$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer File: 350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer (raw, json) Hash identifier: QPaYLZN9YkmBHCfIv3823EYdyYWLoe0mc4YLm+otESg= Subject key identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3DC711A3450E260188FD8F28E088689FEE25A752 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft caRepository: rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 21 May 2025 00:41:31 +0000 Certificate not after: Wed 20 May 2026 00:46:31 +0000 Subordinate resources: AS: 268598 IP: 45.164.52.0/22 IP: 2804:53a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c7:11:a3:45:0e:26:01:88:fd:8f:28:e0:88:68:9f:ee:25:a7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 21 00:41:31 2025 GMT Not After : May 20 00:46:31 2026 GMT Subject: CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2f:1f:cd:26:49:d1:49:94:96:fd:4a:89:76: 6a:d5:68:5e:e5:c0:41:e9:30:99:7e:89:5e:ae:89: 91:59:63:81:3a:50:40:f7:a7:28:4b:f4:a2:3a:03: a5:7c:25:00:36:ee:41:8f:3b:c5:12:1f:a7:16:58: a5:1d:cc:b2:48:14:08:f3:76:84:51:28:fe:56:47: db:40:8d:3d:1e:d9:38:15:a8:aa:1a:a2:8e:70:a3: 05:da:48:5b:9e:b3:3f:61:6e:08:8a:e6:b4:f2:f3: e2:8a:06:d3:65:a8:5b:41:a1:81:bd:fe:a2:1b:61: 7b:4c:e2:b8:92:c4:40:3a:5d:22:64:c8:f4:52:c4: f4:3c:1a:4b:65:df:09:b0:72:5f:7d:1b:65:5d:f7: 34:89:f7:c7:fb:a3:f6:71:b7:59:d2:c3:67:7f:59: dc:2a:cf:f6:41:04:db:cc:e2:45:3d:bf:93:ee:62: 70:e1:87:cc:40:2c:a9:1a:f4:52:5b:52:29:f3:9b: 42:2c:71:50:ec:f9:e3:c9:50:57:57:78:11:5c:30: b8:22:55:61:2c:eb:cf:23:65:48:53:d5:41:6a:0c: 3b:00:c8:ef:ef:42:2b:90:b2:de:6e:ce:0e:2d:cd: c0:44:ff:fd:15:be:9e:df:0c:aa:d8:35:00:52:13: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.52.0/22 IPv6: 2804:53a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268598 Signature Algorithm: sha256WithRSAEncryption 9d:72:e5:6d:e3:81:b7:15:2e:0f:38:b3:c9:9b:1f:9b:c8:41: c2:cb:2e:9c:a3:2a:86:17:a4:a4:ef:ef:be:72:be:68:5b:27: 46:2f:b4:27:ed:bb:57:6e:12:d5:b5:e1:bf:c9:2f:45:cb:28: 41:2e:68:98:56:55:51:68:ed:ba:61:67:82:2e:2d:b2:e7:b4: 30:fd:36:e6:35:bd:87:1f:6e:13:cf:47:d2:ff:7b:ae:00:38: f3:83:28:b3:36:27:3b:cc:c1:8d:6f:b7:55:90:19:34:93:06: 94:d0:6d:eb:30:5a:b7:8c:0d:af:21:60:7a:66:1d:37:f8:d6: 25:9b:73:02:b2:26:99:67:34:09:12:e5:f3:46:4f:40:a4:61: b9:8b:74:dd:45:2b:88:ad:a2:0e:43:d3:df:91:c4:55:db:dc: 38:4c:cb:e6:9e:0c:23:f7:e2:d2:44:58:da:9d:91:f1:25:a9: 64:20:22:1f:d5:2c:a0:94:9f:2e:3d:14:59:96:83:bd:6e:68: 04:6a:a2:e6:a2:07:a2:da:00:6c:63:13:6d:4a:e1:75:62:e1: 49:bc:cf:1d:b1:ce:9c:83:2b:e9:25:a0:75:ac:d8:07:4a:d2: ff:d0:f0:3e:11:b2:ea:2f:c4:ed:43:7f:04:b4:45:5e:ce:f0: 7d:9a:48:c6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPccRo0UOJgGI/Y8o4Ihon+4lp1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjEwMDQxMzFaFw0yNjA1MjAwMDQ2MzFaMDMxMTAvBgNV BAMTKDM1MEY3N0Q2NTNFQjJBNUE2QTNGMkJFMDZBNUQ3QTlGRjM4MTBBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLx/NJknRSZSW/UqJdmrVaF7l wEHpMJl+iV6uiZFZY4E6UED3pyhL9KI6A6V8JQA27kGPO8USH6cWWKUdzLJIFAjz doRRKP5WR9tAjT0e2TgVqKoaoo5wowXaSFuesz9hbgiK5rTy8+KKBtNlqFtBoYG9 /qIbYXtM4riSxEA6XSJkyPRSxPQ8Gktl3wmwcl99G2Vd9zSJ98f7o/Zxt1nSw2d/ Wdwqz/ZBBNvM4kU9v5PuYnDhh8xALKka9FJbUinzm0IscVDs+ePJUFdXeBFcMLgi VWEs688jZUhT1UFqDDsAyO/vQiuQst5uzg4tzcBE//0Vvp7fDKrYNQBSExbfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1D3fWU+sqWmo/ K+BqXXqf84EKOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFU2 R001UVh0a2lrQVpCMzhSY3lmTkg0SG8yQ2VzeDRqYm1mRGRMemoyNTgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRV NkdNNVFYdGtpa0FaQjM4UmN5Zk5INEhvMkNlc3g0amJtZkRkTHpqMjU4LzEvMzUw Rjc3RDY1M0VCMkE1QTZBM0YyQkUwNkE1RDdBOUZGMzgxMEEzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaQ0MA0EAgACMAcDBQAoBFOoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZNjANBgkqhkiG9w0BAQsFAAOCAQEAnXLlbeOBtxUuDziz yZsfm8hBwssunKMqhhekpO/vvnK+aFsnRi+0J+27V24S1bXhv8kvRcsoQS5omFZV UWjtumFngi4tsue0MP025jW9hx9uE89H0v97rgA484MoszYnO8zBjW+3VZAZNJMG lNBt6zBat4wNryFgemYdN/jWJZtzArImmWc0CRLl80ZPQKRhuYt03UUriK2iDkPT 35HEVdvcOEzL5p4MI/fi0kRY2p2R8SWpZCAiH9UsoJSfLj0UWZaDvW5oBGqi5qIH otoAbGMTbUrhdWLhSbzPHbHOnIMr6SWgdazYB0rS/9DwPhGy6i/E7UN/BLRFXs7w fZpIxg== -----END CERTIFICATE-----Generated at Wed Jun 4 11:32:37 2025 by rpki-client