$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F504960CC9C3A82FD142E6032F110EFB8918C1E.cer File: 9F504960CC9C3A82FD142E6032F110EFB8918C1E.cer (raw, json) Hash identifier: JdshzC0m+MbK62QQIkNXNTaAPuyg3fWe+BEbhwKnfb8= Subject key identifier: 9F:50:49:60:CC:9C:3A:82:FD:14:2E:60:32:F1:10:EF:B8:91:8C:1E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 287E10CFBC3E1E470CBF48465263D4A330FEB2D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/9F504960CC9C3A82FD142E6032F110EFB8918C1E.mft caRepository: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 13:00:53 +0000 Certificate not after: Thu 09 Apr 2026 13:05:53 +0000 Subordinate resources: AS: 265942 IP: 131.196.152.0/22 IP: 2804:402c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7e:10:cf:bc:3e:1e:47:0c:bf:48:46:52:63:d4:a3:30:fe:b2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 13:00:53 2025 GMT Not After : Apr 9 13:05:53 2026 GMT Subject: CN=9F504960CC9C3A82FD142E6032F110EFB8918C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:02:6d:6c:00:94:7a:a9:53:a1:25:00:52: 9b:6a:87:9c:71:8d:57:e7:79:2a:f7:4f:10:32:9a: d6:35:d5:a9:9c:e8:9d:98:1c:2d:dc:d8:c9:72:0f: 60:79:0a:6d:c1:fb:0b:9d:a1:9d:f6:d9:58:2d:50: f6:38:fc:9f:ea:ed:ed:58:6b:7c:e2:de:59:e3:f3: 86:e6:d6:87:07:78:f2:d2:c4:1c:89:27:23:8f:81: 8a:61:ea:cd:51:83:54:57:d2:12:8f:99:a7:8e:92: 66:5b:81:9f:41:bc:15:b9:46:7a:57:84:ba:63:ee: e1:05:03:67:02:94:bd:20:e0:5b:37:c5:21:50:f2: 32:ad:4f:43:5f:65:7b:59:bf:84:e9:85:08:71:1e: ed:08:4f:8f:b5:2b:57:84:76:de:ba:07:d4:7a:7d: ec:ff:46:8c:31:7e:6e:64:cc:75:a1:64:05:2a:7b: 46:15:86:9e:50:91:f8:61:2b:95:fc:50:3d:83:55: 1a:0f:1f:75:d0:12:82:50:27:8a:f5:6d:89:58:c2: e8:27:78:e8:4b:ad:21:a6:97:7f:3e:b4:6c:98:b7: 68:95:30:a0:33:44:06:d4:bb:fd:44:ce:4a:cf:5c: 9a:c5:9e:d7:8f:b6:60:0f:c3:0b:66:65:b3:a0:dd: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:50:49:60:CC:9C:3A:82:FD:14:2E:60:32:F1:10:EF:B8:91:8C:1E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/9F504960CC9C3A82FD142E6032F110EFB8918C1E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.152.0/22 IPv6: 2804:402c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265942 Signature Algorithm: sha256WithRSAEncryption 53:ab:81:e1:25:ef:f0:37:6f:bb:45:99:f6:dc:ee:4a:a6:e7: 7f:a9:e0:03:65:6e:86:d7:cc:a3:d3:9c:7d:41:5f:ae:34:9a: 9b:77:ca:2d:30:a2:8f:22:ed:cd:31:7d:74:bd:41:aa:a8:e2: 2e:ef:47:89:57:76:30:b6:a4:0f:c2:e0:46:53:5f:cd:e7:5b: 9c:55:f6:06:a4:80:9b:35:67:66:f4:b2:03:62:3f:e8:c1:c0: d1:9e:27:c2:08:04:88:57:f0:2a:9b:2f:1e:4b:eb:1b:25:8a: 3d:b9:83:8a:da:4d:c9:68:fa:52:4d:50:57:ad:b5:7d:8e:7d: 90:a0:11:20:8b:b4:43:84:74:41:b0:09:cf:93:67:92:8b:d6: 02:71:a8:43:fd:d5:ea:af:39:34:77:cd:e6:25:c0:9c:20:97: 97:81:6e:41:d3:5a:32:f7:10:d5:4b:3a:b2:d3:19:a2:e0:4e: 9a:65:2a:18:6e:a0:54:91:37:d3:e0:b1:c7:0c:0b:66:35:c7: 2f:59:c8:f8:20:3d:ca:0c:a5:e1:b4:e7:b6:3b:ae:a6:98:7b: 60:1d:b0:8e:7e:c9:ce:0a:d3:16:a9:67:80:33:f5:58:7d:1c: 7e:89:90:53:17:7c:ae:dd:fe:4e:86:86:5f:d1:f6:63:0d:f8: ec:91:e5:9d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKH4Qz7w+HkcMv0hGUmPUozD+stcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTAxMzAwNTNaFw0yNjA0MDkxMzA1NTNaMDMxMTAvBgNV BAMTKDlGNTA0OTYwQ0M5QzNBODJGRDE0MkU2MDMyRjExMEVGQjg5MThDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOwJtbACUeqlToSUAUptqh5xx jVfneSr3TxAymtY11amc6J2YHC3c2MlyD2B5Cm3B+wudoZ322VgtUPY4/J/q7e1Y a3zi3lnj84bm1ocHePLSxByJJyOPgYph6s1Rg1RX0hKPmaeOkmZbgZ9BvBW5RnpX hLpj7uEFA2cClL0g4Fs3xSFQ8jKtT0NfZXtZv4TphQhxHu0IT4+1K1eEdt66B9R6 fez/Rowxfm5kzHWhZAUqe0YVhp5QkfhhK5X8UD2DVRoPH3XQEoJQJ4r1bYlYwugn eOhLrSGml38+tGyYt2iVMKAzRAbUu/1EzkrPXJrFntePtmAPwwtmZbOg3flzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfUElgzJw6gv0U LmAy8RDvuJGMHjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRh ekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNNQVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M0 YXpFYmNWNmd5clh6RnZCMVA4Q1lSMldXTGE5bmRUb0h3eFlWN1hzTUFQLzAvOUY1 MDQ5NjBDQzlDM0E4MkZEMTQyRTYwMzJGMTEwRUZCODkxOEMxRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8SYMA0EAgACMAcDBQAoBEAsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO1jANBgkqhkiG9w0BAQsFAAOCAQEAU6uB4SXv8Ddvu0WZ 9tzuSqbnf6ngA2VuhtfMo9OcfUFfrjSam3fKLTCijyLtzTF9dL1BqqjiLu9HiVd2 MLakD8LgRlNfzedbnFX2BqSAmzVnZvSyA2I/6MHA0Z4nwggEiFfwKpsvHkvrGyWK PbmDitpNyWj6Uk1QV621fY59kKARIIu0Q4R0QbAJz5NnkovWAnGoQ/3V6q85NHfN 5iXAnCCXl4FuQdNaMvcQ1Us6stMZouBOmmUqGG6gVJE30+CxxwwLZjXHL1nI+CA9 ygyl4bTntjuupph7YB2wjn7JzgrTFqlngDP1WH0cfomQUxd8rt3+ToaGX9H2Yw34 7JHlnQ== -----END CERTIFICATE-----Generated at Sun Apr 27 12:46:05 2025 by rpki-client