$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer File: D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer (raw, json) Hash identifier: Y3folMW5cR9qZC4zYeJ/jjiJF9nKFqBw40hXghBOYuI= Subject key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 551190249FD4F0F7D34340D9E9DCC150B0D0E0D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft caRepository: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 17:42:43 +0000 Certificate not after: Tue 28 Apr 2026 17:47:43 +0000 Subordinate resources: AS: 267027 IP: 45.227.168.0/22 IP: 2804:4708::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 15:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:11:90:24:9f:d4:f0:f7:d3:43:40:d9:e9:dc:c1:50:b0:d0:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 29 17:42:43 2025 GMT Not After : Apr 28 17:47:43 2026 GMT Subject: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a9:d5:d3:7f:c8:82:72:9a:60:af:0d:98:45: ab:e3:92:b9:ed:71:e6:a9:0f:66:ed:77:74:e7:f3: 31:a8:99:76:93:69:f6:00:58:44:99:1a:51:17:bc: d6:fb:2e:c4:bf:90:3e:52:7a:52:5c:9f:b8:fc:99: 9c:7c:67:01:e7:3a:53:a1:33:d1:b6:5f:a2:27:ae: 8c:4c:6e:bd:55:5f:5f:16:52:59:69:ce:9e:5b:01: f3:f3:a0:94:f7:bc:49:90:5d:47:b9:54:bb:c9:85: f9:07:10:cc:09:03:39:ca:59:cf:c1:91:29:8d:fb: d7:f1:96:9e:61:41:a9:9f:3c:31:1c:6f:fc:41:5d: af:c1:a9:6c:61:4e:fd:f0:a4:15:a6:1b:3c:ad:2d: 0b:f1:b2:a5:d3:bc:b1:c9:ad:39:ab:98:3b:e6:1f: b8:13:e7:e0:25:d8:b4:d2:00:5a:f1:19:be:29:98: 19:30:44:3a:17:01:83:8c:23:0d:fa:0a:0c:b5:12: 86:17:a0:99:50:81:ee:93:b3:ab:a0:10:6d:f2:ff: 73:14:cc:93:fd:1c:9b:b1:19:12:7b:58:b8:de:fb: b8:7a:17:57:ab:71:43:c3:28:11:de:9a:15:53:00: bc:df:3f:43:30:06:0a:e9:47:32:29:66:15:1d:08: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.168.0/22 IPv6: 2804:4708::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267027 Signature Algorithm: sha256WithRSAEncryption ca:7b:2f:bd:3e:9d:f8:9a:db:5f:b9:cf:93:02:bf:3e:03:24: 17:d4:d0:ae:45:2b:74:e8:75:f2:0e:e4:a4:9d:8a:46:ec:45: cc:87:4b:90:bd:91:cd:59:0e:ca:45:0c:ca:8a:8e:9c:34:8b: 0c:15:71:90:39:52:5c:5f:45:a8:73:3d:45:1b:b7:52:23:17: 96:fb:63:50:11:4b:91:e1:87:5c:2c:ff:7f:c1:f6:77:a9:a6: b9:84:17:77:f0:ff:df:f0:75:b3:38:74:12:65:b0:d6:58:78: 7a:3b:cb:b0:65:43:b7:98:93:6a:41:df:6f:2e:81:c6:93:6a: 00:75:42:f0:94:af:81:3a:c6:d2:72:6f:23:26:97:30:b3:5f: 47:3d:9a:17:a8:42:77:3e:a0:61:20:5b:cd:28:8c:57:08:b6: a5:50:e8:ab:8a:50:72:e6:ac:4b:8e:dc:15:82:00:ac:cb:42: 1e:40:dd:e7:cd:2e:e6:0a:af:0d:98:75:52:5d:11:d1:e1:d4: 19:d9:8b:9b:ff:58:9d:af:f7:ca:a9:5c:5e:3d:6d:3b:7e:ef: 64:4c:9c:3a:38:33:ce:15:bc:3c:60:4c:7b:06:10:76:a6:3c: e1:13:bd:a4:51:99:f2:3e:6e:f9:88:2c:ce:16:58:5a:7d:db: 89:3c:fa:72 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVRGQJJ/U8PfTQ0DZ6dzBULDQ4NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjkxNzQyNDNaFw0yNjA0MjgxNzQ3NDNaMDMxMTAvBgNV BAMTKEQ1QTlEMzYzNUYzREVDRDNEQjI3N0FDNjdEQzZBNkFCRDJFODNERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsqdXTf8iCcppgrw2YRavjkrnt ceapD2btd3Tn8zGomXaTafYAWESZGlEXvNb7LsS/kD5SelJcn7j8mZx8ZwHnOlOh M9G2X6InroxMbr1VX18WUllpzp5bAfPzoJT3vEmQXUe5VLvJhfkHEMwJAznKWc/B kSmN+9fxlp5hQamfPDEcb/xBXa/BqWxhTv3wpBWmGzytLQvxsqXTvLHJrTmrmDvm H7gT5+Al2LTSAFrxGb4pmBkwRDoXAYOMIw36Cgy1EoYXoJlQge6Ts6ugEG3y/3MU zJP9HJuxGRJ7WLje+7h6F1ercUPDKBHemhVTALzfP0MwBgrpRzIpZhUdCMhnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVqdNjXz3s09sn esZ9xqar0ug96zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXV1 RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RKWXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1 dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAvRDVB OUQzNjM1RjNERUNEM0RCMjc3QUM2N0RDNkE2QUJEMkU4M0RFQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeOoMA0EAgACMAcDBQAoBEcIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTEzANBgkqhkiG9w0BAQsFAAOCAQEAynsvvT6d+JrbX7nP kwK/PgMkF9TQrkUrdOh18g7kpJ2KRuxFzIdLkL2RzVkOykUMyoqOnDSLDBVxkDlS XF9FqHM9RRu3UiMXlvtjUBFLkeGHXCz/f8H2d6mmuYQXd/D/3/B1szh0EmWw1lh4 ejvLsGVDt5iTakHfby6BxpNqAHVC8JSvgTrG0nJvIyaXMLNfRz2aF6hCdz6gYSBb zSiMVwi2pVDoq4pQcuasS47cFYIArMtCHkDd580u5gqvDZh1Ul0R0eHUGdmLm/9Y na/3yqlcXj1tO37vZEycOjgzzhW8PGBMewYQdqY84RO9pFGZ8j5u+YgszhZYWn3b iTz6cg== -----END CERTIFICATE-----Generated at Tue May 6 18:01:31 2025 by rpki-client