$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer File: 1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer (raw, json) Hash identifier: 1DHkNL+K85XKbWKxCDH0OseaH1d8oMpktnPsM1Pp2es= Subject key identifier: 1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D7EEA8291CF700CB80E036843F4AA69ECAB74EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.mft caRepository: rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 19:57:23 +0000 Certificate not after: Fri 19 Jun 2026 20:02:23 +0000 Subordinate resources: AS: 52630 IP: 45.229.176.0/22 IP: 170.233.4.0/22 IP: 177.124.172.0/22 IP: 179.189.16.0/20 IP: 2804:1464::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 22:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7e:ea:82:91:cf:70:0c:b8:0e:03:68:43:f4:aa:69:ec:ab:74:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 20 19:57:23 2025 GMT Not After : Jun 19 20:02:23 2026 GMT Subject: CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:41:70:cf:bd:40:df:94:97:55:7a:ba:5b:42: d2:1e:ab:63:d3:c0:8b:13:e3:48:6e:fa:5a:a2:fb: cf:55:37:6d:b3:8f:45:d5:c4:9a:dd:e8:d8:05:a3: 11:ba:66:82:4f:83:1c:19:51:f0:dc:88:c2:a8:5b: 8e:06:79:43:09:bd:3b:78:01:b1:05:21:2e:01:b7: 54:13:8c:af:c2:0e:15:1d:bd:a5:4c:5d:6c:06:f8: 3c:ce:34:0f:a1:27:6d:41:46:95:c0:42:c6:1f:b2: 4e:b4:50:18:7e:a1:92:1d:0a:bd:0a:23:15:cd:99: ee:cc:43:c2:65:89:0b:47:8e:da:bb:d1:93:f8:65: 7b:51:0b:6d:a9:76:f0:90:d4:49:46:23:58:48:62: 86:f0:6d:83:1b:b1:fc:1b:3b:7c:f8:ff:73:1b:46: d8:77:08:99:ab:9d:ab:31:0f:76:43:2f:e1:e0:fd: 7b:87:9a:83:0c:fc:56:86:6c:59:7b:89:0c:9f:a9: 52:87:8c:92:e1:b7:a5:55:71:a2:b8:c5:11:49:f0: 06:63:da:81:b5:ac:53:e9:36:c7:91:13:96:91:80: 9e:3f:0d:4d:61:1e:f3:5c:79:16:50:b6:6d:db:71: dd:4d:eb:fe:f0:31:a4:4a:c9:f3:cc:8a:3d:16:c6: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.176.0/22 170.233.4.0/22 177.124.172.0/22 179.189.16.0/20 IPv6: 2804:1464::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52630 Signature Algorithm: sha256WithRSAEncryption ba:a3:5c:4e:82:b0:9a:56:9f:6c:e6:f2:da:52:53:42:df:7f: 84:fa:19:b3:5b:b0:ae:72:56:90:9c:b4:c3:06:0c:d9:99:2a: e9:9d:b5:2d:15:78:0e:46:4c:8e:75:5c:a4:d6:fd:cf:80:11: 70:73:97:ef:87:c2:31:73:12:6d:09:1e:dc:55:cd:2e:ef:5b: f5:a1:41:6f:a5:18:4d:87:81:1a:db:15:29:87:d1:30:dd:f0: 6c:e2:07:ee:8a:b5:f5:0f:8f:b7:c0:dd:38:ff:4f:f5:86:d6: c0:67:48:ab:71:dc:07:b9:7d:67:62:0e:3c:da:a3:c3:cb:4f: 7a:1b:2c:e2:24:2a:98:9f:7a:54:96:3e:46:47:8e:5d:c5:01: 59:c7:14:0b:59:e9:e6:e9:01:f0:e0:25:52:f3:d6:a3:86:a2: 46:34:8d:1a:d0:50:05:6d:2f:cd:da:92:5c:ef:6a:3b:9d:b1: 6c:73:2f:63:8b:60:0e:e4:7a:96:92:b1:29:17:cb:21:ba:7f: f4:19:c4:14:06:b3:20:ca:8d:ad:d0:14:75:86:9a:0b:50:ef: 65:73:ea:e7:ec:60:3d:24:5d:b5:cb:b8:80:37:49:11:cb:9e: f1:ea:33:26:e0:c6:81:0a:02:71:91:29:f7:a0:03:ec:c4:28: 87:e0:8b:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUXX7qgpHPcAy4DgNoQ/SqaeyrdO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjAxOTU3MjNaFw0yNjA2MTkyMDAyMjNaMDMxMTAvBgNV BAMTKDFCMjAwRTdBQjZFM0Y3OTkzRERFNzhBNDc2RTQ2OTg4NURGQ0U4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4QXDPvUDflJdVerpbQtIeq2PT wIsT40hu+lqi+89VN22zj0XVxJrd6NgFoxG6ZoJPgxwZUfDciMKoW44GeUMJvTt4 AbEFIS4Bt1QTjK/CDhUdvaVMXWwG+DzONA+hJ21BRpXAQsYfsk60UBh+oZIdCr0K IxXNme7MQ8JliQtHjtq70ZP4ZXtRC22pdvCQ1ElGI1hIYobwbYMbsfwbO3z4/3Mb Rth3CJmrnasxD3ZDL+Hg/XuHmoMM/FaGbFl7iQyfqVKHjJLht6VVcaK4xRFJ8AZj 2oG1rFPpNseRE5aRgJ4/DU1hHvNceRZQtm3bcd1N6/7wMaRKyfPMij0WxtLPAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbIA56tuP3mT3e eKR25GmIXfzoIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWln bkZRcmc0TUtwU0VvUzV0SHBacU03d1NXYTlrWXMxdExNRUtVNVJCUG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp Z25GUXJnNE1LcFNFb1M1dEhwWnFNN3dTV2E5a1lzMXRMTUVLVTVSQlBuLzAvMUIy MDBFN0FCNkUzRjc5OTNEREU3OEE0NzZFNDY5ODg1REZDRTgyMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLeWwAwQCqukEAwQCsXysAwQEs70QMA0EAgACMAcD BQAoBBRkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNljANBgkqhkiG9w0BAQsF AAOCAQEAuqNcToKwmlafbOby2lJTQt9/hPoZs1uwrnJWkJy0wwYM2Zkq6Z21LRV4 DkZMjnVcpNb9z4ARcHOX74fCMXMSbQke3FXNLu9b9aFBb6UYTYeBGtsVKYfRMN3w bOIH7oq19Q+Pt8DdOP9P9YbWwGdIq3HcB7l9Z2IOPNqjw8tPehss4iQqmJ96VJY+ RkeOXcUBWccUC1np5ukB8OAlUvPWo4aiRjSNGtBQBW0vzdqSXO9qO52xbHMvY4tg DuR6lpKxKRfLIbp/9BnEFAazIMqNrdAUdYaaC1DvZXPq5+xgPSRdtcu4gDdJEcue 8eozJuDGgQoCcZEp96AD7MQoh+CLTA== -----END CERTIFICATE-----Generated at Tue Jul 1 21:59:10 2025 by rpki-client