$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer File: B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer (raw, json) Hash identifier: q5Y2TJzVdsN0GNoP9oO5yctKBoxlm+HzFukwvuGr4SY= Subject key identifier: B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0DEA60883A1F134EB2E9C247A201FBB2460558FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.mft caRepository: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 18:17:26 +0000 Certificate not after: Wed 29 Apr 2026 18:22:26 +0000 Subordinate resources: AS: 269664 IP: 45.191.20.0/22 IP: 2804:6800::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 23:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ea:60:88:3a:1f:13:4e:b2:e9:c2:47:a2:01:fb:b2:46:05:58:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 18:17:26 2025 GMT Not After : Apr 29 18:22:26 2026 GMT Subject: CN=B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:ff:1f:08:a3:da:56:91:f8:23:ee:fe:0c: 7e:63:6a:69:d6:18:2c:cf:33:9b:1d:af:0a:11:97: 8d:8d:78:87:2a:73:72:1d:3a:86:a7:e8:7b:77:5f: 8c:df:c2:0a:7b:6b:df:38:0e:92:dd:bf:e7:bb:18: 05:39:d3:b1:81:42:b5:28:1a:c7:f4:00:cf:88:98: ba:17:a0:38:66:fe:3b:74:cf:c2:72:73:14:fa:22: e8:c7:0b:42:7f:a7:e3:02:e2:59:8e:b8:39:d9:7f: 62:f6:76:50:46:72:5b:44:b8:af:16:02:d9:12:95: 0b:52:4e:53:5a:31:c2:c0:87:62:20:5a:55:bc:44: ee:85:ef:0f:c7:ab:71:20:31:93:98:31:04:a2:26: 74:c1:3f:44:ad:3f:2a:e1:c1:3f:26:d6:bc:d2:62: 66:2d:38:7f:6e:30:9b:e2:ce:db:2c:0e:cc:d2:9f: be:f2:44:ed:34:53:d1:36:dd:6a:a4:6c:7c:98:69: a1:49:e1:bd:b1:80:7b:ef:a9:13:73:03:c7:77:0e: 8c:d2:3e:a3:54:bf:59:60:9d:c7:69:c3:c4:36:1d: a9:17:16:f4:d3:1f:27:8e:ad:9d:23:b2:d8:88:94: 7f:c8:57:b7:ca:e4:b9:a5:20:31:c4:db:b8:21:fa: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.20.0/22 IPv6: 2804:6800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269664 Signature Algorithm: sha256WithRSAEncryption 7d:e4:e8:6a:5a:6b:66:30:cd:66:88:f8:58:37:fb:04:8b:67: ca:ee:ec:b1:66:37:31:b0:4a:fa:2c:93:e0:bf:a0:de:10:2c: 61:ff:69:55:37:41:c4:eb:f6:61:42:92:c7:e1:94:cf:21:92: 7c:17:69:10:cb:12:9f:f9:9f:7b:50:31:53:c7:d1:ee:2d:87: bb:ca:4c:7a:66:41:42:7a:d8:24:72:e5:9d:ed:23:3c:40:5a: e8:dd:0e:cd:63:5a:f6:6c:ef:8f:26:b3:8c:54:70:54:ff:df: bb:91:a7:07:dd:bb:e9:ca:ba:0b:89:58:d9:eb:e5:bf:9c:91: 4e:d4:28:f1:c1:e8:77:db:d2:c6:08:01:31:4e:94:d0:e6:a7: 60:3f:87:a9:4e:e2:fb:c3:8f:51:53:5c:58:eb:99:9e:27:f6: 49:12:71:01:d2:fc:24:cb:b8:9a:81:33:5c:ae:df:e6:f8:3d: c0:d7:16:39:47:24:77:94:82:e7:a0:53:15:f5:41:0e:70:88: b1:85:3f:0d:72:b8:da:1c:41:3b:f5:16:a4:d5:b5:7a:1d:6b: 2b:81:f7:a1:17:3f:05:19:96:ad:67:d9:ab:19:4d:d3:22:ed: a5:9f:ac:c7:5e:ae:66:4e:93:3d:37:15:d5:1b:fa:87:7f:06: 96:0c:b5:d3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDepgiDofE06y6cJHogH7skYFWP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxODE3MjZaFw0yNjA0MjkxODIyMjZaMDMxMTAvBgNV BAMTKEIxRUE2RUJGOEEyOURBMkE3MTFBNDBGQUY3NUQ2REQyN0Y1NjE3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8/8fCKPaVpH4I+7+DH5jamnW GCzPM5sdrwoRl42NeIcqc3IdOoan6Ht3X4zfwgp7a984DpLdv+e7GAU507GBQrUo Gsf0AM+ImLoXoDhm/jt0z8JycxT6IujHC0J/p+MC4lmOuDnZf2L2dlBGcltEuK8W AtkSlQtSTlNaMcLAh2IgWlW8RO6F7w/Hq3EgMZOYMQSiJnTBP0StPyrhwT8m1rzS YmYtOH9uMJviztssDszSn77yRO00U9E23WqkbHyYaaFJ4b2xgHvvqRNzA8d3DozS PqNUv1lgncdpw8Q2HakXFvTTHyeOrZ0jstiIlH/IV7fK5LmlIDHE27gh+tA5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSx6m6/iinaKnEa QPr3XW3Sf1YXozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdM WlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1NzQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh3 TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzAvQjFF QTZFQkY4QTI5REEyQTcxMUE0MEZBRjc1RDZERDI3RjU2MTdBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb8UMA0EAgACMAcDBQAoBGgAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdYDANBgkqhkiG9w0BAQsFAAOCAQEAfeToalprZjDNZoj4 WDf7BItnyu7ssWY3MbBK+iyT4L+g3hAsYf9pVTdBxOv2YUKSx+GUzyGSfBdpEMsS n/mfe1AxU8fR7i2Hu8pMemZBQnrYJHLlne0jPEBa6N0OzWNa9mzvjyazjFRwVP/f u5GnB9276cq6C4lY2evlv5yRTtQo8cHod9vSxggBMU6U0OanYD+HqU7i+8OPUVNc WOuZnif2SRJxAdL8JMu4moEzXK7f5vg9wNcWOUckd5SC56BTFfVBDnCIsYU/DXK4 2hxBO/UWpNW1eh1rK4H3oRc/BRmWrWfZqxlN0yLtpZ+sx16uZk6TPTcV1Rv6h38G lgy10w== -----END CERTIFICATE-----Generated at Sun May 4 08:29:29 2025 by rpki-client