$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer File: 3438EF474B88120C954212EE504ACF2C02AF3889.cer (raw, json) Hash identifier: FOusUYeO7HkzbtAOwux36uvIsB7lz0lhX87Pov2he34= Subject key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B9A651D1B643ACD8A37AA9794ED994ECF18C0A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft caRepository: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 11:52:11 +0000 Certificate not after: Tue 21 Apr 2026 11:57:11 +0000 Subordinate resources: AS: 28202 IP: 177.44.0.0/17 IP: 177.130.128.0/18 IP: 179.189.160.0/19 IP: 186.216.64.0/18 IP: 187.44.0.0/18 IP: 187.120.64.0/18 IP: 189.91.0.0/19 IP: 191.53.0.0/16 IP: 191.240.0.0/17 IP: 2804:87c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:65:1d:1b:64:3a:cd:8a:37:aa:97:94:ed:99:4e:cf:18:c0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 11:52:11 2025 GMT Not After : Apr 21 11:57:11 2026 GMT Subject: CN=3438EF474B88120C954212EE504ACF2C02AF3889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:2a:b2:55:45:b9:28:a3:82:c5:88:dd:8d: 04:cb:ba:4d:2c:53:16:07:f4:c9:e6:c9:f7:fe:bc: 65:d0:ee:a6:1d:ce:8b:cf:07:1b:20:16:fa:19:8f: b4:8d:31:0d:c4:d8:8f:75:10:02:d3:b7:54:1d:0c: 59:29:f4:58:77:6f:df:99:0c:20:f9:3a:3b:74:4e: bb:9c:ed:8c:a1:88:b3:1e:11:f1:1c:0e:cb:3d:db: 77:f6:eb:0b:ff:bf:91:72:f3:9c:e0:56:5a:be:f8: 7f:8d:a6:f9:9a:81:aa:a5:98:ea:f3:e1:d9:af:b6: 23:d2:8f:da:ab:e3:76:d8:0d:08:1e:52:0b:d1:fd: 58:41:7b:ca:c1:c0:b8:73:ca:c3:96:be:89:a2:44: cd:b2:c8:29:f3:fd:0e:62:66:91:7f:ce:52:9b:d0: b3:3e:9d:68:42:04:b7:f3:ea:d3:84:d2:9f:d2:a0: 9f:04:5c:e2:9e:c0:fb:c1:6b:bc:4e:37:8e:86:93: 9d:ec:5c:f6:08:49:0d:a7:4a:57:78:b9:f1:23:0a: 9d:bf:ec:a4:8f:43:07:19:5b:0d:ac:8e:fd:6c:a4: 20:e6:7d:27:ad:0d:de:c9:ce:56:86:61:e7:b9:e8: ab:ba:cc:95:31:0c:57:0e:27:7f:27:89:e4:20:7d: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.44.0.0/17 177.130.128.0/18 179.189.160.0/19 186.216.64.0/18 187.44.0.0/18 187.120.64.0/18 189.91.0.0/19 191.53.0.0/16 191.240.0.0/17 IPv6: 2804:87c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28202 Signature Algorithm: sha256WithRSAEncryption ba:23:54:7b:dc:ce:e2:c0:99:a2:e5:95:e4:e3:58:44:7d:48: 51:ea:75:9a:da:29:c0:0c:11:a9:6b:ac:52:71:4a:f0:33:d1: a2:87:be:c1:05:d8:cb:59:25:cb:c9:ae:a5:1d:db:a7:ba:b0: 3e:b0:a9:e5:f5:f9:14:f1:91:06:4e:57:99:6d:a9:09:30:71: 58:0e:b8:d1:fd:db:23:c5:b0:bb:d2:9d:a1:78:dc:f1:af:52: 91:b0:00:68:68:e4:c4:78:28:69:45:01:6e:ed:da:99:f7:00: a5:9e:16:7a:6f:75:c4:0f:06:ce:d3:28:9f:90:13:6e:3e:16: e9:b3:39:e1:09:88:21:d6:aa:de:cb:7b:23:cf:7e:2e:6a:16: 72:50:8b:4c:7a:48:a6:f5:f5:01:c3:47:43:9f:7d:87:26:6b: 0a:11:48:22:40:51:4d:4d:9a:ef:80:78:81:82:dc:cd:93:d8: f8:9b:55:64:bc:78:6f:84:63:19:d1:7e:e6:29:3e:f0:3f:4b: 94:0f:98:07:a6:a6:76:a5:ee:a3:77:33:06:6c:89:f6:56:5c: 11:a0:30:54:0d:78:98:f5:42:f5:55:89:04:0f:cb:6b:b7:7a: 04:94:84:07:2b:78:b6:a0:cb:1f:89:87:49:90:7f:c2:0e:3c: 26:bc:19:f6 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUG5plHRtkOs2KN6qXlO2ZTs8YwKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIxMTUyMTFaFw0yNjA0MjExMTU3MTFaMDMxMTAvBgNV BAMTKDM0MzhFRjQ3NEI4ODEyMEM5NTQyMTJFRTUwNEFDRjJDMDJBRjM4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhSqyVUW5KKOCxYjdjQTLuk0s UxYH9Mnmyff+vGXQ7qYdzovPBxsgFvoZj7SNMQ3E2I91EALTt1QdDFkp9Fh3b9+Z DCD5Ojt0Truc7YyhiLMeEfEcDss923f26wv/v5Fy85zgVlq++H+NpvmagaqlmOrz 4dmvtiPSj9qr43bYDQgeUgvR/VhBe8rBwLhzysOWvomiRM2yyCnz/Q5iZpF/zlKb 0LM+nWhCBLfz6tOE0p/SoJ8EXOKewPvBa7xON46Gk53sXPYISQ2nSld4ufEjCp2/ 7KSPQwcZWw2sjv1spCDmfSetDd7JzlaGYee56Ku6zJUxDFcOJ38nieQgfSiZAgMB AAGjggNoMIIDZDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0OO9HS4gSDJVC Eu5QSs8sAq84iTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGRQ N05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1VV00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRk UDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAvMzQz OEVGNDc0Qjg4MTIwQzk1NDIxMkVFNTA0QUNGMkMwMkFGMzg4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEH AQH/BE4wTDA7BAIAATA1AwQHsSwAAwQGsYKAAwQFs72gAwQGuthAAwQGuywAAwQG u3hAAwQFvVsAAwMAvzUDBAe/8AAwDQQCAAIwBwMFACgECHwwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICbiowDQYJKoZIhvcNAQELBQADggEBALojVHvczuLAmaLlleTj WER9SFHqdZraKcAMEalrrFJxSvAz0aKHvsEF2MtZJcvJrqUd26e6sD6wqeX1+RTx kQZOV5ltqQkwcVgOuNH92yPFsLvSnaF43PGvUpGwAGho5MR4KGlFAW7t2pn3AKWe FnpvdcQPBs7TKJ+QE24+FumzOeEJiCHWqt7LeyPPfi5qFnJQi0x6SKb19QHDR0Of fYcmawoRSCJAUU1Nmu+AeIGC3M2T2PibVWS8eG+EYxnRfuYpPvA/S5QPmAempnal 7qN3MwZsifZWXBGgMFQNeJj1QvVViQQPy2u3egSUhAcreLagyx+Jh0mQf8IOPCa8 GfY= -----END CERTIFICATE-----Generated at Sat Apr 26 23:08:03 2025 by rpki-client