$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer File: 47A0BA8B6BFD6528B70033FEAB848C965238B383.cer (raw, json) Hash identifier: gBz41zIpOcyWHgImg8S1USRZTC3QwW6dtKSZ4Ek8KX8= Subject key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45C0F78B3149095227BFE1595111AB26AEEAE84F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft caRepository: rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:35:12 +0000 Certificate not after: Thu 05 Mar 2026 23:40:12 +0000 Subordinate resources: AS: 53102 IP: 186.195.48.0/20 IP: 187.103.160.0/20 IP: 2804:928::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c0:f7:8b:31:49:09:52:27:bf:e1:59:51:11:ab:26:ae:ea:e8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:35:12 2025 GMT Not After : Mar 5 23:40:12 2026 GMT Subject: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6d:48:52:43:23:d1:b6:99:39:a6:dd:13:d8: c0:14:b9:0f:25:3b:94:f9:89:fc:48:51:25:90:d3: ba:12:19:2b:ca:34:2c:8f:dc:9d:f6:79:e3:90:85: 95:f4:76:10:d2:7b:87:ae:8b:5b:0f:19:69:5c:d5: cd:0a:64:ba:51:95:06:87:40:07:09:06:79:ad:96: b0:6b:ba:fa:fd:0e:61:10:f6:dd:17:98:44:d7:ad: 0d:1f:c7:7d:3e:b2:21:1d:1f:67:b7:b8:eb:ce:1b: 49:b2:67:02:49:9b:2e:72:0d:82:06:74:e7:a9:3f: e9:a5:48:4e:07:61:c7:2f:26:be:04:d5:34:dc:cf: fd:37:27:06:6a:cb:7b:7f:27:82:8e:2a:30:5f:f9: 73:53:ad:f4:fe:b1:5a:78:49:41:e3:36:81:7b:1d: 1b:13:e7:5b:79:6d:fa:48:3a:7c:43:4e:dc:b1:a8: 0f:af:60:89:cb:36:76:55:a6:1d:c5:24:32:5d:d6: ce:77:53:33:cb:1a:ce:05:53:88:14:9e:81:9c:3e: c6:b8:69:b6:32:f7:78:b2:63:97:95:cc:28:b6:08: 65:80:c4:0a:24:84:ee:b2:c3:3e:8e:33:93:52:9b: 88:b4:8d:59:f3:63:9a:11:f5:e9:76:ba:cd:b7:cf: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.48.0/20 187.103.160.0/20 IPv6: 2804:928::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53102 Signature Algorithm: sha256WithRSAEncryption 6c:17:29:c7:78:f6:7d:a8:4f:7a:2b:9a:e1:ec:f3:f8:bd:bb: 8c:a7:cb:57:a2:bd:0e:8e:41:30:b3:38:8a:b3:d6:26:6d:55: f5:2b:f1:26:b0:6e:20:5f:8d:82:80:2a:22:cb:b7:fd:83:54: f0:8c:76:7f:c4:52:ca:4b:10:df:47:89:18:0e:17:b0:21:1b: 58:3b:5f:9e:2f:d4:d1:7c:7c:9b:83:40:9e:e7:c5:6b:e4:63: 2a:03:b7:36:48:e4:46:f0:fe:ed:99:3b:9c:05:a0:11:2e:11: 84:06:2e:68:eb:c2:03:09:05:31:b8:75:de:bd:ae:9a:eb:94: 5d:98:70:3e:7a:85:e0:fe:b4:a7:02:3a:0f:1e:44:dd:06:17: ba:13:63:8e:9b:a4:84:0c:65:4a:3d:6c:18:c2:dc:70:6c:48: 2a:57:76:0e:4d:56:b1:68:c0:b9:10:7a:63:9b:f3:75:28:f6: fc:5e:86:16:32:59:e1:25:0c:d2:3e:9f:21:b0:30:9a:96:c2: ce:b2:4c:3e:44:87:7f:27:c5:47:25:39:a9:ba:f8:0e:ac:3d: e3:ca:7d:a6:fa:cd:41:0f:b2:4f:52:13:a0:ff:ab:58:29:a6: f7:61:86:c8:25:af:1c:9a:a0:fa:99:d5:3f:b4:c3:6c:0a:03: bd:2a:ac:bd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIURcD3izFJCVInv+FZURGrJq7q6E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzM1MTJaFw0yNjAzMDUyMzQwMTJaMDMxMTAvBgNV BAMTKDQ3QTBCQThCNkJGRDY1MjhCNzAwMzNGRUFCODQ4Qzk2NTIzOEIzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1bUhSQyPRtpk5pt0T2MAUuQ8l O5T5ifxIUSWQ07oSGSvKNCyP3J32eeOQhZX0dhDSe4eui1sPGWlc1c0KZLpRlQaH QAcJBnmtlrBruvr9DmEQ9t0XmETXrQ0fx30+siEdH2e3uOvOG0myZwJJmy5yDYIG dOepP+mlSE4HYccvJr4E1TTcz/03JwZqy3t/J4KOKjBf+XNTrfT+sVp4SUHjNoF7 HRsT51t5bfpIOnxDTtyxqA+vYInLNnZVph3FJDJd1s53UzPLGs4FU4gUnoGcPsa4 abYy93iyY5eVzCi2CGWAxAokhO6ywz6OM5NSm4i0jVnzY5oR9el2us23zzdzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHoLqLa/1lKLcA M/6rhIyWUjizgzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTZl bmdxUFlYVlVkQUJoRHdqVFQ2UGJ6WVprSlUzVlFNM01tOUxESnVXSFQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2 ZW5ncVBZWFZVZEFCaER3alRUNlBiellaa0pVM1ZRTTNNbTlMREp1V0hULzEvNDdB MEJBOEI2QkZENjUyOEI3MDAzM0ZFQUI4NDhDOTY1MjM4QjM4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusMwAwQEu2egMA0EAgACMAcDBQAoBAkoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPbjANBgkqhkiG9w0BAQsFAAOCAQEAbBcpx3j2 fahPeiua4ezz+L27jKfLV6K9Do5BMLM4irPWJm1V9SvxJrBuIF+NgoAqIsu3/YNU 8Ix2f8RSyksQ30eJGA4XsCEbWDtfni/U0Xx8m4NAnufFa+RjKgO3NkjkRvD+7Zk7 nAWgES4RhAYuaOvCAwkFMbh13r2umuuUXZhwPnqF4P60pwI6Dx5E3QYXuhNjjpuk hAxlSj1sGMLccGxIKld2Dk1WsWjAuRB6Y5vzdSj2/F6GFjJZ4SUM0j6fIbAwmpbC zrJMPkSHfyfFRyU5qbr4Dqw948p9pvrNQQ+yT1IToP+rWCmm92GGyCWvHJqg+pnV P7TDbAoDvSqsvQ== -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:05 2025 by rpki-client