$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer File: 6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer (raw, json) Hash identifier: 8BuzVw07t5WGa7QOq4cTagBeOuhpD1uPplJKdKP5P4A= Subject key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5FB3084190A1736ADBEA8AF4F63F61C8CFA281CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft caRepository: rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:36 +0000 Certificate not after: Wed 04 Mar 2026 18:40:36 +0000 Subordinate resources: AS: 264426 IP: 131.221.188.0/22 IP: 143.0.88.0/22 IP: 170.0.148.0/22 IP: 170.239.116.0/22 IP: 2804:1e64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 04:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b3:08:41:90:a1:73:6a:db:ea:8a:f4:f6:3f:61:c8:cf:a2:81:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:36 2025 GMT Not After : Mar 4 18:40:36 2026 GMT Subject: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:d0:ff:be:a4:38:44:19:b4:34:06:d0:8b: 8b:41:85:09:d5:e7:52:da:35:d1:f8:51:9c:d7:90: 9b:a8:52:05:5f:c0:38:bd:b8:fb:f4:11:87:66:5a: e5:2f:c0:d6:04:ed:08:f8:6d:7e:05:59:be:31:0d: ce:ec:01:bf:77:80:f1:75:43:65:a1:45:aa:92:d9: dc:d1:73:52:5e:7b:cd:8c:95:e8:b8:5b:9e:9e:56: 12:a8:67:27:9e:37:0b:7f:ee:47:4e:73:06:2d:03: 50:54:c6:ec:d3:ae:bc:65:72:97:7c:89:e6:e4:69: 28:38:72:72:3b:70:cd:dd:1b:e1:04:f0:2f:20:0a: da:f3:19:32:99:b5:6d:f7:d5:cf:ba:c4:7c:f1:b4: ca:25:5e:49:73:75:cc:00:f8:b0:96:e2:c7:27:5e: 6d:f3:74:71:b4:0b:30:52:0c:93:6e:a3:cf:0e:c9: c6:b8:34:2d:bb:ea:2b:90:0e:34:5e:55:0a:1f:91: b5:02:09:61:ca:a4:87:25:c9:1a:43:da:38:a2:58: 10:3e:9d:55:f4:19:23:cd:1b:2f:5c:8e:07:93:50: 01:a4:b1:fc:14:2d:d8:a9:0c:25:5c:07:46:98:9f: 8f:9d:9a:90:6a:1a:af:b7:3e:58:7e:99:2e:3a:1d: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.188.0/22 143.0.88.0/22 170.0.148.0/22 170.239.116.0/22 IPv6: 2804:1e64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264426 Signature Algorithm: sha256WithRSAEncryption 3c:37:7e:7c:bc:e8:22:7e:e9:d5:30:25:f0:c7:5e:02:cf:2c: 9e:c6:51:ad:92:b7:d1:44:e6:0c:83:76:73:90:20:68:7a:5e: c6:aa:86:2d:66:76:bb:86:48:bc:e8:ca:8b:fe:ff:5c:dd:f4: 2d:27:c0:58:6d:c8:82:36:ff:53:cc:68:df:d7:34:ea:d1:7d: 61:ee:81:2d:52:26:c2:3f:58:19:c1:38:e6:52:d4:8b:ef:3b: c0:26:27:e6:dd:8d:16:93:b5:4a:44:66:14:8a:b4:5c:9b:21: 39:13:69:19:83:8b:97:58:74:da:ff:37:dc:5f:17:24:a7:23: 48:6b:ea:5f:80:6d:e5:23:d2:e4:72:25:2b:6f:9d:c5:9a:3a: 7e:4e:4e:54:c4:d2:ed:c6:d1:d3:3c:62:11:a3:cf:02:d7:72: 80:aa:71:d2:1a:ff:e0:c2:70:6c:69:a6:83:22:6f:a5:c5:fc: be:b1:c7:18:15:be:1c:1c:11:a9:34:c8:3a:75:d9:b1:83:8a: 4d:7f:8a:67:76:eb:64:48:6e:64:33:ff:f5:12:c2:6e:28:2a: 28:9d:e0:13:35:78:29:dd:73:80:e2:81:99:8e:ec:63:f8:43: d6:e6:8b:4d:18:bd:06:b5:19:25:61:78:fe:c3:ce:01:33:de: db:9c:5e:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUX7MIQZChc2rb6or09j9hyM+igc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzZaFw0yNjAzMDQxODQwMzZaMDMxMTAvBgNV BAMTKDZCMjhGQUZFQzUxNEVDNzEyQkE1OEUwMzlCQzg5MzQ5MUVDRDBGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRtD/vqQ4RBm0NAbQi4tBhQnV 51LaNdH4UZzXkJuoUgVfwDi9uPv0EYdmWuUvwNYE7Qj4bX4FWb4xDc7sAb93gPF1 Q2WhRaqS2dzRc1Jee82Mlei4W56eVhKoZyeeNwt/7kdOcwYtA1BUxuzTrrxlcpd8 iebkaSg4cnI7cM3dG+EE8C8gCtrzGTKZtW331c+6xHzxtMolXklzdcwA+LCW4scn Xm3zdHG0CzBSDJNuo88Oyca4NC276iuQDjReVQofkbUCCWHKpIclyRpD2jiiWBA+ nVX0GSPNGy9cjgeTUAGksfwULdipDCVcB0aYn4+dmpBqGq+3Plh+mS46HS4/AgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrKPr+xRTscSul jgObyJNJHs0P0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGdV UjFQelB2dm5zSERIdk1qQnR4R0V6MnhQQk1jdld1dDZkR2pMUlJxZ0IvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhn VVIxUHpQdnZuc0hESHZNakJ0eEdFejJ4UEJNY3ZXdXQ2ZEdqTFJScWdCLzEvNkIy OEZBRkVDNTE0RUM3MTJCQTU4RTAzOUJDODkzNDkxRUNEMEZEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCg928AwQCjwBYAwQCqgCUAwQCqu90MA0EAgACMAcD BQAoBB5kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQI6jANBgkqhkiG9w0BAQsF AAOCAQEAPDd+fLzoIn7p1TAl8MdeAs8snsZRrZK30UTmDIN2c5AgaHpexqqGLWZ2 u4ZIvOjKi/7/XN30LSfAWG3Igjb/U8xo39c06tF9Ye6BLVImwj9YGcE45lLUi+87 wCYn5t2NFpO1SkRmFIq0XJshORNpGYOLl1h02v833F8XJKcjSGvqX4Bt5SPS5HIl K2+dxZo6fk5OVMTS7cbR0zxiEaPPAtdygKpx0hr/4MJwbGmmgyJvpcX8vrHHGBW+ HBwRqTTIOnXZsYOKTX+KZ3brZEhuZDP/9RLCbigqKJ3gEzV4Kd1zgOKBmY7sY/hD 1uaLTRi9BrUZJWF4/sPOATPe25xecA== -----END CERTIFICATE-----Generated at Mon Jun 16 04:28:36 2025 by rpki-client