$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer File: 31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer (raw, json) Hash identifier: 9EsPEwSZXWcFwMp2zAz5SHgctYsV4iRQvaTUsCgllCU= Subject key identifier: 31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 794D46A9E12F77177C84B822655EAFF8AF8B005E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.mft caRepository: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 May 2025 16:01:00 +0000 Certificate not after: Tue 05 May 2026 16:06:00 +0000 Subordinate resources: AS: 263421 IP: 168.121.156.0/22 IP: 168.195.220.0/22 IP: 179.191.240.0/20 IP: 2804:1600::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 21:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4d:46:a9:e1:2f:77:17:7c:84:b8:22:65:5e:af:f8:af:8b:00:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 16:01:00 2025 GMT Not After : May 5 16:06:00 2026 GMT Subject: CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:d8:37:c8:4d:30:7e:77:25:f8:6e:47:97: 6b:1b:68:b2:f8:52:b5:6c:df:f9:fd:67:8b:ab:9c: 88:85:83:1e:5b:83:8b:22:b5:ba:39:56:2f:d8:ce: c9:89:2c:19:fe:08:46:a9:d9:83:71:da:63:b5:24: c5:8b:bc:26:f1:5f:64:92:e7:cc:07:66:a1:7b:05: 76:09:1b:91:f4:fd:65:15:25:b8:f3:a6:48:8d:e2: 06:a8:35:d2:2d:51:cb:10:f9:97:82:d1:6b:94:39: 51:e5:ab:64:3d:46:3c:4f:e8:5a:14:19:d0:b7:81: 79:51:f1:89:00:94:89:a6:1e:03:87:f1:a9:32:99: 27:31:13:a7:b6:60:46:46:34:5b:93:b0:e0:bd:2e: 85:b9:a5:b6:86:12:d6:e0:52:2f:8a:d9:5e:fc:88: 66:05:37:3d:52:b7:78:14:43:b7:6c:a1:89:d4:3f: 1a:a0:d4:f9:fe:c7:fd:a7:e7:21:9f:8e:14:8b:55: 65:b1:41:76:7a:05:5d:91:7c:e6:16:b2:53:64:5e: 96:55:3e:b6:9e:50:86:41:a0:da:18:41:09:9e:6c: 00:ae:62:fb:db:3d:6b:af:19:39:ec:23:51:a3:81: 81:d2:c4:cf:6d:39:3b:78:34:64:59:2e:3c:05:3a: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.156.0/22 168.195.220.0/22 179.191.240.0/20 IPv6: 2804:1600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263421 Signature Algorithm: sha256WithRSAEncryption b3:ac:1e:b9:a8:e0:4d:06:27:9e:11:aa:d8:53:5a:f3:d8:5f: 9c:70:68:e9:4a:15:66:1d:31:d6:fb:ad:dd:62:d5:87:4f:e4: 76:52:67:92:a6:ab:16:6a:8a:96:23:24:57:ce:bf:69:2b:65: 85:7e:b1:46:3c:e5:ad:60:89:ce:1e:2e:6f:2e:a8:cb:ff:c7: 5e:c1:08:b6:68:c2:c8:bb:e8:7c:57:2e:e4:3c:59:4c:12:4b: 66:c9:50:8f:fb:71:38:a1:bd:f5:27:a6:9a:bb:df:6e:07:a1: 66:d2:3c:3f:b4:e9:a1:94:00:87:93:98:7e:bd:e8:78:b9:cf: 4b:aa:fa:25:44:c5:60:57:88:4d:21:82:c4:89:f4:4b:a3:9b: 84:b2:4a:ed:30:55:4d:44:90:fd:a9:9b:14:97:86:ef:db:1d: 2f:2e:9a:f5:5b:74:e7:cb:93:eb:2c:83:49:fd:4e:f8:c0:bf: c6:ce:4e:37:47:f7:6f:7f:d8:b6:1f:84:f8:ff:64:91:4f:c1: 47:c6:50:68:aa:42:4c:00:74:5d:fd:68:20:5c:a9:88:d9:36: 86:52:27:93:f6:46:bc:e4:d5:2d:f0:7b:37:8d:aa:8a:a0:98: 71:18:f8:67:bd:9e:ba:57:ff:e3:cc:41:28:27:cc:d0:f6:c0: ee:83:32:f4 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUeU1GqeEvdxd8hLgiZV6v+K+LAF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDYxNjAxMDBaFw0yNjA1MDUxNjA2MDBaMDMxMTAvBgNV BAMTKDMxNTk5QjY5QTg0QUFCOTIzOEMyQ0VGOTVFQzhCNkU2Q0Y5RTVDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMdNg3yE0wfncl+G5Hl2sbaLL4 UrVs3/n9Z4urnIiFgx5bg4sitbo5Vi/YzsmJLBn+CEap2YNx2mO1JMWLvCbxX2SS 58wHZqF7BXYJG5H0/WUVJbjzpkiN4gaoNdItUcsQ+ZeC0WuUOVHlq2Q9RjxP6FoU GdC3gXlR8YkAlImmHgOH8akymScxE6e2YEZGNFuTsOC9LoW5pbaGEtbgUi+K2V78 iGYFNz1St3gUQ7dsoYnUPxqg1Pn+x/2n5yGfjhSLVWWxQXZ6BV2RfOYWslNkXpZV PraeUIZBoNoYQQmebACuYvvbPWuvGTnsI1GjgYHSxM9tOTt4NGRZLjwFOhZnAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxWZtpqEqrkjjC zvleyLbmz55cNzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm53 VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdMeUYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ju d1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAvMzE1 OTlCNjlBODRBQUI5MjM4QzJDRUY5NUVDOEI2RTZDRjlFNUMzNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqHmcAwQCqMPcAwQEs7/wMA0EAgACMAcDBQAoBBYA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQE/TANBgkqhkiG9w0BAQsFAAOCAQEA s6weuajgTQYnnhGq2FNa89hfnHBo6UoVZh0x1vut3WLVh0/kdlJnkqarFmqKliMk V86/aStlhX6xRjzlrWCJzh4uby6oy//HXsEItmjCyLvofFcu5DxZTBJLZslQj/tx OKG99SemmrvfbgehZtI8P7TpoZQAh5OYfr3oeLnPS6r6JUTFYFeITSGCxIn0S6Ob hLJK7TBVTUSQ/ambFJeG79sdLy6a9Vt058uT6yyDSf1O+MC/xs5ON0f3b3/Yth+E +P9kkU/BR8ZQaKpCTAB0Xf1oIFypiNk2hlInk/ZGvOTVLfB7N42qiqCYcRj4Z72e ulf/48xBKCfM0PbA7oMy9A== -----END CERTIFICATE-----Generated at Thu May 8 20:46:50 2025 by rpki-client