$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer File: 78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer (raw, json) Hash identifier: 2MP1pTtppTQWGHg88zFe9u1oJYds8DvVT2IzjsD6zvM= Subject key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3CA092055DC509AD1C897A77987473B9DA94C3DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft caRepository: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 May 2025 12:59:44 +0000 Certificate not after: Fri 15 May 2026 13:04:44 +0000 Subordinate resources: AS: 268296 IP: 45.237.244.0/22 IP: 2804:4efc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 22:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a0:92:05:5d:c5:09:ad:1c:89:7a:77:98:74:73:b9:da:94:c3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 12:59:44 2025 GMT Not After : May 15 13:04:44 2026 GMT Subject: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:49:dd:9e:8e:97:03:48:89:c8:92:58:80: f2:23:d6:b7:73:90:15:91:5f:6b:a7:7d:b1:9e:85: d3:77:76:56:b1:80:b4:8c:d1:2c:bc:b3:ae:6e:cc: d0:91:9c:e0:da:8c:2a:45:28:fd:bd:c9:a5:5b:b6: c6:9e:2b:cf:13:df:f5:09:25:6d:86:ca:1c:73:75: 4e:8d:cc:67:e3:5e:44:d0:50:c9:6c:64:7e:8e:d7: ea:9c:34:35:1b:1b:a9:a9:16:46:70:ff:6b:94:f4: 6f:84:8e:ad:75:86:0b:9d:c3:66:00:1d:ee:1a:a9: cd:a0:b7:8b:db:3e:d9:26:e9:30:c6:e4:2d:4d:b2: 85:d3:87:50:8e:55:df:cd:20:46:5c:af:7d:8e:87: 67:8f:a8:b9:89:67:56:e2:f8:7b:ac:28:22:08:14: e9:74:7e:14:80:85:36:5c:3d:6a:42:59:f1:22:c9: 58:ab:fd:85:31:41:e2:8d:33:32:80:da:0e:bc:2e: 96:f1:e2:bf:ff:fe:1c:d3:97:1a:f4:d8:31:43:22: a2:de:2a:ed:20:34:75:57:6a:cf:39:10:5c:e0:6e: 60:1e:7e:8f:65:c5:6f:22:99:ba:27:36:75:82:fd: 51:8f:6c:9d:15:b9:2a:5a:ee:70:3d:2c:30:85:70: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.244.0/22 IPv6: 2804:4efc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268296 Signature Algorithm: sha256WithRSAEncryption d9:3c:23:12:3e:e8:fc:49:0c:1e:70:96:93:64:df:ec:4a:0d: c0:e8:19:fd:2b:1e:af:d1:b0:74:23:de:83:b9:ff:9e:d9:a1: 39:04:8b:84:4a:a0:3f:f5:86:14:13:9c:36:3b:87:83:11:4a: 83:6a:8b:b8:53:c5:5e:da:fc:ba:42:8f:a5:b2:ca:e6:8e:9e: 7d:03:f6:56:23:66:96:ad:de:8a:d8:22:49:de:c5:08:18:72: 8b:16:7b:02:66:b5:75:02:d1:85:54:19:07:e0:60:93:9d:fd: 4c:0b:54:dd:18:fa:fd:21:37:21:88:f3:67:a7:46:65:ea:3d: 24:fa:84:ab:14:85:f2:ee:03:54:d1:23:cc:45:13:71:98:76: 9f:a6:cd:e0:de:bd:3b:66:45:59:c0:62:cd:3a:ef:a4:a0:1b: a5:48:d6:5e:a6:1c:a7:d9:8e:99:18:fe:c0:a0:7e:3d:6b:9e: 3f:7b:cf:69:f1:fd:99:2c:ea:77:5e:23:0c:be:8d:97:aa:7b: bb:ac:ba:f4:d5:0e:46:13:d5:39:50:a9:5b:ff:ca:88:08:68: 26:8b:05:95:48:57:ef:eb:24:70:f7:5b:8a:53:51:21:6a:1a: bf:f5:61:ed:ce:0b:db:4f:96:02:bd:e9:22:99:5d:a0:93:04: c7:a4:78:f4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPKCSBV3FCa0ciXp3mHRzudqUw90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTYxMjU5NDRaFw0yNjA1MTUxMzA0NDRaMDMxMTAvBgNV BAMTKDc4REVDOEMwNDI0ODlGMUFFNjhGOUM4QTFEOEMwRDI5RENDQjQzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUEndno6XA0iJyJJYgPIj1rdz kBWRX2unfbGehdN3dlaxgLSM0Sy8s65uzNCRnODajCpFKP29yaVbtsaeK88T3/UJ JW2GyhxzdU6NzGfjXkTQUMlsZH6O1+qcNDUbG6mpFkZw/2uU9G+Ejq11hgudw2YA He4aqc2gt4vbPtkm6TDG5C1NsoXTh1COVd/NIEZcr32Oh2ePqLmJZ1bi+HusKCII FOl0fhSAhTZcPWpCWfEiyVir/YUxQeKNMzKA2g68Lpbx4r///hzTlxr02DFDIqLe Ku0gNHVXas85EFzgbmAefo9lxW8imbonNnWC/VGPbJ0VuSpa7nA9LDCFcG4vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR43sjAQkifGuaP nIodjA0p3MtDfDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVc0 b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQSnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlX NG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAvNzhE RUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlEQ0NCNDM3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe30MA0EAgACMAcDBQAoBE78MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYCDANBgkqhkiG9w0BAQsFAAOCAQEA2TwjEj7o/EkMHnCW k2Tf7EoNwOgZ/Sser9GwdCPeg7n/ntmhOQSLhEqgP/WGFBOcNjuHgxFKg2qLuFPF Xtr8ukKPpbLK5o6efQP2ViNmlq3eitgiSd7FCBhyixZ7Ama1dQLRhVQZB+Bgk539 TAtU3Rj6/SE3IYjzZ6dGZeo9JPqEqxSF8u4DVNEjzEUTcZh2n6bN4N69O2ZFWcBi zTrvpKAbpUjWXqYcp9mOmRj+wKB+PWueP3vPafH9mSzqd14jDL6Nl6p7u6y69NUO RhPVOVCpW//KiAhoJosFlUhX7+skcPdbilNRIWoav/Vh7c4L20+WAr3pIpldoJME x6R49A== -----END CERTIFICATE-----Generated at Tue Jun 17 03:24:13 2025 by rpki-client