$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.cer File: 30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.cer (raw, json) Hash identifier: kUUELVkC7u8oq9avPwlP5FxfSUkA/T90F19xWYg1SY4= Subject key identifier: 30:C4:94:92:F9:41:EF:8C:6D:5F:0D:8E:EB:CA:53:E7:C0:3A:9B:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 700144D67AE4C49D805E69618919EF59D0818112 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.mft caRepository: rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 19:08:17 +0000 Certificate not after: Thu 02 Apr 2026 19:13:17 +0000 Subordinate resources: AS: 270952 IP: 177.154.93.0/24 IP: 2801:80:39b0::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:01:44:d6:7a:e4:c4:9d:80:5e:69:61:89:19:ef:59:d0:81:81:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:08:17 2025 GMT Not After : Apr 2 19:13:17 2026 GMT Subject: CN=30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:1b:c1:a0:ff:60:fa:f6:48:63:ca:ca:98: d9:ba:b2:72:99:a9:1b:c0:7f:17:b5:80:fc:29:7a: 7a:be:51:d3:b1:f7:07:e4:c3:a1:19:2f:84:d5:18: 0b:c7:0b:75:ae:3c:18:9c:35:5d:0b:54:e3:74:b5: 7a:5e:00:ec:fd:98:f8:9e:2b:cc:f0:5e:8d:3f:dc: af:f3:ae:5b:fb:84:9f:0f:61:a1:5e:53:75:84:59: 7c:51:1d:e9:51:3c:b8:ca:18:c0:7d:b7:ba:d4:9c: 1f:b4:d0:58:fb:17:80:09:62:25:22:38:61:31:55: 7d:f2:b8:67:36:4f:77:0b:f4:c3:00:2b:c7:03:42: 82:84:06:91:36:25:74:ca:19:7c:1a:25:2f:ed:e2: 32:58:9f:e1:4a:81:e5:ff:e5:34:a7:fd:48:cd:4b: 54:fb:24:1f:0b:b4:ec:bb:62:63:b6:1f:e5:bd:bf: 5b:5d:23:02:9d:8c:56:1a:b3:40:41:2f:11:51:b8: 77:df:45:46:2d:49:ff:2c:d7:a8:36:8a:d9:47:20: 1e:02:8c:13:d2:94:f4:84:df:66:74:7f:11:87:72: d0:dd:ba:68:e5:4f:c2:f9:0f:bf:16:e0:bf:76:28: 43:50:fb:e9:ff:b3:b1:86:e2:7e:76:cd:c3:12:cf: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:C4:94:92:F9:41:EF:8C:6D:5F:0D:8E:EB:CA:53:E7:C0:3A:9B:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.154.93.0/24 IPv6: 2801:80:39b0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270952 Signature Algorithm: sha256WithRSAEncryption ac:13:8f:ae:56:52:a7:9e:05:d1:24:f4:f8:6f:75:9f:05:db: 40:61:8d:00:3d:04:b1:0d:af:ef:15:1a:80:bd:90:6c:05:2f: fd:6e:7f:b8:d8:00:2d:33:26:ef:2f:40:5a:f3:32:99:40:d2: 27:0c:19:ca:7c:e2:58:cf:c9:97:f1:25:85:8d:4b:1c:cd:49: e6:24:3f:54:b5:6e:84:af:f7:38:f2:66:13:74:19:75:52:8a: 82:43:46:5d:3a:50:91:ed:92:65:20:a5:d8:6f:e9:2f:52:82: 52:a2:f1:7b:4f:75:25:3d:e8:1a:f3:e3:1f:f9:21:9a:0f:e6: 6c:3c:1b:ee:e6:20:33:11:91:fa:21:95:04:d0:00:1b:f2:a2: 13:f9:4e:cb:51:79:3f:98:b2:cc:bc:ac:4c:af:6a:34:1a:36: fe:60:b1:99:d0:77:40:5c:65:06:05:59:8e:aa:f0:1b:e6:a6: 65:25:bf:1c:cf:4b:ef:32:ed:fb:f0:c2:4a:0f:2b:9e:dd:e7: 60:d0:33:ac:51:00:64:78:24:7b:52:f3:5b:2b:ca:b1:b5:4a: 1c:8b:57:77:db:c5:5c:8c:70:f3:a1:96:73:e6:d8:7d:5d:f1: eb:7d:fc:5b:18:bb:51:e7:8b:42:3f:ca:ce:7a:87:06:1a:26: 61:b5:76:e2 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUcAFE1nrkxJ2AXmlhiRnvWdCBgRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxOTA4MTdaFw0yNjA0MDIxOTEzMTdaMDMxMTAvBgNV BAMTKDMwQzQ5NDkyRjk0MUVGOEM2RDVGMEQ4RUVCQ0E1M0U3QzAzQTlCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHhvBoP9g+vZIY8rKmNm6snKZ qRvAfxe1gPwpenq+UdOx9wfkw6EZL4TVGAvHC3WuPBicNV0LVON0tXpeAOz9mPie K8zwXo0/3K/zrlv7hJ8PYaFeU3WEWXxRHelRPLjKGMB9t7rUnB+00Fj7F4AJYiUi OGExVX3yuGc2T3cL9MMAK8cDQoKEBpE2JXTKGXwaJS/t4jJYn+FKgeX/5TSn/UjN S1T7JB8LtOy7YmO2H+W9v1tdIwKdjFYas0BBLxFRuHffRUYtSf8s16g2itlHIB4C jBPSlPSE32Z0fxGHctDdumjlT8L5D78W4L92KENQ++n/s7GG4n52zcMSzzUPAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwxJSS+UHvjG1f DY7rylPnwDqbQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTk2 WmhTS3VCcHN6UWd4ejg5WUdCZmZzZHFNVlJHUlFMNXg2UmZ1dGVUekEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk5 NlpoU0t1QnBzelFneHo4OVlHQmZmc2RxTVZSR1JRTDV4NlJmdXRlVHpBLzAvMzBD NDk0OTJGOTQxRUY4QzZENUYwRDhFRUJDQTUzRTdDMDNBOUI0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAsZpdMA8EAgACMAkDBwAoAQCAObAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCJoMA0GCSqGSIb3DQEBCwUAA4IBAQCsE4+uVlKnngXR JPT4b3WfBdtAYY0APQSxDa/vFRqAvZBsBS/9bn+42AAtMybvL0Ba8zKZQNInDBnK fOJYz8mX8SWFjUsczUnmJD9UtW6Er/c48mYTdBl1UoqCQ0ZdOlCR7ZJlIKXYb+kv UoJSovF7T3UlPega8+Mf+SGaD+ZsPBvu5iAzEZH6IZUE0AAb8qIT+U7LUXk/mLLM vKxMr2o0Gjb+YLGZ0HdAXGUGBVmOqvAb5qZlJb8cz0vvMu378MJKDyue3edg0DOs UQBkeCR7UvNbK8qxtUoci1d328VcjHDzoZZz5th9XfHrffxbGLtR54tCP8rOeocG GiZhtXbi -----END CERTIFICATE-----Generated at Mon Nov 3 12:18:51 2025 by rpki-client