$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer File: 03D348CD504673CC24A6139BE73024EECBC0A420.cer (raw, json) Hash identifier: Ledmxvtv0Qc/YuLGrHUK/uYUdGJEjJ+UOFwf8l7/tlc= Subject key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5984FF0D3BD92316F278FA6AD5DF0E06DF8EBA75 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft caRepository: rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 13 May 2025 23:09:16 +0000 Certificate not after: Tue 12 May 2026 23:14:16 +0000 Subordinate resources: AS: 271441 IP: 181.233.92.0/24 IP: 181.233.94.0/23 IP: 2804:7b94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:84:ff:0d:3b:d9:23:16:f2:78:fa:6a:d5:df:0e:06:df:8e:ba:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 13 23:09:16 2025 GMT Not After : May 12 23:14:16 2026 GMT Subject: CN=03D348CD504673CC24A6139BE73024EECBC0A420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:24:c4:9d:8f:0c:4f:84:f1:b1:44:3e:b3: 7a:6b:dc:54:f4:a7:44:fe:e9:5a:29:80:34:86:56: db:15:92:f0:6e:7d:71:fe:09:91:4c:4c:9d:27:0e: 9f:04:cb:b8:c8:40:64:46:e2:ac:e8:b3:42:30:26: 18:c5:2c:d4:eb:41:91:7b:01:ba:6e:bb:7e:26:f5: f3:5f:a6:12:60:bc:3e:56:64:05:9b:b2:9d:fa:70: a9:73:7e:92:12:00:3f:3f:2a:d4:ac:01:06:ce:7e: 4b:ac:4b:0e:b0:61:17:e2:31:80:94:c8:5a:c5:12: 71:e3:6b:40:34:97:39:af:3e:83:2f:a8:2c:fc:0b: ba:8b:13:73:81:32:2b:32:43:ba:9c:41:5b:0a:d6: 5d:71:40:cc:a3:37:42:4b:19:ad:77:23:36:c4:a7: 96:f5:89:9a:64:87:a7:5d:d6:7d:fd:81:aa:12:ea: 56:56:58:2b:0e:76:ad:6e:af:5a:7a:5c:9d:8b:87: 85:69:89:d1:92:b4:21:e6:6a:73:80:0c:77:17:8c: fa:3d:f6:09:40:0b:f5:2a:16:11:92:84:34:eb:d2: 1b:cc:53:f2:eb:8f:1f:a5:d6:e3:f6:04:d3:64:37: 9a:98:48:1d:c1:c5:2e:30:c6:ee:ef:ed:2d:0d:11: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.92.0/24 181.233.94.0/23 IPv6: 2804:7b94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271441 Signature Algorithm: sha256WithRSAEncryption 9b:6d:50:09:38:f1:c8:36:9a:00:4b:c8:4a:ea:26:47:33:04: ed:5f:fd:06:73:70:65:93:bb:e7:1f:5a:23:b4:1e:6a:51:3b: 7a:4c:1b:75:87:5b:8e:2f:d8:8e:05:b1:3c:43:fd:b7:0a:10: 47:bd:03:9a:e8:03:d0:8d:ca:fd:e4:65:8c:6b:1d:9b:27:93: f4:44:cc:1c:d9:29:b1:bb:43:1c:14:b3:28:85:03:47:eb:09: 2f:72:00:ec:0f:2e:e2:ea:e1:98:57:bf:09:1b:d8:e2:4c:98: 49:7d:7d:64:56:48:92:dc:b3:30:9b:bd:7e:48:0b:61:ae:09: 5c:95:15:10:90:4c:06:d4:74:0e:8a:bf:16:0a:50:32:5a:7f: 08:57:44:53:05:6b:b2:23:82:be:15:6f:6d:7f:61:09:ef:dc: c9:e7:a7:36:a4:6a:73:a0:49:8f:45:4d:f3:97:f8:63:6c:65: 5f:27:75:b8:e2:d9:12:7c:bf:18:5e:b7:2d:4f:ce:e7:01:ae: 0c:a7:dc:8d:c5:1e:fc:a2:68:ea:f4:bd:51:69:52:04:ae:d9: 5c:19:8d:d3:19:b6:9e:91:ae:59:50:2f:a9:a5:01:53:23:a4: ca:41:7f:94:c8:7e:13:11:de:b0:51:0b:41:aa:12:32:90:6b: 89:4d:c8:a0 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUWYT/DTvZIxbyePpq1d8OBt+OunUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTMyMzA5MTZaFw0yNjA1MTIyMzE0MTZaMDMxMTAvBgNV BAMTKDAzRDM0OENENTA0NjczQ0MyNEE2MTM5QkU3MzAyNEVFQ0JDMEE0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtyTEnY8MT4TxsUQ+s3pr3FT0 p0T+6VopgDSGVtsVkvBufXH+CZFMTJ0nDp8Ey7jIQGRG4qzos0IwJhjFLNTrQZF7 Abpuu34m9fNfphJgvD5WZAWbsp36cKlzfpISAD8/KtSsAQbOfkusSw6wYRfiMYCU yFrFEnHja0A0lzmvPoMvqCz8C7qLE3OBMisyQ7qcQVsK1l1xQMyjN0JLGa13IzbE p5b1iZpkh6dd1n39gaoS6lZWWCsOdq1ur1p6XJ2Lh4VpidGStCHmanOADHcXjPo9 9glAC/UqFhGShDTr0hvMU/Lrjx+l1uP2BNNkN5qYSB3BxS4wxu7v7S0NEVE1AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD00jNUEZzzCSm E5vnMCTuy8CkIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmV5 d2FtQUh0VHNidEZoekxQOEExZXMzdHE5WkxwR2F4U3dtYzhZdzR1aE4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmV5 d2FtQUh0VHNidEZoekxQOEExZXMzdHE5WkxwR2F4U3dtYzhZdzR1aE4vMS8wM0Qz NDhDRDUwNDY3M0NDMjRBNjEzOUJFNzMwMjRFRUNCQzBBNDIwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAC16VwDBAG16V4wDQQCAAIwBwMFACgEe5QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCRRMA0GCSqGSIb3DQEBCwUAA4IBAQCbbVAJOPHI NpoAS8hK6iZHMwTtX/0Gc3Blk7vnH1ojtB5qUTt6TBt1h1uOL9iOBbE8Q/23ChBH vQOa6APQjcr95GWMax2bJ5P0RMwc2Smxu0McFLMohQNH6wkvcgDsDy7i6uGYV78J G9jiTJhJfX1kVkiS3LMwm71+SAthrglclRUQkEwG1HQOir8WClAyWn8IV0RTBWuy I4K+FW9tf2EJ79zJ56c2pGpzoEmPRU3zl/hjbGVfJ3W44tkSfL8YXrctT87nAa4M p9yNxR78omjq9L1RaVIErtlcGY3TGbaeka5ZUC+ppQFTI6TKQX+UyH4TEd6wUQtB qhIykGuJTcig -----END CERTIFICATE-----Generated at Sun Jun 15 15:39:41 2025 by rpki-client