$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer File: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer (raw, json) Hash identifier: GNBeBshogzXp4xHfgh4iauIgwiwa5doCQQJ57Qs906g= Subject key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 15D5E0830EF45D0E6192B08DB0E2EDBB42F8F271 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft caRepository: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 22:30:43 +0000 Certificate not after: Fri 06 Mar 2026 22:35:43 +0000 Subordinate resources: AS: 266073 IP: 45.4.148.0/22 IP: 2804:3a24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:e0:83:0e:f4:5d:0e:61:92:b0:8d:b0:e2:ed:bb:42:f8:f2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 22:30:43 2025 GMT Not After : Mar 6 22:35:43 2026 GMT Subject: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:f8:05:04:b8:f0:ab:fb:d9:e7:04:c5:18: fa:dd:7a:ee:28:3b:ee:80:a9:84:46:c3:d7:fd:9d: e8:08:1d:74:f1:12:64:6b:4b:54:bd:69:13:0f:93: bd:66:af:c6:42:a6:42:dd:aa:ff:d2:3d:9a:53:56: bc:ad:97:d2:34:75:f8:cf:43:35:51:02:07:18:3d: 5a:d0:84:4b:2c:66:e6:a4:dc:5a:69:ce:6a:8d:3f: 04:3c:57:1a:c1:ac:bd:4b:c0:60:67:67:b6:65:15: 4a:00:f1:f8:bc:6d:9e:9a:6a:36:b7:ce:87:79:17: a7:79:45:04:86:4f:15:82:88:d3:c6:64:c7:b8:05: 83:f2:a9:67:f6:30:d1:ee:1c:bc:39:69:2b:38:0e: 78:d2:8d:f5:b6:c8:3b:65:75:04:38:fa:a2:2b:d2: 9b:2d:a9:b2:85:74:70:72:bd:35:65:a2:ce:de:38: d8:95:bb:55:72:a2:67:f9:0e:6c:8c:47:0b:8b:86: 50:f6:49:d7:7c:36:15:dc:b2:95:d0:d9:6f:d6:ab: 2b:a2:37:37:bf:8d:c8:45:a0:01:3a:e0:7c:ee:c2: 00:21:a7:af:63:36:68:e4:f5:72:14:fc:73:24:32: 9b:8c:37:95:10:5c:87:11:94:60:89:4c:10:78:f4: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.148.0/22 IPv6: 2804:3a24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266073 Signature Algorithm: sha256WithRSAEncryption 01:a3:a5:5e:d5:16:2b:89:f1:2a:58:2b:e0:82:19:55:98:41: b4:09:7a:6a:2d:25:f5:f0:0c:96:56:f3:ef:2c:6c:cb:64:cb: db:9a:e5:e3:44:06:d3:d7:90:9d:d7:af:10:0d:b5:81:f0:2e: 8c:81:39:28:8d:90:00:08:e0:53:84:4d:b6:ed:ae:7b:f1:16: 2f:77:e0:2f:cc:5a:66:26:67:d0:e0:7b:8e:2a:97:9c:6e:85: 3f:24:34:b0:15:2b:51:46:96:e4:bc:ad:67:6e:b0:ce:68:74: 04:5b:cd:b5:3a:0b:94:30:ba:4f:f4:cb:fd:a4:79:87:a3:6d: e7:f3:2b:ab:80:26:9f:2b:df:95:08:17:f5:cd:7d:22:f3:96: 42:1a:c1:64:58:65:81:d6:79:ca:dd:2e:42:b5:1d:03:6f:fd: 4c:d6:21:04:b3:4b:d0:34:11:ce:5f:74:0d:64:20:bf:35:99: 25:e3:43:02:4f:81:3b:06:77:c6:01:23:bd:23:ba:2e:b1:c5: 23:a2:24:3e:39:40:ee:3f:94:fb:d8:5b:9c:7f:ad:28:ba:e7: 91:7f:ad:a1:15:78:42:1a:ce:81:fd:5e:db:6e:a0:3e:e4:2f: fa:91:74:f8:cc:f6:21:11:71:aa:87:9b:f8:04:25:52:7d:dc: d3:b6:d6:ef -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFdXggw70XQ5hkrCNsOLtu0L48nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcyMjMwNDNaFw0yNjAzMDYyMjM1NDNaMDMxMTAvBgNV BAMTKERBNDEwN0FGMUQ5RkY3MEU5RUQ3QjlBMkU4RTM1ODA4QkE5MjFDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3vgFBLjwq/vZ5wTFGPrdeu4o O+6AqYRGw9f9negIHXTxEmRrS1S9aRMPk71mr8ZCpkLdqv/SPZpTVrytl9I0dfjP QzVRAgcYPVrQhEssZuak3FppzmqNPwQ8VxrBrL1LwGBnZ7ZlFUoA8fi8bZ6aaja3 zod5F6d5RQSGTxWCiNPGZMe4BYPyqWf2MNHuHLw5aSs4DnjSjfW2yDtldQQ4+qIr 0pstqbKFdHByvTVlos7eONiVu1Vyomf5DmyMRwuLhlD2Sdd8NhXcspXQ2W/Wqyui Nze/jchFoAE64HzuwgAhp69jNmjk9XIU/HMkMpuMN5UQXIcRlGCJTBB49EA3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaQQevHZ/3Dp7X uaLo41gIupIchTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3dk ZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4ZGUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N3 ZGYxWG9QNVJXb2l6TWtuU0JtazNDWUtvdHU5N2ZWdDZnTVJHZEtqOGRlLzEvREE0 MTA3QUYxRDlGRjcwRTlFRDdCOUEyRThFMzU4MDhCQTkyMUM4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQSUMA0EAgACMAcDBQAoBDokMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPWTANBgkqhkiG9w0BAQsFAAOCAQEAAaOlXtUWK4nxKlgr 4IIZVZhBtAl6ai0l9fAMllbz7yxsy2TL25rl40QG09eQndevEA21gfAujIE5KI2Q AAjgU4RNtu2ue/EWL3fgL8xaZiZn0OB7jiqXnG6FPyQ0sBUrUUaW5LytZ26wzmh0 BFvNtToLlDC6T/TL/aR5h6Nt5/Mrq4AmnyvflQgX9c19IvOWQhrBZFhlgdZ5yt0u QrUdA2/9TNYhBLNL0DQRzl90DWQgvzWZJeNDAk+BOwZ3xgEjvSO6LrHFI6IkPjlA 7j+U+9hbnH+tKLrnkX+toRV4QhrOgf1e226gPuQv+pF0+Mz2IRFxqoeb+AQlUn3c 07bW7w== -----END CERTIFICATE-----Generated at Sat Apr 5 00:03:29 2025 by rpki-client