$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer File: BB5E0437800F9F11433D11504358A8DC6375C371.cer (raw, json) Hash identifier: 4JcahaOaMr5hycImHEw8xlCplv6HAMGD90dB53URnSg= Subject key identifier: BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C2CE14776CDC759B48DDC419871AA3F9301BDBE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.mft caRepository: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Jun 2025 16:35:04 +0000 Certificate not after: Wed 17 Jun 2026 16:40:04 +0000 Subordinate resources: AS: 265315 IP: 138.121.208.0/22 IP: 168.121.176.0/22 IP: 2804:2df8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 21:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2c:e1:47:76:cd:c7:59:b4:8d:dc:41:98:71:aa:3f:93:01:bd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 18 16:35:04 2025 GMT Not After : Jun 17 16:40:04 2026 GMT Subject: CN=BB5E0437800F9F11433D11504358A8DC6375C371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:75:c8:3a:58:c8:f1:f1:cf:83:57:09:24: e0:70:e3:44:c9:0c:1f:d9:a3:07:77:15:de:35:cc: 2b:e7:d7:d3:b8:bd:ec:0e:13:cc:63:fe:73:5e:c0: 03:ce:12:0d:5c:1a:f0:20:2d:79:6a:38:a0:f2:f2: 4d:69:09:9b:c2:02:26:e9:a3:da:c2:a3:5c:d5:4b: d4:43:3e:67:8b:fb:c9:64:de:c7:d8:ad:c6:eb:90: 3d:5e:c4:0c:c3:bb:31:91:f2:15:88:8c:67:94:2e: 66:65:dd:c6:a1:3d:02:2f:2b:27:9b:00:29:b7:1a: 3e:d4:d9:de:a7:00:44:dc:35:85:e7:71:3f:3d:0a: ed:1a:41:74:b1:50:01:cf:73:25:f8:fb:16:24:0e: 3c:e3:66:8e:0b:8b:c2:0f:8c:bd:a1:2c:55:b2:ca: 94:76:ce:13:e6:f4:0d:f2:37:2c:78:3e:f9:dd:11: 9b:ac:07:6b:d7:ba:05:11:29:d5:bb:92:c1:fa:5a: 1d:86:e2:cd:97:9e:cb:bc:cd:17:b6:7f:49:43:db: 24:56:ba:fb:81:d7:69:84:6b:f7:bb:60:5b:af:fe: 8f:83:0d:6a:61:76:f2:91:c0:b5:07:2a:41:fb:89: df:b1:98:95:a5:0d:73:99:d5:0e:3f:d5:43:2c:07: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.208.0/22 168.121.176.0/22 IPv6: 2804:2df8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265315 Signature Algorithm: sha256WithRSAEncryption 02:55:a4:3c:f9:08:9e:cd:05:91:d8:a5:69:4b:6f:b2:d3:73: f0:90:93:33:93:a8:27:3c:ed:da:1e:a0:0a:73:b5:3f:ac:a7: a6:9a:d8:6d:d1:4e:a4:32:e6:5a:da:64:42:ee:61:28:ed:92: 75:ac:14:ef:b1:65:5b:b0:5c:db:e7:70:ef:99:03:bf:4f:66: 91:92:1a:7c:0d:85:bc:ee:b3:8e:90:f3:26:67:09:50:9a:db: 83:22:7a:c3:83:df:64:b5:25:59:b0:d5:4a:9f:76:22:ae:d0: 56:04:1b:c7:c2:eb:ae:f4:73:55:5a:1f:d3:b1:ae:f4:99:c6: b8:8f:c3:bb:b5:8b:c9:96:e4:56:72:c0:1d:14:6b:82:6b:84: f6:11:bc:70:24:f7:7e:6a:90:cc:d5:e9:55:74:4c:03:45:34: 90:ec:83:b0:f3:19:52:d9:3d:50:98:7e:88:0a:6d:7a:50:55: 71:57:fe:57:fd:73:f9:bc:45:20:0c:e8:ce:c7:99:22:46:c8: df:56:13:d1:41:49:f6:5d:95:27:ce:ce:e2:3b:72:da:77:dd: 14:c8:f3:c0:c7:c2:95:24:06:c6:c2:9c:2b:80:ae:9d:45:f0: 08:95:d9:cc:e1:3d:2b:ad:99:34:b8:5a:98:ac:04:a4:56:d5: 1f:bc:f3:a3 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUfCzhR3bNx1m0jdxBmHGqP5MBvb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTgxNjM1MDRaFw0yNjA2MTcxNjQwMDRaMDMxMTAvBgNV BAMTKEJCNUUwNDM3ODAwRjlGMTE0MzNEMTE1MDQzNThBOERDNjM3NUMzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxnXIOljI8fHPg1cJJOBw40TJ DB/Zowd3Fd41zCvn19O4vewOE8xj/nNewAPOEg1cGvAgLXlqOKDy8k1pCZvCAibp o9rCo1zVS9RDPmeL+8lk3sfYrcbrkD1exAzDuzGR8hWIjGeULmZl3cahPQIvKyeb ACm3Gj7U2d6nAETcNYXncT89Cu0aQXSxUAHPcyX4+xYkDjzjZo4Li8IPjL2hLFWy ypR2zhPm9A3yNyx4PvndEZusB2vXugURKdW7ksH6Wh2G4s2Xnsu8zRe2f0lD2yRW uvuB12mEa/e7YFuv/o+DDWphdvKRwLUHKkH7id+xmJWlDXOZ1Q4/1UMsByGJAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7XgQ3gA+fEUM9 EVBDWKjcY3XDcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUwz M0M5d0FDblRtcXplN2NIVm9rNzlVSFgzTkI1NXhVc1hhYmp4cUhzZmIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUwz M0M5d0FDblRtcXplN2NIVm9rNzlVSFgzTkI1NXhVc1hhYmp4cUhzZmIvMS9CQjVF MDQzNzgwMEY5RjExNDMzRDExNTA0MzU4QThEQzYzNzVDMzcxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKedADBAKoebAwDQQCAAIwBwMFACgELfgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAxjMA0GCSqGSIb3DQEBCwUAA4IBAQACVaQ8+Qie zQWR2KVpS2+y03PwkJMzk6gnPO3aHqAKc7U/rKemmtht0U6kMuZa2mRC7mEo7ZJ1 rBTvsWVbsFzb53DvmQO/T2aRkhp8DYW87rOOkPMmZwlQmtuDInrDg99ktSVZsNVK n3YirtBWBBvHwuuu9HNVWh/Tsa70mca4j8O7tYvJluRWcsAdFGuCa4T2EbxwJPd+ apDM1elVdEwDRTSQ7IOw8xlS2T1QmH6ICm16UFVxV/5X/XP5vEUgDOjOx5kiRsjf VhPRQUn2XZUnzs7iO3Lad90UyPPAx8KVJAbGwpwrgK6dRfAIldnM4T0rrZk0uFqY rASkVtUfvPOj -----END CERTIFICATE-----Generated at Sun Jun 29 21:21:25 2025 by rpki-client