$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer File: 4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer (raw, json) Hash identifier: grlEbnLwIm3U3yN6aF71pzjicPUEx8WlLgP8NgiIYR4= Subject key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D0DB63D7797B28D5103BA0A04DABD28314665B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft caRepository: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Mar 2025 12:23:25 +0000 Certificate not after: Fri 13 Mar 2026 12:28:25 +0000 Subordinate resources: AS: 263444 IP: 138.36.164.0/22 IP: 177.91.160.0/22 IP: 2804:11dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0d:b6:3d:77:97:b2:8d:51:03:ba:0a:04:da:bd:28:31:46:65:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 14 12:23:25 2025 GMT Not After : Mar 13 12:28:25 2026 GMT Subject: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:bb:fe:71:b7:41:cd:6c:26:28:83:15:88: 26:c9:e1:9d:0f:12:f2:e9:a4:5b:75:10:49:2f:eb: 33:0c:5f:76:fb:67:4f:5e:fd:68:5b:95:b3:bb:3c: ef:1c:7e:fa:ad:aa:f0:d2:96:5a:e3:0d:14:75:fe: 26:74:62:a6:43:b8:bf:db:8a:7a:ae:36:68:ab:28: 99:f2:c9:4f:8f:fb:b1:45:31:fe:5f:fe:2c:b0:8b: cb:5b:ca:90:8d:34:59:1d:93:5c:d5:2b:7c:ea:8f: 75:23:c8:cb:40:c5:c1:a1:45:64:ff:dc:a6:fc:47: 49:8c:7c:3c:88:78:a7:6e:aa:b5:b2:27:5a:ea:62: 86:8c:cb:63:41:59:e8:01:4d:63:71:df:40:47:7e: 66:4c:b2:e2:fc:63:b6:32:73:31:e7:4f:ed:96:8e: c1:56:c6:a9:d5:1d:1b:62:f9:9f:3d:b3:3d:16:6d: 46:94:9c:a3:29:e3:b3:94:b9:1d:02:21:6e:9c:19: 8b:70:3d:44:fa:cb:a5:01:d4:4f:82:a0:1b:f7:df: 41:82:0d:fa:18:75:4a:2a:9e:80:ec:36:29:e7:6b: af:08:f8:0d:20:64:14:8f:db:13:be:c7:fc:86:61: f4:4d:a4:77:c7:8f:59:d7:e9:b3:f6:21:a7:0d:ab: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.164.0/22 177.91.160.0/22 IPv6: 2804:11dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263444 Signature Algorithm: sha256WithRSAEncryption 7c:ca:43:0e:be:c6:b1:fd:6e:43:10:7b:19:c7:f3:fd:9f:0f: d1:86:33:23:4a:48:5c:16:00:27:f0:70:47:1a:ec:3f:09:6d: 9e:42:18:3a:3a:9e:5c:2e:65:f2:d9:ae:8c:df:fc:cb:b7:9c: 2b:b1:3b:ce:76:aa:e9:b7:a6:24:f6:9e:4f:d7:73:8e:d4:73: d1:1c:54:08:f3:ac:a7:e5:d5:4e:d8:fd:53:8a:91:e7:06:f3: 36:a6:07:e0:0a:b8:64:c6:ba:cc:e2:0c:a7:95:0b:c4:ff:19: 29:1d:ed:76:d8:6a:82:2c:39:71:13:22:eb:0e:60:52:0c:1b: fe:d7:fa:70:2a:b7:ab:3a:53:e3:b5:d3:f1:9d:41:01:50:04: a6:0b:c0:eb:1b:2a:f6:db:7a:9b:9a:ed:ab:fe:b2:d1:a7:eb: 2e:e9:f7:91:48:26:1a:43:c0:37:cc:38:96:31:39:e4:04:d1: 92:d6:b5:4f:88:a7:56:0d:28:8a:fb:c5:0c:73:81:4e:17:37: 10:cf:e4:2e:38:9f:d3:1c:4b:bc:07:6f:4e:aa:6d:bb:78:1b: a2:e1:b7:fb:8f:de:93:67:84:8d:9a:6c:42:88:19:e7:a8:7a: 3c:32:fd:a2:d9:13:94:68:46:f8:35:9f:11:9e:2f:ed:21:04: 47:5c:39:b6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHQ22PXeXso1RA7oKBNq9KDFGZbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTQxMjIzMjVaFw0yNjAzMTMxMjI4MjVaMDMxMTAvBgNV BAMTKDRBNTE4MzEwREQ2QjcyRTEzNEE0QUZCNTNEQkE1NzI3RjU3RDVEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnw7v+cbdBzWwmKIMViCbJ4Z0P EvLppFt1EEkv6zMMX3b7Z09e/WhblbO7PO8cfvqtqvDSllrjDRR1/iZ0YqZDuL/b inquNmirKJnyyU+P+7FFMf5f/iywi8tbypCNNFkdk1zVK3zqj3UjyMtAxcGhRWT/ 3Kb8R0mMfDyIeKduqrWyJ1rqYoaMy2NBWegBTWNx30BHfmZMsuL8Y7YyczHnT+2W jsFWxqnVHRti+Z89sz0WbUaUnKMp47OUuR0CIW6cGYtwPUT6y6UB1E+CoBv330GC DfoYdUoqnoDsNinna68I+A0gZBSP2xO+x/yGYfRNpHfHj1nX6bP2IacNqzfdAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKUYMQ3Wty4TSk r7U9ulcn9X1dnjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXpN OXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl6 TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAvNEE1 MTgzMTBERDZCNzJFMTM0QTRBRkI1M0RCQTU3MjdGNTdENUQ5RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiiSkAwQCsVugMA0EAgACMAcDBQAoBBHcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFFDANBgkqhkiG9w0BAQsFAAOCAQEAfMpDDr7G sf1uQxB7Gcfz/Z8P0YYzI0pIXBYAJ/BwRxrsPwltnkIYOjqeXC5l8tmujN/8y7ec K7E7znaq6bemJPaeT9dzjtRz0RxUCPOsp+XVTtj9U4qR5wbzNqYH4Aq4ZMa6zOIM p5ULxP8ZKR3tdthqgiw5cRMi6w5gUgwb/tf6cCq3qzpT47XT8Z1BAVAEpgvA6xsq 9tt6m5rtq/6y0afrLun3kUgmGkPAN8w4ljE55ATRkta1T4inVg0oivvFDHOBThc3 EM/kLjif0xxLvAdvTqptu3gbouG3+4/ek2eEjZpsQogZ56h6PDL9otkTlGhG+DWf EZ4v7SEER1w5tg== -----END CERTIFICATE-----Generated at Sat Apr 5 00:35:45 2025 by rpki-client