$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer File: 014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer (raw, json) Hash identifier: 2JG9vLPhSw1gIrnXb36pbVTf0GutG+hwIzD9MJrj7eE= Subject key identifier: 01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3868D96AE2F191BD0BE1FDA35B8A1EE7DA30D318 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft caRepository: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 02 May 2025 04:12:21 +0000 Certificate not after: Fri 01 May 2026 04:17:21 +0000 Subordinate resources: AS: 61599 IP: 200.71.76.0/22 IP: 2804:3ca0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 14:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:68:d9:6a:e2:f1:91:bd:0b:e1:fd:a3:5b:8a:1e:e7:da:30:d3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 04:12:21 2025 GMT Not After : May 1 04:17:21 2026 GMT Subject: CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:1f:06:3d:7f:f3:0a:0a:45:4d:1c:8d:d0: 14:69:ca:c0:b6:04:25:be:6e:6e:4f:de:4b:20:32: 03:3a:bc:e1:15:84:eb:3f:b5:bc:92:54:fa:c8:cb: 7f:05:56:8d:4b:9e:2f:2f:d8:72:4e:fc:61:c2:c9: 44:01:95:c5:91:2e:9f:42:cf:72:2f:9f:2e:9e:08: 1c:50:63:8d:2d:b1:6c:14:c3:61:6b:67:0b:1d:6c: 0b:e9:76:c1:e9:2f:32:65:e7:32:63:2f:60:56:5c: 5c:45:bf:10:5f:4c:5f:31:f2:6f:01:ee:24:4c:21: 92:c2:ec:d2:3b:90:63:7a:ae:c9:96:78:bb:cf:c6: 2d:66:c4:89:10:43:24:8b:8a:b3:ea:7d:85:14:e8: 61:9a:dd:02:01:50:df:96:ac:45:d8:cb:a5:4e:f7: 50:83:cf:dc:e1:92:ab:e4:a9:e1:c7:60:e0:7c:05: 25:86:79:4f:73:43:b3:23:f6:b4:49:05:16:3e:30: a3:84:9e:41:d3:97:94:89:5c:c3:95:9a:91:ff:d8: 6d:69:cd:32:3f:2f:ed:3d:13:b2:18:cb:73:51:a7: 8c:57:1b:3c:25:f9:c4:2c:20:f0:ad:a9:66:3b:6c: 11:43:b6:78:18:e3:2e:98:9b:e0:01:46:16:74:60: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.71.76.0/22 IPv6: 2804:3ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61599 Signature Algorithm: sha256WithRSAEncryption 2a:c6:83:13:9d:d2:20:81:0a:6f:f4:92:95:e0:e0:0a:14:41: 8c:32:29:c7:c0:e7:c3:1b:52:cb:d3:c5:27:69:52:91:37:a2: e3:9f:c1:19:e2:bc:e9:79:84:42:9f:44:fa:bc:d3:b7:07:93: 11:b8:e3:4e:be:b3:b6:75:7a:62:88:1a:19:04:96:4d:f3:e5: 0e:58:16:2f:98:87:a3:38:68:f7:f1:2f:ff:90:46:1b:a2:99: 42:5c:62:cf:66:33:c8:c9:dd:6f:1d:84:b6:a1:1f:86:fa:35: f9:b2:03:42:c3:da:db:ed:e9:3c:86:cf:f4:43:1d:f6:0c:8e: 11:19:e7:d6:30:88:6a:f7:d4:d4:80:16:0b:74:34:d0:b4:20: 2d:38:62:55:74:b7:2f:a6:b3:9e:a7:07:1f:b6:24:f8:32:f0: 4e:ea:7c:51:4d:e0:dd:8a:31:54:d4:2e:76:b9:18:51:c0:7a: ca:d3:c2:76:b0:db:47:c8:9c:b4:d5:82:83:d2:18:6b:40:d0: 64:c3:05:c2:00:46:f1:ca:43:fd:6e:44:80:22:b4:c7:f6:15: ef:c9:67:dc:49:d6:44:b5:75:d8:d7:53:c0:e6:49:5f:10:eb: 5f:f9:3b:0a:fd:d9:2e:b6:73:2c:b9:b4:ae:52:65:10:27:33: c3:69:0c:a2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOGjZauLxkb0L4f2jW4oe59ow0xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDIwNDEyMjFaFw0yNjA1MDEwNDE3MjFaMDMxMTAvBgNV BAMTKDAxNERCRkRDRDQ2OEY2ODg0OEZBREFDQTRFMEVGMDcwMjc1MEZBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Kx8GPX/zCgpFTRyN0BRpysC2 BCW+bm5P3ksgMgM6vOEVhOs/tbySVPrIy38FVo1Lni8v2HJO/GHCyUQBlcWRLp9C z3Ivny6eCBxQY40tsWwUw2FrZwsdbAvpdsHpLzJl5zJjL2BWXFxFvxBfTF8x8m8B 7iRMIZLC7NI7kGN6rsmWeLvPxi1mxIkQQySLirPqfYUU6GGa3QIBUN+WrEXYy6VO 91CDz9zhkqvkqeHHYOB8BSWGeU9zQ7Mj9rRJBRY+MKOEnkHTl5SJXMOVmpH/2G1p zTI/L+09E7IYy3NRp4xXGzwl+cQsIPCtqWY7bBFDtngY4y6Ym+ABRhZ0YKohAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBTb/c1Gj2iEj6 2spODvBwJ1D6fDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE5p VkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0htTm8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRO aVZGdnNxWUt0QzFTaTFTRGJBMjN3eFdXQWVta3JKOENTeHpVdnNIbU5vLzAvMDE0 REJGRENENDY4RjY4ODQ4RkFEQUNBNEUwRUYwNzAyNzUwRkE3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyEdMMA0EAgACMAcDBQAoBDygMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDwnzANBgkqhkiG9w0BAQsFAAOCAQEAKsaDE53SIIEKb/SS leDgChRBjDIpx8DnwxtSy9PFJ2lSkTei45/BGeK86XmEQp9E+rzTtweTEbjjTr6z tnV6YogaGQSWTfPlDlgWL5iHozho9/Ev/5BGG6KZQlxiz2YzyMndbx2EtqEfhvo1 +bIDQsPa2+3pPIbP9EMd9gyOERnn1jCIavfU1IAWC3Q00LQgLThiVXS3L6aznqcH H7Yk+DLwTup8UU3g3YoxVNQudrkYUcB6ytPCdrDbR8ictNWCg9IYa0DQZMMFwgBG 8cpD/W5EgCK0x/YV78ln3EnWRLV12NdTwOZJXxDrX/k7Cv3ZLrZzLLm0rlJlECcz w2kMog== -----END CERTIFICATE-----Generated at Thu May 8 13:56:44 2025 by rpki-client