BiR+Qux+4SYJ8HQ/aAmDt99FQ1ijv+41QbXSseqUKr4= Subject key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4DE8ECD8826E3AA1ADA3427FD8893AB59FF1D0D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft caRepository: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 May 2025 01:03:05 +0000 Certificate not after: Tue 05 May 2026 01:08:05 +0000 Subordinate resources: AS: 268126 IP: 45.169.228.0/22 IP: 2804:5864::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e8:ec:d8:82:6e:3a:a1:ad:a3:42:7f:d8:89:3a:b5:9f:f1:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 01:03:05 2025 GMT Not After : May 5 01:08:05 2026 GMT Subject: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:57:52:22:5f:04:55:5f:1a:05:67:db:8d: 0e:9d:c3:b7:23:8d:d8:27:37:7f:94:15:21:49:95: 71:25:18:b3:89:35:8a:a8:b0:8e:22:d2:49:6c:73: b9:d7:89:25:37:48:be:14:2e:f7:94:4c:a4:0f:24: f4:24:20:ae:4e:97:8b:c8:51:f1:96:76:c0:23:b6: 32:78:75:25:28:35:cc:6c:4d:1f:da:45:9b:73:36: 01:b7:a0:fe:82:b4:9e:e9:74:65:63:1b:9a:f4:b9: 3b:c8:4e:54:c3:f3:ae:48:14:9c:7b:00:46:29:eb: 3f:2e:95:8d:6a:62:ed:0e:52:bc:f2:54:c6:4f:3e: e3:77:ed:83:01:5c:d2:cc:68:8f:6e:90:b0:cb:9a: 01:11:6a:01:c6:de:c0:80:32:f7:34:0b:24:ee:e0: 80:d5:a0:ae:f0:31:0c:d0:5c:a6:2d:e6:21:43:f5: 38:eb:3d:27:ff:f0:ca:40:e2:ca:fa:8c:12:52:cf: 49:1f:af:4c:32:bf:e4:bc:81:cc:86:83:e8:3c:d1: f4:29:cc:0d:fc:b0:24:78:6e:af:c0:44:b2:a5:72: 7b:10:b5:7b:b6:e4:ad:dc:5c:66:ef:d2:22:a9:37: 34:c4:b5:90:6e:9e:3a:76:05:13:f9:f8:cf:08:e1: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.228.0/22 IPv6: 2804:5864::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268126 Signature Algorithm: sha256WithRSAEncryption 21:36:af:d7:9b:04:77:91:0f:3d:d5:be:15:7c:98:d5:b0:28: c6:db:16:99:3f:1a:e0:8f:96:82:33:0f:2c:fc:6a:54:01:5a: 64:77:8a:a2:16:73:7f:b8:53:98:b0:fc:3a:3e:e8:d2:3e:61: 65:8d:d4:b9:7d:87:d4:91:6f:85:c0:17:e4:b0:cf:fa:ef:1d: 6a:de:75:67:91:10:03:45:0a:b3:15:52:60:9e:53:d5:cd:28: 23:d6:c8:74:14:1a:5f:de:5b:c4:f1:b4:bc:e4:4c:ae:17:1b: 2b:f9:1f:2c:2c:ab:96:a1:83:4e:d2:43:97:47:72:3c:0e:53: a3:46:10:99:56:09:9d:ff:ba:e1:67:7b:0d:91:74:09:16:f1: 5c:d9:9b:65:c3:f0:d1:95:bf:d7:cd:cd:5f:c1:fe:db:7d:1c: 59:1f:9b:b8:ec:1e:5c:62:b3:78:92:4b:42:9f:1c:9f:fd:f4: 17:8b:63:ef:0d:9c:68:e7:2d:fa:de:b9:b4:dd:23:e7:c6:f2: 86:fc:c0:f4:6c:27:9f:cb:6a:9f:2e:dc:59:39:cb:c1:62:1e: f3:9d:42:f7:14:46:b0:c4:43:06:f7:77:e2:b4:7c:d2:0b:0a: 2f:65:1f:ea:ba:1d:0b:e2:f9:4f:82:00:c7:bb:48:45:f6:b8: d4:f8:1f:28 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTejs2IJuOqGto0J/2Ik6tZ/x0NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDYwMTAzMDVaFw0yNjA1MDUwMTA4MDVaMDMxMTAvBgNV BAMTKDY4OTdFODY3Q0U2MTUwMDM5RDBGQUQ0RjYxMjJGN0FFMzE1NkQ1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwFdSIl8EVV8aBWfbjQ6dw7cj jdgnN3+UFSFJlXElGLOJNYqosI4i0klsc7nXiSU3SL4ULveUTKQPJPQkIK5Ol4vI UfGWdsAjtjJ4dSUoNcxsTR/aRZtzNgG3oP6CtJ7pdGVjG5r0uTvITlTD865IFJx7 AEYp6z8ulY1qYu0OUrzyVMZPPuN37YMBXNLMaI9ukLDLmgERagHG3sCAMvc0CyTu 4IDVoK7wMQzQXKYt5iFD9TjrPSf/8MpA4sr6jBJSz0kfr0wyv+S8gcyGg+g80fQp zA38sCR4bq/ARLKlcnsQtXu25K3cXGbv0iKpNzTEtZBunjp2BRP5+M8I4UJzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRol+hnzmFQA50P rU9hIveuMVbVojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdN cWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1VhakEvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3 TXFmellQSFlybWNrVWJQMWR0TVF5bjhUeDNRdWg1N05TYTJGZ2tVYWpBLzIvNjg5 N0U4NjdDRTYxNTAwMzlEMEZBRDRGNjEyMkY3QUUzMTU2RDVBMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLankMA0EAgACMAcDBQAoBFhkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXXjANBgkqhkiG9w0BAQsFAAOCAQEAITav15sEd5EPPdW+ FXyY1bAoxtsWmT8a4I+WgjMPLPxqVAFaZHeKohZzf7hTmLD8Oj7o0j5hZY3UuX2H 1JFvhcAX5LDP+u8dat51Z5EQA0UKsxVSYJ5T1c0oI9bIdBQaX95bxPG0vORMrhcb K/kfLCyrlqGDTtJDl0dyPA5To0YQmVYJnf+64Wd7DZF0CRbxXNmbZcPw0ZW/183N X8H+230cWR+buOweXGKzeJJLQp8cn/30F4tj7w2caOct+t65tN0j58byhvzA9Gwn n8tqny7cWTnLwWIe851C9xRGsMRDBvd34rR80gsKL2Uf6rodC+L5T4IAx7tIRfa4 1PgfKA== -----END CERTIFICATE-----Generated at Sun Jun 15 17:37:38 2025 by rpki-client