$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer File: 40E949830CC8643940DE6930F8D9D7E92FFA9152.cer (raw, json) Hash identifier: RQoGpqYQvF+wRypelIskQG9XrcPIgbU88G6LULCawsU= Subject key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42BBBDEC766AFB5AD852D5722F7C3D99B13EBB21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft caRepository: rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 15:40:38 +0000 Certificate not after: Wed 03 Jun 2026 15:45:38 +0000 Subordinate resources: AS: 263934 IP: 138.219.128.0/22 IP: 2804:2800::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 15 Jun 2025 05:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:bd:ec:76:6a:fb:5a:d8:52:d5:72:2f:7c:3d:99:b1:3e:bb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 15:40:38 2025 GMT Not After : Jun 3 15:45:38 2026 GMT Subject: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:83:5e:ed:73:6f:23:7e:0a:ea:30:c2:7c: 5c:5c:e7:20:e0:6c:10:92:c4:be:ab:55:82:e7:36: 55:4a:18:5a:0a:cd:35:a0:9d:df:9a:60:b1:1a:03: 11:79:9d:b4:bf:db:36:74:98:10:5c:1f:fe:30:ee: f2:b1:9a:1f:01:7e:97:ca:9f:f8:86:8c:9e:9b:61: 90:b6:cc:e3:b1:5c:fb:49:7d:24:59:0f:1a:b3:87: 05:9e:f9:f9:56:b6:2f:dc:42:98:f0:74:90:46:df: 76:d6:b4:65:b3:ab:c8:53:4e:fb:3d:89:73:3c:8e: 28:0f:a9:84:82:fd:c3:76:01:86:32:ac:6a:23:15: 53:a1:63:e5:67:91:c1:e9:1a:67:20:c8:95:46:c3: 8c:5c:60:a0:b4:51:1c:3b:62:d6:af:64:3c:ab:1b: 22:2f:ec:73:b8:4e:60:01:6f:5c:27:a3:4f:c9:05: f2:cd:74:df:a8:a3:cb:78:a4:ce:cc:48:d0:73:89: 63:75:3d:54:24:f4:22:30:19:d5:b0:ea:88:93:2c: 26:60:7d:c6:79:6e:c6:97:d2:5d:83:79:dc:0b:90: a0:23:33:56:83:b7:dc:83:aa:e8:2f:01:96:31:10: 9e:2e:05:84:fe:7e:a2:82:4b:5c:c0:b3:12:74:b2: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.128.0/22 IPv6: 2804:2800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263934 Signature Algorithm: sha256WithRSAEncryption 2c:6c:4a:83:f0:9c:30:2c:ac:6d:51:01:96:8d:03:e4:d5:e9: 0e:6d:18:7e:c9:44:e5:20:76:e6:dd:88:b9:70:c5:a0:b7:33: 5f:83:13:cd:4a:15:4d:12:65:d1:a4:2f:9d:14:c6:dd:22:2f: 8d:16:f9:49:f5:ce:7c:1e:19:37:70:b4:69:d5:72:75:9f:d8: 18:ff:6a:f5:62:33:cf:a5:0c:13:08:53:07:90:4f:c7:de:24: 39:8b:5a:5c:27:09:88:0a:ad:81:2a:23:e7:34:1c:c6:fe:b0: c0:1e:7e:36:5b:45:3e:da:cb:bf:a3:69:f1:0a:42:35:a7:ea: 8f:e4:e0:e2:4d:c3:2d:41:23:bd:93:b7:b7:e7:f7:05:a6:fd: 64:b5:88:ce:77:43:23:54:87:b2:c0:aa:8e:80:c4:f4:e9:b3: 08:10:1b:20:cc:ac:10:d1:6f:00:5d:15:83:b1:74:2a:3e:14: 39:6a:a8:0d:9e:17:86:e8:34:d5:18:f8:d4:11:44:85:f4:ad: 4d:62:96:21:ab:54:31:ef:cf:4f:8d:61:15:1f:6c:7a:9c:94: 7a:94:46:2c:2a:0a:a5:5a:fb:45:45:bb:2a:dd:63:65:eb:6a: 21:5d:68:7f:13:1d:47:f7:67:07:34:9e:d3:a4:28:5e:4a:f9: 68:89:4a:c3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQru97HZq+1rYUtVyL3w9mbE+uyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQxNTQwMzhaFw0yNjA2MDMxNTQ1MzhaMDMxMTAvBgNV BAMTKDQwRTk0OTgzMENDODY0Mzk0MERFNjkzMEY4RDlEN0U5MkZGQTkxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCYNe7XNvI34K6jDCfFxc5yDg bBCSxL6rVYLnNlVKGFoKzTWgnd+aYLEaAxF5nbS/2zZ0mBBcH/4w7vKxmh8BfpfK n/iGjJ6bYZC2zOOxXPtJfSRZDxqzhwWe+flWti/cQpjwdJBG33bWtGWzq8hTTvs9 iXM8jigPqYSC/cN2AYYyrGojFVOhY+VnkcHpGmcgyJVGw4xcYKC0URw7YtavZDyr GyIv7HO4TmABb1wno0/JBfLNdN+oo8t4pM7MSNBziWN1PVQk9CIwGdWw6oiTLCZg fcZ5bsaX0l2DedwLkKAjM1aDt9yDqugvAZYxEJ4uBYT+fqKCS1zAsxJ0slF3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRA6UmDDMhkOUDe aTD42dfpL/qRUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkU1 a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2cDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZF NWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAvNDBF OTQ5ODMwQ0M4NjQzOTQwREU2OTMwRjhEOUQ3RTkyRkZBOTE1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCituAMA0EAgACMAcDBQAoBCgAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQG/jANBgkqhkiG9w0BAQsFAAOCAQEALGxKg/CcMCysbVEB lo0D5NXpDm0YfslE5SB25t2IuXDFoLczX4MTzUoVTRJl0aQvnRTG3SIvjRb5SfXO fB4ZN3C0adVydZ/YGP9q9WIzz6UMEwhTB5BPx94kOYtaXCcJiAqtgSoj5zQcxv6w wB5+NltFPtrLv6Np8QpCNafqj+Tg4k3DLUEjvZO3t+f3Bab9ZLWIzndDI1SHssCq joDE9OmzCBAbIMysENFvAF0Vg7F0Kj4UOWqoDZ4Xhug01Rj41BFEhfStTWKWIatU Me/PT41hFR9sepyUepRGLCoKpVr7RUW7Kt1jZetqIV1ofxMdR/dnBzSe06QoXkr5 aIlKww== -----END CERTIFICATE-----Generated at Sat Jun 14 04:59:42 2025 by rpki-client