$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer File: 6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer (raw, json) Hash identifier: IisdvaR2yarF5JdvnBT9/yna/QDbJipUHVPY12cV/DU= Subject key identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0AFF9119BB287A371C73FE4BE3BD4632D2FE4BF3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft caRepository: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Jun 2025 17:52:43 +0000 Certificate not after: Mon 15 Jun 2026 17:57:43 +0000 Subordinate resources: AS: 61751 IP: 131.72.252.0/22 IP: 168.228.40.0/22 IP: 2804:1bcc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 15:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:91:19:bb:28:7a:37:1c:73:fe:4b:e3:bd:46:32:d2:fe:4b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 16 17:52:43 2025 GMT Not After : Jun 15 17:57:43 2026 GMT Subject: CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:97:f1:ca:fa:fb:bb:27:04:a0:89:6c:1b: 56:0f:0f:42:4f:ad:82:7d:23:63:65:6e:dd:70:72: 15:2d:b0:01:63:41:4c:4f:86:6f:02:2b:e7:22:ac: 44:8b:0f:fe:8e:00:f4:23:54:4e:31:0e:51:dd:0d: 9b:f8:2e:71:e7:a0:32:67:24:38:17:db:03:81:7e: e4:06:54:9f:cf:31:97:89:a0:76:9f:4e:61:58:a0: 46:9b:7d:91:16:6d:c7:87:2f:90:38:2a:32:89:55: fa:b5:82:97:b8:0f:a9:f8:aa:ed:c7:59:8f:56:ca: 2a:77:a8:05:b9:ea:cb:ff:f3:e3:6f:f9:d8:56:fb: 7b:c7:f6:98:be:e9:99:04:aa:7e:2c:2f:a0:4e:5d: 61:e2:b4:b8:b7:8a:d1:9f:13:88:f4:45:d3:50:4c: 2d:8f:50:a3:21:3a:08:09:69:77:f8:9d:85:0b:63: 36:b1:2b:55:f9:77:1d:1e:18:e4:61:a1:23:b1:c7: 55:06:f0:6b:28:ff:a0:2f:5e:a2:4f:38:c3:c5:e7: 2e:f5:db:6a:d6:61:f7:18:58:e8:4e:ba:a4:3f:43: 73:0e:8c:4e:cc:0a:71:b2:c6:bd:e9:56:4e:84:8d: da:8e:6b:9a:8b:3b:38:54:a4:92:7e:f8:1a:91:91: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.252.0/22 168.228.40.0/22 IPv6: 2804:1bcc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61751 Signature Algorithm: sha256WithRSAEncryption 01:c3:63:2a:00:97:26:c4:3c:a2:72:e6:4b:5b:3c:7f:7e:b9: 2f:e0:5a:44:df:95:f3:b5:c9:36:de:12:29:79:c4:70:8b:47: 57:5a:2d:76:f7:d3:6b:b9:90:c4:82:2a:35:a4:c3:3b:67:01: 23:97:b3:3f:57:b5:fc:8b:ab:fe:7e:75:cd:9c:5b:c1:c4:0f: b4:3d:de:4b:0d:fd:49:a5:a4:3a:93:2e:b0:df:be:12:4b:6b: 6c:bc:45:69:77:8c:78:1b:b3:b7:b5:6e:3a:d8:2b:cd:f2:98: 5c:9c:a7:a2:90:78:6c:e7:22:f2:25:e8:93:bc:4c:f7:6c:d3: 65:4c:6b:9e:7f:14:46:59:78:27:b2:32:c4:30:22:5e:a2:a3: 95:45:3a:d6:69:4b:1b:36:8f:b6:90:02:09:a7:83:bd:04:8b: e0:03:87:a2:c9:bb:39:f3:fd:0a:96:b5:8d:a8:5f:da:1f:c9: 04:b2:1e:be:42:24:9d:ed:38:62:71:72:2e:36:c7:c0:18:6e: 84:76:58:39:3b:9d:87:82:81:3a:83:45:be:bb:1c:24:1a:9e: 21:c0:ee:59:67:41:fa:a5:f3:09:ec:b3:6b:d8:62:2b:02:ac: fc:a6:c2:de:c5:ec:c2:84:2c:b1:26:49:64:90:bf:8a:3d:6e: 2c:5b:a0:cb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCv+RGbsoejccc/5L471GMtL+S/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTYxNzUyNDNaFw0yNjA2MTUxNzU3NDNaMDMxMTAvBgNV BAMTKDZFMEE4RTQ5Qjk2MzRFRkU4MTgxNkVERDFBMjVEQzFCNTRFNjE3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIM5fxyvr7uycEoIlsG1YPD0JP rYJ9I2Nlbt1wchUtsAFjQUxPhm8CK+cirESLD/6OAPQjVE4xDlHdDZv4LnHnoDJn JDgX2wOBfuQGVJ/PMZeJoHafTmFYoEabfZEWbceHL5A4KjKJVfq1gpe4D6n4qu3H WY9Wyip3qAW56sv/8+Nv+dhW+3vH9pi+6ZkEqn4sL6BOXWHitLi3itGfE4j0RdNQ TC2PUKMhOggJaXf4nYULYzaxK1X5dx0eGORhoSOxx1UG8Gso/6AvXqJPOMPF5y71 22rWYfcYWOhOuqQ/Q3MOjE7MCnGyxr3pVk6EjdqOa5qLOzhUpJJ++BqRkb5RAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuCo5JuWNO/oGB bt0aJdwbVOYX2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzRB M01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZaUFMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc0 QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAvNkUw QThFNDlCOTYzNEVGRTgxODE2RUREMUEyNURDMUI1NEU2MTdEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg0j8AwQCqOQoMA0EAgACMAcDBQAoBBvMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxNzANBgkqhkiG9w0BAQsFAAOCAQEAAcNjKgCX JsQ8onLmS1s8f365L+BaRN+V87XJNt4SKXnEcItHV1otdvfTa7mQxIIqNaTDO2cB I5ezP1e1/Iur/n51zZxbwcQPtD3eSw39SaWkOpMusN++EktrbLxFaXeMeBuzt7Vu OtgrzfKYXJynopB4bOci8iXok7xM92zTZUxrnn8URll4J7IyxDAiXqKjlUU61mlL GzaPtpACCaeDvQSL4AOHosm7OfP9Cpa1jahf2h/JBLIevkIkne04YnFyLjbHwBhu hHZYOTudh4KBOoNFvrscJBqeIcDuWWdB+qXzCeyza9hiKwKs/KbC3sXswoQssSZJ ZJC/ij1uLFugyw== -----END CERTIFICATE-----Generated at Mon Jun 30 16:02:11 2025 by rpki-client