$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer File: 4A878B171A89865FE50F9279FA62C99093D05B86.cer (raw, json) Hash identifier: XMgsN3BdGyxla9q6Xc7LHttQrO+zPm1pHyHmawoDVKs= Subject key identifier: 4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B5F4AFDD3643F9A3EFAFDAD0FE74AEBED027D4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.mft caRepository: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 23 May 2025 12:07:59 +0000 Certificate not after: Fri 22 May 2026 12:12:59 +0000 Subordinate resources: AS: 267198 IP: 45.231.124.0/22 IP: 2804:49b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 22:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5f:4a:fd:d3:64:3f:9a:3e:fa:fd:ad:0f:e7:4a:eb:ed:02:7d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 23 12:07:59 2025 GMT Not After : May 22 12:12:59 2026 GMT Subject: CN=4A878B171A89865FE50F9279FA62C99093D05B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1e:a6:0f:21:89:c6:82:89:eb:fb:fe:e2:27: 9b:8d:0b:08:fc:8f:49:5a:b7:c1:9c:5c:33:fa:7c: e7:3c:12:0d:42:e4:d7:51:dd:7c:be:65:a3:01:db: a6:07:43:0c:54:a5:79:89:d3:ac:14:0b:cf:6c:ed: b1:24:bc:ea:56:a4:37:52:eb:ae:a4:d7:f6:53:c8: 57:14:a0:e4:c9:48:fe:96:75:3b:f0:0d:8d:9b:7b: 10:a2:f8:43:e6:d6:34:92:8a:1e:36:c0:47:4c:95: 2f:bb:6c:ed:0a:8d:d2:45:96:f6:fa:49:17:e1:f6: e7:99:2a:43:e6:23:e1:28:e7:bf:ae:d0:b3:75:e3: 17:40:9d:be:6e:19:8f:15:a2:e2:8d:df:29:6e:80: d3:88:c8:f5:51:6c:16:28:e6:74:af:bb:23:b7:03: e7:89:ec:66:3e:5e:d9:9d:40:ae:c8:b0:f0:97:1a: aa:47:d5:d4:ad:49:e4:be:76:de:1e:d4:bb:64:38: 7e:56:ee:1b:39:bd:19:07:16:dc:fb:81:49:f9:12: 89:ff:f9:0a:b4:08:bb:84:63:cf:cc:11:0e:3c:e1: 15:6e:cc:81:8c:f1:58:80:fc:4d:48:ff:6e:7a:a0: d3:17:1c:ca:c8:a1:a4:00:4c:cb:bb:d7:af:26:88: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.124.0/22 IPv6: 2804:49b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267198 Signature Algorithm: sha256WithRSAEncryption 96:1e:ab:69:d0:c1:f1:6b:24:7d:07:4e:e9:08:63:04:bc:99: 7f:49:95:f0:c3:25:36:ef:c7:55:61:a5:1a:c3:cf:0e:32:b7: 1f:07:6b:dc:5b:18:a1:fe:a2:a8:7b:a7:cd:42:45:e0:3e:f2: a8:47:37:5d:0c:6b:a5:bc:df:ca:27:3b:11:38:13:a9:19:2d: f1:01:42:11:08:e0:6f:3c:59:17:10:ad:7b:fc:b7:84:7d:d4: 93:b2:83:2d:93:59:a8:e9:e1:fa:d8:77:21:4d:6e:89:94:92: 72:8f:24:5d:5a:6a:ab:07:f4:67:c6:72:87:73:22:b8:65:62: f9:e6:cf:fd:8f:de:3c:4d:7b:f0:80:4a:bd:88:fd:2d:a1:76: 27:89:db:a6:80:c1:ec:d4:8f:3c:a0:3f:f2:00:e1:ae:72:38: 69:88:5a:c4:aa:67:36:94:99:71:d2:3b:57:b8:4d:52:51:59: 7c:30:e6:ad:bc:65:d8:7e:9a:37:67:93:5d:fe:6b:2e:11:5d: 3c:3d:2e:d4:7c:24:7e:f1:41:c5:d3:1d:6d:5a:d1:87:b8:31: 15:82:53:e6:ab:58:fa:cb:2d:86:87:5d:c4:6f:7e:4d:f9:27: 05:1e:cb:69:41:6d:86:b0:33:d5:2d:06:4f:20:bd:bc:a7:09: 0c:d6:88:a2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUa19K/dNkP5o++v2tD+dK6+0CfUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjMxMjA3NTlaFw0yNjA1MjIxMjEyNTlaMDMxMTAvBgNV BAMTKDRBODc4QjE3MUE4OTg2NUZFNTBGOTI3OUZBNjJDOTkwOTNEMDVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5HqYPIYnGgonr+/7iJ5uNCwj8 j0lat8GcXDP6fOc8Eg1C5NdR3Xy+ZaMB26YHQwxUpXmJ06wUC89s7bEkvOpWpDdS 666k1/ZTyFcUoOTJSP6WdTvwDY2bexCi+EPm1jSSih42wEdMlS+7bO0KjdJFlvb6 SRfh9ueZKkPmI+Eo57+u0LN14xdAnb5uGY8VouKN3ylugNOIyPVRbBYo5nSvuyO3 A+eJ7GY+XtmdQK7IsPCXGqpH1dStSeS+dt4e1LtkOH5W7hs5vRkHFtz7gUn5Eon/ +Qq0CLuEY8/MEQ484RVuzIGM8ViA/E1I/256oNMXHMrIoaQATMu7168miFR3AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKh4sXGomGX+UP knn6YsmQk9BbhjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2c3 QlBLaDFXMXJvUm9kQURyTTVTQkM3azhvN3BURVRZdGg4eW8zb1NOZGovMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2c3 QlBLaDFXMXJvUm9kQURyTTVTQkM3azhvN3BURVRZdGg4eW8zb1NOZGovMC80QTg3 OEIxNzFBODk4NjVGRTUwRjkyNzlGQTYyQzk5MDkzRDA1Qjg2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt53wwDQQCAAIwBwMFACgESbQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBO+MA0GCSqGSIb3DQEBCwUAA4IBAQCWHqtp0MHxayR9B07p CGMEvJl/SZXwwyU278dVYaUaw88OMrcfB2vcWxih/qKoe6fNQkXgPvKoRzddDGul vN/KJzsROBOpGS3xAUIRCOBvPFkXEK17/LeEfdSTsoMtk1mo6eH62HchTW6JlJJy jyRdWmqrB/RnxnKHcyK4ZWL55s/9j948TXvwgEq9iP0toXYnidumgMHs1I88oD/y AOGucjhpiFrEqmc2lJlx0jtXuE1SUVl8MOatvGXYfpo3Z5Nd/msuEV08PS7UfCR+ 8UHF0x1tWtGHuDEVglPmq1j6yy2Gh13Eb35N+ScFHstpQW2GsDPVLQZPIL28pwkM 1oii -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:29 2025 by rpki-client