$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer File: CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer (raw, json) Hash identifier: rzvNk0UVKWl0M4eJ1+EvLfcI8Flvx04migwcqRs/3LM= Subject key identifier: CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 425510CC44317EFF5B73FB1690E411FDE53C5F88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.mft caRepository: rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 00:00:20 +0000 Certificate not after: Fri 05 Jun 2026 00:05:20 +0000 Subordinate resources: AS: 270890 IP: 186.233.4.0/22 IP: 2804:7304::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:55:10:cc:44:31:7e:ff:5b:73:fb:16:90:e4:11:fd:e5:3c:5f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 6 00:00:20 2025 GMT Not After : Jun 5 00:05:20 2026 GMT Subject: CN=CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:f1:99:ec:a1:77:e5:57:48:2e:1a:b0:bd: b9:84:1f:06:e0:90:09:d3:dc:ff:d8:32:7a:a2:9b: c8:dc:7f:92:21:42:ec:ad:02:da:61:23:bc:34:9e: 5f:fa:60:74:e0:9f:f7:f5:ea:e3:44:50:8f:89:87: 7d:eb:76:84:dd:e5:7d:a5:61:b5:51:fd:15:4e:20: 6f:f9:b5:c5:b8:47:11:e2:34:3e:b8:ee:15:af:e9: 91:d6:dc:1d:1f:7a:20:ba:3e:e9:01:df:37:03:d1: 86:16:25:1f:c5:a5:2e:f5:b1:ea:32:90:fb:0f:34: 85:d1:d2:d6:c2:1a:0b:34:01:c5:9d:40:4c:65:8c: 9a:28:98:ba:78:30:a2:0f:8a:e2:92:1a:6d:33:eb: 9a:d2:88:cf:18:a8:d3:ac:99:06:69:a9:b9:92:40: bc:8a:fa:00:09:c0:20:2d:a3:50:72:c2:29:aa:10: 71:30:14:73:0c:db:c0:78:ef:7e:3a:be:39:b6:b5: 9b:11:f0:7a:51:db:4a:79:e1:2a:e5:c0:dc:d2:07: 2d:f8:5d:62:61:cd:51:0b:aa:e0:07:f2:d4:a7:fd: 02:81:3b:0f:98:34:0d:15:75:df:77:b6:69:b1:a9: f3:0e:6f:bf:53:28:65:57:3e:5a:b9:8d:08:ff:1c: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.233.4.0/22 IPv6: 2804:7304::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270890 Signature Algorithm: sha256WithRSAEncryption d6:1b:ed:8a:6a:fc:fa:49:4e:a3:79:bb:0f:f8:72:54:a8:93: 6a:f8:59:f6:a6:f3:c3:32:34:6a:fb:d7:4d:05:9a:d1:42:ff: 7c:f4:ea:44:ba:7d:38:25:05:98:f7:89:17:9d:b2:b7:65:cd: 0a:f2:fb:34:be:22:83:3e:f6:7f:f9:12:80:5c:9b:65:46:98: 32:16:ad:01:1a:47:8f:41:45:bb:7d:96:8d:d1:73:3f:41:67: 32:6f:94:2d:6b:5a:ce:bf:a6:a8:92:0e:64:5c:c5:64:7a:e0: 92:20:28:c8:38:2a:24:53:42:27:32:bb:d0:1d:b8:35:fd:f2: aa:a2:b0:99:1b:99:9d:7a:f2:c0:61:a7:03:d3:f2:03:19:86: 11:02:55:d9:25:28:a1:cf:d4:fa:68:f8:91:ca:ac:0e:6c:db: 55:8a:76:03:82:d3:50:4c:65:61:7a:25:3d:f9:b3:f1:97:a0: c4:0e:5e:2e:36:bf:3e:cb:f2:67:36:93:0d:36:00:ac:42:db: e1:2c:7e:5b:50:4c:b5:22:57:5f:77:9c:e2:b8:70:68:87:cd: b5:90:b2:fd:e1:87:e7:b9:8a:c4:39:fb:46:a3:2a:e2:f2:82: 17:03:80:c9:4d:b3:dc:08:73:51:21:ba:bd:92:bb:87:1b:17: 25:94:e6:c3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQlUQzEQxfv9bc/sWkOQR/eU8X4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDYwMDAwMjBaFw0yNjA2MDUwMDA1MjBaMDMxMTAvBgNV BAMTKENGRUE2MkM0NTZCMkJFRTBCN0IzM0UyMjA3NURGOTVCMEM2OEVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3vGZ7KF35VdILhqwvbmEHwbg kAnT3P/YMnqim8jcf5IhQuytAtphI7w0nl/6YHTgn/f16uNEUI+Jh33rdoTd5X2l YbVR/RVOIG/5tcW4RxHiND647hWv6ZHW3B0feiC6PukB3zcD0YYWJR/FpS71seoy kPsPNIXR0tbCGgs0AcWdQExljJoomLp4MKIPiuKSGm0z65rSiM8YqNOsmQZpqbmS QLyK+gAJwCAto1BywimqEHEwFHMM28B47346vjm2tZsR8HpR20p54SrlwNzSBy34 XWJhzVELquAH8tSn/QKBOw+YNA0Vdd93tmmxqfMOb79TKGVXPlq5jQj/HLgnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTP6mLEVrK+4Lez PiIHXflbDGjucTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkxN RFJKU2N2Vkt4MmlzZ2ZwRXlZczRVcWRncXhoVHI4Ump0N0xZc3RZVFAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZM TURSSlNjdlZLeDJpc2dmcEV5WXM0VXFkZ3F4aFRyOFJqdDdMWXN0WVRQLzAvQ0ZF QTYyQzQ1NkIyQkVFMEI3QjMzRTIyMDc1REY5NUIwQzY4RUU3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCuukEMA0EAgACMAcDBQAoBHMEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiKjANBgkqhkiG9w0BAQsFAAOCAQEA1hvtimr8+klOo3m7 D/hyVKiTavhZ9qbzwzI0avvXTQWa0UL/fPTqRLp9OCUFmPeJF52yt2XNCvL7NL4i gz72f/kSgFybZUaYMhatARpHj0FFu32WjdFzP0FnMm+ULWtazr+mqJIOZFzFZHrg kiAoyDgqJFNCJzK70B24Nf3yqqKwmRuZnXrywGGnA9PyAxmGEQJV2SUooc/U+mj4 kcqsDmzbVYp2A4LTUExlYXolPfmz8ZegxA5eLja/PsvyZzaTDTYArELb4Sx+W1BM tSJXX3ec4rhwaIfNtZCy/eGH57mKxDn7RqMq4vKCFwOAyU2z3AhzUSG6vZK7hxsX JZTmww== -----END CERTIFICATE-----Generated at Sun Jun 29 21:57:54 2025 by rpki-client