$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer (raw, json) Hash identifier: U9vlqThb8hpiXkxpWGAtmo8MNhyMYboUDPyIcwSsTJQ= Subject key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BC8F5840BD062CE653B4CDAD7D77EC1D64EB33E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft caRepository: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 17 May 2025 01:31:35 +0000 Certificate not after: Sat 16 May 2026 01:36:35 +0000 Subordinate resources: AS: 52746 IP: 131.221.180.0/22 IP: 177.85.172.0/22 IP: 2804:1e54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c8:f5:84:0b:d0:62:ce:65:3b:4c:da:d7:d7:7e:c1:d6:4e:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 17 01:31:35 2025 GMT Not After : May 16 01:36:35 2026 GMT Subject: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:b3:3f:89:07:c3:77:5c:54:c2:7f:6f:ad: 78:7d:61:45:f2:6b:d7:8d:2a:e5:96:51:1e:fe:f6: f7:1a:67:fd:7e:cc:9b:a1:92:4c:f4:7b:23:34:2e: 24:86:b2:7c:92:ac:5a:08:4a:20:de:27:1f:f4:18: 08:ae:11:13:52:7e:b7:15:4a:a6:4b:26:d5:1e:93: 63:79:b6:7a:8c:21:73:b1:7b:d5:ec:02:78:e1:c3: 94:88:88:2f:f5:5e:7d:0a:b9:a8:5f:7b:ff:04:0c: 93:fa:60:0f:f3:f9:9a:7e:06:14:96:42:f7:28:7b: 7f:24:cd:b1:51:90:62:4a:4c:84:1a:c5:07:ef:68: a1:5f:f3:1a:4e:4f:5e:83:48:40:fd:64:87:c8:cb: 45:c6:77:44:fa:b6:8a:a8:c0:93:98:f5:1d:f4:4a: 5c:e6:5a:4b:65:1c:b8:38:ed:5d:ff:b6:7b:8b:ab: aa:47:94:1e:b0:b8:b6:5e:a4:4b:a5:98:e5:d2:f8: e3:31:bb:18:1e:04:60:50:5b:31:11:3e:23:3e:1f: 23:94:2c:e7:1d:f6:92:60:a9:fa:25:3a:b5:d0:db: 46:06:ef:ff:ba:75:34:b4:7b:8b:07:d6:6f:bf:0f: c3:43:1f:31:ef:65:22:75:f7:63:a7:d0:3d:3b:b1: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.180.0/22 177.85.172.0/22 IPv6: 2804:1e54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52746 Signature Algorithm: sha256WithRSAEncryption 0e:28:cd:9e:02:5e:28:0b:cd:4c:d0:a8:bf:31:35:15:60:aa: e8:cd:a6:11:36:42:d5:65:52:25:d9:c4:4c:56:96:eb:9a:b9: 20:c0:f0:97:03:40:52:d9:f3:72:e9:58:e5:76:05:6f:34:16: 59:e5:7a:da:07:d1:4b:8e:25:a1:01:8b:13:1b:7e:24:c1:40: db:6c:35:bb:6b:e1:55:45:23:63:88:b7:5b:de:e5:97:13:d6: 6e:e4:dd:89:60:86:ef:a2:c0:ea:8c:1b:6a:a9:ed:28:e3:1c: 74:9c:fb:4e:66:4f:7d:cb:69:33:12:d4:9d:aa:48:00:12:6f: 0e:de:4f:9e:b8:0e:f6:45:ec:f2:54:33:8b:a3:92:1e:0f:83: db:41:e0:32:00:09:e4:ea:6c:3d:c3:db:8f:57:b3:78:99:de: 7b:3e:ff:4b:a0:3b:e6:08:83:41:2a:5a:40:e3:b6:40:d9:e3: de:5a:93:e3:43:10:d5:75:ef:8d:6c:df:bd:3a:79:7f:22:5d: ff:a6:f5:0d:83:be:be:da:e0:c4:81:ff:85:37:3f:c4:ef:94: 96:a1:57:2b:ec:ed:32:3f:51:63:f5:54:7c:b2:73:82:62:e7: 43:56:e0:0a:58:28:3a:d2:a9:f7:bb:8d:4b:21:55:a6:71:18: 98:23:cd:45 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUC8j1hAvQYs5lO0za19d+wdZOsz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTcwMTMxMzVaFw0yNjA1MTYwMTM2MzVaMDMxMTAvBgNV BAMTKERGQjFGM0ZBNkY0MjBERjAxOTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaLM/iQfDd1xUwn9vrXh9YUXy a9eNKuWWUR7+9vcaZ/1+zJuhkkz0eyM0LiSGsnySrFoISiDeJx/0GAiuERNSfrcV SqZLJtUek2N5tnqMIXOxe9XsAnjhw5SIiC/1Xn0Kuahfe/8EDJP6YA/z+Zp+BhSW Qvcoe38kzbFRkGJKTIQaxQfvaKFf8xpOT16DSED9ZIfIy0XGd0T6toqowJOY9R30 SlzmWktlHLg47V3/tnuLq6pHlB6wuLZepEulmOXS+OMxuxgeBGBQWzERPiM+HyOU LOcd9pJgqfolOrXQ20YG7/+6dTS0e4sH1m+/D8NDHzHvZSJ192On0D07sWzJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfsfP6b0IN8BkF UvwJcoWa9F82jjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW55 ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vu eWRocEJWbWthNFdOQ2RRd2hrZm1SbnVxRTZNRm01eDJxWTN2cG9zb2pYLzAvREZC MUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFGNDVGMzY4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg920AwQCsVWsMA0EAgACMAcDBQAoBB5UMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOCjANBgkqhkiG9w0BAQsFAAOCAQEADijNngJe KAvNTNCovzE1FWCq6M2mETZC1WVSJdnETFaW65q5IMDwlwNAUtnzculY5XYFbzQW WeV62gfRS44loQGLExt+JMFA22w1u2vhVUUjY4i3W97llxPWbuTdiWCG76LA6owb aqntKOMcdJz7TmZPfctpMxLUnapIABJvDt5PnrgO9kXs8lQzi6OSHg+D20HgMgAJ 5OpsPcPbj1ezeJneez7/S6A75giDQSpaQOO2QNnj3lqT40MQ1XXvjWzfvTp5fyJd /6b1DYO+vtrgxIH/hTc/xO+UlqFXK+ztMj9RY/VUfLJzgmLnQ1bgClgoOtKp97uN SyFVpnEYmCPNRQ== -----END CERTIFICATE-----Generated at Mon Jun 16 01:47:04 2025 by rpki-client