$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer File: BA0000290CCA847B173A7D196F03889806E7091A.cer (raw, json) Hash identifier: 1FHxw4FB4hrdlU9dbzcl3iKBsDBo55SONLEMTF30Ryk= Subject key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03CE9E887FC26732BFDF3890B282E05B7102EA65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft caRepository: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 21:03:22 +0000 Certificate not after: Tue 16 Jun 2026 21:08:22 +0000 Subordinate resources: AS: 262758 IP: 186.224.240.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ce:9e:88:7f:c2:67:32:bf:df:38:90:b2:82:e0:5b:71:02:ea:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 21:03:22 2025 GMT Not After : Jun 16 21:08:22 2026 GMT Subject: CN=BA0000290CCA847B173A7D196F03889806E7091A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:ae:da:93:a5:ab:02:fe:14:83:16:74:50: e4:e7:72:58:d4:92:9b:b1:d2:ab:51:a6:02:6c:b8: eb:5a:1c:0e:3b:d6:f4:e5:ce:d5:29:e9:e4:38:c7: 17:11:f0:88:81:d6:5a:d7:eb:14:f1:7a:d0:b9:f1: e9:ca:80:6b:27:59:32:e2:be:06:13:14:e5:24:f6: 9e:6e:66:d9:a0:a9:50:95:95:c2:86:37:27:5e:af: 90:8d:9c:c7:77:6f:5b:40:ab:7e:5f:c2:be:77:f0: 84:45:11:e7:80:da:61:f7:ba:c0:3e:67:2b:fd:82: 62:cc:fb:2f:58:90:fa:1d:5e:c3:7b:6b:db:b5:8d: 82:31:fa:0f:a0:92:58:c3:17:e8:d3:6c:c9:9f:ad: c4:26:33:ee:49:75:67:dd:1d:9a:49:c1:3b:d6:0c: 5b:15:0d:bb:71:d1:50:36:7d:89:7c:0d:da:71:f1: 27:98:70:b1:8f:72:32:5e:cc:f1:d7:a4:b9:f7:06: d4:fe:5b:73:dd:2a:de:27:12:f8:81:0c:be:16:c1: 62:4d:75:06:ad:fa:b9:97:0a:ce:3b:8a:37:63:07: 39:aa:20:65:e6:9e:fb:fc:3d:83:9b:3a:4f:cd:06: 0b:07:df:61:cc:bc:b1:cf:26:32:e5:0b:d2:ab:fa: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.224.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262758 Signature Algorithm: sha256WithRSAEncryption 0a:f1:ec:4b:b0:e9:ec:66:3b:ce:6f:3c:07:b3:f8:f1:83:43: 8d:9b:fe:8d:a3:5c:af:ba:8c:96:c8:9b:e7:fd:2a:f9:d3:0b: 1b:40:77:d7:17:fd:3a:47:7b:bb:bb:80:6d:e2:1b:30:c7:ca: 8c:7f:0a:d7:7b:67:b6:f3:10:65:c1:51:70:37:ae:0e:0d:2e: c7:eb:bf:57:ce:7e:c9:3a:56:01:25:be:df:97:7b:36:0d:52: a0:8b:7d:7e:e3:d5:f9:f7:ee:52:94:73:63:5d:5b:6d:cb:0c: 35:14:db:3b:e0:8b:b3:ae:3d:b9:2f:92:80:1d:b3:5f:1f:c7: 41:93:86:9c:fc:fb:3e:17:99:01:eb:7d:c9:d4:bf:8f:a3:1b: 7f:8e:d3:c4:5b:ea:49:02:26:2d:79:3f:42:77:ea:91:09:4e: 04:1a:e9:07:2c:c1:c9:85:86:44:e2:d2:b5:a3:27:ed:35:66: c6:09:0b:bc:23:3b:93:34:83:b3:58:87:75:e8:b0:40:b9:f4: 95:90:2f:a0:c5:c2:2c:5d:19:57:23:6f:3e:82:ac:b3:e5:fe: 35:8c:23:32:fb:74:20:2f:ed:40:df:08:37:75:f0:84:44:2e: 0a:1d:fc:91:29:17:27:07:0f:00:29:44:c3:0f:10:ca:1b:f9: f3:fc:38:d5 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgIUA86eiH/CZzK/3ziQsoLgW3EC6mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTcyMTAzMjJaFw0yNjA2MTYyMTA4MjJaMDMxMTAvBgNV BAMTKEJBMDAwMDI5MENDQTg0N0IxNzNBN0QxOTZGMDM4ODk4MDZFNzA5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDa7ak6WrAv4UgxZ0UOTncljU kpux0qtRpgJsuOtaHA471vTlztUp6eQ4xxcR8IiB1lrX6xTxetC58enKgGsnWTLi vgYTFOUk9p5uZtmgqVCVlcKGNyder5CNnMd3b1tAq35fwr538IRFEeeA2mH3usA+ Zyv9gmLM+y9YkPodXsN7a9u1jYIx+g+gkljDF+jTbMmfrcQmM+5JdWfdHZpJwTvW DFsVDbtx0VA2fYl8Ddpx8SeYcLGPcjJezPHXpLn3BtT+W3PdKt4nEviBDL4WwWJN dQat+rmXCs47ijdjBzmqIGXmnvv8PYObOk/NBgsH32HMvLHPJjLlC9Kr+vuxAgMB AAGjggMpMIIDJTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6AAApDMqEexc6 fRlvA4iYBucJGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdkxI OEtEdWFOU3hIVXZ6Y3NrcXlqeUVwcmlwRURlR3VWZVJiR1BSZEdwNi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdkxI OEtEdWFOU3hIVXZ6Y3NrcXlqeUVwcmlwRURlR3VWZVJiR1BSZEdwNi8wL0JBMDAw MDI5MENDQTg0N0IxNzNBN0QxOTZGMDM4ODk4MDZFNzA5MUEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBLrg8DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAmYw DQYJKoZIhvcNAQELBQADggEBAArx7Euw6exmO85vPAez+PGDQ42b/o2jXK+6jJbI m+f9KvnTCxtAd9cX/TpHe7u7gG3iGzDHyox/Ctd7Z7bzEGXBUXA3rg4NLsfrv1fO fsk6VgElvt+XezYNUqCLfX7j1fn37lKUc2NdW23LDDUU2zvgi7OuPbkvkoAds18f x0GThpz8+z4XmQHrfcnUv4+jG3+O08Rb6kkCJi15P0J36pEJTgQa6QcswcmFhkTi 0rWjJ+01ZsYJC7wjO5M0g7NYh3XosEC59JWQL6DFwixdGVcjbz6CrLPl/jWMIzL7 dCAv7UDfCDd18IRELgod/JEpFycHDwApRMMPEMob+fP8ONU= -----END CERTIFICATE-----Generated at Mon Jun 30 05:38:08 2025 by rpki-client