$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer File: DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer (raw, json) Hash identifier: R/NFX+TNwScxfc7mYMGVLtiNgkFnM1t1iGroYHYzIA0= Subject key identifier: DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F81C7A5DA6CDE805D6EEB807A66DE7D2B13D0AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.mft caRepository: rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Jan 2025 17:23:37 +0000 Certificate not after: Fri 23 Jan 2026 17:28:37 +0000 Subordinate resources: AS: 267022 IP: 45.226.240.0/22 IP: 2804:46f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 14:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:81:c7:a5:da:6c:de:80:5d:6e:eb:80:7a:66:de:7d:2b:13:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 24 17:23:37 2025 GMT Not After : Jan 23 17:28:37 2026 GMT Subject: CN=DC40E61CDCBC1E2ADAB99017EA481017DE0593A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:92:ff:8c:22:98:35:d9:92:1e:ca:99:e0: e6:91:0a:98:14:32:77:74:5e:15:6a:62:38:f8:83: 6e:23:39:e6:69:62:39:b1:a5:7d:ad:65:99:1c:f6: db:91:d0:7a:f4:91:94:17:9c:0f:9a:97:39:f2:cf: ca:24:34:55:65:b4:f6:03:ef:cf:77:3c:c2:7c:5c: 53:4b:6c:af:26:e7:f8:b7:72:8f:60:41:bb:a4:62: 0e:c6:d9:bf:54:d0:df:e0:d4:b8:99:e4:d1:f5:83: 4f:f7:b6:d5:00:27:7a:74:12:d2:65:45:3f:9c:fe: 49:eb:6d:57:48:83:0f:a0:c2:06:cf:1f:14:63:82: 0e:1f:29:49:95:70:31:89:5d:d3:b4:40:6d:71:a2: 69:2a:b4:24:f9:69:d2:b0:4d:cd:6e:b4:ea:b6:97: 85:50:62:2f:1d:c0:13:55:5d:79:ed:69:a1:8e:56: 23:5f:92:a0:f5:a3:0e:92:01:83:9e:39:4d:57:24: e9:83:33:63:2e:74:ce:3e:f1:b1:9f:86:ca:63:32: 6a:a4:2f:7c:2c:d5:2d:6e:ef:ab:b3:38:e0:e2:cc: 1f:f0:67:c2:23:dd:91:d1:c2:b0:c2:58:1d:6d:5c: f6:96:92:a9:46:ba:81:18:7c:f1:16:b4:99:c6:af: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.240.0/22 IPv6: 2804:46f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267022 Signature Algorithm: sha256WithRSAEncryption 47:69:35:42:41:aa:50:18:61:8e:94:31:85:b4:f6:77:26:88: c0:da:ec:0e:43:92:e2:78:5b:c6:63:1b:07:8b:aa:b9:ef:57: cf:36:ed:dc:2a:a0:f6:4d:db:4f:11:fb:e9:e3:18:2e:f0:f0: fc:1f:7f:a2:c0:f3:76:e1:00:4f:3e:7a:59:ec:86:f4:0c:24: a5:27:b1:ea:e9:78:91:37:d5:df:db:a7:b0:ce:ee:8c:a2:30: 3f:2d:45:ba:15:66:c8:b1:f3:60:dd:c9:ca:46:7f:58:59:e7: 3d:3c:2a:77:2a:4e:52:a0:0d:b3:b1:bf:4b:c6:54:49:c0:7e: cd:8c:6c:15:d4:66:fb:93:a0:a9:94:0f:10:28:c3:64:6e:b5: 8d:18:f2:36:ee:d2:fa:22:e1:82:45:20:b4:b2:5a:c0:db:95: 1f:39:bb:62:01:ea:e1:16:26:06:9c:2c:ca:d7:42:d9:4a:3f: e4:c5:7d:85:c6:64:79:07:cb:e2:e3:82:23:10:be:31:72:8a: 67:d5:7f:92:0e:2a:4f:4f:35:7e:b6:42:c1:55:fc:67:1d:e1: df:5e:4a:6b:2a:d6:1d:36:f8:89:89:71:81:87:cb:52:f4:ad: 47:aa:aa:ae:6f:0e:80:0b:84:f9:e2:e9:0b:32:75:91:80:de: 2a:cf:ad:0f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUb4HHpdps3oBdbuuAembefSsT0KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjQxNzIzMzdaFw0yNjAxMjMxNzI4MzdaMDMxMTAvBgNV BAMTKERDNDBFNjFDRENCQzFFMkFEQUI5OTAxN0VBNDgxMDE3REUwNTkzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYJL/jCKYNdmSHsqZ4OaRCpgU Mnd0XhVqYjj4g24jOeZpYjmxpX2tZZkc9tuR0Hr0kZQXnA+alznyz8okNFVltPYD 7893PMJ8XFNLbK8m5/i3co9gQbukYg7G2b9U0N/g1LiZ5NH1g0/3ttUAJ3p0EtJl RT+c/knrbVdIgw+gwgbPHxRjgg4fKUmVcDGJXdO0QG1xomkqtCT5adKwTc1utOq2 l4VQYi8dwBNVXXntaaGOViNfkqD1ow6SAYOeOU1XJOmDM2MudM4+8bGfhspjMmqk L3ws1S1u76uzOODizB/wZ8Ij3ZHRwrDCWB1tXPaWkqlGuoEYfPEWtJnGrzDrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcQOYc3LweKtq5 kBfqSBAX3gWTozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzk0 emFENk5DUDk2azc3Z2RabUcyN3RDbnNuSFNMem9ieG5lNDJ3UEo4YlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M5 NHphRDZOQ1A5Nms3N2dkWm1HMjd0Q25zbkhTTHpvYnhuZTQyd1BKOGJXLzAvREM0 MEU2MUNEQ0JDMUUyQURBQjk5MDE3RUE0ODEwMTdERTA1OTNBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeLwMA0EAgACMAcDBQAoBEb0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTDjANBgkqhkiG9w0BAQsFAAOCAQEAR2k1QkGqUBhhjpQx hbT2dyaIwNrsDkOS4nhbxmMbB4uque9Xzzbt3Cqg9k3bTxH76eMYLvDw/B9/osDz duEATz56WeyG9AwkpSex6ul4kTfV39unsM7ujKIwPy1FuhVmyLHzYN3JykZ/WFnn PTwqdypOUqANs7G/S8ZUScB+zYxsFdRm+5OgqZQPECjDZG61jRjyNu7S+iLhgkUg tLJawNuVHzm7YgHq4RYmBpwsytdC2Uo/5MV9hcZkeQfL4uOCIxC+MXKKZ9V/kg4q T081frZCwVX8Zx3h315KayrWHTb4iYlxgYfLUvStR6qqrm8OgAuE+eLpCzJ1kYDe Ks+tDw== -----END CERTIFICATE-----Generated at Wed Apr 9 12:48:45 2025 by rpki-client