$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer File: 3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer (raw, json) Hash identifier: hvCfZ7a48I/lYECuuyQbgpjPV8iL7RvUsdk79SO+KMo= Subject key identifier: 39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A8955F57590FF470AC404EAC28B9CBD6D5AD964 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft caRepository: rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 17 May 2025 03:38:47 +0000 Certificate not after: Sat 16 May 2026 03:43:47 +0000 Subordinate resources: AS: 271766 IP: 2804:80ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:89:55:f5:75:90:ff:47:0a:c4:04:ea:c2:8b:9c:bd:6d:5a:d9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 17 03:38:47 2025 GMT Not After : May 16 03:43:47 2026 GMT Subject: CN=3959E4DDE5432F578D571DA91D8B83E05EB7679C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:9c:6d:86:0f:d5:58:27:72:d9:54:2f:9a: 52:ee:2f:3a:6e:a7:d0:00:f5:c6:81:8f:0d:90:9e: e4:ce:56:b7:8e:f7:d3:87:19:30:c3:e3:a0:bd:eb: b4:a9:38:f9:00:fa:a3:cd:08:90:30:21:2e:5d:a5: 7d:3d:ca:b3:84:91:b6:57:3e:a8:bc:0f:fc:8c:a6: bd:55:1d:a8:2d:eb:c0:10:cc:73:d4:a3:4e:4f:78: 68:65:97:b1:22:9d:33:5e:6a:f0:71:53:e8:17:ee: cf:b4:2f:78:8e:9b:52:f7:e9:0e:74:d4:62:a2:48: 2d:06:92:46:f5:fe:c0:b0:72:82:ea:43:99:30:aa: ed:de:70:de:df:08:99:85:da:09:26:09:bb:5f:3a: 4c:7a:a7:ce:97:7c:95:0c:be:63:d2:07:33:68:8a: 68:0f:70:b9:c0:54:a4:93:e8:9a:e2:13:e3:4b:55: 26:6d:41:c5:f9:d3:ca:27:c6:48:73:cf:7a:6e:07: 80:5f:ac:fd:35:93:1d:58:48:b7:ac:4a:21:78:b2: 4b:00:86:87:b8:f7:84:5b:c3:23:54:03:e8:4e:b2: 79:aa:17:42:4e:32:de:39:22:67:d1:93:58:97:da: 7a:b3:3c:e5:74:17:e3:b3:78:79:95:e0:d8:8e:c6: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:80ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271766 Signature Algorithm: sha256WithRSAEncryption 4e:8d:a7:2c:8c:c2:61:1b:5a:dc:0f:dc:57:b1:ce:26:7e:29: c7:cc:fa:c6:48:3c:1e:06:94:cd:d2:13:a2:74:ae:36:83:4e: df:92:47:78:4c:e3:29:e0:4f:89:ea:29:b5:c7:e9:3b:f3:35: a5:cf:ea:1e:72:bf:3e:3e:27:47:5d:ae:4e:00:f3:2e:b4:5b: 74:4c:e5:28:2a:d4:57:e0:74:57:1a:f4:c9:69:98:3d:d0:9f: 4b:98:dd:41:fa:e8:09:9f:6b:c4:ca:d4:fb:62:de:a6:aa:71: 22:24:bd:6f:d6:f8:f2:a2:9f:c7:10:d5:76:c4:75:c5:36:10: 6d:69:45:6c:3f:52:5f:35:17:94:b9:6d:33:88:ff:c9:98:38: c0:08:c7:b4:8b:0e:aa:81:f0:6a:59:e1:e0:3e:2f:d4:06:76: f9:d8:6c:f3:bb:de:f9:52:37:4b:cd:74:47:58:48:c1:6d:6c: 49:35:07:fc:92:ba:50:f6:02:60:20:fd:c2:3a:61:03:b2:89: 1a:60:bd:e6:7e:b3:5c:35:ab:91:0f:73:d7:67:60:bf:a8:de: cf:67:81:e0:1c:a6:99:62:15:15:8f:7d:1b:ad:b6:7b:67:7f: f0:ef:d1:d1:2c:98:58:91:48:ee:44:b1:fd:f6:91:da:8a:45: 9b:69:f5:25 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWolV9XWQ/0cKxATqwoucvW1a2WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTcwMzM4NDdaFw0yNjA1MTYwMzQzNDdaMDMxMTAvBgNV BAMTKDM5NTlFNERERTU0MzJGNTc4RDU3MURBOTFEOEI4M0UwNUVCNzY3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1pxthg/VWCdy2VQvmlLuLzpu p9AA9caBjw2QnuTOVreO99OHGTDD46C967SpOPkA+qPNCJAwIS5dpX09yrOEkbZX Pqi8D/yMpr1VHagt68AQzHPUo05PeGhll7EinTNeavBxU+gX7s+0L3iOm1L36Q50 1GKiSC0Gkkb1/sCwcoLqQ5kwqu3ecN7fCJmF2gkmCbtfOkx6p86XfJUMvmPSBzNo imgPcLnAVKST6JriE+NLVSZtQcX508onxkhzz3puB4BfrP01kx1YSLesSiF4sksA hoe494RbwyNUA+hOsnmqF0JOMt45ImfRk1iX2nqzPOV0F+OzeHmV4NiOxkAlAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5WeTd5UMvV41X Hakdi4PgXrdnnDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmJa SmRyakRaOG45TmY5dzZmY0pIV05QRmI1UnVmOUI3dm9BREZodkNxNUUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi WkpkcmpEWjhuOU5mOXc2ZmNKSFdOUEZiNVJ1ZjlCN3ZvQURGaHZDcTVFLzAvMzk1 OUU0RERFNTQzMkY1NzhENTcxREE5MUQ4QjgzRTA1RUI3Njc5Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASArDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME JZYwDQYJKoZIhvcNAQELBQADggEBAE6NpyyMwmEbWtwP3FexziZ+KcfM+sZIPB4G lM3SE6J0rjaDTt+SR3hM4yngT4nqKbXH6TvzNaXP6h5yvz4+J0ddrk4A8y60W3RM 5Sgq1FfgdFca9MlpmD3Qn0uY3UH66Amfa8TK1Pti3qaqcSIkvW/W+PKin8cQ1XbE dcU2EG1pRWw/Ul81F5S5bTOI/8mYOMAIx7SLDqqB8GpZ4eA+L9QGdvnYbPO73vlS N0vNdEdYSMFtbEk1B/ySulD2AmAg/cI6YQOyiRpgveZ+s1w1q5EPc9dnYL+o3s9n geAcppliFRWPfRuttntnf/Dv0dEsmFiRSO5Esf32kdqKRZtp9SU= -----END CERTIFICATE-----Generated at Fri Jun 6 04:14:10 2025 by rpki-client