$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer File: 1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer (raw, json) Hash identifier: zXEN9nmMnwImoQpVyiUzleGXeMSI1QBqfadGKHYuepo= Subject key identifier: 1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4571FB7BC3B4F589659840E0E157FE196FE24328 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft caRepository: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Apr 2025 14:43:39 +0000 Certificate not after: Mon 27 Apr 2026 14:48:39 +0000 Subordinate resources: AS: 270954 IP: 201.49.240.0/22 IP: 2804:7408::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 13:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:71:fb:7b:c3:b4:f5:89:65:98:40:e0:e1:57:fe:19:6f:e2:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 28 14:43:39 2025 GMT Not After : Apr 27 14:48:39 2026 GMT Subject: CN=1FFC457CB13EA536D923B91EC0125BE121DBBCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:f0:40:13:e7:b5:d8:07:f3:58:a5:36:72: fd:7a:35:c2:3f:a9:8b:57:9e:5e:8b:db:80:c7:98: 00:fd:1f:64:48:64:4b:ec:15:e9:74:6f:69:60:c0: 22:a9:73:78:56:e0:64:4b:74:fb:21:4c:4b:4f:d2: c8:01:6b:2c:b0:5a:67:5f:73:00:c1:0d:5b:dc:27: b6:b8:05:cb:d3:18:fb:fc:46:09:f2:ea:aa:ca:25: fc:52:62:e8:b4:70:27:fa:f8:d6:df:dd:f5:04:a7: b6:48:7b:ff:21:fa:c7:bc:dd:b7:11:2e:ce:bb:d0: d2:d6:e0:6f:f6:1f:1a:5e:23:61:3c:95:b8:3f:32: 81:10:51:6c:2e:3f:0e:34:ec:06:90:e9:13:d1:bc: 46:e0:3e:b2:f8:d7:b2:9f:64:fe:fb:34:ee:be:6d: 8a:86:b8:76:26:c9:c0:78:dd:84:aa:fc:68:5a:72: 3c:4a:b8:d1:42:14:26:8b:6d:16:36:96:cf:8b:c4: b2:03:84:83:ee:30:50:52:77:9d:76:d4:38:bc:75: b3:6a:22:25:14:52:4c:06:d7:81:28:dc:5c:c2:ae: 2e:be:b8:12:ee:8c:1b:0c:c5:6d:92:2e:70:5a:84: 44:92:ae:82:a6:7d:74:4d:9c:16:0a:59:ac:74:21: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.49.240.0/22 IPv6: 2804:7408::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270954 Signature Algorithm: sha256WithRSAEncryption 9d:49:76:fb:30:56:94:b8:30:f5:10:12:a5:3e:63:92:11:a8: 5c:06:69:a3:18:5d:d1:a9:67:36:df:1b:4f:62:67:5c:89:fc: f4:90:2b:0e:33:83:48:e3:28:71:73:80:fd:47:9f:8d:b0:15: 13:03:01:cf:de:4f:49:12:1f:e7:5f:c3:89:b4:9e:e2:48:d0: 38:f1:ed:0e:a6:95:1b:20:c3:d7:89:3d:ce:8a:d5:dc:76:7d: 51:c9:bf:d8:cd:61:c2:d1:f3:04:73:84:ea:ef:49:77:c2:37: 5c:c0:a0:90:5a:4c:38:98:76:43:c0:a2:61:6f:30:fe:d5:af: 9e:b7:ec:29:99:fe:4e:9e:60:4a:ac:5c:da:4a:39:fa:c9:52: 49:a6:12:8b:eb:dd:cc:a7:66:fa:63:ee:f1:45:53:2b:e5:36: 87:15:43:eb:1b:9e:ac:84:9d:8c:9a:aa:fc:e5:b6:58:1d:c2: 21:0b:9b:e5:aa:49:08:90:cc:82:fb:3b:60:f1:2b:ed:06:e6: 13:c7:d0:23:1d:76:b3:02:53:1d:38:39:f2:f7:2f:6b:1e:99: 88:3b:22:45:0d:9c:61:bd:78:c4:61:d0:8d:8c:63:f5:b4:03: 7b:ac:1a:71:cd:3c:6b:99:2a:61:46:17:91:40:1e:48:3d:2b: 69:c3:98:92 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURXH7e8O09YllmEDg4Vf+GW/iQygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjgxNDQzMzlaFw0yNjA0MjcxNDQ4MzlaMDMxMTAvBgNV BAMTKDFGRkM0NTdDQjEzRUE1MzZEOTIzQjkxRUMwMTI1QkUxMjFEQkJDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/M/BAE+e12AfzWKU2cv16NcI/ qYtXnl6L24DHmAD9H2RIZEvsFel0b2lgwCKpc3hW4GRLdPshTEtP0sgBayywWmdf cwDBDVvcJ7a4BcvTGPv8Rgny6qrKJfxSYui0cCf6+Nbf3fUEp7ZIe/8h+se83bcR Ls670NLW4G/2HxpeI2E8lbg/MoEQUWwuPw407AaQ6RPRvEbgPrL417KfZP77NO6+ bYqGuHYmycB43YSq/GhacjxKuNFCFCaLbRY2ls+LxLIDhIPuMFBSd5121Di8dbNq IiUUUkwG14Eo3FzCri6+uBLujBsMxW2SLnBahESSroKmfXRNnBYKWax0IWc/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQf/EV8sT6lNtkj uR7AElvhIdu8tzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmdF WTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2MjhyNUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jn RVk2N3ZZMnZXakViS0NuN0xNb3NKMkx1Nnd6WXFlWjFUTWtENjI4cjVDLzAvMUZG QzQ1N0NCMTNFQTUzNkQ5MjNCOTFFQzAxMjVCRTEyMURCQkNCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyTHwMA0EAgACMAcDBQAoBHQIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiajANBgkqhkiG9w0BAQsFAAOCAQEAnUl2+zBWlLgw9RAS pT5jkhGoXAZpoxhd0alnNt8bT2JnXIn89JArDjODSOMocXOA/UefjbAVEwMBz95P SRIf51/DibSe4kjQOPHtDqaVGyDD14k9zorV3HZ9Ucm/2M1hwtHzBHOE6u9Jd8I3 XMCgkFpMOJh2Q8CiYW8w/tWvnrfsKZn+Tp5gSqxc2ko5+slSSaYSi+vdzKdm+mPu 8UVTK+U2hxVD6xuerISdjJqq/OW2WB3CIQub5apJCJDMgvs7YPEr7QbmE8fQIx12 swJTHTg58vcvax6ZiDsiRQ2cYb14xGHQjYxj9bQDe6wacc08a5kqYUYXkUAeSD0r acOYkg== -----END CERTIFICATE-----Generated at Fri May 2 14:59:57 2025 by rpki-client