$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer File: 461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer (raw, json) Hash identifier: UWpk+CChVV78TQF+bwGHpKqVcVSD9NhbLWqaarzvvVM= Subject key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 57B1176A5143844BCA6D53F3CF340B7339BA3F8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft caRepository: rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:05 +0000 Certificate not after: Wed 04 Mar 2026 18:41:05 +0000 Subordinate resources: AS: 263917 IP: 138.204.232.0/22 IP: 2804:27b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b1:17:6a:51:43:84:4b:ca:6d:53:f3:cf:34:0b:73:39:ba:3f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:05 2025 GMT Not After : Mar 4 18:41:05 2026 GMT Subject: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:3e:53:68:c5:1c:3f:5e:71:e8:34:f9:24: f0:4b:ec:e7:42:cd:be:a4:6a:c8:9c:2d:a7:5b:ff: 21:c6:8a:49:62:ee:89:3c:ad:37:70:38:d5:9f:9b: 25:ab:2e:fd:5d:de:5c:17:6e:75:4b:65:af:4e:25: b7:ad:34:fb:40:7b:a4:b9:6c:0e:74:c1:a0:37:83: f0:45:b9:3e:26:88:b1:71:be:d1:08:f7:55:45:a7: 0a:3e:10:9c:02:a7:d9:71:6f:12:7b:b3:24:8f:ab: a0:1d:0a:7d:26:2f:c5:90:6b:1e:01:f8:69:09:44: da:1e:61:99:0a:7d:7e:71:02:16:a3:1d:c8:31:db: 7e:1f:bd:66:2f:f5:f7:0f:4d:67:9c:2d:d4:df:e9: 25:c2:4f:ea:d4:59:b2:e3:ca:08:a5:cd:69:d1:da: 57:4b:8d:ac:c3:f6:90:13:15:d3:dd:c4:d7:6c:60: c8:5a:f5:a7:94:d7:56:cf:3c:be:2f:e9:46:9f:ed: 63:d6:f5:5b:70:78:ba:43:45:2a:83:08:0b:09:30: 44:f6:12:52:3f:98:7d:2c:d8:4a:76:1d:2b:31:55: d7:70:f7:e1:7b:eb:cf:58:2f:6c:ad:4d:da:c7:7c: 61:42:f8:5b:cb:1f:9e:90:b0:5e:22:77:36:f6:dd: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.232.0/22 IPv6: 2804:27b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263917 Signature Algorithm: sha256WithRSAEncryption ad:d0:fa:41:96:35:60:38:e2:52:70:6e:fd:6b:96:5b:38:b2: e1:f4:52:8d:66:67:8c:2e:01:73:43:8e:10:0b:04:83:c6:08: d6:df:0b:ef:e7:aa:c1:d9:77:87:65:a5:c2:eb:85:78:0e:e7: f7:62:ab:81:28:0b:26:51:6b:13:51:d8:5e:b2:83:d1:e6:75: a8:24:b2:9a:5a:14:19:59:39:2d:14:f3:69:72:80:a3:ed:c6: 4c:64:c7:f7:e7:3b:0e:15:50:2e:64:3f:95:cb:a6:76:3d:07: 5b:df:51:4b:2e:23:1d:e8:a1:cf:84:1e:5a:a6:eb:9c:f6:fb: 98:ed:9f:c8:70:21:d9:43:01:27:37:e1:0f:99:8e:5f:51:51: 8a:00:e0:ee:d3:e1:33:15:a1:b8:c1:f9:e2:a9:32:c4:17:ff: 67:2a:c4:af:58:17:18:c0:14:42:8f:40:9c:4b:e1:af:29:91: 3b:74:79:1e:b2:73:65:df:6b:75:67:e2:2e:eb:6d:26:0d:04: 31:a4:34:7d:d3:3b:39:5c:1c:56:0e:46:f6:e5:2b:be:96:64: 0a:8f:79:5f:a6:9f:89:7c:09:d6:4d:1d:22:f2:02:85:00:54: 1f:ef:6b:45:02:6e:2a:35:ea:ae:4f:f2:19:2a:ec:6c:bc:4b: f7:2b:35:82 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUV7EXalFDhEvKbVPzzzQLczm6P44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MDVaFw0yNjAzMDQxODQxMDVaMDMxMTAvBgNV BAMTKDQ2MUJDRDExN0FGMDNGMzAwODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8KT5TaMUcP15x6DT5JPBL7OdC zb6kasicLadb/yHGikli7ok8rTdwONWfmyWrLv1d3lwXbnVLZa9OJbetNPtAe6S5 bA50waA3g/BFuT4miLFxvtEI91VFpwo+EJwCp9lxbxJ7sySPq6AdCn0mL8WQax4B +GkJRNoeYZkKfX5xAhajHcgx234fvWYv9fcPTWecLdTf6SXCT+rUWbLjygilzWnR 2ldLjazD9pATFdPdxNdsYMha9aeU11bPPL4v6Uaf7WPW9VtweLpDRSqDCAsJMET2 ElI/mH0s2Ep2HSsxVddw9+F7689YL2ytTdrHfGFC+FvLH56QsF4idzb23S95AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGG80RevA/MAhq OL0Uear+W+KoEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFZU QlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4xWlUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFZU QlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4xWlUvMS80NjFC Q0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKzOgwDQQCAAIwBwMFACgEJ7AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAbtMA0GCSqGSIb3DQEBCwUAA4IBAQCt0PpBljVgOOJScG79 a5ZbOLLh9FKNZmeMLgFzQ44QCwSDxgjW3wvv56rB2XeHZaXC64V4Duf3YquBKAsm UWsTUdhesoPR5nWoJLKaWhQZWTktFPNpcoCj7cZMZMf35zsOFVAuZD+Vy6Z2PQdb 31FLLiMd6KHPhB5apuuc9vuY7Z/IcCHZQwEnN+EPmY5fUVGKAODu0+EzFaG4wfni qTLEF/9nKsSvWBcYwBRCj0CcS+GvKZE7dHkesnNl32t1Z+Iu620mDQQxpDR90zs5 XBxWDkb25Su+lmQKj3lfpp+JfAnWTR0i8gKFAFQf72tFAm4qNequT/IZKuxsvEv3 KzWC -----END CERTIFICATE-----Generated at Sat Apr 5 00:03:24 2025 by rpki-client