$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer File: 22CBA337E0370365B681D563898357F37A7D4D97.cer (raw, json) Hash identifier: plnCdTQjLln6INzARcusxsNqyNw/z5od9XKznlGO6n8= Subject key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 373EAC41BFD98AD424842C6689A8426170F59C07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft caRepository: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Jun 2025 15:59:28 +0000 Certificate not after: Wed 24 Jun 2026 16:04:28 +0000 Subordinate resources: AS: 268207 IP: 45.235.52.0/22 IP: 200.225.112.0/22 IP: 2804:4d98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3e:ac:41:bf:d9:8a:d4:24:84:2c:66:89:a8:42:61:70:f5:9c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 25 15:59:28 2025 GMT Not After : Jun 24 16:04:28 2026 GMT Subject: CN=22CBA337E0370365B681D563898357F37A7D4D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:f4:8e:75:c7:fe:c4:1f:80:cd:fa:5a:b5: 12:72:e7:ca:da:40:a9:99:82:5e:32:2c:af:71:d8: 22:5e:e1:ef:5d:b2:76:0d:ac:fd:5b:69:9b:9c:bf: 0e:70:fe:e4:e2:4a:56:f5:fa:19:3d:96:68:f5:cc: 5a:82:f3:1b:e6:63:81:df:29:0e:31:da:c3:5c:00: d0:5b:6a:a8:91:1e:ab:ac:a3:cb:be:f2:09:f1:24: ac:49:78:36:9a:70:d1:c7:34:b9:90:98:a5:e7:f8: f8:ed:2b:97:39:1b:1a:da:0b:0f:07:58:44:7c:c3: 43:5a:68:4e:df:9b:00:3a:42:6c:84:a8:74:d8:2f: 97:cb:ea:5d:c6:4e:7c:0e:3d:16:c4:89:97:17:38: 1c:a3:82:1b:05:7b:65:58:e7:d1:45:51:a5:da:d5: a4:34:e6:11:a3:76:95:2a:bf:20:4f:5e:13:b8:18: 70:c1:dd:43:bb:91:e6:ee:6b:1a:13:ab:ec:03:72: 25:db:00:d0:ef:d9:70:b4:9b:f2:a5:53:b7:c3:73: 2f:80:68:d8:5f:18:f2:21:72:7e:16:cb:2f:5a:7a: 37:19:66:bc:e8:4b:86:1b:3c:96:ab:e5:82:db:cb: 2a:43:e4:96:3c:9b:9f:0d:2f:4f:2b:84:77:48:56: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.52.0/22 200.225.112.0/22 IPv6: 2804:4d98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268207 Signature Algorithm: sha256WithRSAEncryption 24:ec:20:f8:71:74:8f:c5:c8:e1:56:af:21:5a:79:e2:e7:88: f6:28:43:b0:4e:0d:2d:55:0f:12:37:2e:44:e4:4b:a9:3f:33: 18:3b:65:43:d3:1a:f9:b9:a3:40:5f:3c:8d:13:d4:7f:8c:8d: ba:8a:99:4f:06:a7:7b:79:69:40:74:c9:09:88:58:e2:8b:5e: 32:2c:26:76:8c:ca:e6:cb:33:f6:e2:a5:94:a0:eb:0c:62:61: 45:de:c6:a8:40:42:9e:ff:e8:9b:16:43:5a:2b:2e:a0:43:f7: 34:89:6c:eb:5a:4c:f8:05:9e:8e:88:c0:0b:2a:01:6b:39:ee: 8f:3c:f2:bf:1d:9a:cf:9e:a4:e0:34:52:7f:95:81:10:4e:34: e0:cd:f8:df:a1:dc:ee:dc:cb:24:c8:30:c0:05:d2:4d:a4:9f: c5:63:7b:1e:bd:a3:90:e4:33:d4:3f:87:eb:e9:bb:be:dc:25: d1:0b:4d:5d:44:05:ae:09:74:16:7b:19:14:fc:07:32:8c:ca: aa:8c:ba:f7:a4:82:b1:8c:25:52:8d:a8:8b:3b:3b:a1:e3:7d: fd:33:7c:85:95:7c:34:fe:d3:5a:62:f9:6f:d9:e7:18:0f:02: 04:e2:87:a7:eb:07:37:1d:5e:8d:38:ff:4a:3a:37:5d:4c:9c: 84:e8:8a:69 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNz6sQb/ZitQkhCxmiahCYXD1nAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjUxNTU5MjhaFw0yNjA2MjQxNjA0MjhaMDMxMTAvBgNV BAMTKDIyQ0JBMzM3RTAzNzAzNjVCNjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEfSOdcf+xB+AzfpatRJy58ra QKmZgl4yLK9x2CJe4e9dsnYNrP1baZucvw5w/uTiSlb1+hk9lmj1zFqC8xvmY4Hf KQ4x2sNcANBbaqiRHquso8u+8gnxJKxJeDaacNHHNLmQmKXn+PjtK5c5GxraCw8H WER8w0NaaE7fmwA6QmyEqHTYL5fL6l3GTnwOPRbEiZcXOByjghsFe2VY59FFUaXa 1aQ05hGjdpUqvyBPXhO4GHDB3UO7kebuaxoTq+wDciXbANDv2XC0m/KlU7fDcy+A aNhfGPIhcn4Wyy9aejcZZrzoS4YbPJar5YLbyypD5JY8m58NL08rhHdIVkDDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiy6M34DcDZbaB 1WOJg1fzen1NlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzNw OXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cz cDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzIvMjJD QkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3QTdENEQ5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLes0AwQCyOFwMA0EAgACMAcDBQAoBE2YMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQXrzANBgkqhkiG9w0BAQsFAAOCAQEAJOwg+HF0 j8XI4VavIVp54ueI9ihDsE4NLVUPEjcuRORLqT8zGDtlQ9Ma+bmjQF88jRPUf4yN uoqZTwane3lpQHTJCYhY4oteMiwmdozK5ssz9uKllKDrDGJhRd7GqEBCnv/omxZD WisuoEP3NIls61pM+AWejojACyoBaznujzzyvx2az56k4DRSf5WBEE404M3436Hc 7tzLJMgwwAXSTaSfxWN7Hr2jkOQz1D+H6+m7vtwl0QtNXUQFrgl0FnsZFPwHMozK qoy696SCsYwlUo2oizs7oeN9/TN8hZV8NP7TWmL5b9nnGA8CBOKHp+sHNx1ejTj/ Sjo3XUychOiKaQ== -----END CERTIFICATE-----Generated at Tue Jul 1 02:38:54 2025 by rpki-client