$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer File: 9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer (raw, json) Hash identifier: 5DqoOq08OCkrs5nwO+hYyfLj1UyPhjsmxXaMHpLUgk8= Subject key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E50B6D9EF92DA05E70645D61FF5F4EAF36E3E53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft caRepository: rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 26 Apr 2025 17:46:38 +0000 Certificate not after: Sat 25 Apr 2026 17:51:38 +0000 Subordinate resources: AS: 267211 IP: 45.231.120.0/22 IP: 2804:49f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:50:b6:d9:ef:92:da:05:e7:06:45:d6:1f:f5:f4:ea:f3:6e:3e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 26 17:46:38 2025 GMT Not After : Apr 25 17:51:38 2026 GMT Subject: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:40:7f:6e:50:2b:a3:af:22:ea:bc:1f:ab: 94:5f:70:d8:2b:37:57:00:73:37:b3:31:1d:e0:b2: 1c:64:f9:82:4a:66:65:93:6e:4d:57:d0:58:24:0b: 9f:95:00:48:a5:6d:4b:54:27:e0:91:ef:30:da:cb: 07:a6:ad:b8:5f:06:66:87:0d:ad:85:4e:54:83:e7: 2f:d3:14:3c:2c:ac:0b:42:1e:91:b7:12:93:5a:25: 10:58:16:f6:98:35:49:5c:d4:71:dd:2a:dc:9c:67: 3d:26:62:a1:a1:1e:72:30:49:c1:92:60:8b:ba:36: 2c:6e:72:03:63:82:0e:4d:51:bc:a7:4b:38:94:22: 58:35:e3:12:40:96:a3:98:32:b4:5d:49:20:77:dc: a6:a3:30:ee:24:d0:eb:6b:87:15:ed:0b:b4:e0:1c: 17:6f:b5:18:0c:e2:a0:34:f6:3e:5c:b0:20:02:46: 0f:22:d9:ec:9e:ed:ae:11:ab:79:1d:80:f7:df:a7: 0b:86:db:dc:02:88:bb:90:e1:4f:ae:72:e7:dd:66: 22:e3:e5:40:32:c3:fb:4c:35:85:55:30:4b:0d:6f: 3d:c1:f5:0c:8a:84:39:ff:21:cc:8d:93:f9:00:a8: 82:cb:59:32:5a:75:3f:a5:a2:bd:0d:7b:d2:a2:85: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.120.0/22 IPv6: 2804:49f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267211 Signature Algorithm: sha256WithRSAEncryption 51:0f:fa:38:b5:b7:85:f9:38:fe:e9:5d:57:4d:4f:b3:c4:35: 32:dd:b6:80:ab:15:64:4e:68:f9:08:cb:08:cb:9a:cb:27:a1: ea:ae:0a:56:67:ca:f6:e9:19:21:1e:8d:47:6d:f4:6c:7c:88: f2:2d:7a:8a:ab:a5:eb:46:7c:ba:ee:a5:0e:fa:ef:95:21:3f: 3c:ac:ff:66:dc:51:c3:42:c3:2f:8d:ec:91:10:2d:da:54:97: 21:b7:a8:2c:5b:92:b9:51:5f:79:0d:db:a8:22:ef:c1:ba:61: 81:d8:44:e4:01:94:31:f6:5f:33:9b:bc:44:56:95:34:69:c0: fa:42:02:72:ba:5c:94:f0:1c:63:dc:14:5c:3a:0f:60:55:c4: 2e:3b:df:3f:21:56:5c:2b:96:cd:54:39:69:b8:d8:c9:f6:6e: 27:f9:13:f0:b2:b0:e4:53:61:89:b0:83:10:1f:2c:c4:5c:9f: c0:af:2a:c7:93:61:37:29:b9:eb:ca:ce:bd:3d:b0:12:9b:6c: 14:ef:fb:23:62:f8:ad:ec:5e:33:9d:ce:3b:3b:62:6e:0d:bf: 74:5b:07:a5:7b:37:ca:76:99:84:7e:69:dc:e7:46:24:b2:e3: b2:7b:1d:70:46:b6:38:72:00:08:fe:2f:e6:52:65:05:5d:a9: 54:cc:62:fc -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHlC22e+S2gXnBkXWH/X06vNuPlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjYxNzQ2MzhaFw0yNjA0MjUxNzUxMzhaMDMxMTAvBgNV BAMTKDkyMzJFREUzMDI1QjhBRjU2QUM5NEFDNUE0REQzNEJDMDBEQjkxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjEB/blAro68i6rwfq5RfcNgr N1cAczezMR3gshxk+YJKZmWTbk1X0FgkC5+VAEilbUtUJ+CR7zDaywemrbhfBmaH Da2FTlSD5y/TFDwsrAtCHpG3EpNaJRBYFvaYNUlc1HHdKtycZz0mYqGhHnIwScGS YIu6NixucgNjgg5NUbynSziUIlg14xJAlqOYMrRdSSB33KajMO4k0OtrhxXtC7Tg HBdvtRgM4qA09j5csCACRg8i2eye7a4Rq3kdgPffpwuG29wCiLuQ4U+ucufdZiLj 5UAyw/tMNYVVMEsNbz3B9QyKhDn/IcyNk/kAqILLWTJadT+lor0Ne9KihWtTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSMu3jAluK9WrJ SsWk3TS8ANuRyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFZB R2dCcUo5NTRkNnpBMVlZVTE5SEFoV1hzaE55UVdpenlCREZpMjM0dlEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRW QUdnQnFKOTU0ZDZ6QTFZWVUxOUhBaFdYc2hOeVFXaXp5QkRGaTIzNHZRLzAvOTIz MkVERTMwMjVCOEFGNTZBQzk0QUM1QTRERDM0QkMwMERCOTFDQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLed4MA0EAgACMAcDBQAoBEn4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTyzANBgkqhkiG9w0BAQsFAAOCAQEAUQ/6OLW3hfk4/uld V01Ps8Q1Mt22gKsVZE5o+QjLCMuayyeh6q4KVmfK9ukZIR6NR230bHyI8i16iqul 60Z8uu6lDvrvlSE/PKz/ZtxRw0LDL43skRAt2lSXIbeoLFuSuVFfeQ3bqCLvwbph gdhE5AGUMfZfM5u8RFaVNGnA+kICcrpclPAcY9wUXDoPYFXELjvfPyFWXCuWzVQ5 abjYyfZuJ/kT8LKw5FNhibCDEB8sxFyfwK8qx5NhNym568rOvT2wEptsFO/7I2L4 rexeM53OOztibg2/dFsHpXs3ynaZhH5p3OdGJLLjsnsdcEa2OHIACP4v5lJlBV2p VMxi/A== -----END CERTIFICATE-----Generated at Sun Apr 27 12:09:07 2025 by rpki-client