$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer File: 9D5B3059BB98435A876805A73F362F594F73CE08.cer (raw, json) Hash identifier: s5RBCOxh8NnCAiRBi69SiEYyyfCBO02zfvddtgc4HRc= Subject key identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: D2DA2C08125EBEDBCAD7884F50BBA904A2A775 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.mft caRepository: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Jun 2025 20:09:03 +0000 Certificate not after: Wed 17 Jun 2026 20:14:03 +0000 Subordinate resources: AS: 269567 IP: 45.188.12.0/22 IP: 2804:668c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d2:da:2c:08:12:5e:be:db:ca:d7:88:4f:50:bb:a9:04:a2:a7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 18 20:09:03 2025 GMT Not After : Jun 17 20:14:03 2026 GMT Subject: CN=9D5B3059BB98435A876805A73F362F594F73CE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:54:41:91:81:36:ba:6e:be:6b:9c:c0:8f: 29:75:d9:27:5d:30:1f:df:9d:7d:f8:43:a1:fe:f9: 57:fb:93:d0:7f:7a:26:73:75:5f:23:49:5b:fa:83: 05:b7:fb:3d:68:2d:52:e3:a4:9e:ea:53:97:5e:34: 47:ae:ec:42:a7:aa:29:ba:c1:c7:f8:b2:58:fe:fe: da:9b:95:1c:e0:68:4a:de:0f:b5:6b:32:e9:5b:8f: e4:6d:0d:d6:16:1f:57:aa:70:0b:06:c7:45:9f:12: 1b:5d:1f:c0:fb:a7:ff:53:e7:32:aa:48:ed:54:75: 61:47:74:2e:20:a3:92:21:7a:7f:83:7d:30:13:a6: 20:11:b2:1c:25:13:f6:21:ae:54:78:bf:19:b3:66: cc:0e:c4:6b:b4:d1:bf:22:fd:67:39:ea:87:a8:93: 47:db:fd:74:40:c6:cb:ef:73:1b:4b:ae:cc:c2:19: e8:52:43:24:54:26:97:02:46:a0:d5:6c:34:a7:b7: 30:47:28:de:12:cc:7e:3b:61:ab:fb:94:48:4c:77: 77:0d:b8:0c:04:dc:e4:93:67:6a:7c:f2:7f:39:b8: e7:5e:f3:72:8a:d0:b3:7f:49:83:2b:4a:7a:00:3f: e8:11:14:38:23:53:72:ae:f8:f0:a5:54:27:aa:c5: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.12.0/22 IPv6: 2804:668c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269567 Signature Algorithm: sha256WithRSAEncryption 00:6f:0a:d6:5c:73:58:79:62:72:70:e7:f5:d9:26:4f:21:d9: 0e:2c:81:7b:58:e6:b3:3c:0a:f3:7f:cc:40:66:6d:ce:ec:f9: 05:b8:69:88:8d:82:6b:87:69:1a:ae:9c:c2:a6:4e:d5:da:a1: 11:90:2f:99:ca:e6:53:86:ec:e1:3f:12:a1:2c:1c:90:0f:c2: 76:b3:01:a1:29:35:53:f6:98:8c:67:d0:2b:f9:0e:cb:9d:4e: 7f:6a:d2:ba:ca:08:27:f4:03:ec:d3:73:ed:e5:dc:a7:14:25: 5f:b5:07:6d:df:af:4d:32:f7:6c:fa:06:f0:83:b0:83:9c:41: da:d0:4d:a5:48:04:4e:61:65:fe:d3:45:98:18:e8:7f:eb:d9: 7d:3b:5c:09:74:9f:c0:5e:42:ac:b3:37:80:7c:d3:56:43:5e: 5f:ca:f0:46:4f:7c:e0:04:68:d3:62:17:dd:32:c4:3e:44:fe: 86:e3:d1:ec:4b:75:77:18:6c:47:82:d7:16:27:8c:10:d5:62: 30:95:94:40:88:0b:73:ea:40:c7:ec:7b:2f:cf:fe:a7:23:d2: 85:78:00:c8:eb:ca:24:72:bf:2b:b8:a5:13:e6:be:3f:fd:3c: 51:7c:43:70:b1:63:48:a1:1e:c7:3f:77:af:1b:34:9d:82:47: c2:16:41:a1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUANLaLAgSXr7byteIT1C7qQSip3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTgyMDA5MDNaFw0yNjA2MTcyMDE0MDNaMDMxMTAvBgNV BAMTKDlENUIzMDU5QkI5ODQzNUE4NzY4MDVBNzNGMzYyRjU5NEY3M0NFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNzlRBkYE2um6+a5zAjyl12Sdd MB/fnX34Q6H++Vf7k9B/eiZzdV8jSVv6gwW3+z1oLVLjpJ7qU5deNEeu7EKnqim6 wcf4slj+/tqblRzgaEreD7VrMulbj+RtDdYWH1eqcAsGx0WfEhtdH8D7p/9T5zKq SO1UdWFHdC4go5Ihen+DfTATpiARshwlE/YhrlR4vxmzZswOxGu00b8i/Wc56oeo k0fb/XRAxsvvcxtLrszCGehSQyRUJpcCRqDVbDSntzBHKN4SzH47Yav7lEhMd3cN uAwE3OSTZ2p88n85uOde83KK0LN/SYMrSnoAP+gRFDgjU3Ku+PClVCeqxdojAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdWzBZu5hDWodo Bac/Ni9ZT3POCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVVD MXNIdDNycXpiWWdDRURZaXdWWW5SVmhpaUtadFJZbjlXN2RQTnBpbkovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVV QzFzSHQzcnF6YllnQ0VEWWl3VlluUlZoaWlLWnRSWW45VzdkUE5waW5KLzAvOUQ1 QjMwNTlCQjk4NDM1QTg3NjgwNUE3M0YzNjJGNTk0RjczQ0UwOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbwMMA0EAgACMAcDBQAoBGaMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQc/zANBgkqhkiG9w0BAQsFAAOCAQEAAG8K1lxzWHlicnDn 9dkmTyHZDiyBe1jmszwK83/MQGZtzuz5BbhpiI2Ca4dpGq6cwqZO1dqhEZAvmcrm U4bs4T8SoSwckA/CdrMBoSk1U/aYjGfQK/kOy51Of2rSusoIJ/QD7NNz7eXcpxQl X7UHbd+vTTL3bPoG8IOwg5xB2tBNpUgETmFl/tNFmBjof+vZfTtcCXSfwF5CrLM3 gHzTVkNeX8rwRk984ARo02IX3TLEPkT+huPR7Et1dxhsR4LXFieMENViMJWUQIgL c+pAx+x7L8/+pyPShXgAyOvKJHK/K7ilE+a+P/08UXxDcLFjSKEexz93rxs0nYJH whZBoQ== -----END CERTIFICATE-----Generated at Mon Jun 30 05:20:05 2025 by rpki-client