$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer (raw, json) Hash identifier: fWq1ZNQI6+BOnJT2zz47WTTrNwQi2QxL902IgMgJj48= Subject key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2118B2FA4FADB4D0C6EC088CAE78C482A9B6357D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft caRepository: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 14:17:37 +0000 Certificate not after: Wed 03 Jun 2026 14:22:37 +0000 Subordinate resources: AS: 264236 IP: 138.117.88.0/22 IP: 168.90.36.0/22 IP: 2804:24a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 14:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:18:b2:fa:4f:ad:b4:d0:c6:ec:08:8c:ae:78:c4:82:a9:b6:35:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 14:17:37 2025 GMT Not After : Jun 3 14:22:37 2026 GMT Subject: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:78:f8:16:8e:09:87:d2:fe:c4:3b:58:69: c0:eb:c5:b6:8f:84:80:c8:3f:d1:3f:c2:8d:12:b9: bd:9a:19:fd:ad:f8:9a:fa:fd:ed:63:2d:51:97:c9: 18:bf:0d:a8:4c:d9:22:01:0f:78:fd:6e:da:23:c6: 70:39:71:02:0a:01:83:4b:5a:f1:7d:6f:72:90:77: 29:a5:00:05:7a:a8:9a:f5:e3:1a:24:45:df:b3:80: ab:4e:0e:2d:49:53:94:94:ce:d7:c4:d2:08:e9:a2: ca:d5:9b:90:4e:15:d3:1b:2d:32:11:cc:47:f5:b4: 36:7c:fc:e7:10:39:a3:b9:6c:b3:fe:2d:2f:2a:46: 5a:f3:72:68:6c:76:13:05:7c:42:b4:b5:ba:6d:50: 5c:36:16:c3:42:ca:d3:16:5f:55:be:bc:05:0a:59: 58:5e:9d:24:97:b3:f5:c6:34:9e:bc:eb:7c:a3:21: 17:30:57:a1:d8:c9:bd:2c:90:09:4e:77:96:23:f2: 4e:61:2c:8c:28:2d:dc:7e:49:e4:28:62:8b:eb:ce: 49:68:11:c8:90:df:cc:17:60:27:b3:c0:6f:dc:7a: 47:cd:40:9d:48:2b:52:20:72:12:b6:15:3a:15:28: a0:40:5d:2b:cf:90:13:41:f4:c2:4a:18:28:1e:05: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.88.0/22 168.90.36.0/22 IPv6: 2804:24a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264236 Signature Algorithm: sha256WithRSAEncryption 3d:49:32:51:fe:e6:fd:c9:0e:d5:96:bf:87:83:3e:89:64:9b: 84:04:ec:df:54:1e:9a:12:a4:94:8c:f0:1f:98:d5:6a:50:63: 4f:8f:d9:e2:1c:73:bb:4c:95:29:53:3f:fc:94:4c:a5:74:c2: 2c:bf:c6:09:b2:d9:76:6a:e0:2f:7d:0e:63:1a:38:9a:e8:eb: bc:a4:86:2a:f5:f1:03:73:ee:55:fe:e2:15:73:72:31:89:ed: 7e:75:43:c7:b2:f6:28:54:01:dd:ce:db:44:8e:99:da:0a:17: 63:33:2b:d9:c6:c5:06:30:d3:7e:8b:d3:45:9a:6c:2c:2b:f9: 63:2b:fc:81:80:19:aa:59:1b:56:25:fc:70:a3:50:1e:7c:9c: 68:51:f3:1a:b1:e3:f1:b7:41:3b:21:1f:16:1b:fb:55:26:bd: d0:a1:fc:88:65:59:13:a0:8e:0d:46:c5:d3:56:0d:6d:4e:83: 7e:e3:bd:bb:04:c9:67:bf:ea:41:1c:cc:97:e4:bd:42:fc:20: e9:d9:83:d1:50:0e:4c:b6:27:f0:03:97:fb:59:35:a8:ad:2b: ce:f6:fa:9d:52:a1:4e:07:c1:2b:1f:d7:d1:e3:d9:ae:1c:05: 1c:6e:56:eb:5e:6a:54:b4:76:23:6e:32:da:34:3e:fb:be:65: e4:db:bd:e3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIRiy+k+ttNDG7AiMrnjEgqm2NX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQxNDE3MzdaFw0yNjA2MDMxNDIyMzdaMDMxMTAvBgNV BAMTKEE5NDhBQjk2RjZCQjdEQUMyQzE2NzZFRkJFRThENjEwOTlDNjFFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAnj4Fo4Jh9L+xDtYacDrxbaP hIDIP9E/wo0Sub2aGf2t+Jr6/e1jLVGXyRi/DahM2SIBD3j9btojxnA5cQIKAYNL WvF9b3KQdymlAAV6qJr14xokRd+zgKtODi1JU5SUztfE0gjposrVm5BOFdMbLTIR zEf1tDZ8/OcQOaO5bLP+LS8qRlrzcmhsdhMFfEK0tbptUFw2FsNCytMWX1W+vAUK WVhenSSXs/XGNJ6863yjIRcwV6HYyb0skAlOd5Yj8k5hLIwoLdx+SeQoYovrzklo EciQ38wXYCezwG/cekfNQJ1IK1IgchK2FToVKKBAXSvPkBNB9MJKGCgeBVg3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpSKuW9rt9rCwW du++6NYQmcYeCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUFY YUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2RUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVB WGFCOUtiYWRIQ1NqMkxNdHBCUlFvSFVFSmRucjI5d2dkdnRaMk1mdkVKLzAvQTk0 OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5OUM2MUUwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinVYAwQCqFokMA0EAgACMAcDBQAoBCSoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQILDANBgkqhkiG9w0BAQsFAAOCAQEAPUkyUf7m /ckO1Za/h4M+iWSbhATs31QemhKklIzwH5jValBjT4/Z4hxzu0yVKVM//JRMpXTC LL/GCbLZdmrgL30OYxo4mujrvKSGKvXxA3PuVf7iFXNyMYntfnVDx7L2KFQB3c7b RI6Z2goXYzMr2cbFBjDTfovTRZpsLCv5Yyv8gYAZqlkbViX8cKNQHnycaFHzGrHj 8bdBOyEfFhv7VSa90KH8iGVZE6CODUbF01YNbU6DfuO9uwTJZ7/qQRzMl+S9Qvwg 6dmD0VAOTLYn8AOX+1k1qK0rzvb6nVKhTgfBKx/X0ePZrhwFHG5W615qVLR2I24y 2jQ++75l5Nu94w== -----END CERTIFICATE-----Generated at Thu Jun 12 12:46:24 2025 by rpki-client