$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer File: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer (raw, json) Hash identifier: Di7m/JIMjkg4uoqr2MC846xumhPKYBy1WP5ivY9V8ig= Subject key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B7D0D0D9B8C7C169575DAD18A116E871519F947 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft caRepository: rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 17 May 2025 02:30:03 +0000 Certificate not after: Sat 16 May 2026 02:35:03 +0000 Subordinate resources: AS: 265038 IP: 170.150.200.0/22 IP: 2804:31cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7d:0d:0d:9b:8c:7c:16:95:75:da:d1:8a:11:6e:87:15:19:f9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 17 02:30:03 2025 GMT Not After : May 16 02:35:03 2026 GMT Subject: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:97:fe:ff:fd:3d:b8:7d:fa:d7:9d:6c:09: 0c:77:ba:56:4f:10:54:35:e6:3b:ae:f4:1b:32:22: 6a:06:f9:cc:72:3f:19:cb:a3:6e:ce:9b:2d:e2:e9: 99:29:56:1b:ac:78:14:1a:d7:c7:24:67:5a:9e:ec: cf:29:7b:c4:ca:7a:74:12:15:e5:65:14:56:5f:26: 21:87:c2:d1:88:94:fd:32:48:53:ca:b2:e6:83:4f: 3a:dc:03:e0:26:5a:8e:e5:52:e9:9a:91:e7:27:84: 1d:5e:12:ff:80:9f:5d:6a:8c:3d:f9:c1:6f:3c:7a: b5:bc:81:1c:5e:24:74:28:e9:9c:ef:94:99:e3:53: 24:85:f2:8a:e9:b3:b3:19:12:d5:36:78:6f:98:e6: 87:c8:e4:e3:60:40:0b:34:d6:31:68:f4:0b:bf:4f: e0:5f:98:31:a4:db:66:07:10:35:55:cf:ed:c6:ad: 9c:5f:c5:ed:6c:60:d7:02:a8:50:d2:95:53:ee:6f: 04:31:a3:11:44:bc:f6:d0:15:9f:9b:6f:29:7d:20: f9:5c:69:3e:c2:8a:f0:05:84:e0:07:da:60:02:9e: 6f:fa:aa:9f:21:12:96:ad:e1:f4:59:2f:d9:6e:e3: 96:b8:60:d5:4d:f3:6b:08:52:9c:aa:23:68:d3:b4: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.200.0/22 IPv6: 2804:31cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265038 Signature Algorithm: sha256WithRSAEncryption 31:e2:80:ac:8f:bc:c2:04:1b:69:df:56:4b:82:f5:9a:94:90: 2f:42:35:d5:d6:3a:63:8c:3b:c8:00:47:fe:8b:fd:c7:04:92: ff:7c:31:e4:f7:9c:e2:4f:6a:d9:7a:6e:7b:86:0f:4c:b7:81: 9b:d3:44:c8:c0:ae:d7:36:e5:7b:8a:16:2a:c7:51:c8:43:a2: 83:61:4b:79:a9:75:be:c6:6d:a4:8e:6d:cb:82:89:a9:18:d5: d3:99:01:66:24:30:36:15:4c:bc:f9:fe:4d:f1:a0:85:28:92: 98:8d:a8:9b:18:74:bb:f0:c6:8e:88:a6:b9:d7:f1:d2:16:d8: 46:2c:7a:2e:d1:0e:26:63:e7:5a:bf:40:88:ca:d7:71:c0:5b: 33:a1:c4:5d:bf:c8:8a:80:e9:70:2f:a0:86:20:35:b8:e7:18: 62:68:3f:bb:0b:71:87:b0:42:4b:68:5f:f3:d8:6c:7c:b1:64: 06:d4:b4:66:4b:c0:44:25:c2:ac:c9:f2:4e:4d:77:1a:65:6c: d3:ac:ca:af:d5:83:a4:59:4c:53:67:cb:50:93:e1:64:a7:87: 8e:da:ea:df:cd:14:68:fd:c7:9d:03:b4:be:23:b0:90:ae:7a: e6:3f:16:dd:87:ed:56:d1:ce:89:b2:1c:1c:b6:1a:78:bd:1f: 13:2b:a1:c3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUa30NDZuMfBaVddrRihFuhxUZ+UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTcwMjMwMDNaFw0yNjA1MTYwMjM1MDNaMDMxMTAvBgNV BAMTKERERDJGRUNFMUE0OUYxNTQ2QzM1NUFGMDhCNEEzMjAyQUM2QjRDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Gpf+//09uH36151sCQx3ulZP EFQ15juu9BsyImoG+cxyPxnLo27Omy3i6ZkpVhuseBQa18ckZ1qe7M8pe8TKenQS FeVlFFZfJiGHwtGIlP0ySFPKsuaDTzrcA+AmWo7lUumakecnhB1eEv+An11qjD35 wW88erW8gRxeJHQo6ZzvlJnjUySF8orps7MZEtU2eG+Y5ofI5ONgQAs01jFo9Au/ T+BfmDGk22YHEDVVz+3GrZxfxe1sYNcCqFDSlVPubwQxoxFEvPbQFZ+bbyl9IPlc aT7CivAFhOAH2mACnm/6qp8hEpat4fRZL9lu45a4YNVN82sIUpyqI2jTtFbhAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd0v7OGknxVGw1 WvCLSjICrGtMxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmpn ckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1cEEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jq Z3JGUTlOV0I3NnRnbkthd1lVajVQMkE2R3N2aFpwOW1rcngyM1NSdXBBLzAvRERE MkZFQ0UxQTQ5RjE1NDZDMzU1QUYwOEI0QTMyMDJBQzZCNENDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqpbIMA0EAgACMAcDBQAoBDHMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLTjANBgkqhkiG9w0BAQsFAAOCAQEAMeKArI+8wgQbad9W S4L1mpSQL0I11dY6Y4w7yABH/ov9xwSS/3wx5Pec4k9q2Xpue4YPTLeBm9NEyMCu 1zble4oWKsdRyEOig2FLeal1vsZtpI5ty4KJqRjV05kBZiQwNhVMvPn+TfGghSiS mI2omxh0u/DGjoimudfx0hbYRix6LtEOJmPnWr9AiMrXccBbM6HEXb/IioDpcC+g hiA1uOcYYmg/uwtxh7BCS2hf89hsfLFkBtS0ZkvARCXCrMnyTk13GmVs06zKr9WD pFlMU2fLUJPhZKeHjtrq380UaP3HnQO0viOwkK565j8W3YftVtHOibIcHLYaeL0f Eyuhww== -----END CERTIFICATE-----Generated at Mon Jun 16 00:00:09 2025 by rpki-client