$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer File: 403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer (raw, json) Hash identifier: Qxfq0jCoAvfbMwnPkSCP3+vf2vt6SOciqbtdAgpsVFM= Subject key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55ABB9B2714C6A294207371EBB65680CBCCEA1C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft caRepository: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Jan 2025 18:37:10 +0000 Certificate not after: Mon 05 Jan 2026 18:42:10 +0000 Subordinate resources: AS: 263320 IP: 191.7.144.0/20 IP: 2804:143c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:b9:b2:71:4c:6a:29:42:07:37:1e:bb:65:68:0c:bc:ce:a1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 6 18:37:10 2025 GMT Not After : Jan 5 18:42:10 2026 GMT Subject: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:62:ee:88:57:9a:e3:4e:ab:d7:d9:d3:53: 56:e5:bf:e6:13:57:42:5f:12:35:81:69:ee:f2:4a: 3c:c3:8e:d9:a9:05:9a:cc:af:0a:53:8d:b9:39:cf: a7:0e:64:a0:b0:d4:c5:ea:8f:1b:40:8e:75:f2:c1: c2:8a:c5:19:f6:36:77:83:2a:c9:f0:39:c6:40:b6: 46:b0:97:7c:6f:8d:ed:d4:3d:9d:21:3e:a9:d1:2e: 0f:d3:c3:b3:87:81:4b:43:21:73:b4:19:fb:69:dc: 9b:2c:af:45:7d:42:aa:e5:aa:99:3b:30:81:5c:d2: 69:18:c5:5e:93:16:0e:27:a2:06:78:14:16:8e:4b: d8:0f:07:4b:bd:99:80:30:97:f9:31:cf:8b:f6:d4: a1:ca:b9:60:4e:e6:ca:fe:b3:ee:14:1b:62:a4:23: 24:91:e8:2e:cb:33:ad:dc:86:a5:9b:0f:48:9e:2e: 3e:bf:fd:3c:0a:1b:5a:c6:0f:f1:57:a6:9d:1b:99: b9:2a:eb:ad:8e:47:22:24:39:ab:50:e4:8d:51:3d: 4c:87:21:30:d4:17:80:e0:00:bc:03:a6:6f:3b:54: f8:95:24:ac:e3:1f:6d:47:09:d9:23:b5:60:59:4c: b9:9e:c4:4f:b2:e2:6b:58:f8:38:c5:3b:dd:f9:62: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.7.144.0/20 IPv6: 2804:143c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263320 Signature Algorithm: sha256WithRSAEncryption dc:6a:34:34:a7:18:14:04:e4:e8:a3:ec:2e:45:7c:64:86:37: 4b:85:bb:8d:d3:17:69:6a:4e:da:ce:ba:17:81:64:66:92:f7: 5b:e9:30:1b:e7:49:9f:dd:7d:5a:ec:71:19:a5:6e:cb:cc:00: 06:64:f6:d0:43:ca:95:ae:bf:da:18:a0:43:40:3a:d1:ae:a9: 3a:ba:1e:23:80:94:7a:e4:54:a3:c4:d6:b5:c0:46:70:94:28: eb:2e:c2:7f:66:c9:ae:d4:6e:00:46:08:50:7b:6f:19:58:5a: a3:94:e3:62:bd:48:fe:62:ff:bc:65:cf:71:7e:3a:8a:60:8f: 1e:be:3d:11:d2:bb:bd:f2:85:0e:5f:4f:3a:ad:c4:93:e4:98: e6:00:fd:0d:e6:f4:e3:e8:01:1d:a2:09:64:25:2d:a9:c8:81: d9:99:42:11:91:22:3b:0c:6a:76:69:7d:1a:0c:d2:f9:47:51: 37:f4:8b:25:33:16:5a:56:b5:6d:f5:e9:b0:df:1d:1d:70:10: 41:99:15:da:27:e8:aa:b1:ae:24:59:3d:e0:50:ef:42:fe:bb: 1f:29:05:34:87:e1:b1:f5:d8:17:7b:93:d2:ff:04:41:9e:d6: b9:b4:c7:08:30:55:a8:16:79:f5:a1:d3:fd:44:c9:8b:a6:0d: 81:c0:10:9d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVau5snFMailCBzceu2VoDLzOocMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDYxODM3MTBaFw0yNjAxMDUxODQyMTBaMDMxMTAvBgNV BAMTKDQwM0QxQ0MwRkVFRTQyM0I5MEY2NTNGMUE2QTcxRDEwNERFMUFBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhK2LuiFea406r19nTU1blv+YT V0JfEjWBae7ySjzDjtmpBZrMrwpTjbk5z6cOZKCw1MXqjxtAjnXywcKKxRn2NneD KsnwOcZAtkawl3xvje3UPZ0hPqnRLg/Tw7OHgUtDIXO0Gftp3Jssr0V9Qqrlqpk7 MIFc0mkYxV6TFg4nogZ4FBaOS9gPB0u9mYAwl/kxz4v21KHKuWBO5sr+s+4UG2Kk IySR6C7LM63chqWbD0ieLj6//TwKG1rGD/FXpp0bmbkq662ORyIkOatQ5I1RPUyH ITDUF4DgALwDpm87VPiVJKzjH21HCdkjtWBZTLmexE+y4mtY+DjFO935YsnrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAPRzA/u5CO5D2 U/Gmpx0QTeGqVjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0Iy SkxkREVzQ01pYXczemtWa1lBTlhMN0NEeGJhTnpqV0duYjYyajhLazcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdC MkpMZERFc0NNaWF3M3prVmtZQU5YTDdDRHhiYU56aldHbmI2Mmo4S2s3LzAvNDAz RDFDQzBGRUVFNDIzQjkwRjY1M0YxQTZBNzFEMTA0REUxQUE1Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEvweQMA0EAgACMAcDBQAoBBQ8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEmDANBgkqhkiG9w0BAQsFAAOCAQEA3Go0NKcYFATk6KPs LkV8ZIY3S4W7jdMXaWpO2s66F4FkZpL3W+kwG+dJn919WuxxGaVuy8wABmT20EPK la6/2higQ0A60a6pOroeI4CUeuRUo8TWtcBGcJQo6y7Cf2bJrtRuAEYIUHtvGVha o5TjYr1I/mL/vGXPcX46imCPHr49EdK7vfKFDl9POq3Ek+SY5gD9Deb04+gBHaIJ ZCUtqciB2ZlCEZEiOwxqdml9GgzS+UdRN/SLJTMWWla1bfXpsN8dHXAQQZkV2ifo qrGuJFk94FDvQv67HykFNIfhsfXYF3uT0v8EQZ7WubTHCDBVqBZ59aHT/UTJi6YN gcAQnQ== -----END CERTIFICATE-----Generated at Sat Apr 5 00:25:58 2025 by rpki-client