$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FD74F3FFDFD8B82C3879391892DDF9FEC5CC7E7.cer File: 3FD74F3FFDFD8B82C3879391892DDF9FEC5CC7E7.cer (raw, json) Hash identifier: ILMynX/7YEr85jTzovgdhKTxMVDTpxoyn/gg5nrwx+k= Subject key identifier: 3F:D7:4F:3F:FD:FD:8B:82:C3:87:93:91:89:2D:DF:9F:EC:5C:C7:E7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49F3BC7E5E4E29ACBF7382725652CF07AA381181 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8VtXvKMwSu8uZrHTHcKetUaUAGZGZ2667HsrTHoM8Ef/0/3FD74F3FFDFD8B82C3879391892DDF9FEC5CC7E7.mft caRepository: rsync://rpki-repo.registro.br/repo/8VtXvKMwSu8uZrHTHcKetUaUAGZGZ2667HsrTHoM8Ef/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Apr 2025 21:34:22 +0000 Certificate not after: Mon 27 Apr 2026 21:39:22 +0000 Subordinate resources: AS: 270801 IP: 200.219.48.0/22 IP: 2804:71a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 17:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f3:bc:7e:5e:4e:29:ac:bf:73:82:72:56:52:cf:07:aa:38:11:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 28 21:34:22 2025 GMT Not After : Apr 27 21:39:22 2026 GMT Subject: CN=3FD74F3FFDFD8B82C3879391892DDF9FEC5CC7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:06:c3:b7:71:2d:9d:db:bd:fe:a6:9c:71: c9:6d:3f:f3:f7:3d:5d:e1:95:eb:3b:26:a0:bb:e2: 9d:f4:cc:21:c5:48:ef:a5:26:72:7e:46:da:cf:6d: f1:d4:b8:a7:35:21:a2:95:82:37:13:2a:86:75:7e: e3:79:80:5f:aa:63:c6:9c:ee:63:e0:ae:22:17:32: 23:06:df:00:ff:a6:6b:48:bd:f5:3f:03:5c:7f:77: 8d:a2:97:4a:44:ad:14:25:66:3a:7e:18:59:57:7a: 3c:1e:c0:51:44:ba:99:45:0e:97:51:4a:d2:39:ce: 27:5d:50:80:64:06:8c:78:d1:3d:2d:c4:70:12:7e: d8:28:2a:88:c5:1a:2d:81:b3:10:22:48:39:30:49: af:12:5c:c8:c5:65:49:22:ef:ac:51:7d:f0:cb:d4: 4f:3b:b2:28:27:2a:9a:1b:4e:27:43:f5:31:45:6f: 26:d2:d9:7c:83:b3:a0:1e:78:32:ea:35:2a:f7:7f: fc:7c:4a:ec:1f:f2:ae:59:b6:42:a8:49:0a:12:83: 3f:0c:ef:5c:ac:df:77:3c:a5:cb:b3:52:f9:54:7b: b5:3f:58:ad:e5:e4:bf:8f:73:0f:7d:ec:03:57:48: 7e:24:01:ac:af:86:96:49:0f:ae:83:b7:b9:65:37: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:D7:4F:3F:FD:FD:8B:82:C3:87:93:91:89:2D:DF:9F:EC:5C:C7:E7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VtXvKMwSu8uZrHTHcKetUaUAGZGZ2667HsrTHoM8Ef/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VtXvKMwSu8uZrHTHcKetUaUAGZGZ2667HsrTHoM8Ef/0/3FD74F3FFDFD8B82C3879391892DDF9FEC5CC7E7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.48.0/22 IPv6: 2804:71a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270801 Signature Algorithm: sha256WithRSAEncryption 36:68:29:13:7a:b8:b9:2f:1f:2d:d1:43:1f:9e:b2:7f:52:60: ce:ff:2e:d4:34:20:1a:dc:db:19:a6:ca:bf:04:bd:39:88:79: ec:fd:a5:2e:3d:31:f6:1a:6d:43:e3:7e:f8:4e:c3:ac:26:5b: 41:2b:00:81:ba:99:1c:d3:87:57:16:a6:ac:86:af:5f:8c:ac: b2:61:a9:94:5b:e9:b7:15:29:17:c8:1e:32:be:9a:ed:4a:53: 9e:ea:87:a2:ef:4b:3f:00:c0:23:9b:be:8e:46:ab:3a:ec:96: bf:43:2c:64:9b:f2:7e:14:ad:c4:e4:40:54:1c:c6:13:b7:c7: cf:b1:00:f7:d8:2d:72:b9:53:7a:28:3b:92:72:68:ae:36:59: 36:b5:67:82:8a:ac:58:7f:2d:5d:6f:7d:8a:93:8a:eb:48:05: a0:2d:36:5e:ba:0e:39:20:b7:ab:45:26:c9:d6:d7:52:f0:cc: 0f:34:0c:3c:9b:fa:c4:a3:79:76:f5:67:0c:7b:1e:29:03:87: 6d:80:c5:ed:a9:ba:a7:fe:78:f6:e8:70:77:54:70:d9:03:79: 22:cc:64:a4:d7:80:50:db:bd:ff:cb:09:d8:b1:95:3a:11:73: 59:38:ce:f0:93:58:31:f4:1a:e1:84:77:e7:9b:e7:06:65:ac: 8a:71:a3:26 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUSfO8fl5OKay/c4JyVlLPB6o4EYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjgyMTM0MjJaFw0yNjA0MjcyMTM5MjJaMDMxMTAvBgNV BAMTKDNGRDc0RjNGRkRGRDhCODJDMzg3OTM5MTg5MkRERjlGRUM1Q0M3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zgbDt3Etndu9/qacccltP/P3 PV3hles7JqC74p30zCHFSO+lJnJ+RtrPbfHUuKc1IaKVgjcTKoZ1fuN5gF+qY8ac 7mPgriIXMiMG3wD/pmtIvfU/A1x/d42il0pErRQlZjp+GFlXejwewFFEuplFDpdR StI5ziddUIBkBox40T0txHASftgoKojFGi2BsxAiSDkwSa8SXMjFZUki76xRffDL 1E87signKpobTidD9TFFbybS2XyDs6AeeDLqNSr3f/x8Suwf8q5ZtkKoSQoSgz8M 71ys33c8pcuzUvlUe7U/WK3l5L+Pcw997ANXSH4kAayvhpZJD66Dt7llN0t7AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/108//f2LgsOH k5GJLd+f7FzH5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZ0 WHZLTXdTdTh1WnJIVEhjS2V0VWFVQUdaR1oyNjY3SHNyVEhvTThFZi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZ0 WHZLTXdTdTh1WnJIVEhjS2V0VWFVQUdaR1oyNjY3SHNyVEhvTThFZi8wLzNGRDc0 RjNGRkRGRDhCODJDMzg3OTM5MTg5MkRERjlGRUM1Q0M3RTcubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAsjbMDANBAIAAjAHAwUAKARxoDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIdEwDQYJKoZIhvcNAQELBQADggEBADZoKRN6uLkvHy3RQx+e sn9SYM7/LtQ0IBrc2xmmyr8EvTmIeez9pS49MfYabUPjfvhOw6wmW0ErAIG6mRzT h1cWpqyGr1+MrLJhqZRb6bcVKRfIHjK+mu1KU57qh6LvSz8AwCObvo5Gqzrslr9D LGSb8n4UrcTkQFQcxhO3x8+xAPfYLXK5U3ooO5JyaK42WTa1Z4KKrFh/LV1vfYqT iutIBaAtNl66Djkgt6tFJsnW11LwzA80DDyb+sSjeXb1Zwx7HikDh22Axe2puqf+ ePbocHdUcNkDeSLMZKTXgFDbvf/LCdixlToRc1k4zvCTWDH0GuGEd+eb5wZlrIpx oyY= -----END CERTIFICATE-----Generated at Thu May 8 15:04:56 2025 by rpki-client