$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer File: DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer (raw, json) Hash identifier: CKiP812625++0B2jNPQYCQSUEWQlnQFmkyaSoIw94gk= Subject key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 071C8E3F101A1642EA018695854320DECD24B823 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft caRepository: rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 02 May 2025 21:17:37 +0000 Certificate not after: Fri 01 May 2026 21:22:37 +0000 Subordinate resources: AS: 270980 IP: 168.196.196.0/22 IP: 2804:746c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1c:8e:3f:10:1a:16:42:ea:01:86:95:85:43:20:de:cd:24:b8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 21:17:37 2025 GMT Not After : May 1 21:22:37 2026 GMT Subject: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:ae:ba:f3:25:14:3e:47:5d:04:68:3e:c3: d9:ce:02:7f:87:b9:ec:26:c3:6c:d6:c5:b3:83:a8: 8b:64:d4:09:02:9f:5b:6a:15:d4:87:c4:76:46:76: 62:ab:ab:15:18:b5:35:94:14:94:a4:78:68:3c:22: 8f:e3:86:3a:40:33:b8:53:ed:be:45:b3:a4:9d:e9: f0:63:0f:58:1b:15:9f:3f:4a:66:b0:49:b3:4c:3f: b5:ca:15:b5:3e:44:32:ce:b7:b2:27:6c:31:3d:e1: d7:46:36:43:69:a8:78:42:07:ad:0f:03:ee:cf:3b: f1:b7:4c:76:44:77:41:0c:47:a2:04:f3:f2:18:f4: 28:27:33:05:fd:22:50:39:f7:4e:c5:d9:25:f7:cc: 55:51:96:4b:13:3a:ff:cb:1e:92:7b:0d:df:28:05: 52:52:1a:bc:69:0b:3c:39:5f:fd:25:32:df:61:6a: e3:04:42:3e:7f:0c:69:5b:79:ee:3a:62:b3:75:ac: 82:f8:0e:dd:26:c8:cd:33:29:21:17:80:dc:36:d7: ca:bb:b4:97:5e:af:39:df:14:3f:40:89:47:4a:3c: 9a:66:37:67:83:7d:f0:3f:9e:8a:26:c4:15:dc:bd: 06:a0:ad:e3:a6:34:c8:29:c3:19:96:ba:8a:a5:ff: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.196.0/22 IPv6: 2804:746c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270980 Signature Algorithm: sha256WithRSAEncryption 2d:86:fd:10:5c:fb:67:96:89:d0:a9:99:02:3c:2d:85:ed:4b: a4:ca:81:92:a2:04:c9:74:ed:81:41:a3:fd:c3:90:6a:ad:12: 0e:2d:09:4b:3d:d4:44:0b:bd:03:bd:34:17:8b:87:76:33:aa: 46:76:a5:08:b8:c7:60:1c:0b:e9:9b:32:7c:f3:98:58:86:d3: d3:1f:85:f6:f4:00:37:ef:bb:9a:51:39:39:79:9e:27:c3:39: 6b:f4:41:69:e0:f9:db:8e:c9:58:60:ca:f3:1b:3d:e2:dc:dc: e1:76:3b:6e:b8:d4:da:4b:69:42:d7:d4:c1:e6:7c:a7:e9:0b: e7:8d:23:ba:ad:e5:50:73:bc:a9:e1:10:ac:d5:f2:75:78:e6: 8f:7d:a7:53:5f:53:c6:4b:2b:77:9f:f7:06:02:36:bd:e3:a7: ea:e3:dd:a3:d0:7e:42:6e:64:91:a2:4a:ec:ce:a8:ed:5e:de: 77:67:0a:3d:9d:f4:97:f8:c7:d7:30:c4:d4:51:c1:20:84:0f: d1:be:d6:b6:c8:d8:97:a3:bd:88:15:50:db:8b:25:a7:d8:a8: 3b:1a:86:e5:63:f4:83:3b:95:bb:41:70:9f:0d:bf:c9:db:04: c5:35:bb:9e:89:15:30:dc:3f:d8:0a:b3:2a:c1:d9:1c:84:3c: 68:50:41:d6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBxyOPxAaFkLqAYaVhUMg3s0kuCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDIyMTE3MzdaFw0yNjA1MDEyMTIyMzdaMDMxMTAvBgNV BAMTKERCNTdENTg2RTMxQTVEMzRFQzdBNzBFQTY2M0U5QTJEMzE1QTAxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATK668yUUPkddBGg+w9nOAn+H uewmw2zWxbODqItk1AkCn1tqFdSHxHZGdmKrqxUYtTWUFJSkeGg8Io/jhjpAM7hT 7b5Fs6Sd6fBjD1gbFZ8/SmawSbNMP7XKFbU+RDLOt7InbDE94ddGNkNpqHhCB60P A+7PO/G3THZEd0EMR6IE8/IY9CgnMwX9IlA5907F2SX3zFVRlksTOv/LHpJ7Dd8o BVJSGrxpCzw5X/0lMt9hauMEQj5/DGlbee46YrN1rIL4Dt0myM0zKSEXgNw218q7 tJderznfFD9AiUdKPJpmN2eDffA/noomxBXcvQagreOmNMgpwxmWuoql/4BJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbV9WG4xpdNOx6 cOpmPpotMVoBJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHd6 ckZQejNxc0Jha0NDRHdnQ3EzSHJtaUZHRVdiRGNtQ04xZEhVSzE3a28vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R3 enJGUHozcXNCYWtDQ0R3Z0NxM0hybWlGR0VXYkRjbUNOMWRIVUsxN2tvLzAvREI1 N0Q1ODZFMzFBNUQzNEVDN0E3MEVBNjYzRTlBMkQzMTVBMDEyNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMTEMA0EAgACMAcDBQAoBHRsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQihDANBgkqhkiG9w0BAQsFAAOCAQEALYb9EFz7Z5aJ0KmZ Ajwthe1LpMqBkqIEyXTtgUGj/cOQaq0SDi0JSz3URAu9A700F4uHdjOqRnalCLjH YBwL6ZsyfPOYWIbT0x+F9vQAN++7mlE5OXmeJ8M5a/RBaeD5247JWGDK8xs94tzc 4XY7brjU2ktpQtfUweZ8p+kL540juq3lUHO8qeEQrNXydXjmj32nU19Txksrd5/3 BgI2veOn6uPdo9B+Qm5kkaJK7M6o7V7ed2cKPZ30l/jH1zDE1FHBIIQP0b7WtsjY l6O9iBVQ24slp9ioOxqG5WP0gzuVu0Fwnw2/ydsExTW7nokVMNw/2AqzKsHZHIQ8 aFBB1g== -----END CERTIFICATE-----Generated at Thu May 8 18:11:25 2025 by rpki-client