$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer File: DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer (raw, json) Hash identifier: /ymDHRtijg5DapbZ4xy7n1l2TgiFXKheIY9UClGcHwE= Subject key identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C09DB21884FD3FFB5D2987FAB4630FC12339481 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft caRepository: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 May 2025 20:15:18 +0000 Certificate not after: Sat 09 May 2026 20:20:18 +0000 Subordinate resources: AS: 267961 IP: 45.165.160.0/22 IP: 2804:55dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:09:db:21:88:4f:d3:ff:b5:d2:98:7f:ab:46:30:fc:12:33:94:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 10 20:15:18 2025 GMT Not After : May 9 20:20:18 2026 GMT Subject: CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:ed:dc:04:de:5a:98:36:31:58:e9:db:dc: 88:66:5c:e9:7f:65:5e:89:eb:78:0a:fb:bb:12:d0: 08:dc:f1:b8:0e:26:04:e5:59:6a:8d:e3:6b:97:1f: ee:df:80:00:7d:68:d9:7a:47:f6:27:75:dc:97:86: dc:96:79:b9:87:75:76:eb:67:0b:3d:48:a8:11:ca: 26:21:a0:b2:82:05:9e:02:2b:1f:2e:fe:0f:45:e0: 34:5b:23:ef:cf:0f:a2:1d:4b:42:e2:35:fc:86:a1: e0:04:08:17:1d:40:65:22:1c:d2:a4:5d:14:60:7d: 76:38:d9:5f:cf:65:6d:0a:a3:85:8a:bb:ce:cc:71: e4:f1:ce:dc:29:c6:36:8a:a8:79:95:80:30:02:a7: 99:96:8d:80:7a:18:94:a0:e7:05:6c:b3:af:52:0f: 43:bd:68:e6:df:1b:4a:93:e3:19:5e:2d:b1:a8:b9: bf:b5:ba:46:68:fb:1e:e5:1a:fd:bb:60:e7:8e:97: 72:70:77:9f:fb:7c:75:be:2b:f8:95:d6:78:2f:4c: 00:10:6a:e8:26:a4:d6:31:e1:b6:1c:8a:26:61:0f: ea:56:d9:e4:bb:81:df:db:a8:fb:1e:58:06:a0:23: 91:60:cd:ee:a1:5a:80:19:9c:ba:b6:c0:e6:a2:bc: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.160.0/22 IPv6: 2804:55dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267961 Signature Algorithm: sha256WithRSAEncryption 50:43:2f:dd:82:64:c4:8c:71:15:99:d2:f5:43:60:a0:f2:51: 46:c7:17:97:fd:a3:55:c0:e5:65:b6:83:d8:8f:9e:bb:70:06: b0:32:fd:2f:28:c9:00:dc:10:20:36:32:af:4e:92:8f:1c:74: c9:ff:62:37:d3:8a:66:f7:d9:d1:a0:c7:f0:b0:71:5f:c6:5c: 22:19:69:17:ba:92:9d:a2:18:97:35:f2:f0:46:39:9d:a0:a1: 5c:19:7a:30:62:c3:9e:f2:ef:c3:88:24:43:d2:07:25:10:cc: 00:6f:c4:8c:da:c8:7d:06:bd:a1:dc:6c:d4:a6:c1:4f:c5:9a: 64:a4:22:da:19:35:3c:4b:4b:e9:44:90:9d:21:83:14:80:cb: c2:5a:f5:c8:29:7b:fb:ea:b3:37:15:de:bf:13:58:d5:f4:06: 7e:82:cb:6c:fc:66:ba:97:39:0c:fe:48:02:67:ec:2c:e7:b9: 6d:35:fc:18:e2:bc:15:1d:a6:a5:cc:63:ea:e8:22:5f:9a:6b: 3f:60:86:53:fc:79:0e:63:7e:84:2c:8c:5f:09:c8:61:0d:cf: 5d:32:1f:90:3c:ed:f1:32:4c:4d:b7:75:b0:96:cd:48:cc:9d: 87:49:cf:ab:86:ea:c4:dd:55:61:bc:56:e9:e1:d4:82:c1:15: 6b:5e:4b:e5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTAnbIYhP0/+10ph/q0Yw/BIzlIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTAyMDE1MThaFw0yNjA1MDkyMDIwMThaMDMxMTAvBgNV BAMTKERCMjBFRkZDNjA0QzBBMEI0RUExMTY0QjdGRDc2NzBFMjUxQjM2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWu3cBN5amDYxWOnb3IhmXOl/ ZV6J63gK+7sS0Ajc8bgOJgTlWWqN42uXH+7fgAB9aNl6R/YnddyXhtyWebmHdXbr Zws9SKgRyiYhoLKCBZ4CKx8u/g9F4DRbI+/PD6IdS0LiNfyGoeAECBcdQGUiHNKk XRRgfXY42V/PZW0Ko4WKu87MceTxztwpxjaKqHmVgDACp5mWjYB6GJSg5wVss69S D0O9aObfG0qT4xleLbGoub+1ukZo+x7lGv27YOeOl3Jwd5/7fHW+K/iV1ngvTAAQ augmpNYx4bYciiZhD+pW2eS7gd/bqPseWAagI5Fgze6hWoAZnLq2wOaivPrDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbIO/8YEwKC06h Fkt/12cOJRs2dTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2V1 RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6aFYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dl dUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAvREIy MEVGRkM2MDRDMEEwQjRFQTExNjRCN0ZENzY3MEUyNTFCMzY3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaWgMA0EAgACMAcDBQAoBFXcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQWuTANBgkqhkiG9w0BAQsFAAOCAQEAUEMv3YJkxIxxFZnS 9UNgoPJRRscXl/2jVcDlZbaD2I+eu3AGsDL9LyjJANwQIDYyr06Sjxx0yf9iN9OK ZvfZ0aDH8LBxX8ZcIhlpF7qSnaIYlzXy8EY5naChXBl6MGLDnvLvw4gkQ9IHJRDM AG/EjNrIfQa9odxs1KbBT8WaZKQi2hk1PEtL6USQnSGDFIDLwlr1yCl7++qzNxXe vxNY1fQGfoLLbPxmupc5DP5IAmfsLOe5bTX8GOK8FR2mpcxj6ugiX5prP2CGU/x5 DmN+hCyMXwnIYQ3PXTIfkDzt8TJMTbd1sJbNSMydh0nPq4bqxN1VYbxW6eHUgsEV a15L5Q== -----END CERTIFICATE-----Generated at Sun May 11 05:38:40 2025 by rpki-client