$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer File: 00A0649BEB784D778983813CFFD9D01F42F24C95.cer (raw, json) Hash identifier: ahitJQ4800G9yqhMBoq8n/DX9403TtVNzctd7JDQ1CQ= Subject key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 199A5BA1535287EF38968734CF6B05FFB1A67464 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft caRepository: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 May 2025 22:42:01 +0000 Certificate not after: Thu 07 May 2026 22:47:01 +0000 Subordinate resources: AS: 264939 IP: 168.228.152.0/22 IP: 2804:3040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9a:5b:a1:53:52:87:ef:38:96:87:34:cf:6b:05:ff:b1:a6:74:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 22:42:01 2025 GMT Not After : May 7 22:47:01 2026 GMT Subject: CN=00A0649BEB784D778983813CFFD9D01F42F24C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:8a:39:f4:27:ec:4c:4a:1a:51:a5:df:ad: 17:99:e5:82:ed:e8:6c:44:e1:a9:b2:81:ca:85:56: f6:64:22:bb:f0:8e:3a:46:5b:83:5b:66:b7:20:5f: 48:71:e6:a0:56:04:d3:84:8b:32:5c:73:55:a7:e4: fd:33:b5:e8:6c:05:c3:04:8a:6c:a8:db:c0:ac:02: 22:c5:8d:32:2c:b3:c6:33:7a:77:1d:19:85:1e:eb: 5e:9d:b2:88:9c:49:e0:17:5d:4a:4b:f9:51:42:3d: c3:b4:a1:29:d7:92:83:cd:c9:ea:fe:3c:79:0c:94: 0f:f0:62:ca:b1:1e:43:22:fb:80:d4:c9:b2:30:b9: d2:93:37:5b:9e:2b:e7:00:d2:ae:a8:a0:8c:a3:48: 84:20:fb:04:fe:31:03:b1:87:aa:cc:a5:2f:a5:69: c6:81:a5:8a:e4:5a:6a:30:ec:e9:81:73:78:eb:5c: a1:f5:67:2a:8a:58:91:cf:91:fe:b6:f7:1e:57:b9: c0:ad:20:20:75:aa:17:3e:e5:cd:e0:e0:95:a0:e6: 87:fa:53:19:28:26:80:5c:09:b3:89:d1:75:cb:6c: 66:1d:3c:ec:b7:46:2d:3a:40:24:f1:af:bf:1d:c2: a6:7e:15:07:4a:00:87:8d:8a:9a:d1:e8:52:c1:3d: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.152.0/22 IPv6: 2804:3040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264939 Signature Algorithm: sha256WithRSAEncryption c0:1f:48:c5:8f:5a:9c:f6:f1:a7:49:20:ab:65:24:4d:0f:0d: 0f:5e:d1:68:ac:b2:c2:45:98:e8:20:fa:d4:d9:41:48:29:b7: ca:58:4d:5d:48:6f:30:5a:5f:cb:a7:cc:c7:7b:a0:81:37:ff: b6:b0:1e:a7:f8:6c:d5:d7:a9:84:b9:2e:7b:37:c3:f4:f7:03: 72:9f:6e:74:38:b9:86:fc:33:01:6b:f2:0d:7e:1b:e6:19:28: 41:40:ce:82:d7:03:03:4e:ab:d2:9f:cf:70:3a:71:9b:ea:19: 2d:fd:89:42:f6:f8:43:98:3c:b2:03:a6:c8:ac:ab:27:a9:8c: 24:b2:26:a4:8c:93:9f:a4:6b:47:33:09:ab:c9:68:f9:2b:5d: 69:7e:e4:06:c7:72:26:41:cf:e8:3d:01:93:b6:c8:89:8f:a7: 83:a7:0a:63:88:16:68:ad:ef:c2:e7:b5:ed:e3:f1:aa:67:24: 1b:a8:ca:92:11:31:f3:64:6e:73:44:b4:44:7a:ea:34:29:e4: 0f:4a:47:ac:fd:1a:49:cc:b7:1a:91:39:36:c3:c8:3b:61:82: 01:05:aa:ae:0b:ae:8b:10:d3:c0:a4:b5:52:4a:82:41:b9:90: 1f:60:1c:6a:86:92:df:18:e7:b7:27:14:4d:e4:4f:00:d2:90: b3:f4:21:67 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGZpboVNSh+84loc0z2sF/7GmdGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDgyMjQyMDFaFw0yNjA1MDcyMjQ3MDFaMDMxMTAvBgNV BAMTKDAwQTA2NDlCRUI3ODRENzc4OTgzODEzQ0ZGRDlEMDFGNDJGMjRDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9loo59CfsTEoaUaXfrReZ5YLt 6GxE4amygcqFVvZkIrvwjjpGW4NbZrcgX0hx5qBWBNOEizJcc1Wn5P0ztehsBcME imyo28CsAiLFjTIss8YzencdGYUe616dsoicSeAXXUpL+VFCPcO0oSnXkoPNyer+ PHkMlA/wYsqxHkMi+4DUybIwudKTN1ueK+cA0q6ooIyjSIQg+wT+MQOxh6rMpS+l acaBpYrkWmow7OmBc3jrXKH1ZyqKWJHPkf629x5XucCtICB1qhc+5c3g4JWg5of6 UxkoJoBcCbOJ0XXLbGYdPOy3Ri06QCTxr78dwqZ+FQdKAIeNiprR6FLBPa3zAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAoGSb63hNd4mD gTz/2dAfQvJMlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM056 WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVyU0JhSzFKOEV2eVcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNO elprYktwR1VBeG9QWWI2VVZXQXBmMmhRa0t4UlJ1clNCYUsxSjhFdnlXLzAvMDBB MDY0OUJFQjc4NEQ3Nzg5ODM4MTNDRkZEOUQwMUY0MkYyNEM5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqOSYMA0EAgACMAcDBQAoBDBAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK6zANBgkqhkiG9w0BAQsFAAOCAQEAwB9IxY9anPbxp0kg q2UkTQ8ND17RaKyywkWY6CD61NlBSCm3ylhNXUhvMFpfy6fMx3uggTf/trAep/hs 1dephLkuezfD9PcDcp9udDi5hvwzAWvyDX4b5hkoQUDOgtcDA06r0p/PcDpxm+oZ Lf2JQvb4Q5g8sgOmyKyrJ6mMJLImpIyTn6RrRzMJq8lo+StdaX7kBsdyJkHP6D0B k7bIiY+ng6cKY4gWaK3vwue17ePxqmckG6jKkhEx82Ruc0S0RHrqNCnkD0pHrP0a Scy3GpE5NsPIO2GCAQWqrguuixDTwKS1UkqCQbmQH2AcaoaS3xjntycUTeRPANKQ s/QhZw== -----END CERTIFICATE-----Generated at Fri Jun 6 04:43:06 2025 by rpki-client