$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer File: E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer (raw, json) Hash identifier: dr1pgfmM1h3ppeSZfVqA0Y1J/pOPCUiITCgo2njRvdU= Subject key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A5105544F00F1E38BE63A0D8ED70BAB119D1D8D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft caRepository: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 May 2025 07:53:43 +0000 Certificate not after: Thu 30 Apr 2026 07:58:43 +0000 Subordinate resources: AS: 28188 IP: 177.12.132.0/23 IP: 177.12.137.0 -- 177.12.140.255 IP: 177.12.142.0/23 IP: 177.12.152.0/21 IP: 189.89.224.0/20 IP: 189.89.241.0 -- 189.89.245.255 IP: 189.89.248.0/22 IP: 189.89.254.0/24 IP: 2804:2f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:51:05:54:4f:00:f1:e3:8b:e6:3a:0d:8e:d7:0b:ab:11:9d:1d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 1 07:53:43 2025 GMT Not After : Apr 30 07:58:43 2026 GMT Subject: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:d1:c2:95:bf:84:69:4f:d8:33:b0:48:12: 01:69:d5:63:24:f3:8c:a2:1d:69:e9:2b:4d:10:72: ef:b5:53:9f:04:bb:a5:01:3c:dc:74:f0:70:75:79: 11:ca:3d:27:6c:a4:de:c9:3e:5f:0b:9b:fe:cd:23: c6:7d:ec:eb:8f:cc:82:90:ae:f6:09:d2:9a:07:2f: 61:f1:15:7d:9d:d8:f3:42:95:eb:04:1f:5f:03:27: 22:0c:f1:dc:3e:5c:3b:ae:75:88:49:67:64:39:40: d6:03:b3:ca:54:41:a0:40:58:3e:78:d9:fd:91:74: 3b:35:c1:c4:b4:21:c5:ce:30:c8:aa:2e:5a:ca:8a: db:87:1e:c7:76:e7:f6:6a:b4:ad:5c:b1:62:29:3b: e9:3f:09:43:43:ef:c1:95:f7:21:f8:bd:b6:0b:be: 42:ba:28:38:21:b1:80:2e:46:49:45:10:03:cf:70: dc:ea:7a:b2:cf:b3:0e:29:7e:11:9c:5b:7d:d1:81: f3:f3:31:f8:f7:02:cd:97:a4:b5:3c:d4:2e:38:0b: 7a:7c:77:e9:1c:b6:81:9c:b4:04:93:96:5c:93:93: f0:e5:d4:90:e7:a7:f0:8e:27:02:56:b6:4d:87:e6: 38:ce:8c:2f:6f:22:88:1e:fe:ca:84:da:47:be:ea: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.12.132.0/23 177.12.137.0-177.12.140.255 177.12.142.0/23 177.12.152.0/21 189.89.224.0/20 189.89.241.0-189.89.245.255 189.89.248.0/22 189.89.254.0/24 IPv6: 2804:2f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28188 Signature Algorithm: sha256WithRSAEncryption c2:1f:19:89:22:28:13:54:8f:e0:00:a0:f2:d5:36:69:50:81: dc:5b:d6:38:ab:48:b0:b1:82:69:ee:d7:c8:6e:e4:f3:2b:43: 55:c6:cf:63:61:a5:33:f9:d7:71:fe:b2:46:75:96:09:78:13: 1d:ed:21:e8:ff:ee:18:b0:0c:44:a6:b0:fd:69:c6:c8:a5:ca: 4d:3f:27:02:42:a4:aa:36:39:44:4f:85:90:94:62:d9:ea:46: 8f:ea:81:1b:71:8b:b5:db:8e:a2:f1:a0:36:ba:08:ed:0a:c2: 78:90:fd:c9:8e:ac:5a:8e:42:85:60:5d:5d:f2:32:1a:e2:e7: 72:31:a5:05:36:5a:b4:fa:60:13:9b:3a:b1:a7:51:db:55:7f: df:17:6a:2a:17:6d:a8:5e:c7:13:11:25:5e:4a:1a:4a:ea:8c: 1d:dd:b6:c6:16:aa:91:8c:a2:5e:66:17:60:cf:a2:da:85:27: fb:18:52:63:fe:bc:06:a5:7c:5c:ef:b3:45:0b:e1:b7:c4:bd: e2:00:67:77:ef:c6:c1:fc:50:94:ca:ab:c9:01:fb:c0:5f:af: e1:0d:57:b5:b0:60:9e:1a:a2:f9:10:61:b8:01:00:dc:91:6d: c6:d7:3a:fb:7c:2a:5f:0c:69:f9:68:3f:4e:df:3a:d4:0e:38: 41:04:ff:24 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUOlEFVE8A8eOL5joNjtcLqxGdHY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDEwNzUzNDNaFw0yNjA0MzAwNzU4NDNaMDMxMTAvBgNV BAMTKEUzOEFDMkNGQjI5OTcxNUIzQjZENTg2NkMxNUNGMzUzQkU0OEE3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo9HClb+EaU/YM7BIEgFp1WMk 84yiHWnpK00Qcu+1U58Eu6UBPNx08HB1eRHKPSdspN7JPl8Lm/7NI8Z97OuPzIKQ rvYJ0poHL2HxFX2d2PNClesEH18DJyIM8dw+XDuudYhJZ2Q5QNYDs8pUQaBAWD54 2f2RdDs1wcS0IcXOMMiqLlrKituHHsd25/ZqtK1csWIpO+k/CUND78GV9yH4vbYL vkK6KDghsYAuRklFEAPPcNzqerLPsw4pfhGcW33RgfPzMfj3As2XpLU81C44C3p8 d+kctoGctASTllyTk/Dl1JDnp/COJwJWtk2H5jjOjC9vIoge/sqE2ke+6jvTAgMB AAGjggNxMIIDbTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjisLPsplxWztt WGbBXPNTvkincDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREtO dEdBN3NwZDRmNVIzUUFDYTU2cmN6WURReUFjODF3cW81Y2pCRFUzZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREtO dEdBN3NwZDRmNVIzUUFDYTU2cmN6WURReUFjODF3cW81Y2pCRFUzZC8wL0UzOEFD MkNGQjI5OTcxNUIzQjZENTg2NkMxNUNGMzUzQkU0OEE3NzAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBggrBgEFBQcBBwEB /wRZMFcwRgQCAAEwQAMEAbEMhDAMAwQAsQyJAwQAsQyMAwQBsQyOAwQDsQyYAwQE vVngMAwDBAC9WfEDBAG9WfQDBAK9WfgDBAC9Wf4wDQQCAAIwBwMFACgEAvgwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICbhwwDQYJKoZIhvcNAQELBQADggEBAMIfGYki KBNUj+AAoPLVNmlQgdxb1jirSLCxgmnu18hu5PMrQ1XGz2NhpTP513H+skZ1lgl4 Ex3tIej/7hiwDESmsP1pxsilyk0/JwJCpKo2OURPhZCUYtnqRo/qgRtxi7XbjqLx oDa6CO0KwniQ/cmOrFqOQoVgXV3yMhri53IxpQU2WrT6YBObOrGnUdtVf98XaioX bahexxMRJV5KGkrqjB3dtsYWqpGMol5mF2DPotqFJ/sYUmP+vAalfFzvs0UL4bfE veIAZ3fvxsH8UJTKq8kB+8Bfr+ENV7WwYJ4aovkQYbgBANyRbcbXOvt8Kl8Maflo P07fOtQOOEEE/yQ= -----END CERTIFICATE-----Generated at Sun Jun 15 21:05:59 2025 by rpki-client