$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer File: ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer (raw, json) Hash identifier: bOjGBxPN9p0FuUGxbZHf04H6iTb5mR8hHZCJO1eLJXg= Subject key identifier: AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3DEFB7CE3CF35286B804E8B5243240A51EB1A645 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft caRepository: rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 29 May 2025 09:30:15 +0000 Certificate not after: Thu 28 May 2026 09:35:15 +0000 Subordinate resources: AS: 267108 IP: 45.229.108.0/22 IP: 2804:4844::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ef:b7:ce:3c:f3:52:86:b8:04:e8:b5:24:32:40:a5:1e:b1:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 29 09:30:15 2025 GMT Not After : May 28 09:35:15 2026 GMT Subject: CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:c9:cd:8d:ec:54:15:62:c4:ac:f1:cd:8c: 37:dc:72:a7:26:06:f6:58:3f:8e:2f:ad:bb:de:06: 53:df:e4:76:09:7a:e0:5d:b7:b3:90:83:61:cd:ba: f9:9b:a4:14:3b:90:bc:01:e2:e7:c8:f1:bf:85:06: 72:3f:fe:cc:be:21:44:83:f6:ce:3a:3e:0d:d6:0c: 12:81:09:45:cc:12:f2:d3:b6:fd:02:79:40:48:a3: 4d:2d:2a:78:15:e8:b2:63:7b:a1:e6:b2:98:d0:ca: 61:ec:7e:45:8e:34:42:37:1d:30:3e:d2:5a:5b:20: 50:10:4a:02:99:0d:c1:43:39:4e:4a:eb:ed:07:87: 81:09:eb:94:31:18:13:fe:c8:36:c9:06:27:59:af: 67:03:f6:18:71:33:a2:01:69:5b:04:2b:8e:f4:5d: 10:17:5f:78:50:ac:b1:17:6b:0c:4f:4b:fe:7b:46: a3:18:ad:c2:ad:06:df:04:f5:f5:f1:a8:59:79:f0: 2b:de:1b:8d:48:ce:48:cf:63:b2:bc:35:73:6c:61: 65:5c:27:72:28:2e:f9:bb:02:da:b4:d7:ee:f5:da: 45:4a:dc:ae:31:f8:75:f5:32:07:f0:59:93:7a:33: 57:06:ff:a2:40:2d:3d:23:87:93:ac:90:99:7c:53: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.108.0/22 IPv6: 2804:4844::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267108 Signature Algorithm: sha256WithRSAEncryption 23:68:25:16:5d:28:5b:b5:de:a0:8b:78:e3:de:de:a6:fc:0f: 9f:4f:e8:45:a3:82:f5:fe:f5:7a:1d:6b:6c:3d:30:55:b6:ad: 2e:ea:a9:90:13:b4:e0:8d:d5:9b:81:81:65:09:35:9b:2b:af: 4e:55:a9:ac:50:c6:6e:1b:81:d1:d0:ea:e6:2d:b9:ac:f4:d7: a6:0d:c7:95:b6:9c:e3:5e:76:84:36:8b:85:ec:0b:42:5a:13: 66:61:14:4f:68:94:5a:19:8f:8b:71:e3:62:9f:a1:04:61:2c: 66:48:f6:f8:eb:43:19:47:19:97:39:3b:b1:ff:38:a9:51:8e: e2:a8:56:cc:66:d5:00:d2:7e:f6:b8:43:4f:7e:38:e3:45:d3: 75:50:bf:14:d3:dc:20:4b:07:4b:c2:b0:23:c5:3e:7d:2a:8f: 23:4b:fe:03:40:37:88:76:56:52:b0:99:94:d2:b0:29:cc:d3: 81:21:3b:45:5d:49:b9:61:35:44:81:ea:aa:6e:8b:f9:22:82: a2:0c:f0:50:e2:91:fd:0d:9e:64:53:7a:28:bb:74:41:d1:75: 7d:b0:ef:2e:04:c4:a5:67:d5:94:cc:b8:71:b6:c2:ce:b4:09: a2:ce:2f:53:fe:8a:03:c6:be:86:7d:97:85:6e:6a:ec:a9:af: 24:3e:69:02 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPe+3zjzzUoa4BOi1JDJApR6xpkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjkwOTMwMTVaFw0yNjA1MjgwOTM1MTVaMDMxMTAvBgNV BAMTKEFCQTAwRkM1QjZEQjYzQUREMkVENUQzMzVFQUU0N0FFMjM0OEZENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQsnNjexUFWLErPHNjDfccqcm BvZYP44vrbveBlPf5HYJeuBdt7OQg2HNuvmbpBQ7kLwB4ufI8b+FBnI//sy+IUSD 9s46Pg3WDBKBCUXMEvLTtv0CeUBIo00tKngV6LJje6HmspjQymHsfkWONEI3HTA+ 0lpbIFAQSgKZDcFDOU5K6+0Hh4EJ65QxGBP+yDbJBidZr2cD9hhxM6IBaVsEK470 XRAXX3hQrLEXawxPS/57RqMYrcKtBt8E9fXxqFl58CveG41IzkjPY7K8NXNsYWVc J3IoLvm7Atq01+712kVK3K4x+HX1MgfwWZN6M1cG/6JALT0jh5OskJl8U8+BAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSroA/FtttjrdLt XTNerkeuI0j9cjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGp2 dEhkRExWQmJ1U01mMkN3dGE4azJudTJGRTRaeFJoTlNYUnpRRVhIc2cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRq dnRIZERMVkJidVNNZjJDd3RhOGsybnUyRkU0WnhSaE5TWFJ6UUVYSHNnLzAvQUJB MDBGQzVCNkRCNjNBREQyRUQ1RDMzNUVBRTQ3QUUyMzQ4RkQ3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeVsMA0EAgACMAcDBQAoBEhEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTZDANBgkqhkiG9w0BAQsFAAOCAQEAI2glFl0oW7XeoIt4 497epvwPn0/oRaOC9f71eh1rbD0wVbatLuqpkBO04I3Vm4GBZQk1myuvTlWprFDG bhuB0dDq5i25rPTXpg3Hlbac4152hDaLhewLQloTZmEUT2iUWhmPi3HjYp+hBGEs Zkj2+OtDGUcZlzk7sf84qVGO4qhWzGbVANJ+9rhDT34440XTdVC/FNPcIEsHS8Kw I8U+fSqPI0v+A0A3iHZWUrCZlNKwKczTgSE7RV1JuWE1RIHqqm6L+SKCogzwUOKR /Q2eZFN6KLt0QdF1fbDvLgTEpWfVlMy4cbbCzrQJos4vU/6KA8a+hn2XhW5q7Kmv JD5pAg== -----END CERTIFICATE-----Generated at Sun Jun 29 21:39:18 2025 by rpki-client