$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer File: 3DDE2C96A736983C4145E6A74FA601EF275DE118.cer (raw, json) Hash identifier: MWfhQzgdSe+ePKEMZcbZLvmY9+d84sZ8KzbmUQFSFHE= Subject key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1C3C1C2DFFE6C5584E839CA879BF9A7303B91F49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft caRepository: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 22:14:34 +0000 Certificate not after: Fri 24 Apr 2026 22:19:34 +0000 Subordinate resources: AS: 52783 IP: 131.255.116.0/22 IP: 138.122.132.0/22 IP: 138.255.192.0/22 IP: 170.78.116.0/22 IP: 170.254.76.0/22 IP: 177.74.184.0/21 IP: 177.200.64.0/20 IP: 2804:10f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3c:1c:2d:ff:e6:c5:58:4e:83:9c:a8:79:bf:9a:73:03:b9:1f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 22:14:34 2025 GMT Not After : Apr 24 22:19:34 2026 GMT Subject: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:21:2b:5c:5d:75:09:3c:60:9c:15:e3:85: d4:02:17:ab:05:c6:6c:14:70:5d:0a:01:3d:29:d5: 22:43:7d:09:fb:bb:43:63:72:c9:7a:61:37:28:e5: a5:1e:ad:55:16:aa:59:21:91:4f:f3:a9:30:39:b4: 09:ad:bb:39:9a:bd:ec:c4:23:de:96:da:cf:e1:8b: 43:8b:00:8b:54:15:0a:a1:80:54:4b:49:ae:c2:8c: ce:16:78:bc:b1:81:56:8b:37:96:f7:5c:e5:ea:3f: 5a:9f:8d:ca:c8:ac:60:c4:ac:b9:ed:3f:9e:48:dd: 71:ca:27:4e:5f:01:19:f8:d6:a6:9a:98:0e:50:83: 03:c7:ba:04:1f:04:d8:07:97:af:30:cb:53:ae:c2: eb:e5:95:b3:65:03:95:3c:06:cd:7a:4e:bd:cb:87: 4c:c0:91:2c:7b:34:e4:1b:41:55:ed:44:ad:50:fb: 46:0a:88:68:3a:84:1c:21:7d:26:09:9f:30:c1:90: 2b:c5:48:2f:83:0b:bc:61:e0:ed:e5:23:71:5e:ae: be:d1:81:42:bb:cb:cd:8b:ba:6d:cf:20:8c:83:cd: 6c:0f:15:a5:ad:ef:16:76:0f:ec:81:0d:d1:b9:e5: d7:6a:55:06:52:04:57:1e:4f:58:eb:f5:fe:fa:27: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.116.0/22 138.122.132.0/22 138.255.192.0/22 170.78.116.0/22 170.254.76.0/22 177.74.184.0/21 177.200.64.0/20 IPv6: 2804:10f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52783 Signature Algorithm: sha256WithRSAEncryption 4d:f2:97:2a:09:bd:f0:35:f3:90:a4:b5:9e:2c:ad:c6:86:7a: bf:e3:00:ae:e7:2e:9a:07:8b:1f:8c:92:6a:4d:39:75:58:61: e3:d0:e4:27:50:94:5f:62:2c:48:03:1c:78:aa:b5:6e:ef:55: ce:71:59:67:14:0d:0b:3e:6f:cd:07:92:78:fc:bc:60:de:33: c3:15:d1:1e:c6:f7:2c:d7:91:96:90:c3:1f:c7:fd:da:37:c9: 7d:60:0d:ba:f0:44:33:e6:3b:de:7b:a7:e0:90:ae:1c:cf:5e: c5:9c:1e:b5:be:bd:2d:fa:21:d1:7d:6e:2e:76:84:b5:65:43: d6:62:59:b3:a1:7a:52:20:6c:a1:d9:18:a7:b9:80:80:f2:c5: 38:8a:95:7c:e3:2f:5f:4c:d2:0c:b1:9d:18:ee:e1:9f:36:c9: 17:f1:0a:7a:02:e4:9f:10:9e:cc:1d:b4:bd:aa:83:c5:43:75: f7:b2:a3:ed:c5:5e:36:a7:31:77:97:cd:ea:0d:10:59:20:3a: 90:3b:2c:19:05:69:bc:42:e7:1d:de:b8:a0:c3:d7:b7:c0:28: a9:b2:e9:e0:00:b7:b4:91:20:17:b6:82:40:d8:c4:fd:d4:13: 77:eb:89:dd:08:e0:09:37:5d:9c:1e:80:d5:8b:d5:1a:2c:51: 4b:c9:27:e0 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUHDwcLf/mxVhOg5yoeb+acwO5H0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjUyMjE0MzRaFw0yNjA0MjQyMjE5MzRaMDMxMTAvBgNV BAMTKDNEREUyQzk2QTczNjk4M0M0MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6iErXF11CTxgnBXjhdQCF6sF xmwUcF0KAT0p1SJDfQn7u0Njcsl6YTco5aUerVUWqlkhkU/zqTA5tAmtuzmavezE I96W2s/hi0OLAItUFQqhgFRLSa7CjM4WeLyxgVaLN5b3XOXqP1qfjcrIrGDErLnt P55I3XHKJ05fARn41qaamA5QgwPHugQfBNgHl68wy1OuwuvllbNlA5U8Bs16Tr3L h0zAkSx7NOQbQVXtRK1Q+0YKiGg6hBwhfSYJnzDBkCvFSC+DC7xh4O3lI3Ferr7R gUK7y82Lum3PIIyDzWwPFaWt7xZ2D+yBDdG55ddqVQZSBFceT1jr9f76J0+fAgMB AAGjggNeMIIDWjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ93iyWpzaYPEFF 5qdPpgHvJ13hGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRN d2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlYWUEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I0 TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEvM0RE RTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYyNzVERTExOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEH AQH/BEMwQTAwBAIAATAqAwQCg/90AwQCinqEAwQCiv/AAwQCqk50AwQCqv5MAwQD sUq4AwQEschAMA0EAgACMAcDBQAoBBD4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDOLzANBgkqhkiG9w0BAQsFAAOCAQEATfKXKgm98DXzkKS1niytxoZ6v+MArucu mgeLH4ySak05dVhh49DkJ1CUX2IsSAMceKq1bu9VznFZZxQNCz5vzQeSePy8YN4z wxXRHsb3LNeRlpDDH8f92jfJfWANuvBEM+Y73nun4JCuHM9exZwetb69Lfoh0X1u LnaEtWVD1mJZs6F6UiBsodkYp7mAgPLFOIqVfOMvX0zSDLGdGO7hnzbJF/EKegLk nxCezB20vaqDxUN197Kj7cVeNqcxd5fN6g0QWSA6kDssGQVpvELnHd64oMPXt8Ao qbLp4AC3tJEgF7aCQNjE/dQTd+uJ3QjgCTddnB6A1YvVGixRS8kn4A== -----END CERTIFICATE-----Generated at Sun May 11 10:35:14 2025 by rpki-client