$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer File: B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer (raw, json) Hash identifier: DGO36ire9OkGhOg9wpkLI7u5xcKwFXrJX+cOQr+ttMA= Subject key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DD2CC98A3C9088DC684A1F551D9C7CD954AD683 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft caRepository: rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:19 +0000 Certificate not after: Wed 04 Mar 2026 18:40:19 +0000 Subordinate resources: AS: 264311 IP: 138.122.100.0/22 IP: 2804:25f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d2:cc:98:a3:c9:08:8d:c6:84:a1:f5:51:d9:c7:cd:95:4a:d6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:19 2025 GMT Not After : Mar 4 18:40:19 2026 GMT Subject: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:0b:e1:f4:b8:e9:cc:1c:cd:9b:ac:64:b2: 4a:ae:2f:55:64:80:bb:1a:36:1d:76:e5:d0:28:4f: 99:e5:06:2c:01:bc:93:f0:7e:0f:4b:71:a8:06:80: 25:80:e1:e3:07:b1:c6:5e:9e:12:fa:46:15:c5:b6: 68:ef:2d:47:86:f5:c3:f0:40:f6:52:93:8b:41:09: 51:f2:5e:1d:4c:ef:fe:19:e9:02:fd:ba:46:90:49: cf:f7:6a:53:b8:56:7b:e7:1f:45:ef:88:52:c7:9f: c4:07:da:49:5f:49:d3:a6:86:cc:01:f6:2a:97:a2: 53:6b:ac:5c:35:bb:9d:35:7f:31:7f:b1:8b:a0:3c: 59:98:7b:06:05:9d:e8:24:8f:33:6a:a3:9e:ac:25: 35:3b:d5:11:d6:7d:fc:f1:4b:53:d2:9c:c8:dd:ea: 99:69:de:2d:55:6b:9f:e9:c4:67:3e:32:62:8e:6e: 85:ba:3d:33:a6:b3:ae:d4:f3:c9:13:89:64:80:f9: 91:14:31:bd:10:f3:15:5f:d8:79:c9:94:9f:8a:12: 9e:7e:fe:d6:15:c0:8a:31:b0:29:7c:2d:9d:74:7e: 12:eb:71:d6:04:e0:f0:26:cb:81:6c:99:3c:f0:49: 3a:b1:8e:19:b9:ad:c0:22:94:e7:0d:e9:aa:c9:8d: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.100.0/22 IPv6: 2804:25f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264311 Signature Algorithm: sha256WithRSAEncryption 93:0a:c4:0e:32:0a:d5:e7:94:ec:5d:ad:fb:8f:a6:a9:33:ff: 56:7c:5f:ac:e6:be:f3:b7:8c:84:63:d4:f4:aa:3a:81:c0:91: 7b:a6:38:af:6d:74:1f:ad:11:ea:51:06:e5:9d:05:94:b4:20: 8f:3a:be:e5:56:63:75:f4:39:b3:97:34:a2:7d:a5:89:46:c4: 3d:78:4a:ad:03:5f:05:d6:00:42:5c:39:b6:34:a6:0d:ce:91: 15:cd:57:2f:3c:de:44:87:b0:41:0f:45:14:80:a8:bd:6f:f1: b8:4b:72:24:d4:3f:65:4c:06:81:18:5e:af:c1:3c:e2:ea:eb: 57:9c:b8:5e:b8:86:8e:a3:22:d3:29:17:eb:45:11:ad:ce:f2: cf:ae:75:e5:11:ea:77:ac:46:3c:f5:57:97:28:75:1b:e0:1c: aa:a6:a2:d9:c9:08:b7:c0:3f:27:e6:0a:db:62:a0:df:7a:0c: c2:c4:86:29:7d:1d:33:65:c9:fb:6a:32:b7:ce:cb:12:fd:4f: 89:d5:5d:e1:b6:27:18:36:f4:94:b8:93:a4:3d:ae:ca:f3:77: 44:5d:4b:32:4a:39:ea:f9:d1:dc:7a:eb:cf:a7:0c:7f:ad:2e: 2c:9d:f7:cb:64:e9:fd:2a:c1:b8:7a:82:5d:e8:35:b7:d5:01: 9f:a3:01:36 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUXdLMmKPJCI3GhKH1UdnHzZVK1oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MTlaFw0yNjAzMDQxODQwMTlaMDMxMTAvBgNV BAMTKEI1RTBCRTNDNEY3M0Y4NTJCRkYzNTM1NTM3MDM3Q0FFNDgyQTRFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWwvh9LjpzBzNm6xkskquL1Vk gLsaNh125dAoT5nlBiwBvJPwfg9LcagGgCWA4eMHscZenhL6RhXFtmjvLUeG9cPw QPZSk4tBCVHyXh1M7/4Z6QL9ukaQSc/3alO4VnvnH0XviFLHn8QH2klfSdOmhswB 9iqXolNrrFw1u501fzF/sYugPFmYewYFnegkjzNqo56sJTU71RHWffzxS1PSnMjd 6plp3i1Va5/pxGc+MmKOboW6PTOms67U88kTiWSA+ZEUMb0Q8xVf2HnJlJ+KEp5+ /tYVwIoxsCl8LZ10fhLrcdYE4PAmy4FsmTzwSTqxjhm5rcAilOcN6arJjeaXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS14L48T3P4Ur/z U1U3A3yuSCpO+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Nt d3NUSDNncXRRR0h3ZVZEa1ZWNXpFd1FLUmRQdlVBY0RhakFRdDlXUmYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Nt d3NUSDNncXRRR0h3ZVZEa1ZWNXpFd1FLUmRQdlVBY0RhakFRdDlXUmYvMS9CNUUw QkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0RUZBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKemQwDQQCAAIwBwMFACgEJfAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAh3MA0GCSqGSIb3DQEBCwUAA4IBAQCTCsQOMgrV55TsXa37 j6apM/9WfF+s5r7zt4yEY9T0qjqBwJF7pjivbXQfrRHqUQblnQWUtCCPOr7lVmN1 9DmzlzSifaWJRsQ9eEqtA18F1gBCXDm2NKYNzpEVzVcvPN5Eh7BBD0UUgKi9b/G4 S3Ik1D9lTAaBGF6vwTzi6utXnLheuIaOoyLTKRfrRRGtzvLPrnXlEep3rEY89VeX KHUb4ByqpqLZyQi3wD8n5grbYqDfegzCxIYpfR0zZcn7ajK3zssS/U+J1V3hticY NvSUuJOkPa7K83dEXUsySjnq+dHceuvPpwx/rS4snffLZOn9KsG4eoJd6DW31QGf owE2 -----END CERTIFICATE-----Generated at Sun Jun 15 19:25:48 2025 by rpki-client