$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer File: 4604735AE146206BD46CAEA7DB01B25B210619DE.cer (raw, json) Hash identifier: mru+VEpsnAAP+n5O4va8skcY/l0ki1Q77uIiGh5cGi0= Subject key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C9726AFCFBF4EA72AE01418249B852D23AA5A85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft caRepository: rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 02:52:59 +0000 Certificate not after: Fri 19 Jun 2026 02:57:59 +0000 Subordinate resources: AS: 270262 IP: 200.123.224.0/22 IP: 2804:6950::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 16:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:97:26:af:cf:bf:4e:a7:2a:e0:14:18:24:9b:85:2d:23:aa:5a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 20 02:52:59 2025 GMT Not After : Jun 19 02:57:59 2026 GMT Subject: CN=4604735AE146206BD46CAEA7DB01B25B210619DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:16:0e:40:98:74:3d:42:32:60:2b:dd:00: b6:9f:66:5f:5c:bc:6a:de:98:fb:41:a5:78:23:7a: 98:f3:a5:40:e9:70:4c:86:a0:f6:f3:a1:1b:c8:1b: 0c:8c:7e:b6:be:a3:82:dc:5c:6a:bc:46:f7:0a:4d: 77:ce:50:5a:2d:f6:55:25:1f:5d:79:a2:bc:71:05: c3:11:2f:0d:88:c8:95:02:1f:6b:c6:b4:1c:d5:f5: 6c:ae:fb:14:b8:0f:26:ef:94:64:8f:c1:af:45:dd: 2d:04:71:79:2b:b5:1a:c7:0c:b5:9c:2a:43:02:7c: 7a:be:88:5f:e4:ea:32:3d:db:ff:46:12:55:fe:96: 5e:48:4e:1a:b6:eb:44:1b:d8:c6:a7:e0:43:ee:a4: 1a:05:f2:50:1d:4e:87:5d:e4:08:52:ed:1e:73:31: 1b:46:97:a0:39:db:46:68:4e:95:c0:34:bd:0b:b2: a1:d5:ad:0c:d1:3e:24:08:95:c8:7a:f6:17:14:eb: 88:17:8f:40:04:4b:0c:61:de:df:8e:03:a9:18:90: e8:ae:4b:71:48:a5:3b:6f:c6:7c:82:03:fa:95:59: 0d:dc:4c:d6:48:c4:77:39:58:ce:41:77:8c:1f:b8: 1a:08:1a:71:90:cf:19:ab:32:1b:e6:23:e5:92:a3: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.123.224.0/22 IPv6: 2804:6950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270262 Signature Algorithm: sha256WithRSAEncryption 5b:f7:46:bb:be:3b:c8:2f:14:de:58:3f:4e:46:99:85:ce:9f: 72:ca:60:cf:d6:43:27:98:1e:2c:2c:33:1f:ab:23:aa:87:fb: 1b:69:72:5e:63:ea:27:15:02:f1:28:0d:ca:6f:0f:68:96:67: 01:a8:14:41:58:be:aa:ad:f4:05:0d:ad:44:c6:a8:90:5c:30: 47:0a:bb:22:75:73:df:4c:c5:5c:98:5b:90:76:bc:ec:08:73: d6:b4:3c:0d:0b:a8:32:6b:2b:a4:e7:99:9f:16:2b:d9:a2:c5: 3d:f2:78:f1:2b:66:d5:0d:e2:a5:8f:d6:7c:3b:d9:bb:ce:0f: a1:06:14:06:a9:7c:4f:2c:54:14:59:2e:23:1b:88:32:81:1b: 01:4f:ae:17:32:e9:46:41:10:a9:05:2d:22:d9:1a:8d:eb:e3: ee:17:9b:40:ba:52:f0:84:b8:5c:d1:d5:23:e7:3a:c2:5e:3c: de:8e:ff:1e:da:dd:59:c5:ca:a2:7d:6f:71:e9:64:fd:b4:25: 6e:34:75:23:bd:41:01:6a:7b:a2:f5:6b:48:5d:1d:78:22:bc: e0:a6:03:4f:0c:b7:c1:18:b2:e9:48:0f:8b:96:64:f5:10:06: 39:f0:e0:1b:3d:ad:f4:8e:73:b6:7f:39:99:22:cd:0b:3e:9b: b6:2e:41:05 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfJcmr8+/Tqcq4BQYJJuFLSOqWoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjAwMjUyNTlaFw0yNjA2MTkwMjU3NTlaMDMxMTAvBgNV BAMTKDQ2MDQ3MzVBRTE0NjIwNkJENDZDQUVBN0RCMDFCMjVCMjEwNjE5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vxYOQJh0PUIyYCvdALafZl9c vGremPtBpXgjepjzpUDpcEyGoPbzoRvIGwyMfra+o4LcXGq8RvcKTXfOUFot9lUl H115orxxBcMRLw2IyJUCH2vGtBzV9Wyu+xS4DybvlGSPwa9F3S0EcXkrtRrHDLWc KkMCfHq+iF/k6jI92/9GElX+ll5IThq260Qb2Man4EPupBoF8lAdTodd5AhS7R5z MRtGl6A520ZoTpXANL0LsqHVrQzRPiQIlch69hcU64gXj0AESwxh3t+OA6kYkOiu S3FIpTtvxnyCA/qVWQ3cTNZIxHc5WM5Bd4wfuBoIGnGQzxmrMhvmI+WSo+IXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGBHNa4UYga9Rs rqfbAbJbIQYZ3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWJp WHM3cVJwbjlDTDRaUERFeVRzRloyQUR6YzRDekJGZG96aFoydndIRXkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVi aVhzN3FScG45Q0w0WlBERXlUc0ZaMkFEemM0Q3pCRmRvemhaMnZ3SEV5LzAvNDYw NDczNUFFMTQ2MjA2QkQ0NkNBRUE3REIwMUIyNUIyMTA2MTlERS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyHvgMA0EAgACMAcDBQAoBGlQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQftjANBgkqhkiG9w0BAQsFAAOCAQEAW/dGu747yC8U3lg/ TkaZhc6fcspgz9ZDJ5geLCwzH6sjqof7G2lyXmPqJxUC8SgNym8PaJZnAagUQVi+ qq30BQ2tRMaokFwwRwq7InVz30zFXJhbkHa87Ahz1rQ8DQuoMmsrpOeZnxYr2aLF PfJ48Stm1Q3ipY/WfDvZu84PoQYUBql8TyxUFFkuIxuIMoEbAU+uFzLpRkEQqQUt Itkajevj7hebQLpS8IS4XNHVI+c6wl483o7/HtrdWcXKon1vcelk/bQlbjR1I71B AWp7ovVrSF0deCK84KYDTwy3wRiy6UgPi5Zk9RAGOfDgGz2t9I5ztn85mSLNCz6b ti5BBQ== -----END CERTIFICATE-----Generated at Tue Jul 1 14:19:15 2025 by rpki-client