$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer File: 3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer (raw, json) Hash identifier: 3F8DprRQ/YUDrDQkSqKB1mPM6mqN+pXUdVlxTFgLvMs= Subject key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0228A3175CC06B78ADBEE767AC15DC4223CB293D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft caRepository: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 21 Jun 2025 01:39:26 +0000 Certificate not after: Sat 20 Jun 2026 01:44:26 +0000 Subordinate resources: AS: 28143 IP: 187.49.96.0/20 IP: 2804:5ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:28:a3:17:5c:c0:6b:78:ad:be:e7:67:ac:15:dc:42:23:cb:29:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 21 01:39:26 2025 GMT Not After : Jun 20 01:44:26 2026 GMT Subject: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:20:6d:2f:91:d1:01:7f:61:be:39:7f:4a: 35:15:67:ca:b0:38:53:e8:b1:6b:59:d6:da:20:bc: cd:28:04:c1:de:0c:44:1e:f3:7c:c9:ee:62:c5:26: 0c:c7:83:c3:ad:11:1d:20:9c:98:55:79:26:62:43: 70:4b:9c:6a:fa:a1:7e:78:83:af:75:a0:1d:3e:b2: 90:45:e0:3c:3f:9d:df:e8:6c:50:71:82:ae:d9:5c: 57:95:8b:5a:20:ec:b3:f3:77:ba:4c:e0:01:f7:3c: db:38:94:3e:bd:ee:86:b2:4c:d5:c9:a7:ee:6d:f7: 3a:4d:da:b5:ef:34:d4:94:9a:82:13:3b:4d:82:7c: 7e:68:e1:af:10:f9:36:17:fe:40:84:ec:76:3d:e3: 1a:92:55:09:7b:cc:28:cb:a5:8e:f7:cb:be:de:99: 2e:82:37:3a:a5:ce:67:d2:36:4b:db:85:0c:79:31: 23:46:ef:56:40:73:ab:0a:a6:09:14:7c:7f:13:0d: a5:e8:83:4c:df:03:1c:3f:ff:e5:5d:a0:41:19:1d: a4:cb:62:08:1e:1c:b0:49:8a:29:24:f9:45:29:a1: 04:f3:cc:ee:ea:7f:11:55:e1:a6:52:8b:4f:be:cf: ca:2e:8f:cf:bf:06:4d:71:1f:a5:9e:82:ea:00:8b: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.96.0/20 IPv6: 2804:5ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28143 Signature Algorithm: sha256WithRSAEncryption 70:6a:b3:d5:51:69:25:5a:76:7c:68:bf:6c:a5:d6:1f:86:e5: 09:69:7b:55:02:12:8b:af:d9:95:84:94:5f:20:c1:c5:0a:c7: fc:36:12:ad:65:94:06:26:b2:61:6a:70:e0:d4:9e:f3:a4:1e: 46:6c:78:99:1a:46:19:95:8e:47:27:b5:42:7a:08:f8:de:8a: 03:07:80:ef:f9:e8:3e:e6:2e:f6:ce:76:2f:e8:a1:e0:a8:b2: a4:42:2b:26:a9:98:0f:48:eb:13:5a:df:5d:fe:ec:79:c5:cc: 00:18:a2:4d:ed:e4:61:a1:3f:a3:b2:f1:62:f6:9f:38:20:70: b4:8b:37:14:f8:ba:ba:93:0b:a3:25:fe:42:7a:d3:d3:0f:c6: 3b:f8:34:2f:a3:e7:a1:8c:aa:48:b7:29:c4:62:99:58:da:eb: 4e:07:dd:84:a4:f1:63:cf:fa:ca:2e:e8:51:b1:44:89:15:6e: 8e:3c:6d:2c:83:31:39:7f:e2:48:21:e6:06:92:c2:8b:37:dd: 8c:29:ec:7b:a8:b7:26:e3:1f:2d:b2:40:f2:93:48:a2:27:b9: d2:aa:84:b6:f3:64:6c:3a:96:57:be:d3:ef:0f:e3:85:ac:cd: b9:f6:96:63:24:ec:5a:79:64:44:7b:59:24:cf:33:a8:fe:34: 92:98:20:90 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUAiijF1zAa3itvudnrBXcQiPLKT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjEwMTM5MjZaFw0yNjA2MjAwMTQ0MjZaMDMxMTAvBgNV BAMTKDNCNkZBQTJBREIzMDQzM0QxQzFCMkY1QTg0QzRFNTlERDQyQ0U0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruSBtL5HRAX9hvjl/SjUVZ8qw OFPosWtZ1togvM0oBMHeDEQe83zJ7mLFJgzHg8OtER0gnJhVeSZiQ3BLnGr6oX54 g691oB0+spBF4Dw/nd/obFBxgq7ZXFeVi1og7LPzd7pM4AH3PNs4lD697oayTNXJ p+5t9zpN2rXvNNSUmoITO02CfH5o4a8Q+TYX/kCE7HY94xqSVQl7zCjLpY73y77e mS6CNzqlzmfSNkvbhQx5MSNG71ZAc6sKpgkUfH8TDaXog0zfAxw//+VdoEEZHaTL YggeHLBJiikk+UUpoQTzzO7qfxFV4aZSi0++z8ouj8+/Bk1xH6WeguoAi4PXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7b6oq2zBDPRwb L1qExOWd1CzkcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQllp UkVCRGFmS0VtUDVZd1g2MVppSGE3dzhhM1JFbkh3RjJMMWhvbXJSa2UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JZ aVJFQkRhZktFbVA1WXdYNjFaaUhhN3c4YTNSRW5Id0YyTDFob21yUmtlLzAvM0I2 RkFBMkFEQjMwNDMzRDFDMUIyRjVBODRDNEU1OURENDJDRTQ3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEuzFgMA0EAgACMAcDBQAoBAXsMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm3vMA0GCSqGSIb3DQEBCwUAA4IBAQBwarPVUWklWnZ8aL9s pdYfhuUJaXtVAhKLr9mVhJRfIMHFCsf8NhKtZZQGJrJhanDg1J7zpB5GbHiZGkYZ lY5HJ7VCegj43ooDB4Dv+eg+5i72znYv6KHgqLKkQismqZgPSOsTWt9d/ux5xcwA GKJN7eRhoT+jsvFi9p84IHC0izcU+Lq6kwujJf5CetPTD8Y7+DQvo+ehjKpItynE YplY2utOB92EpPFjz/rKLuhRsUSJFW6OPG0sgzE5f+JIIeYGksKLN92MKex7qLcm 4x8tskDyk0iiJ7nSqoS282RsOpZXvtPvD+OFrM259pZjJOxaeWREe1kkzzOo/jSS mCCQ -----END CERTIFICATE-----Generated at Mon Jun 30 05:25:20 2025 by rpki-client