$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer (raw, json) Hash identifier: 12LSHbu+YEmScIxcZNk/IUx2aVaSZCst3/pdFYpvrlc= Subject key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D93F051D2274CEAB6B0A540F6E68156956180D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft caRepository: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 11:52:14 +0000 Certificate not after: Fri 06 Mar 2026 11:57:14 +0000 Subordinate resources: AS: 263139 IP: 177.44.220.0/22 IP: 2804:1758::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:93:f0:51:d2:27:4c:ea:b6:b0:a5:40:f6:e6:81:56:95:61:80:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 11:52:14 2025 GMT Not After : Mar 6 11:57:14 2026 GMT Subject: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:78:3e:8a:60:a5:e8:40:49:92:1a:e8:d5: 1f:4e:d5:bf:54:09:b3:43:5c:c5:cc:cf:6f:39:c0: 9e:ca:9b:25:65:67:5a:33:cf:2c:70:d1:c7:bf:be: 5f:42:d1:a7:1e:69:95:c3:4e:6a:fd:21:47:4c:d9: eb:97:81:1e:e4:3f:1b:78:30:7a:6f:a2:c5:74:2e: c7:8c:af:28:25:e9:28:cf:83:4d:f8:67:7e:de:82: df:76:49:b6:1a:55:fc:35:12:08:0e:95:31:01:f3: 56:75:6c:88:7b:18:29:f2:bd:bf:26:7a:48:d6:b8: 30:98:d2:88:54:b5:66:1f:c0:ad:04:a9:c2:66:95: 87:5e:de:e8:a4:68:ac:af:a2:c0:08:45:d3:c0:d0: 75:d1:a8:d6:10:c4:6d:86:af:3e:8e:f4:4e:e7:1e: 8e:66:e8:24:5a:24:a3:a1:cc:a9:4f:7b:57:f2:b5: 61:4a:26:03:27:7b:77:25:8c:03:46:11:9f:26:7b: 49:b2:4f:cc:c0:09:f9:50:5f:8b:7a:c9:c6:86:73: d3:21:dd:7b:15:a5:48:14:ed:60:64:f8:33:ac:bc: 96:d5:80:d8:89:bb:34:94:82:10:23:da:fb:fa:b3: 40:65:dd:0c:63:56:71:c9:f4:f7:40:c1:8e:04:5c: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.44.220.0/22 IPv6: 2804:1758::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263139 Signature Algorithm: sha256WithRSAEncryption 77:6f:4e:06:03:1f:4c:90:b5:6a:74:75:e0:7b:53:5f:90:ec: 91:62:19:99:bb:b3:32:4f:45:25:be:ff:9b:bd:6d:4b:db:12: 0d:8a:d3:44:a0:c9:61:45:de:d7:46:e6:72:66:36:92:66:3c: 34:91:14:6a:c6:b1:58:5f:e8:af:42:55:71:a4:12:74:f3:88: ae:aa:ea:f1:02:ca:e3:39:24:c6:25:30:82:6e:a7:f2:b5:ae: 87:19:b0:bb:18:c0:7a:a2:77:68:83:85:0e:5e:ef:23:a8:59: ec:84:ea:ec:d8:be:75:e2:c6:3c:cd:53:72:ba:e5:3f:1e:df: c9:8c:ed:39:ad:b6:f1:93:a5:21:d2:c6:5d:eb:e5:41:07:33: c6:72:4a:2e:9e:fc:9e:c1:47:f1:3f:e7:fd:85:23:b7:3a:72: ea:63:c1:92:70:7f:1a:2a:f9:5d:b4:84:ee:49:8d:df:16:1e: cd:69:ff:4b:c2:86:a4:67:da:ee:9d:e9:c2:b6:83:c7:92:8b: 86:b0:4f:65:b9:30:f1:71:ba:b7:84:34:00:3c:2b:60:cb:cd: 67:36:f6:27:72:2b:9a:21:37:9d:74:b2:7b:c8:40:77:79:a4: 96:9b:cb:06:9d:5e:f0:83:83:8b:97:64:0a:c4:c8:ce:91:88: 94:75:97:53 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUXZPwUdInTOq2sKVA9uaBVpVhgNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMTUyMTRaFw0yNjAzMDYxMTU3MTRaMDMxMTAvBgNV BAMTKEJERTZFMENEQ0REN0MzMzdENjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KXg+imCl6EBJkhro1R9O1b9U CbNDXMXMz285wJ7KmyVlZ1ozzyxw0ce/vl9C0aceaZXDTmr9IUdM2euXgR7kPxt4 MHpvosV0LseMrygl6SjPg034Z37egt92SbYaVfw1EggOlTEB81Z1bIh7GCnyvb8m ekjWuDCY0ohUtWYfwK0EqcJmlYde3uikaKyvosAIRdPA0HXRqNYQxG2Grz6O9E7n Ho5m6CRaJKOhzKlPe1fytWFKJgMne3cljANGEZ8me0myT8zACflQX4t6ycaGc9Mh 3XsVpUgU7WBk+DOsvJbVgNiJuzSUghAj2vv6s0Bl3QxjVnHJ9PdAwY4EXBlFAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS95uDNzdfDN9ZF GmvpSzIcIs8I6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFK Y0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFK Y0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS9CREU2 RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKxLNwwDQQCAAIwBwMFACgEF1gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAPjMA0GCSqGSIb3DQEBCwUAA4IBAQB3b04GAx9MkLVqdHXg e1NfkOyRYhmZu7MyT0Ulvv+bvW1L2xINitNEoMlhRd7XRuZyZjaSZjw0kRRqxrFY X+ivQlVxpBJ084iuqurxAsrjOSTGJTCCbqfyta6HGbC7GMB6ondog4UOXu8jqFns hOrs2L514sY8zVNyuuU/Ht/JjO05rbbxk6Uh0sZd6+VBBzPGckounvyewUfxP+f9 hSO3OnLqY8GScH8aKvldtITuSY3fFh7Naf9LwoakZ9runenCtoPHkouGsE9luTDx cbq3hDQAPCtgy81nNvYnciuaITeddLJ7yEB3eaSWm8sGnV7wg4OLl2QKxMjOkYiU dZdT -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:38 2025 by rpki-client