$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer (raw, json) Hash identifier: P5JPL656uilSR6Fex/+FQtOGw+/iUFDp+9XWsCcolgI= Subject key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AFA15D32053B4158ABF52357398699C845292FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft caRepository: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 20 Mar 2025 18:21:21 +0000 Certificate not after: Thu 19 Mar 2026 18:26:21 +0000 Subordinate resources: AS: 263528 IP: 170.254.4.0/22 IP: 191.253.64.0/22 IP: 2804:1350::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fa:15:d3:20:53:b4:15:8a:bf:52:35:73:98:69:9c:84:52:92:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 18:21:21 2025 GMT Not After : Mar 19 18:26:21 2026 GMT Subject: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fa:6a:9e:c5:be:95:73:70:ad:a4:63:1a:2e: aa:1b:59:55:5c:13:47:b6:5b:90:63:9f:ad:6e:e7: 81:c1:2e:4e:fd:e4:46:8d:df:83:cd:1f:9b:16:40: a3:bf:9b:2b:a2:e5:25:13:a2:64:d6:f0:e7:77:a8: b6:ec:ce:2c:c4:4e:cc:d5:f0:20:e3:39:50:7c:b9: e9:78:76:83:f3:af:d1:25:da:7d:cf:97:34:fc:da: 1a:cf:c7:5e:b3:82:55:8f:37:04:3c:71:f0:b7:04: 36:aa:c3:68:6d:e4:1b:11:35:25:2d:89:50:48:2e: 03:b0:ca:bd:1b:79:a2:fa:41:6a:ef:9b:e1:c0:4c: 40:fd:31:99:e1:cc:61:4d:89:6b:14:e7:e3:68:3a: be:10:7b:c8:ca:c2:fe:ce:28:06:ad:7e:8f:e8:c7: f7:c1:a6:87:3a:a5:4a:3c:f7:c5:8e:4b:71:d6:6f: f9:e5:4f:b7:fb:ac:91:18:02:2d:43:52:48:6c:87: 4c:4a:d0:17:50:64:09:c2:f0:e9:6a:93:e7:70:6b: 03:60:36:4a:f8:1f:9c:bc:d8:63:f9:d0:b3:3c:02: 02:21:08:76:28:bc:b3:b6:29:4e:7d:4f:10:9a:84: 26:24:47:72:0f:10:2f:c4:75:de:72:63:8b:d4:63: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.4.0/22 191.253.64.0/22 IPv6: 2804:1350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263528 Signature Algorithm: sha256WithRSAEncryption 1e:7d:df:7a:36:81:68:91:ea:54:06:8c:08:81:70:ca:6c:12: d5:f4:b2:60:3c:cb:da:87:49:48:97:98:e6:b0:bc:ac:9f:f3: 1c:59:aa:07:19:0a:14:a7:e9:42:8a:0e:51:f1:ba:3f:7a:a0: 5c:d3:a8:5d:22:06:83:1a:45:b4:ce:52:69:c6:f1:0e:4d:4a: c2:c2:ef:88:a2:5f:37:76:dd:b3:da:fa:c4:57:60:13:0c:00: 60:be:85:63:29:99:e3:65:57:0a:71:4a:d2:19:cc:e9:b3:7e: fe:c8:e2:fe:dc:22:0c:c6:59:01:da:22:9a:c7:f1:b0:5f:8d: 5e:ee:94:04:3c:68:b2:ae:17:33:d7:4a:b0:5d:68:0e:8b:23: 14:22:e1:eb:3e:20:7a:d5:fb:a8:d5:0e:6a:27:70:08:25:4c: 04:a3:ae:15:cf:4b:7d:00:dc:d7:35:a4:0d:31:06:9f:f8:c8: 8c:5a:d9:9c:da:6f:78:8a:fc:aa:f3:e4:6c:40:65:f7:26:82: 3a:fd:31:02:ba:3c:40:97:6c:a4:23:68:c5:67:ef:3b:8b:95: 00:a6:6f:9f:82:f5:dd:10:f2:d6:be:de:3b:f9:30:93:00:86: 91:f9:9b:66:c0:e2:cb:fc:15:ed:9f:78:b2:f4:06:09:55:4c: 5e:fa:28:80 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOvoV0yBTtBWKv1I1c5hpnIRSkvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjAxODIxMjFaFw0yNjAzMTkxODI2MjFaMDMxMTAvBgNV BAMTKDMzRDk5QjhFQUUxQUI4QkVFNDE5OEI4NzAzMUNGRThGRURCRTc3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+mqexb6Vc3CtpGMaLqobWVVc E0e2W5Bjn61u54HBLk795EaN34PNH5sWQKO/myui5SUTomTW8Od3qLbszizETszV 8CDjOVB8uel4doPzr9El2n3PlzT82hrPx16zglWPNwQ8cfC3BDaqw2ht5BsRNSUt iVBILgOwyr0beaL6QWrvm+HATED9MZnhzGFNiWsU5+NoOr4Qe8jKwv7OKAatfo/o x/fBpoc6pUo898WOS3HWb/nlT7f7rJEYAi1DUkhsh0xK0BdQZAnC8Olqk+dwawNg Nkr4H5y82GP50LM8AgIhCHYovLO2KU59TxCahCYkR3IPEC/Edd5yY4vUY6ixAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz2ZuOrhq4vuQZ i4cDHP6P7b53gDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG1p Wm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRt aVpuUTVHdUZCVmh2b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzAvMzNE OTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZFREJFNzc4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv4EAwQCv/1AMA0EAgACMAcDBQAoBBNQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFaDANBgkqhkiG9w0BAQsFAAOCAQEAHn3fejaB aJHqVAaMCIFwymwS1fSyYDzL2odJSJeY5rC8rJ/zHFmqBxkKFKfpQooOUfG6P3qg XNOoXSIGgxpFtM5SacbxDk1KwsLviKJfN3bds9r6xFdgEwwAYL6FYymZ42VXCnFK 0hnM6bN+/sji/twiDMZZAdoimsfxsF+NXu6UBDxosq4XM9dKsF1oDosjFCLh6z4g etX7qNUOaidwCCVMBKOuFc9LfQDc1zWkDTEGn/jIjFrZnNpveIr8qvPkbEBl9yaC Ov0xAro8QJdspCNoxWfvO4uVAKZvn4L13RDy1r7eO/kwkwCGkfmbZsDiy/wV7Z94 svQGCVVMXvoogA== -----END CERTIFICATE-----Generated at Fri May 9 13:51:25 2025 by rpki-client