$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer (raw, json) Hash identifier: Fps55vZaK5LuO1t3azFxqVjkrErTyVDSBvFMM9v1CF4= Subject key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46227EA24650220E22E0E2EA9493CD672741807C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft caRepository: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Jul 2025 19:51:07 +0000 Certificate not after: Thu 02 Jul 2026 19:56:07 +0000 Subordinate resources: AS: 273510 IP: 2804:8fc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:7e:a2:46:50:22:0e:22:e0:e2:ea:94:93:cd:67:27:41:80:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 3 19:51:07 2025 GMT Not After : Jul 2 19:56:07 2026 GMT Subject: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:72:c9:bf:e5:2f:84:50:67:d7:18:3d:d9: f5:d4:d6:a1:f9:9e:df:89:8c:64:a2:55:9a:af:41: 18:f3:fe:55:49:8c:18:3b:ac:c4:39:19:ec:9f:08: b4:65:71:3a:25:31:11:ba:be:dc:2c:16:40:e2:11: 3a:a0:b5:f5:c1:e5:2c:51:dc:ea:a4:0e:5b:55:f4: 2a:2e:83:fe:24:cc:59:22:79:60:38:3f:28:36:95: 10:f6:1a:68:14:69:1f:2a:e3:22:97:07:f3:ea:d1: 69:71:fa:71:34:43:91:52:2c:63:69:12:f0:5e:4d: d9:4f:ab:68:4c:80:75:83:21:ff:ef:70:23:6d:3b: de:cd:51:85:c0:0a:7e:30:bd:6a:93:94:17:4c:24: 30:05:03:cd:e4:db:3b:f2:16:c2:f9:0d:5d:05:2b: e0:fb:d5:14:ed:bd:54:0e:06:32:32:63:b0:71:2e: 74:9a:93:bf:e6:40:b7:57:92:30:f2:18:88:d2:16: 2f:f6:ab:98:5c:7b:6f:72:53:24:68:d8:41:51:f8: ed:f0:3f:f2:71:a4:b3:9a:f8:ce:50:e1:6a:fe:c3: 19:6a:a3:8a:8e:0b:e9:5c:3f:4d:fc:5f:02:9e:d9: 9b:aa:3d:dc:90:0c:a4:68:bc:23:ff:54:eb:3d:3e: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8fc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273510 Signature Algorithm: sha256WithRSAEncryption cd:52:20:28:f6:49:51:c7:dd:20:7e:e1:3c:ac:5c:a3:cc:5c: 40:4f:b3:ef:c5:26:cb:1e:a6:72:ef:e1:4b:83:55:d2:28:b0: 83:74:bb:47:85:f2:80:a2:c9:3c:c7:d6:4a:ec:f9:14:27:12: 1b:fa:46:96:b9:32:38:b9:34:db:54:68:ee:2b:a9:0e:63:1e: de:5e:1e:9e:ae:ca:fd:79:28:ec:49:87:43:a3:f1:d7:14:46: 53:7e:12:bf:19:99:28:fb:b4:3e:00:96:f7:5d:dc:88:f4:3f: aa:1f:0c:d3:1f:c3:fb:eb:c0:7d:b6:66:e0:af:3b:f9:2d:8b: 7a:39:85:31:f2:92:f5:44:e4:a6:2f:1d:3d:05:a1:6d:37:9a: a7:1f:4b:cd:58:3c:18:47:fa:f9:ed:53:da:4e:1f:8d:19:24: a8:e7:ed:3e:f4:df:ca:1d:0f:50:d8:d6:ca:85:05:e0:5f:76: 25:88:13:b3:0d:81:99:aa:19:64:ae:cc:9d:e2:60:f6:88:0b: 9f:fc:00:29:4c:3e:59:25:dd:96:2f:8d:e4:0f:ab:e3:64:7a: aa:56:72:bb:13:41:e8:89:5d:be:5c:f3:ab:8b:57:e9:93:b4: 4f:5b:2c:1f:4a:87:b9:f4:95:d9:b3:0e:87:2c:4d:42:54:27: 33:b5:84:b3 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIURiJ+okZQIg4i4OLqlJPNZydBgHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDMxOTUxMDdaFw0yNjA3MDIxOTU2MDdaMDMxMTAvBgNV BAMTKEQ1QzQzMUQxN0I4MzA3MzVGRUIyNjQwOUM2OUUzRUY0RkU2MURCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYonLJv+UvhFBn1xg92fXU1qH5 nt+JjGSiVZqvQRjz/lVJjBg7rMQ5GeyfCLRlcTolMRG6vtwsFkDiETqgtfXB5SxR 3OqkDltV9Coug/4kzFkieWA4Pyg2lRD2GmgUaR8q4yKXB/Pq0Wlx+nE0Q5FSLGNp EvBeTdlPq2hMgHWDIf/vcCNtO97NUYXACn4wvWqTlBdMJDAFA83k2zvyFsL5DV0F K+D71RTtvVQOBjIyY7BxLnSak7/mQLdXkjDyGIjSFi/2q5hce29yUyRo2EFR+O3w P/JxpLOa+M5Q4Wr+wxlqo4qOC+lcP038XwKe2ZuqPdyQDKRovCP/VOs9PuCRAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVxDHRe4MHNf6y ZAnGnj70/mHbwjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVNx eEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlT cXhGOW9WR3hzY1Vic0NIWkpvWThUUHhHNDNTdjhQcGtVUW5icjM1cE1ELzAvRDVD NDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRGRTYxREJDMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASPxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LGYwDQYJKoZIhvcNAQELBQADggEBAM1SICj2SVHH3SB+4TysXKPMXEBPs+/FJsse pnLv4UuDVdIosIN0u0eF8oCiyTzH1krs+RQnEhv6Rpa5Mji5NNtUaO4rqQ5jHt5e Hp6uyv15KOxJh0Oj8dcURlN+Er8ZmSj7tD4Alvdd3Ij0P6ofDNMfw/vrwH22ZuCv O/kti3o5hTHykvVE5KYvHT0FoW03mqcfS81YPBhH+vntU9pOH40ZJKjn7T7038od D1DY1sqFBeBfdiWIE7MNgZmqGWSuzJ3iYPaIC5/8AClMPlkl3ZYvjeQPq+NkeqpW crsTQeiJXb5c86uLV+mTtE9bLB9Kh7n0ldmzDocsTUJUJzO1hLM= -----END CERTIFICATE-----Generated at Fri Jul 4 08:01:13 2025 by rpki-client