$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer File: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer (raw, json) Hash identifier: 2pGxdcS+sRsEwFEYtS0lMWawSYQzLp80tGetjupbCL4= Subject key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F25E9A3FF70227B36D25EF11DC74A638CAA1E5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft caRepository: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Mar 2025 19:23:12 +0000 Certificate not after: Tue 17 Mar 2026 19:28:12 +0000 Subordinate resources: AS: 263332 IP: 191.36.128.0/22 IP: 2804:1478::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 19:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:25:e9:a3:ff:70:22:7b:36:d2:5e:f1:1d:c7:4a:63:8c:aa:1e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 18 19:23:12 2025 GMT Not After : Mar 17 19:28:12 2026 GMT Subject: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:5b:cd:c1:ff:bb:1b:2e:a2:6b:83:77:bd: dc:38:f9:b3:60:2f:0c:fb:3a:3b:9f:3a:d8:43:64: 63:f9:72:57:dc:42:12:d0:10:27:87:1b:f6:14:2a: a7:ce:86:3a:57:6b:1e:65:71:6f:ea:52:a7:fd:53: df:4e:e5:b2:54:8c:0c:e2:78:2b:e6:28:09:2e:6e: 1c:0b:39:db:28:b6:62:14:cb:20:3c:5b:41:7d:88: 27:c5:e5:83:bd:13:bb:8c:a4:af:37:87:86:18:99: 26:2c:d0:c5:14:88:bb:30:2c:36:5b:16:94:32:04: 2a:e5:04:e0:af:8b:1a:39:45:52:26:a4:56:77:1f: c4:40:93:5f:f1:4e:2d:61:61:b9:bf:18:b1:41:e8: 14:42:8a:14:ff:ee:a5:ee:02:8d:2e:41:c5:fe:a8: 86:38:d0:92:8b:d8:64:fb:05:4e:6a:55:ac:1d:05: 78:5a:de:53:af:26:b0:ea:cd:5d:a2:1b:3c:c6:16: fb:d9:7e:2a:72:82:d3:cf:8c:4a:6e:54:f1:ef:37: e1:30:7a:20:ac:0d:f8:4a:6d:6d:a7:cc:3b:f1:be: 18:83:2b:55:e7:c7:37:91:e1:b6:99:d5:66:b1:99: eb:cd:59:9e:3a:79:aa:ae:c5:fa:39:08:0c:1d:7b: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.36.128.0/22 IPv6: 2804:1478::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263332 Signature Algorithm: sha256WithRSAEncryption b4:c6:61:42:e0:97:e7:3f:a0:96:bb:48:55:04:bc:29:97:26: af:92:83:9a:1b:b4:b6:36:1c:ce:94:68:9d:35:db:c6:d1:74: b3:c0:5c:0f:75:35:e7:aa:e4:a3:78:11:4f:05:40:cd:86:a0: 9e:97:27:39:f5:02:e4:78:4e:e7:57:04:61:8e:c0:02:4b:7d: 38:6a:29:39:2c:c7:f3:30:f2:ca:76:18:34:1d:25:82:7e:d3: 75:04:5b:e2:0c:77:f2:24:d7:63:7d:ce:7e:82:71:54:2c:5b: 40:a9:78:35:7e:6e:3b:6d:e9:81:4f:4a:44:a4:38:b5:c1:cb: f5:82:c3:a0:34:4c:13:be:d3:5c:c7:f6:8e:5d:79:6e:af:24: e4:89:41:25:f9:89:32:8b:4c:95:99:d7:c2:01:57:a1:61:55: 97:e5:88:32:7c:d8:05:8b:91:ec:60:02:d7:44:50:c4:a9:ff: ff:8d:77:62:77:0f:78:0e:22:03:a9:18:41:b0:41:7e:92:3a: 13:b5:67:e0:6b:c9:91:54:b0:60:fb:ab:b8:68:09:de:05:da: df:e4:4a:9f:39:1b:d4:ac:bb:74:20:5a:09:21:26:db:db:e8: 8e:83:43:65:29:95:ba:f9:39:3c:4a:72:ef:62:ca:30:2b:76: 5b:b3:11:ae -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTyXpo/9wIns20l7xHcdKY4yqHl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTgxOTIzMTJaFw0yNjAzMTcxOTI4MTJaMDMxMTAvBgNV BAMTKERFREZFNTBCODVCMTY4MUIzNERBQjE0MDlGQkQzMUM2MzZBMDQ3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbz1vNwf+7Gy6ia4N3vdw4+bNg Lwz7OjufOthDZGP5clfcQhLQECeHG/YUKqfOhjpXax5lcW/qUqf9U99O5bJUjAzi eCvmKAkubhwLOdsotmIUyyA8W0F9iCfF5YO9E7uMpK83h4YYmSYs0MUUiLswLDZb FpQyBCrlBOCvixo5RVImpFZ3H8RAk1/xTi1hYbm/GLFB6BRCihT/7qXuAo0uQcX+ qIY40JKL2GT7BU5qVawdBXha3lOvJrDqzV2iGzzGFvvZfipygtPPjEpuVPHvN+Ew eiCsDfhKbW2nzDvxvhiDK1XnxzeR4baZ1WaxmevNWZ46eaquxfo5CAwdewevAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe3+ULhbFoGzTa sUCfvTHGNqBHSzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGVQ b005cjhjZ0NOZkRFN1hoZjJ1dlR4RVgyTW5FR1BmaG5kWW5OanpuUUsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hl UG9NOXI4Y2dDTmZERTdYaGYydXZUeEVYMk1uRUdQZmhuZFluTmp6blFLLzAvREVE RkU1MEI4NUIxNjgxQjM0REFCMTQwOUZCRDMxQzYzNkEwNDc0Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvySAMA0EAgACMAcDBQAoBBR4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEpDANBgkqhkiG9w0BAQsFAAOCAQEAtMZhQuCX5z+glrtI VQS8KZcmr5KDmhu0tjYczpRonTXbxtF0s8BcD3U156rko3gRTwVAzYagnpcnOfUC 5HhO51cEYY7AAkt9OGopOSzH8zDyynYYNB0lgn7TdQRb4gx38iTXY33OfoJxVCxb QKl4NX5uO23pgU9KRKQ4tcHL9YLDoDRME77TXMf2jl15bq8k5IlBJfmJMotMlZnX wgFXoWFVl+WIMnzYBYuR7GAC10RQxKn//413YncPeA4iA6kYQbBBfpI6E7Vn4GvJ kVSwYPuruGgJ3gXa3+RKnzkb1Ky7dCBaCSEm29vojoNDZSmVuvk5PEpy72LKMCt2 W7MRrg== -----END CERTIFICATE-----Generated at Wed Apr 9 19:48:24 2025 by rpki-client