$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer File: D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer (raw, json) Hash identifier: K1hC43VYzW5c+xHHuXU6wYzFt4oAZFS96P/jREjL41M= Subject key identifier: D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E76AB1E0033FE9080190F473B0DF16807D446CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.mft caRepository: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Jun 2025 13:40:11 +0000 Certificate not after: Wed 17 Jun 2026 13:45:11 +0000 Subordinate resources: AS: 273729 IP: 168.121.20.0/22 IP: 2804:8b64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:76:ab:1e:00:33:fe:90:80:19:0f:47:3b:0d:f1:68:07:d4:46:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 18 13:40:11 2025 GMT Not After : Jun 17 13:45:11 2026 GMT Subject: CN=D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:ff:d2:b1:ad:dc:b3:46:84:8c:15:07:b4: 43:78:c5:0d:11:a5:86:f8:c1:f8:0f:11:11:37:06: e4:d4:14:97:b0:b7:1a:dd:81:6a:42:d1:ac:8a:12: 09:1d:c4:38:00:e0:51:29:76:f0:ce:01:36:d0:c6: f6:cb:50:ef:37:dd:ec:f7:5d:d6:4b:5d:06:48:65: c0:0d:e9:fe:86:8d:dd:d7:ee:66:02:cb:15:79:19: 55:31:90:fa:97:cd:ea:24:40:9e:81:74:b7:0c:47: e8:d5:ed:95:3f:ee:13:b4:41:92:ec:07:de:9b:d8: 8d:a9:92:08:94:f6:2b:33:81:17:ac:ce:a6:82:a8: d2:54:f6:52:25:f9:48:c5:32:6e:4f:6a:6a:21:98: 13:c0:35:c6:d4:b4:b8:a1:bf:34:25:01:ed:a2:16: ac:39:c6:4e:0f:b2:ce:a6:2c:5c:3c:8b:a4:62:aa: 05:da:70:23:cd:6b:02:bc:ad:54:71:af:4d:85:20: ba:85:31:da:20:81:b2:74:c3:3b:18:8d:dc:34:59: d0:6c:43:b3:56:93:4b:1d:d4:64:d7:5b:c7:cd:5f: 23:47:6f:d9:64:ad:86:d6:7e:38:7c:7f:e4:60:c1: 4c:89:d2:b9:9d:21:c6:98:d8:b0:cc:4e:b3:d2:f9: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.20.0/22 IPv6: 2804:8b64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273729 Signature Algorithm: sha256WithRSAEncryption ca:7f:88:00:c1:f2:02:53:d3:23:36:10:d4:88:15:ea:33:23: 8c:91:33:5f:eb:12:3a:d8:18:a5:0f:46:58:6e:a8:39:d5:b9: 16:b6:f3:58:ea:fb:2f:b4:1a:04:8a:15:fe:05:d3:cf:c0:68: c9:91:fd:33:67:fc:8a:09:d3:27:0d:b4:9b:e9:3c:a8:87:f2: 4f:7a:3b:2a:74:7f:58:f4:83:c8:b3:4e:c2:4f:24:da:da:5c: fa:e9:2c:d8:95:c4:53:77:dd:7a:ee:13:70:43:49:9d:b1:6b: 26:44:cf:fb:94:61:5f:fb:6b:59:b6:c1:3a:af:ab:36:8e:57: 0c:0a:be:1d:0b:d4:e5:54:3e:89:92:87:89:fe:08:72:f8:ad: 24:88:c2:f8:05:9a:d6:d8:6c:20:2a:70:70:b4:95:7e:58:cb: aa:03:86:6d:c7:08:ea:89:55:2a:20:5d:a1:1a:09:38:52:48: ae:bd:3b:c9:07:e5:d6:fb:6e:f2:ca:7a:f5:58:62:04:b9:d4: f6:af:02:e8:7c:86:11:40:4b:43:df:23:cc:cb:d6:72:2b:bb: f7:b3:5d:d2:7d:d7:c0:36:69:68:eb:cd:df:53:d2:61:49:d4: 62:26:3f:de:b3:51:1a:b5:db:ad:e9:9e:38:3b:e8:a5:a9:ec: 56:30:27:db -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTnarHgAz/pCAGQ9HOw3xaAfURsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTgxMzQwMTFaFw0yNjA2MTcxMzQ1MTFaMDMxMTAvBgNV BAMTKEQyN0Y4N0IyMkEyQjA1RTI0MjhCRDVCMUQyRTFEMTVBRDQxRUY1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4P/Ssa3cs0aEjBUHtEN4xQ0R pYb4wfgPERE3BuTUFJewtxrdgWpC0ayKEgkdxDgA4FEpdvDOATbQxvbLUO833ez3 XdZLXQZIZcAN6f6Gjd3X7mYCyxV5GVUxkPqXzeokQJ6BdLcMR+jV7ZU/7hO0QZLs B96b2I2pkgiU9iszgReszqaCqNJU9lIl+UjFMm5PamohmBPANcbUtLihvzQlAe2i Fqw5xk4Pss6mLFw8i6RiqgXacCPNawK8rVRxr02FILqFMdoggbJ0wzsYjdw0WdBs Q7NWk0sd1GTXW8fNXyNHb9lkrYbWfjh8f+RgwUyJ0rmdIcaY2LDMTrPS+eOHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSf4eyKisF4kKL 1bHS4dFa1B71iTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjZi R1pIR1dBZlFhZGJZVmVUQXRGOTMxUEU5UGk0N2JtU3F0Qm9hWFVtdHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2 YkdaSEdXQWZRYWRiWVZlVEF0RjkzMVBFOVBpNDdibVNxdEJvYVhVbXRwLzAvRDI3 Rjg3QjIyQTJCMDVFMjQyOEJENUIxRDJFMUQxNUFENDFFRjU4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqHkUMA0EAgACMAcDBQAoBItkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQtQTANBgkqhkiG9w0BAQsFAAOCAQEAyn+IAMHyAlPTIzYQ 1IgV6jMjjJEzX+sSOtgYpQ9GWG6oOdW5FrbzWOr7L7QaBIoV/gXTz8BoyZH9M2f8 ignTJw20m+k8qIfyT3o7KnR/WPSDyLNOwk8k2tpc+uks2JXEU3fdeu4TcENJnbFr JkTP+5RhX/trWbbBOq+rNo5XDAq+HQvU5VQ+iZKHif4IcvitJIjC+AWa1thsICpw cLSVfljLqgOGbccI6olVKiBdoRoJOFJIrr07yQfl1vtu8sp69VhiBLnU9q8C6HyG EUBLQ98jzMvWciu797Nd0n3XwDZpaOvN31PSYUnUYiY/3rNRGrXbremeODvopans VjAn2w== -----END CERTIFICATE-----Generated at Mon Jun 30 00:17:49 2025 by rpki-client