$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer File: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer (raw, json) Hash identifier: 9F3K+fkruNmOsRqzIU8HTpS0X0hEqAG3g6Lz2xbXtW8= Subject key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4706B46145C5CD3308554426941002580DFEBDB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft caRepository: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 May 2025 22:34:24 +0000 Certificate not after: Fri 15 May 2026 22:39:24 +0000 Subordinate resources: AS: 270792 IP: 189.39.184.0/22 IP: 2804:717c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:06:b4:61:45:c5:cd:33:08:55:44:26:94:10:02:58:0d:fe:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 22:34:24 2025 GMT Not After : May 15 22:39:24 2026 GMT Subject: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:1b:d2:d9:4e:b8:91:60:ca:b6:76:d4:25: 8a:6f:e5:08:86:c6:01:0b:c2:13:1e:e9:f1:b9:6c: d3:7b:74:48:17:30:0d:79:b9:26:e1:8a:60:02:83: f1:49:57:a1:8f:2e:d8:46:e3:52:56:25:04:cb:7f: 31:f5:d7:5c:94:a7:f1:39:d5:8b:20:91:47:8a:46: fe:79:25:a6:1f:58:0f:3f:44:af:c5:98:1c:66:df: c1:dc:aa:56:30:16:45:6a:46:48:e6:81:46:fe:6d: bf:bb:d5:8a:d7:55:34:ce:51:bb:88:ea:8e:d3:a0: 15:65:b3:3e:86:89:09:81:a7:07:d0:d8:59:53:61: 17:b8:51:ac:9a:78:b8:cc:d9:44:9a:35:3e:e1:2b: fa:f1:2f:c4:76:89:8e:e5:8f:3c:1d:ef:ee:72:a2: 30:29:04:c7:ca:a3:69:d0:ba:9d:e5:89:8a:4a:40: f8:3c:5d:4c:49:8c:c4:47:7e:de:77:9e:5d:f0:1f: df:c2:6f:45:77:42:bc:6c:ef:bd:f3:2e:fd:9b:b3: c8:37:cd:82:d2:1a:87:3d:28:3b:35:cd:86:9b:ee: db:4d:5a:aa:b1:a1:92:df:06:12:60:21:1e:57:f6: 7b:f7:7a:1e:26:f2:db:28:63:ba:57:5a:a9:fc:28: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.39.184.0/22 IPv6: 2804:717c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270792 Signature Algorithm: sha256WithRSAEncryption 41:b2:7c:27:75:4a:fb:f1:00:12:46:06:7f:d9:a7:48:30:90: 7d:c0:28:2a:23:57:97:c6:94:24:4e:07:7e:6a:b6:4b:4d:fc: f0:2b:df:c3:97:cb:5a:63:eb:b1:4c:8b:16:ae:fe:a7:4e:05: fb:00:1e:54:2f:d7:eb:6e:d4:e5:b0:91:9f:96:79:bd:23:e3: 64:b8:82:97:a4:4c:a0:fe:ee:5e:e4:5d:9d:e6:c2:45:85:1a: bb:06:46:31:91:c7:c3:88:0c:09:49:fb:75:73:24:34:fc:8a: 27:ee:af:cf:64:8c:62:1b:6b:60:ea:f6:cf:35:de:12:dc:5e: 56:24:96:10:18:33:48:c6:db:33:95:87:70:0a:e1:4e:6c:9d: c6:e5:22:12:00:ce:5d:15:37:a4:8b:30:99:5b:b5:a3:90:18: 48:62:52:37:7a:92:1c:bd:37:c0:7c:7e:a8:2f:a5:cd:6a:92: 5c:d1:e4:6b:50:ef:38:bd:ce:c2:53:35:d2:98:70:b0:d1:86: 0e:39:b0:81:06:97:87:80:b4:c1:00:d7:cf:d7:a0:00:e1:28: 84:6d:ea:f2:f8:e3:31:1c:e0:85:d9:3f:96:49:bc:4b:c2:04: 1a:33:c7:7b:3a:72:e2:30:2a:2b:ef:a7:f6:3c:bb:fb:a5:03: 71:5b:a1:26 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURwa0YUXFzTMIVUQmlBACWA3+vbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTYyMjM0MjRaFw0yNjA1MTUyMjM5MjRaMDMxMTAvBgNV BAMTKEY4NDBGM0EwN0E1QkE4QTFCOEM4OTVDNTk2MjZENEI5MDdBODhGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uhvS2U64kWDKtnbUJYpv5QiG xgELwhMe6fG5bNN7dEgXMA15uSbhimACg/FJV6GPLthG41JWJQTLfzH111yUp/E5 1YsgkUeKRv55JaYfWA8/RK/FmBxm38HcqlYwFkVqRkjmgUb+bb+71YrXVTTOUbuI 6o7ToBVlsz6GiQmBpwfQ2FlTYRe4UayaeLjM2USaNT7hK/rxL8R2iY7ljzwd7+5y ojApBMfKo2nQup3liYpKQPg8XUxJjMRHft53nl3wH9/Cb0V3Qrxs773zLv2bs8g3 zYLSGoc9KDs1zYab7ttNWqqxoZLfBhJgIR5X9nv3eh4m8tsoY7pXWqn8KCnPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4QPOgeluoobjI lcWWJtS5B6iPfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5n Q0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VHd20vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu Z0NMcmNVVmNpcm9wUXRQaVhmQWVkenJ0R21yeDg5b2h6Rm9YTmN1R3dtLzEvRjg0 MEYzQTA3QTVCQThBMUI4Qzg5NUM1OTYyNkQ0QjkwN0E4OEY3RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvSe4MA0EAgACMAcDBQAoBHF8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhyDANBgkqhkiG9w0BAQsFAAOCAQEAQbJ8J3VK+/EAEkYG f9mnSDCQfcAoKiNXl8aUJE4Hfmq2S0388Cvfw5fLWmPrsUyLFq7+p04F+wAeVC/X 627U5bCRn5Z5vSPjZLiCl6RMoP7uXuRdnebCRYUauwZGMZHHw4gMCUn7dXMkNPyK J+6vz2SMYhtrYOr2zzXeEtxeViSWEBgzSMbbM5WHcArhTmydxuUiEgDOXRU3pIsw mVu1o5AYSGJSN3qSHL03wHx+qC+lzWqSXNHka1DvOL3OwlM10phwsNGGDjmwgQaX h4C0wQDXz9egAOEohG3q8vjjMRzghdk/lkm8S8IEGjPHezpy4jAqK++n9jy7+6UD cVuhJg== -----END CERTIFICATE-----Generated at Fri Jun 6 04:16:09 2025 by rpki-client