$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer File: F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer (raw, json) Hash identifier: eN4fOpX+B5ahu7Y6dfL+6w7T1Q050JzZB794S6XFgTk= Subject key identifier: F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1464FEC8C5FAD255C8F090E3A8704807914B8A87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft caRepository: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 May 2025 13:27:46 +0000 Certificate not after: Thu 07 May 2026 13:32:46 +0000 Subordinate resources: AS: 61761 IP: 170.82.88.0/22 IP: 201.158.20.0/22 IP: 2804:18e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:64:fe:c8:c5:fa:d2:55:c8:f0:90:e3:a8:70:48:07:91:4b:8a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 13:27:46 2025 GMT Not After : May 7 13:32:46 2026 GMT Subject: CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:69:c4:c1:ed:d7:00:f0:23:f2:61:db:2d: 03:d6:b8:f2:fc:62:9c:21:88:ab:92:78:e1:c1:76: 37:ef:6f:6b:a0:24:4e:bc:55:ad:7b:16:a3:c5:6c: bb:49:69:df:b1:a4:0c:ed:40:53:a4:d6:71:f3:31: b2:c0:9d:31:1d:85:79:89:fb:fa:ae:bb:c8:27:eb: 54:02:47:f8:9b:f3:02:e6:18:0f:9e:98:e3:31:78: 0b:c3:8b:32:56:25:90:7e:b5:c1:59:36:77:65:74: 98:10:8e:03:29:01:c0:f4:ff:e5:80:96:7d:e5:3f: 7f:cd:47:9e:20:7c:b0:67:2c:73:f4:d0:8c:a6:8c: f0:0b:3a:ea:c4:26:ec:f0:8b:70:70:aa:2b:4a:64: e0:33:cd:c0:c6:d2:d1:64:8f:47:e4:4a:35:e8:b1: a7:8d:70:0a:45:ff:9b:7a:fe:60:c3:29:ad:cc:d4: db:25:8f:37:ca:cf:1c:a5:d5:f4:c7:08:55:41:2b: 0a:33:f2:eb:fd:16:e7:d8:42:6a:a2:e3:59:ff:78: e8:ed:2e:d3:e2:32:d2:4f:6f:22:57:74:9e:89:f8: f4:99:cf:bd:92:0b:95:7d:9c:9f:d0:23:c9:1b:b4: 69:24:f7:85:72:f1:b9:85:8c:be:92:d7:45:17:5e: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.88.0/22 201.158.20.0/22 IPv6: 2804:18e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61761 Signature Algorithm: sha256WithRSAEncryption b2:93:a9:e4:cc:57:c4:1c:98:48:4c:09:95:4b:53:a0:96:21: bf:13:2d:46:48:24:bd:c6:ab:68:f4:7a:d2:02:a5:77:4a:aa: 7d:4e:6d:29:60:54:11:cc:13:13:e4:77:9a:10:55:15:cd:1a: b2:56:a9:e1:e2:9b:d3:12:60:f7:64:34:ff:56:bf:41:e5:5f: 9b:f0:98:7f:43:d6:d4:c3:9d:f0:9b:a9:6f:99:9b:b3:05:e4: af:34:0f:6a:40:6d:7a:16:bf:1b:00:38:98:12:df:21:bb:21: a3:ea:4b:a7:10:3b:58:47:08:22:11:a4:d9:75:d1:be:5f:86: 29:11:c0:bf:0b:4f:15:2e:0d:3e:85:ff:20:df:ed:01:46:96: d3:e2:3a:f1:4d:60:dc:9d:c8:52:5a:6d:92:44:f0:28:2c:65: 87:20:d3:c9:71:2f:10:df:35:fa:16:40:59:09:90:df:c0:10: c8:19:6e:5a:61:cf:c2:ce:35:15:8d:3d:41:70:02:05:8f:c0: 65:b3:4f:68:39:53:5f:8b:dc:9a:06:90:1c:2f:e4:61:76:eb: f6:af:d3:2a:c7:68:e8:ec:46:c1:73:b2:ba:8b:99:9e:c2:cf: 99:b5:14:9f:01:4f:28:7c:d5:eb:8c:72:e9:4e:e3:75:b7:9e: 35:68:8e:f2 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFGT+yMX60lXI8JDjqHBIB5FLiocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDgxMzI3NDZaFw0yNjA1MDcxMzMyNDZaMDMxMTAvBgNV BAMTKEY4OUMwNUQ4OUU5QThGNjZEODc1OEQxRjhCNUU3RjAwQUM3QTJCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC542nEwe3XAPAj8mHbLQPWuPL8 YpwhiKuSeOHBdjfvb2ugJE68Va17FqPFbLtJad+xpAztQFOk1nHzMbLAnTEdhXmJ +/quu8gn61QCR/ib8wLmGA+emOMxeAvDizJWJZB+tcFZNndldJgQjgMpAcD0/+WA ln3lP3/NR54gfLBnLHP00IymjPALOurEJuzwi3BwqitKZOAzzcDG0tFkj0fkSjXo saeNcApF/5t6/mDDKa3M1NsljzfKzxyl1fTHCFVBKwoz8uv9FufYQmqi41n/eOjt LtPiMtJPbyJXdJ6J+PSZz72SC5V9nJ/QI8kbtGkk94Vy8bmFjL6S10UXXj/9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4nAXYnpqPZth1 jR+LXn8ArHordjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9L bjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3QxYWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jv S24yZTJnaWJRd3JxUWU1VmROWUN2WlhVdjR0VWZpNlBIZ01WdGt0MWFkLzAvRjg5 QzA1RDg5RTlBOEY2NkQ4NzU4RDFGOEI1RTdGMDBBQzdBMkI3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlJYAwQCyZ4UMA0EAgACMAcDBQAoBBjkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxQTANBgkqhkiG9w0BAQsFAAOCAQEAspOp5MxX xByYSEwJlUtToJYhvxMtRkgkvcaraPR60gKld0qqfU5tKWBUEcwTE+R3mhBVFc0a slap4eKb0xJg92Q0/1a/QeVfm/CYf0PW1MOd8Jupb5mbswXkrzQPakBteha/GwA4 mBLfIbsho+pLpxA7WEcIIhGk2XXRvl+GKRHAvwtPFS4NPoX/IN/tAUaW0+I68U1g 3J3IUlptkkTwKCxlhyDTyXEvEN81+hZAWQmQ38AQyBluWmHPws41FY09QXACBY/A ZbNPaDlTX4vcmgaQHC/kYXbr9q/TKsdo6OxGwXOyuouZnsLPmbUUnwFPKHzV64xy 6U7jdbeeNWiO8g== -----END CERTIFICATE-----Generated at Sun Jun 15 13:25:46 2025 by rpki-client