$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer File: 202D680D4DF230713D515261F90FC214E69FBA3E.cer (raw, json) Hash identifier: y/YWJm/KleD2QR0glO/7qXgAtcXvqVHPtmonZsKnk44= Subject key identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 222E985FDA7EB6C0DA0F8642ED60FF090E91F01A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.mft caRepository: rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 May 2025 20:01:13 +0000 Certificate not after: Tue 05 May 2026 20:06:13 +0000 Subordinate resources: AS: 270777 IP: 131.161.116.0/22 IP: 201.71.48.0/22 IP: 2804:7140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2e:98:5f:da:7e:b6:c0:da:0f:86:42:ed:60:ff:09:0e:91:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 20:01:13 2025 GMT Not After : May 5 20:06:13 2026 GMT Subject: CN=202D680D4DF230713D515261F90FC214E69FBA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:46:0f:c5:95:a6:82:c7:0a:74:d7:cc:02: 45:7b:b3:69:32:33:1a:ce:92:50:e4:43:51:36:0d: f5:1f:fe:0d:f7:48:d2:dd:43:d2:9c:a0:1c:92:39: e4:12:18:f8:e3:e7:e3:ac:f0:fe:d0:c7:fe:f1:35: ac:2e:32:0b:df:33:92:81:33:99:d0:06:c1:56:a7: 4a:c3:e2:52:60:f6:47:7e:8e:ab:d8:db:68:80:38: 46:b7:42:ec:f3:a6:6d:50:f0:aa:6c:1c:7c:78:df: fe:46:f4:81:0a:d9:d5:be:f0:61:06:bc:2d:da:4f: 44:a5:0f:ca:15:b9:ec:4f:26:5c:81:b1:3a:04:20: b1:ad:30:4f:7b:67:7c:a4:90:4c:db:72:8a:14:31: 2f:21:ca:36:d3:57:6c:43:a9:c2:e5:7d:11:52:85: a0:ea:9a:fa:67:dc:31:6c:06:e4:c0:fc:cb:24:3e: 5a:59:41:a0:6c:e6:a8:b5:8d:27:79:eb:c7:d7:ec: 43:0e:d4:1b:33:48:21:00:fc:84:5c:05:0d:a6:da: c0:31:43:02:88:5b:fa:9c:6c:d0:fe:d4:68:09:24: 13:0f:73:2f:6c:1e:2d:5e:10:de:57:70:0e:ca:a6: 4e:81:1e:68:35:f7:a7:36:87:1b:b8:36:77:6f:1a: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.116.0/22 201.71.48.0/22 IPv6: 2804:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270777 Signature Algorithm: sha256WithRSAEncryption 74:4b:07:38:8f:1e:46:95:99:bc:29:2e:cb:c5:4d:03:30:de: 04:17:b8:a5:f6:40:4f:79:67:b6:fd:38:04:18:3f:cf:11:d2: 5b:22:0b:95:15:80:dd:04:d3:c8:9f:fc:a2:79:7b:c9:bb:f2: 72:17:fe:3c:a8:b1:bd:9b:02:36:06:11:67:22:8a:e8:6a:1c: 35:f2:98:e2:6e:d1:40:7f:f7:08:f1:72:cf:2d:0f:90:d6:40: a5:d7:d1:60:63:b9:df:9c:44:c0:18:29:11:af:41:f4:cc:4b: 89:ce:20:84:1d:51:7a:84:9f:a4:65:64:e4:e4:d8:37:e9:2b: 87:05:b5:a5:ac:0f:cf:b2:8a:dc:f7:d8:e3:0c:5e:86:4d:f0: 8a:30:a8:c4:db:83:17:7a:8c:e3:6e:5c:5c:75:5b:ad:65:85: 3a:f7:31:e5:d5:d1:fd:ea:1b:15:fd:25:6a:0b:95:aa:11:81: 7f:b1:6e:0a:3a:ff:49:75:3d:75:6d:1f:1d:90:f4:90:f7:0f: 31:6a:f7:aa:68:ee:97:3f:ea:e6:05:11:3b:e9:a0:4b:f7:dd: c6:57:b7:b8:25:65:de:e4:ba:45:12:6b:82:40:1c:d3:05:1d: 3f:09:71:ac:0a:46:93:41:b9:c4:70:29:e2:69:62:7f:5f:c9: ae:a4:88:20 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIi6YX9p+tsDaD4ZC7WD/CQ6R8BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDYyMDAxMTNaFw0yNjA1MDUyMDA2MTNaMDMxMTAvBgNV BAMTKDIwMkQ2ODBENERGMjMwNzEzRDUxNTI2MUY5MEZDMjE0RTY5RkJBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIkYPxZWmgscKdNfMAkV7s2ky MxrOklDkQ1E2DfUf/g33SNLdQ9KcoBySOeQSGPjj5+Os8P7Qx/7xNawuMgvfM5KB M5nQBsFWp0rD4lJg9kd+jqvY22iAOEa3Quzzpm1Q8KpsHHx43/5G9IEK2dW+8GEG vC3aT0SlD8oVuexPJlyBsToEILGtME97Z3ykkEzbcooUMS8hyjbTV2xDqcLlfRFS haDqmvpn3DFsBuTA/MskPlpZQaBs5qi1jSd568fX7EMO1BszSCEA/IRcBQ2m2sAx QwKIW/qcbND+1GgJJBMPcy9sHi1eEN5XcA7Kpk6BHmg196c2hxu4NndvGv1HAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgLWgNTfIwcT1R UmH5D8IU5p+6PjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzU1 SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpiWGsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M1 NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAvMjAy RDY4MEQ0REYyMzA3MTNENTE1MjYxRjkwRkMyMTRFNjlGQkEzRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg6F0AwQCyUcwMA0EAgACMAcDBQAoBHFAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQhuTANBgkqhkiG9w0BAQsFAAOCAQEAdEsHOI8e RpWZvCkuy8VNAzDeBBe4pfZAT3lntv04BBg/zxHSWyILlRWA3QTTyJ/8onl7ybvy chf+PKixvZsCNgYRZyKK6GocNfKY4m7RQH/3CPFyzy0PkNZApdfRYGO535xEwBgp Ea9B9MxLic4ghB1ReoSfpGVk5OTYN+krhwW1pawPz7KK3PfY4wxehk3wijCoxNuD F3qM425cXHVbrWWFOvcx5dXR/eobFf0laguVqhGBf7FuCjr/SXU9dW0fHZD0kPcP MWr3qmjulz/q5gURO+mgS/fdxle3uCVl3uS6RRJrgkAc0wUdPwlxrApGk0G5xHAp 4mlif1/JrqSIIA== -----END CERTIFICATE-----Generated at Fri May 9 11:12:08 2025 by rpki-client