$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer File: 404EF1E548374354D9B828749323416749EF23B4.cer (raw, json) Hash identifier: CNfNE7cpJsefQ72aFZvNcYdQiRmUucte+myqodarXWI= Subject key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19FCAA426EFEF3B753D26D9060FBB543B37D5831 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft caRepository: rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 15:51:03 +0000 Certificate not after: Wed 29 Apr 2026 15:56:03 +0000 Subordinate resources: AS: 272588 IP: 45.237.144.0/22 IP: 2804:8594::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 17:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fc:aa:42:6e:fe:f3:b7:53:d2:6d:90:60:fb:b5:43:b3:7d:58:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 15:51:03 2025 GMT Not After : Apr 29 15:56:03 2026 GMT Subject: CN=404EF1E548374354D9B828749323416749EF23B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:70:8a:cc:c6:4e:2e:4a:98:98:5a:d7:2e: 1e:8b:77:e7:9f:a5:f4:45:3e:11:28:30:dd:2a:f2: 69:33:b8:87:1f:25:8e:64:c0:e8:ec:78:cd:8d:e9: df:0d:c8:45:2f:03:04:01:b3:09:b3:2f:41:47:0e: 62:f0:b8:90:76:32:09:df:d7:0e:2c:7e:16:df:27: 51:b2:77:28:fd:e5:0f:b6:cb:f8:13:af:0d:7e:f0: 03:da:08:c1:50:ef:32:85:82:5f:ba:f7:91:8a:9d: 6b:ba:63:7c:f8:2e:05:ba:ca:5c:5d:0b:d5:1f:17: a0:8c:13:a6:80:e2:46:05:58:d8:2d:09:13:c1:32: fa:d0:f2:83:5f:33:ba:04:e4:a9:a9:e2:37:70:72: f1:64:7e:58:0e:ca:4b:68:66:5c:a7:f9:cf:df:dd: 5f:7c:0d:5d:84:08:e2:fd:70:87:31:e1:e6:17:9f: ab:fa:80:4b:e5:04:36:f0:95:a1:41:0a:41:32:bb: ff:b3:2a:1d:32:91:97:35:f7:50:78:47:30:b1:11: bd:cb:6e:8e:92:33:b3:02:fd:71:e0:15:cf:b5:56: b7:c9:fc:d1:e3:02:51:49:43:b1:71:f1:05:14:d0: ae:23:bd:3c:37:0a:6c:02:5b:d2:12:0e:90:cd:33: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.144.0/22 IPv6: 2804:8594::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272588 Signature Algorithm: sha256WithRSAEncryption d7:ca:b9:e9:b8:84:1a:4f:73:8a:e7:4e:e7:c7:9f:cf:a5:bb: 39:7b:b4:cc:e6:79:d1:cf:15:f4:4d:74:81:92:a9:2c:d1:7c: 7f:46:8b:45:52:d4:c6:74:df:c1:14:1f:31:64:b0:95:d9:c8: 23:58:8c:80:d3:c2:7d:f9:a5:60:c9:5f:e8:98:06:df:37:9e: b7:f4:ed:22:9b:02:9c:05:83:5b:f8:c4:9f:61:d7:8f:5f:e8: ac:d3:c7:92:fc:37:16:f9:c1:f0:bf:88:bd:8e:8c:4d:e4:c2: 54:6c:a3:dc:40:25:65:6b:14:a9:49:65:78:3a:14:c8:96:47: b8:6f:ef:56:02:3c:e0:19:43:67:29:c5:f0:41:5f:9b:60:79: 01:3a:e8:07:a4:8d:2e:e9:fd:d0:20:ef:a7:33:40:00:94:e1: cc:b8:01:16:4f:aa:c4:5a:92:db:45:90:7b:54:0b:ce:b2:eb: e0:d3:84:0e:c8:e9:48:ba:0f:6c:55:b9:2f:11:fb:b0:57:54: c9:39:5d:6c:b0:1f:a9:b2:1a:8f:2c:3a:3f:cb:a6:25:bc:40: b3:a3:d9:77:28:89:77:d8:83:02:fd:a3:d3:51:dc:ef:77:27: 61:5b:ae:25:ac:57:c4:ab:be:45:53:79:7d:19:53:f6:2c:02: 2b:da:15:a6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGfyqQm7+87dT0m2QYPu1Q7N9WDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxNTUxMDNaFw0yNjA0MjkxNTU2MDNaMDMxMTAvBgNV BAMTKDQwNEVGMUU1NDgzNzQzNTREOUI4Mjg3NDkzMjM0MTY3NDlFRjIzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbKnCKzMZOLkqYmFrXLh6Ld+ef pfRFPhEoMN0q8mkzuIcfJY5kwOjseM2N6d8NyEUvAwQBswmzL0FHDmLwuJB2Mgnf 1w4sfhbfJ1Gydyj95Q+2y/gTrw1+8APaCMFQ7zKFgl+695GKnWu6Y3z4LgW6ylxd C9UfF6CME6aA4kYFWNgtCRPBMvrQ8oNfM7oE5Kmp4jdwcvFkflgOyktoZlyn+c/f 3V98DV2ECOL9cIcx4eYXn6v6gEvlBDbwlaFBCkEyu/+zKh0ykZc191B4RzCxEb3L bo6SM7MC/XHgFc+1VrfJ/NHjAlFJQ7Fx8QUU0K4jvTw3CmwCW9ISDpDNM/tZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRATvHlSDdDVNm4 KHSTI0FnSe8jtDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWZi S1dCdUE1d0RlRzhuTVVLQVVva2FoZGpnaGY2RWF6ZlZXaGdMR2Q5M1YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVm YktXQnVBNXdEZUc4bk1VS0FVb2thaGRqZ2hmNkVhemZWV2hnTEdkOTNWLzAvNDA0 RUYxRTU0ODM3NDM1NEQ5QjgyODc0OTMyMzQxNjc0OUVGMjNCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe2QMA0EAgACMAcDBQAoBIWUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQozDANBgkqhkiG9w0BAQsFAAOCAQEA18q56biEGk9ziudO 58efz6W7OXu0zOZ50c8V9E10gZKpLNF8f0aLRVLUxnTfwRQfMWSwldnII1iMgNPC ffmlYMlf6JgG3zeet/TtIpsCnAWDW/jEn2HXj1/orNPHkvw3FvnB8L+IvY6MTeTC VGyj3EAlZWsUqUlleDoUyJZHuG/vVgI84BlDZynF8EFfm2B5ATroB6SNLun90CDv pzNAAJThzLgBFk+qxFqS20WQe1QLzrLr4NOEDsjpSLoPbFW5LxH7sFdUyTldbLAf qbIajyw6P8umJbxAs6PZdyiJd9iDAv2j01Hc73cnYVuuJaxXxKu+RVN5fRlT9iwC K9oVpg== -----END CERTIFICATE-----Generated at Mon May 12 18:35:23 2025 by rpki-client