$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer File: D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer (raw, json) Hash identifier: a3+cgznB3e06bZB+O4x25r4JxtkqR+vQbw9mRKD33w0= Subject key identifier: D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 198C8EE550F8C11CF8812FA7DDAD0428C69ABFB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft caRepository: rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 16:22:35 +0000 Certificate not after: Tue 16 Jun 2026 16:27:35 +0000 Subordinate resources: AS: 271685 IP: 45.230.87.0/24 IP: 189.84.54.0/23 IP: 2804:7f64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8c:8e:e5:50:f8:c1:1c:f8:81:2f:a7:dd:ad:04:28:c6:9a:bf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 16:22:35 2025 GMT Not After : Jun 16 16:27:35 2026 GMT Subject: CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:fd:f4:0b:eb:44:c0:08:72:f2:df:2c:9f: ce:9f:24:ee:7a:56:58:8b:93:25:01:15:d0:ac:a3: e2:53:f0:ba:0d:26:32:a6:76:b2:8c:60:d8:c3:79: 35:01:a8:53:ed:02:0b:1e:d3:2a:35:d5:3e:a1:7c: 96:ca:2b:91:fe:80:11:8b:1a:b2:45:1d:7b:f0:c1: 5f:57:03:09:b8:81:2f:5f:1b:02:18:0f:2d:4d:7c: a2:7d:7d:29:6d:39:09:4a:6a:5d:dc:16:88:49:1d: 7a:5d:15:ee:b3:00:f1:a0:ee:a5:3a:bd:46:6e:4b: 17:55:64:8d:03:8b:fc:83:4a:c2:d9:14:71:a6:6c: 2d:04:62:7b:27:e2:ef:a2:a6:56:1b:df:82:6d:24: 6d:03:62:43:7b:89:57:a8:7a:67:e3:cb:75:d1:9f: 1c:9e:7d:6f:bb:ec:e0:dc:94:66:73:5e:71:69:b5: 55:f2:96:31:b4:3f:05:aa:e0:7a:c3:00:dd:f4:47: 38:0c:62:0e:f6:53:52:d8:3f:ad:78:be:a8:1a:2a: 22:f6:37:a3:a5:b8:2b:a1:74:5e:3f:b2:e3:79:7c: 93:f1:8a:cc:49:a9:ea:ce:e1:47:de:25:49:1b:a6: c7:84:67:31:ef:03:52:b5:6f:61:82:8c:68:57:0e: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.87.0/24 189.84.54.0/23 IPv6: 2804:7f64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271685 Signature Algorithm: sha256WithRSAEncryption b6:8b:53:6b:60:af:c9:9d:b4:41:17:c6:ed:cf:df:20:fc:a2: 12:21:4f:28:f8:f4:18:be:9c:f1:05:b4:d5:2e:c2:41:44:c5: 28:eb:17:db:b7:d5:8e:91:19:14:1e:6c:83:6c:0d:0a:e0:d2: 88:de:73:29:b4:93:e7:35:f1:52:36:f6:84:ba:4e:c7:b3:d8: c7:12:89:5b:86:b0:e3:ae:42:93:1c:49:03:eb:28:c3:16:90: 75:f3:aa:0a:fe:f5:10:5a:1a:a9:65:f7:d1:52:52:22:f0:5d: 56:36:2b:b2:46:23:91:53:13:49:04:3c:f2:65:7e:49:34:51: de:ff:15:72:db:2c:6b:73:f0:bd:7b:10:27:8b:83:03:10:8b: a6:5b:ce:ee:bd:12:b2:39:f7:88:8d:02:b4:5d:65:8e:dd:40: 0a:4b:7c:72:60:9a:46:57:c8:de:b7:25:32:38:71:f5:d9:0d: 67:fa:ce:1c:b1:03:08:e0:f9:89:af:f0:4e:c3:2c:6b:b3:d0: f7:5a:21:7b:7f:b8:87:b8:f3:c5:f4:8b:9b:9e:c3:54:f4:0d: 0a:61:79:7f:cf:56:98:ba:56:4f:c0:2c:d2:25:89:f9:46:75: 5a:35:c2:7c:3b:e8:a1:bd:8b:28:78:0d:91:92:ef:64:29:57: 0e:ba:50:e1 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUGYyO5VD4wRz4gS+n3a0EKMaav7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTcxNjIyMzVaFw0yNjA2MTYxNjI3MzVaMDMxMTAvBgNV BAMTKEQxQ0QxOUY2MkM0MkJEMkJGNTMzOEU4MjBGNjlFOEEzNEUzOEI2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZf30C+tEwAhy8t8sn86fJO56 VliLkyUBFdCso+JT8LoNJjKmdrKMYNjDeTUBqFPtAgse0yo11T6hfJbKK5H+gBGL GrJFHXvwwV9XAwm4gS9fGwIYDy1NfKJ9fSltOQlKal3cFohJHXpdFe6zAPGg7qU6 vUZuSxdVZI0Di/yDSsLZFHGmbC0EYnsn4u+iplYb34JtJG0DYkN7iVeoemfjy3XR nxyefW+77ODclGZzXnFptVXyljG0PwWq4HrDAN30RzgMYg72U1LYP614vqgaKiL2 N6OluCuhdF4/suN5fJPxisxJqerO4UfeJUkbpseEZzHvA1K1b2GCjGhXDm6lAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRzRn2LEK9K/Uz joIPaeijTji2pjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veHE1 OWJndGhrYmMyU3RxaEczUURLa1paU043QmdIQ0NSd0NQYlhxVXdVdS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veHE1 OWJndGhrYmMyU3RxaEczUURLa1paU043QmdIQ0NSd0NQYlhxVXdVdS8wL0QxQ0Qx OUY2MkM0MkJEMkJGNTMzOEU4MjBGNjlFOEEzNEUzOEI2QTYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAC3mVwMEAb1UNjANBAIAAjAHAwUAKAR/ZDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEJUUwDQYJKoZIhvcNAQELBQADggEBALaLU2tgr8md tEEXxu3P3yD8ohIhTyj49Bi+nPEFtNUuwkFExSjrF9u31Y6RGRQebINsDQrg0oje cym0k+c18VI29oS6Tsez2McSiVuGsOOuQpMcSQPrKMMWkHXzqgr+9RBaGqll99FS UiLwXVY2K7JGI5FTE0kEPPJlfkk0Ud7/FXLbLGtz8L17ECeLgwMQi6Zbzu69ErI5 94iNArRdZY7dQApLfHJgmkZXyN63JTI4cfXZDWf6zhyxAwjg+Ymv8E7DLGuz0Pda IXt/uIe488X0i5uew1T0DQpheX/PVpi6Vk/ALNIliflGdVo1wnw76KG9iyh4DZGS 72QpVw66UOE= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:28 2025 by rpki-client