$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer File: 49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer (raw, json) Hash identifier: M9qm1VQP/QTyYqDHn/hs90WbMX9uz4K5mwAwx93Ot7o= Subject key identifier: 49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 666A6AA74A1CC9B02A72E523D400DDF3B8B81A12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft caRepository: rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 16:53:14 +0000 Certificate not after: Tue 30 Jun 2026 16:58:14 +0000 Subordinate resources: AS: 264503 IP: 131.255.148.0/22 IP: 2804:20a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 17:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:6a:a7:4a:1c:c9:b0:2a:72:e5:23:d4:00:dd:f3:b8:b8:1a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 16:53:14 2025 GMT Not After : Jun 30 16:58:14 2026 GMT Subject: CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:ae:1e:3e:f2:5b:72:f6:85:dc:3b:a4:14: 0a:17:0d:e4:93:8f:62:d6:cc:38:c4:0a:ad:6c:d6: ef:92:8d:52:3f:d6:cf:23:cf:fa:72:33:1c:7c:07: cc:a6:98:e2:54:17:98:d1:b9:68:a5:42:d1:31:46: 48:c1:74:aa:bb:14:37:27:19:8b:8e:cb:ec:ff:8e: d3:01:7f:50:af:55:49:64:d6:81:39:c4:44:d8:86: d7:df:02:a3:38:82:f0:ad:d1:07:c7:37:df:79:5f: c0:45:72:b8:cf:70:dd:64:6b:4c:c4:c6:d3:78:4a: fc:00:41:7f:55:2b:72:ff:62:05:12:83:63:00:89: 76:c3:b6:b7:a7:20:11:44:83:f1:51:df:62:f8:8c: 89:e7:9f:28:70:9a:5b:c3:ed:32:27:ee:b8:e8:c6: 90:59:21:ce:7a:bf:6c:35:14:43:0b:8b:4f:53:ab: 4c:20:1f:34:05:77:37:f9:9b:f1:f8:1e:20:4c:03: d1:1b:ec:61:bc:9b:74:4f:00:22:79:5e:02:7c:56: 0d:1b:44:21:33:63:79:98:b7:80:dc:40:0e:73:11: 31:83:46:6f:1e:28:16:fa:ab:9a:87:c5:5f:d6:c9: d8:a3:b5:fa:20:f0:9b:b2:2a:d8:8b:75:22:bf:95: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.148.0/22 IPv6: 2804:20a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264503 Signature Algorithm: sha256WithRSAEncryption 09:9c:45:a1:71:86:cb:99:2d:2c:dc:42:d3:bc:ba:62:dd:19: 79:7e:0b:3a:c0:3e:49:72:e4:9c:40:50:0f:a4:06:02:10:64: 3e:f9:e3:f3:81:13:18:cc:9e:3b:7a:9e:09:65:b4:5e:a8:55: bf:60:2a:5b:a6:30:7a:ff:c2:77:56:91:30:ac:b8:57:09:e9: 84:87:7d:6f:1a:27:48:2c:c1:10:10:b6:f5:f0:65:f7:95:da: 1b:bc:d9:48:e8:90:ca:dd:08:33:78:bf:53:f4:3e:3a:51:cd: 03:32:9c:e9:c5:dd:cb:c1:9d:25:3a:e2:e6:b8:26:2c:ed:25: bb:2d:4e:b6:98:55:57:b9:bb:a0:75:a2:41:73:c2:2d:3e:3c: ce:fe:97:65:0e:8c:4e:82:4c:49:b1:c7:48:ad:1d:f6:ad:fe: 7d:9c:4a:f6:6d:d1:8a:d4:70:95:4b:72:53:74:4c:98:e2:d4: a4:ee:fe:ae:c0:35:d9:07:a8:94:d1:fa:a8:4c:d3:8d:91:e9: 26:f8:03:cc:70:be:c6:19:d3:93:ca:e3:89:d4:7e:55:fb:6a: 0c:ce:7e:df:21:69:af:9f:8e:4e:16:30:d2:b5:f8:84:ec:83: 6b:83:ef:32:2a:10:3f:b6:dd:51:a4:84:28:87:b7:34:d8:34: 60:42:ce:7e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZmpqp0ocybAqcuUj1ADd87i4GhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDExNjUzMTRaFw0yNjA2MzAxNjU4MTRaMDMxMTAvBgNV BAMTKDQ5Q0FCQ0Y0RUYwQjRERDY5NTE4OUNGMEZEOTNEMTlDMkYyNzJEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyq4ePvJbcvaF3DukFAoXDeST j2LWzDjECq1s1u+SjVI/1s8jz/pyMxx8B8ymmOJUF5jRuWilQtExRkjBdKq7FDcn GYuOy+z/jtMBf1CvVUlk1oE5xETYhtffAqM4gvCt0QfHN995X8BFcrjPcN1ka0zE xtN4SvwAQX9VK3L/YgUSg2MAiXbDtrenIBFEg/FR32L4jInnnyhwmlvD7TIn7rjo xpBZIc56v2w1FEMLi09Tq0wgHzQFdzf5m/H4HiBMA9Eb7GG8m3RPACJ5XgJ8Vg0b RCEzY3mYt4DcQA5zETGDRm8eKBb6q5qHxV/Wydijtfog8JuyKtiLdSK/lXTvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJyrz07wtN1pUY nPD9k9GcLycttTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnp6 WDN0bzhyaTlkdnV5eFBKQUtFV1lXeTQ3Y1VoQzdDeHRvcG1uekx6aTUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z6 elgzdG84cmk5ZHZ1eXhQSkFLRVdZV3k0N2NVaEM3Q3h0b3BtbnpMemk1LzAvNDlD QUJDRjRFRjBCNERENjk1MTg5Q0YwRkQ5M0QxOUMyRjI3MkRCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg/+UMA0EAgACMAcDBQAoBCCkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQJNzANBgkqhkiG9w0BAQsFAAOCAQEACZxFoXGGy5ktLNxC 07y6Yt0ZeX4LOsA+SXLknEBQD6QGAhBkPvnj84ETGMyeO3qeCWW0XqhVv2AqW6Yw ev/Cd1aRMKy4VwnphId9bxonSCzBEBC29fBl95XaG7zZSOiQyt0IM3i/U/Q+OlHN AzKc6cXdy8GdJTri5rgmLO0luy1OtphVV7m7oHWiQXPCLT48zv6XZQ6MToJMSbHH SK0d9q3+fZxK9m3RitRwlUtyU3RMmOLUpO7+rsA12QeolNH6qEzTjZHpJvgDzHC+ xhnTk8rjidR+VftqDM5+3yFpr5+OThYw0rX4hOyDa4PvMioQP7bdUaSEKIe3NNg0 YELOfg== -----END CERTIFICATE-----Generated at Sat Jul 26 20:12:19 2025 by rpki-client