$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer File: B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer (raw, json) Hash identifier: IH6kg1OGQuV0RrWpL2AjY6+0DdiU/KpPi1Ot/9js37c= Subject key identifier: B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19C2A8761C47C80955AB86F55090D86DBA7C2FF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/B5416A429171B4A07910A6737C6538DE6D5E9EB7.mft caRepository: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 17:38:23 +0000 Certificate not after: Wed 29 Apr 2026 17:43:23 +0000 Subordinate resources: AS: 263604 IP: 143.202.112.0/22 IP: 177.71.88.0/22 IP: 2804:fcc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 03:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c2:a8:76:1c:47:c8:09:55:ab:86:f5:50:90:d8:6d:ba:7c:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 17:38:23 2025 GMT Not After : Apr 29 17:43:23 2026 GMT Subject: CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:39:cd:1f:73:90:f8:97:60:29:b4:ce:00: 3a:d1:3b:36:68:28:68:48:a7:cd:65:75:8c:3d:ba: 93:64:72:0d:64:62:df:b4:51:da:b4:2f:be:e3:df: 23:69:43:a7:09:16:d4:8d:b8:a5:41:f2:b5:4b:0d: a5:26:82:a7:44:7b:ec:49:fc:04:65:64:3a:df:6a: cd:6b:67:72:f1:d6:b1:87:37:db:e6:38:f4:b3:e9: 00:0e:2d:05:db:2d:1f:84:c1:07:61:c0:4e:e8:7b: c1:00:a6:36:38:25:19:64:2b:5c:e3:23:e7:9c:2a: 5e:28:b1:6b:95:66:0a:32:3c:3b:ec:b7:4e:23:97: 71:0e:48:68:83:72:78:7c:aa:68:56:a6:4f:5a:4a: 94:63:0b:28:37:c1:9b:c6:3d:f7:ee:6b:6a:a7:a9: 72:71:d4:ca:00:d2:a9:d0:d7:7f:af:78:9e:63:87: 44:52:99:1f:40:98:a0:c8:80:4d:1b:ed:60:c4:7f: 35:48:88:cf:e5:65:c4:b7:89:db:fb:e5:a4:06:15: b1:13:22:96:f2:0e:e6:ca:1b:86:d0:3b:8c:49:0b: 09:de:e9:3c:00:5a:50:29:f8:84:03:34:13:2b:c2: e4:89:ee:af:d0:e2:ac:65:08:ca:2c:f4:81:09:16: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/B5416A429171B4A07910A6737C6538DE6D5E9EB7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.112.0/22 177.71.88.0/22 IPv6: 2804:fcc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263604 Signature Algorithm: sha256WithRSAEncryption 28:2e:f4:b2:f4:2e:8f:12:ba:dc:07:65:e3:6b:7c:9e:e1:c6: a3:32:31:43:e4:f2:b7:28:b8:c7:c6:7a:b7:c3:56:0d:e4:6f: 74:4b:b2:fe:a7:6a:58:80:13:26:19:22:60:c7:25:36:40:17: 93:04:c7:6b:af:cf:be:d4:0b:b9:c9:ae:bc:8c:f8:41:5d:af: fc:d4:03:0d:a6:5e:71:db:60:53:ef:0b:ab:ae:e2:df:fd:da: 27:d5:c4:a0:f6:c5:eb:da:eb:78:3b:66:1b:7f:95:c5:a6:a7: 17:4a:e5:a6:69:f6:18:d1:c7:f6:e4:08:55:f2:b7:e6:2e:7f: 65:f8:66:bd:93:c5:9b:86:e5:dc:99:85:63:b7:f6:1e:ae:3b: ca:e9:e2:88:01:ae:3d:87:82:95:48:3d:68:7b:bb:34:ec:31: d1:9f:89:d0:d1:d5:41:90:05:f9:2c:e1:b5:99:52:36:19:24: 5a:40:1f:53:fa:4b:3b:2b:aa:52:91:7d:46:e4:ff:66:6d:5c: 02:35:ff:d7:eb:f9:d9:90:11:20:f5:96:8f:cc:b4:4e:88:b0: 6d:02:4f:bb:b2:00:e0:3e:6a:ea:9f:e7:9a:48:1f:30:c9:9f: e8:55:75:7c:bc:ff:bc:0e:22:16:af:ff:dd:a3:0e:64:a5:26: 31:32:0f:bd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGcKodhxHyAlVq4b1UJDYbbp8L/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxNzM4MjNaFw0yNjA0MjkxNzQzMjNaMDMxMTAvBgNV BAMTKEI1NDE2QTQyOTE3MUI0QTA3OTEwQTY3MzdDNjUzOERFNkQ1RTlFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzjnNH3OQ+JdgKbTOADrROzZo KGhIp81ldYw9upNkcg1kYt+0Udq0L77j3yNpQ6cJFtSNuKVB8rVLDaUmgqdEe+xJ /ARlZDrfas1rZ3Lx1rGHN9vmOPSz6QAOLQXbLR+EwQdhwE7oe8EApjY4JRlkK1zj I+ecKl4osWuVZgoyPDvst04jl3EOSGiDcnh8qmhWpk9aSpRjCyg3wZvGPffua2qn qXJx1MoA0qnQ13+veJ5jh0RSmR9AmKDIgE0b7WDEfzVIiM/lZcS3idv75aQGFbET IpbyDubKG4bQO4xJCwne6TwAWlAp+IQDNBMrwuSJ7q/Q4qxlCMos9IEJFhzLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1QWpCkXG0oHkQ pnN8ZTjebV6etzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUxy ZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThxZ28vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVM cmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzAvQjU0 MTZBNDI5MTcxQjRBMDc5MTBBNjczN0M2NTM4REU2RDVFOUVCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj8pwAwQCsUdYMA0EAgACMAcDBQAoBA/MMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFtDANBgkqhkiG9w0BAQsFAAOCAQEAKC70svQu jxK63Adl42t8nuHGozIxQ+Tytyi4x8Z6t8NWDeRvdEuy/qdqWIATJhkiYMclNkAX kwTHa6/PvtQLucmuvIz4QV2v/NQDDaZecdtgU+8Lq67i3/3aJ9XEoPbF69rreDtm G3+VxaanF0rlpmn2GNHH9uQIVfK35i5/ZfhmvZPFm4bl3JmFY7f2Hq47yuniiAGu PYeClUg9aHu7NOwx0Z+J0NHVQZAF+SzhtZlSNhkkWkAfU/pLOyuqUpF9RuT/Zm1c AjX/1+v52ZARIPWWj8y0ToiwbQJPu7IA4D5q6p/nmkgfMMmf6FV1fLz/vA4iFq// 3aMOZKUmMTIPvQ== -----END CERTIFICATE-----Generated at Thu May 1 02:42:47 2025 by rpki-client