$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer File: B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer (raw, json) Hash identifier: uM9J/RpNhWQlJGQm2z0nlDlfTGvTF+sFektUG788Niw= Subject key identifier: B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 223F32F160EB8DA577B4910EBE0782886DFD099E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft caRepository: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Jun 2025 18:17:09 +0000 Certificate not after: Mon 15 Jun 2026 18:22:09 +0000 Subordinate resources: AS: 61882 IP: 131.0.48.0/22 IP: 2804:1abc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3f:32:f1:60:eb:8d:a5:77:b4:91:0e:be:07:82:88:6d:fd:09:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 16 18:17:09 2025 GMT Not After : Jun 15 18:22:09 2026 GMT Subject: CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:15:ce:98:57:fb:37:3e:71:32:14:6a:04: ae:ce:ad:18:79:4c:55:8f:5c:fd:e9:bd:48:12:a3: 5c:89:0d:ea:7f:40:a4:fe:9e:5b:b8:21:3d:46:8b: 43:81:8e:ea:0a:8c:e3:bd:20:4a:59:58:02:1b:44: dc:22:da:02:ab:a6:3d:1e:5a:2b:99:ab:da:f0:1a: eb:f0:bc:23:53:00:23:b4:57:bf:3f:e9:c2:19:a6: 6f:58:7d:41:22:7e:a4:28:61:4d:75:ac:80:6f:76: b8:6e:a3:01:6e:36:f1:a7:54:44:e6:a4:fa:a6:b6: f3:5c:a1:09:37:97:2e:52:75:58:f7:29:01:8e:f8: 02:e6:64:1a:6f:f0:f2:1f:00:5f:b0:d2:2d:c8:17: 3f:b0:11:cf:03:39:71:e9:f1:53:ec:9e:5a:9b:ef: 81:ad:0e:a9:f0:0a:48:fa:63:68:61:39:ff:b8:12: 46:d3:8f:6b:64:2d:2c:a0:9a:a3:3e:53:92:93:a5: bc:6c:66:50:35:8d:0b:11:e5:42:a3:34:02:2c:d0: 91:72:09:b4:cc:45:ef:0f:e8:cf:6e:08:eb:20:bb: 67:9c:4f:e6:48:c8:22:14:c0:c7:12:f3:e2:52:14: 8b:d9:f6:c4:33:9e:cf:31:59:55:1a:2d:f0:b3:76: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.48.0/22 IPv6: 2804:1abc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61882 Signature Algorithm: sha256WithRSAEncryption cf:80:e3:95:3a:07:e7:30:25:ae:d6:56:d1:98:fa:77:02:46: bc:c1:89:f5:99:84:64:7e:52:9b:9e:b4:a8:21:04:6d:17:bc: a9:04:8a:e2:d8:f5:73:53:3f:3b:9c:6e:c2:d3:25:2d:f9:52: 92:8f:a5:b5:64:e0:ff:b7:59:98:1b:12:7b:76:3b:0f:e5:e1: 8b:a4:e2:02:cb:b4:ae:e7:5e:e8:52:47:4c:09:50:df:c1:04: e1:c3:7a:da:64:57:fc:5a:72:24:15:cd:51:03:d1:71:79:81: 3d:30:d6:8f:4c:53:31:da:ae:6f:c9:ec:5c:35:28:4f:a5:70: 5e:bf:ab:c1:25:32:68:3a:2f:a4:29:00:f4:d9:28:95:be:98: 21:06:e1:db:d2:9c:ce:e2:7a:0b:b5:29:71:a6:a7:ae:21:e4: f8:4d:15:5a:2b:c2:b4:07:1e:e6:c6:eb:81:12:b3:35:7b:55: c3:2a:b5:f5:fe:a8:ce:8e:32:52:c6:cf:b5:d4:c5:01:e1:06: 74:a0:51:0e:87:dd:75:2c:81:38:48:9d:4e:4b:7e:8f:f7:92: 2e:2e:53:c2:a8:cd:7d:be:9a:cb:d3:35:cc:35:55:a9:5b:d7: e4:6e:7e:ef:b9:f3:5c:5b:e1:63:98:3d:d2:13:2b:0a:d0:94: a4:33:68:66 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIj8y8WDrjaV3tJEOvgeCiG39CZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTYxODE3MDlaFw0yNjA2MTUxODIyMDlaMDMxMTAvBgNV BAMTKEI4MzhDNDY4NDBERTJCNUNGNDYxNDgyMEEwRDEyRUZFRjI5NjBDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIhXOmFf7Nz5xMhRqBK7OrRh5 TFWPXP3pvUgSo1yJDep/QKT+nlu4IT1Gi0OBjuoKjOO9IEpZWAIbRNwi2gKrpj0e WiuZq9rwGuvwvCNTACO0V78/6cIZpm9YfUEifqQoYU11rIBvdrhuowFuNvGnVETm pPqmtvNcoQk3ly5SdVj3KQGO+ALmZBpv8PIfAF+w0i3IFz+wEc8DOXHp8VPsnlqb 74GtDqnwCkj6Y2hhOf+4EkbTj2tkLSygmqM+U5KTpbxsZlA1jQsR5UKjNAIs0JFy CbTMRe8P6M9uCOsgu2ecT+ZIyCIUwMcS8+JSFIvZ9sQzns8xWVUaLfCzdsipAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4OMRoQN4rXPRh SCCg0S7+8pYMjTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpU SHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0dUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6 VEhwRVlhNHlSaTFmUk5xTHpDVExvRkNUbzQ0ZVF3WFNyWU1QS0F2NHVELzAvQjgz OEM0Njg0MERFMkI1Q0Y0NjE0ODIwQTBEMTJFRkVGMjk2MEM4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgwAwMA0EAgACMAcDBQAoBBq8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxujANBgkqhkiG9w0BAQsFAAOCAQEAz4DjlToH5zAlrtZW 0Zj6dwJGvMGJ9ZmEZH5Sm560qCEEbRe8qQSK4tj1c1M/O5xuwtMlLflSko+ltWTg /7dZmBsSe3Y7D+Xhi6TiAsu0rude6FJHTAlQ38EE4cN62mRX/FpyJBXNUQPRcXmB PTDWj0xTMdqub8nsXDUoT6VwXr+rwSUyaDovpCkA9Nkolb6YIQbh29KczuJ6C7Up caanriHk+E0VWivCtAce5sbrgRKzNXtVwyq19f6ozo4yUsbPtdTFAeEGdKBRDofd dSyBOEidTkt+j/eSLi5TwqjNfb6ay9M1zDVVqVvX5G5+77nzXFvhY5g90hMrCtCU pDNoZg== -----END CERTIFICATE-----Generated at Sun Jun 29 21:28:33 2025 by rpki-client