$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer File: B27B85F02C63CD742721D85E375F5A98C91ED00B.cer (raw, json) Hash identifier: A5EI8j61vtauCMmUhVMKa3gxpPK0vfpGOPt+r/htASU= Subject key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E18D397BF895B817873E050BAD3833D5E430515 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft caRepository: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 07:37:58 +0000 Certificate not after: Wed 06 May 2026 07:42:58 +0000 Subordinate resources: AS: 263905 IP: 138.204.200.0/22 IP: 170.80.68.0/22 IP: 2804:2780::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 08:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:18:d3:97:bf:89:5b:81:78:73:e0:50:ba:d3:83:3d:5e:43:05:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 07:37:58 2025 GMT Not After : May 6 07:42:58 2026 GMT Subject: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:e5:24:4b:1d:1d:3c:12:dd:31:7e:27:b4: f6:81:08:ef:4b:7e:7c:01:09:07:a3:2e:42:ca:27: e3:2f:06:8c:db:f4:d7:42:91:bd:74:0f:37:3e:45: b4:8f:b1:a4:8f:04:41:1d:4b:34:cb:2f:2e:10:8f: 91:ed:53:79:e7:5b:48:b5:6b:5c:5f:26:b8:4c:c9: ea:e4:1e:31:32:3e:66:1f:43:fa:79:cd:1c:b9:9e: ac:ee:43:7b:0b:ec:3f:9b:36:7b:18:20:b4:b4:f1: b6:29:2f:a3:6d:7e:cc:7c:b3:6f:33:5b:85:83:6d: ff:a7:9d:44:01:65:7a:61:72:c6:57:e3:2b:52:ab: 05:27:18:7a:31:40:c7:0c:02:35:bb:f8:e7:5a:87: bc:c7:5c:17:0d:29:ca:9a:f9:3f:f9:98:ac:38:1a: 8a:9c:58:fe:ef:c4:96:08:20:76:39:d9:6f:59:36: bf:b0:8d:af:31:58:75:08:89:52:df:85:a5:a6:14: 7c:1f:02:02:46:f4:d4:73:0f:a1:dc:09:e7:64:75: 29:18:71:60:e6:35:7b:d7:df:0b:fd:3d:2b:7c:9f: ff:fb:50:1f:46:bf:0c:66:0c:04:28:fe:e9:ed:23: e5:2a:15:08:5e:00:d9:7a:14:7c:80:ab:33:82:ff: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.200.0/22 170.80.68.0/22 IPv6: 2804:2780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263905 Signature Algorithm: sha256WithRSAEncryption be:8b:54:a0:79:f4:7a:10:f2:e0:e8:bb:ff:82:85:e4:7f:99: 9b:34:91:c6:a5:04:ca:53:4e:9c:c6:e8:c3:5c:8f:8f:62:ea: 7a:70:2d:ff:17:4a:80:7b:e5:2d:5e:e6:85:5f:d6:b4:b8:7c: 2b:49:72:08:fd:d4:25:e1:6c:45:ac:fe:de:11:16:2f:a9:ae: 42:b3:64:c3:58:a6:32:5d:1c:6d:7a:49:7a:ac:28:f7:d6:9b: 91:3d:9a:41:3d:06:a7:8f:82:bb:61:eb:1f:9b:03:8e:ca:65: 7f:e0:d8:69:d0:4a:36:42:7e:ac:30:5c:34:a1:34:b4:c6:b8: b5:25:f8:e7:14:a5:cc:6a:ca:05:96:f3:e2:8c:26:b1:a3:6d: c0:be:43:a8:3e:c6:4e:b5:b4:b7:c8:a8:39:a3:07:50:69:44: 8f:b6:c5:88:d7:66:54:cb:98:7e:8a:3b:07:01:eb:37:b8:93: 2d:0f:3f:65:d9:1e:79:1b:fa:ae:a1:d7:42:f8:ed:3d:2f:b9: dc:25:af:e2:37:3e:c7:58:72:8e:53:ae:e7:55:4d:6c:dc:1d: 46:a1:c1:8c:ac:99:7f:4f:49:cc:a3:bf:dd:92:b5:ac:36:13: 73:a6:d2:b4:42:58:0e:2e:25:4c:62:78:64:15:dd:d8:6e:31: 66:7f:40:57 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPhjTl7+JW4F4c+BQutODPV5DBRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcwNzM3NThaFw0yNjA1MDYwNzQyNThaMDMxMTAvBgNV BAMTKEIyN0I4NUYwMkM2M0NENzQyNzIxRDg1RTM3NUY1QTk4QzkxRUQwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRuUkSx0dPBLdMX4ntPaBCO9L fnwBCQejLkLKJ+MvBozb9NdCkb10Dzc+RbSPsaSPBEEdSzTLLy4Qj5HtU3nnW0i1 a1xfJrhMyerkHjEyPmYfQ/p5zRy5nqzuQ3sL7D+bNnsYILS08bYpL6Ntfsx8s28z W4WDbf+nnUQBZXphcsZX4ytSqwUnGHoxQMcMAjW7+Odah7zHXBcNKcqa+T/5mKw4 GoqcWP7vxJYIIHY52W9ZNr+wja8xWHUIiVLfhaWmFHwfAgJG9NRzD6HcCedkdSkY cWDmNXvX3wv9PSt8n//7UB9GvwxmDAQo/untI+UqFQheANl6FHyAqzOC/5e5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSye4XwLGPNdCch 2F43X1qYyR7QCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Ri N1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNk YjdTYWhadFJWQzhQdU1jZ3l6YkFtZVVmVnd5UmNzeFdtSENHRnZwY3lGLzAvQjI3 Qjg1RjAyQzYzQ0Q3NDI3MjFEODVFMzc1RjVBOThDOTFFRDAwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiszIAwQCqlBEMA0EAgACMAcDBQAoBCeAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG4TANBgkqhkiG9w0BAQsFAAOCAQEAvotUoHn0 ehDy4Oi7/4KF5H+ZmzSRxqUEylNOnMbow1yPj2LqenAt/xdKgHvlLV7mhV/WtLh8 K0lyCP3UJeFsRaz+3hEWL6muQrNkw1imMl0cbXpJeqwo99abkT2aQT0Gp4+Cu2Hr H5sDjsplf+DYadBKNkJ+rDBcNKE0tMa4tSX45xSlzGrKBZbz4owmsaNtwL5DqD7G TrW0t8ioOaMHUGlEj7bFiNdmVMuYfoo7BwHrN7iTLQ8/ZdkeeRv6rqHXQvjtPS+5 3CWv4jc+x1hyjlOu51VNbNwdRqHBjKyZf09JzKO/3ZK1rDYTc6bStEJYDi4lTGJ4 ZBXd2G4xZn9AVw== -----END CERTIFICATE-----Generated at Thu May 8 08:33:52 2025 by rpki-client