$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.cer File: A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.cer (raw, json) Hash identifier: yTXGDdaR9b66RL/hnucYZD6+5JluTWvw4Wx0t4h1eFE= Subject key identifier: A4:D4:DF:83:46:98:0B:7F:15:E3:DE:6E:74:4C:0D:D2:A7:FB:EC:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 741342EF094CC9100C947DD1FF3F30FEEBD2B2CF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.mft caRepository: rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 26 Apr 2025 11:56:52 +0000 Certificate not after: Sat 25 Apr 2026 12:01:52 +0000 Subordinate resources: AS: 273503 IP: 2804:8fa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:13:42:ef:09:4c:c9:10:0c:94:7d:d1:ff:3f:30:fe:eb:d2:b2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 26 11:56:52 2025 GMT Not After : Apr 25 12:01:52 2026 GMT Subject: CN=A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:fa:a4:26:70:3d:54:b8:d4:5e:b9:22:8d: 62:3e:d3:0c:2d:e7:0a:28:5c:4a:60:45:2e:b2:c8: fd:e1:cb:92:6b:bb:3f:52:08:2b:85:a1:3d:43:e7: 79:9c:4f:e8:4d:b7:00:91:ec:22:b4:cb:2a:81:a4: a2:1b:0d:c3:b4:71:cd:76:f1:4f:d3:ed:3e:51:33: fe:f0:46:6e:67:c6:89:e0:f5:26:f3:84:94:0a:0a: 67:b2:f0:46:92:ca:76:42:0c:32:6f:55:65:b9:7f: 4e:70:b5:ca:df:6d:e0:4a:93:a8:2f:69:09:dc:78: ec:23:0c:5d:ef:a8:3d:1b:ef:52:aa:5c:d0:91:ff: 94:e7:aa:8e:13:79:12:7b:7d:88:42:c6:4a:e9:16: 9a:be:f6:98:9a:00:fe:4d:08:86:e9:e2:3e:8b:76: c9:79:b6:8d:2f:ab:48:5b:0d:c3:fa:0d:01:99:04: 91:f6:64:38:ee:f9:30:35:58:2f:6e:0e:0a:f6:c6: 66:c3:3f:0a:c6:94:88:2a:b7:82:e1:bd:f2:69:12: d5:8d:ef:1e:ec:c9:43:9a:94:c9:ce:e5:b2:55:60: 20:24:34:ad:57:7e:cf:68:01:5f:49:60:0b:bb:31: c1:7c:67:3b:4f:72:c8:97:d3:af:1e:0c:1b:30:d9: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:D4:DF:83:46:98:0B:7F:15:E3:DE:6E:74:4C:0D:D2:A7:FB:EC:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8fa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273503 Signature Algorithm: sha256WithRSAEncryption 0a:b2:04:20:ab:70:a7:4e:3b:36:c9:6b:59:b0:d2:c2:b3:87: 48:cf:b0:51:54:87:94:ae:93:60:85:48:70:ce:cf:20:33:99: 32:4d:83:b6:ec:f1:d4:48:8d:e6:82:f5:db:ba:95:a5:b6:6a: 87:f8:75:94:05:f0:8a:37:a0:f5:96:d1:f9:93:b5:da:97:35: 05:30:e0:68:bf:c5:66:f7:4b:f0:0d:b3:77:94:ca:3e:da:ce: ca:80:ac:f7:d3:2c:b2:e2:d6:a6:3f:1a:80:0c:a4:71:14:0b: 97:21:a9:c8:2b:6d:ba:64:db:64:97:5c:82:f3:23:ee:7c:64: 8e:a0:66:d3:8b:d7:d8:1f:d0:8b:21:49:df:3f:e9:29:74:5a: 9d:de:e3:db:69:77:ae:e8:ac:7a:69:ac:17:70:7a:8c:d0:e3: e1:82:a5:67:4f:54:4e:8c:ac:36:1d:9c:6c:a4:97:38:6e:a1: ae:52:a6:4a:59:2b:c3:ce:71:35:14:b3:cc:f9:4a:ea:40:a1: 1e:e2:8d:52:52:86:08:3d:fc:1f:9b:45:e0:0e:2b:6b:b0:52: dd:35:10:24:71:1d:37:09:dd:b0:de:7a:0b:2a:7e:fb:20:bd: 23:75:94:61:c6:18:e0:4d:3b:a8:50:e0:d5:f8:2b:22:2a:fc: 09:cb:a9:d8 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUdBNC7wlMyRAMlH3R/z8w/uvSss8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjYxMTU2NTJaFw0yNjA0MjUxMjAxNTJaMDMxMTAvBgNV BAMTKEE0RDRERjgzNDY5ODBCN0YxNUUzREU2RTc0NEMwREQyQTdGQkVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxfqkJnA9VLjUXrkijWI+0wwt 5wooXEpgRS6yyP3hy5Jruz9SCCuFoT1D53mcT+hNtwCR7CK0yyqBpKIbDcO0cc12 8U/T7T5RM/7wRm5nxong9SbzhJQKCmey8EaSynZCDDJvVWW5f05wtcrfbeBKk6gv aQnceOwjDF3vqD0b71KqXNCR/5Tnqo4TeRJ7fYhCxkrpFpq+9piaAP5NCIbp4j6L dsl5to0vq0hbDcP6DQGZBJH2ZDju+TA1WC9uDgr2xmbDPwrGlIgqt4LhvfJpEtWN 7x7syUOalMnO5bJVYCAkNK1Xfs9oAV9JYAu7McF8ZztPcsiX068eDBsw2dnHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk1N+DRpgLfxXj 3m50TA3Sp/vsgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnhC RjZ4TXBGcnltYjdLV0Zwb2JBYTNNWkZKUjZxODJ4U2VkU0ZFZWVaMUsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J4 QkY2eE1wRnJ5bWI3S1dGcG9iQWEzTVpGSlI2cTgyeFNlZFNGRWVlWjFLLzAvQTRE NERGODM0Njk4MEI3RjE1RTNERTZFNzQ0QzBERDJBN0ZCRUM4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASPpDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LF8wDQYJKoZIhvcNAQELBQADggEBAAqyBCCrcKdOOzbJa1mw0sKzh0jPsFFUh5Su k2CFSHDOzyAzmTJNg7bs8dRIjeaC9du6laW2aof4dZQF8Io3oPWW0fmTtdqXNQUw 4Gi/xWb3S/ANs3eUyj7azsqArPfTLLLi1qY/GoAMpHEUC5chqcgrbbpk22SXXILz I+58ZI6gZtOL19gf0IshSd8/6Sl0Wp3e49tpd67orHpprBdweozQ4+GCpWdPVE6M rDYdnGyklzhuoa5SpkpZK8POcTUUs8z5SupAoR7ijVJShgg9/B+bReAOK2uwUt01 ECRxHTcJ3bDeegsqfvsgvSN1lGHGGOBNO6hQ4NX4KyIq/AnLqdg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:41:01 2025 by rpki-client