$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer File: 49035094B34CBA1B308381D57F68D0820CEA3A4F.cer (raw, json) Hash identifier: 3FC04ZbJAexqreqmADJdZe2ntD3ZCp+N+mBsAxd66mU= Subject key identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 537B2B132C6D9ADF57A994E0179BD0BEE243B979 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.mft caRepository: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 May 2025 20:43:45 +0000 Certificate not after: Mon 04 May 2026 20:48:45 +0000 Subordinate resources: AS: 263940 IP: 138.185.252.0/22 IP: 2804:2818::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 19:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7b:2b:13:2c:6d:9a:df:57:a9:94:e0:17:9b:d0:be:e2:43:b9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 5 20:43:45 2025 GMT Not After : May 4 20:48:45 2026 GMT Subject: CN=49035094B34CBA1B308381D57F68D0820CEA3A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:d6:68:9a:11:20:89:b8:43:d9:b4:1c:be: 96:75:80:e2:ad:7a:1e:10:e2:e5:52:d6:0b:6d:fa: 95:1c:88:81:0f:49:6b:37:0b:a1:1e:6c:31:dc:e6: c3:a7:18:c6:29:d8:9c:a0:1d:f2:e7:c4:3f:1c:22: 90:d8:2f:ba:29:71:f0:38:50:8f:7f:81:9e:de:cc: 6e:f0:37:48:b9:08:29:59:f8:32:15:c3:48:dd:41: d6:f6:eb:44:ad:66:db:92:ce:96:da:2d:a8:ea:02: 25:69:49:02:0b:d5:a0:bf:dd:44:c5:28:31:ec:ee: f8:ab:73:0a:47:be:ba:4a:96:7a:4f:11:8d:44:1e: e5:c9:94:ff:76:fd:a5:b6:06:ba:41:f6:c3:64:4e: 23:98:90:9a:99:23:2a:e0:ad:10:3d:2f:8d:28:db: 24:6d:b2:8f:02:7b:da:41:3e:1f:d3:8a:40:b2:83: 23:04:26:21:a3:93:f5:bc:f8:82:9a:b1:f5:96:5c: 20:96:66:12:9b:77:69:dd:ba:04:04:28:d0:0a:1f: f3:f4:ac:d7:6b:46:d3:f7:27:70:4e:e5:39:fd:c6: 97:69:94:95:83:12:37:c4:33:e1:29:11:0a:dd:91: c1:c4:4d:40:a0:54:28:be:1d:2d:4b:f2:d2:af:3a: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.252.0/22 IPv6: 2804:2818::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263940 Signature Algorithm: sha256WithRSAEncryption cc:06:65:44:98:e7:0b:4f:51:b1:db:3a:08:d2:68:68:ad:2d: 12:0f:a5:7b:63:b9:7e:5f:5e:27:b7:33:14:f6:27:10:da:ec: 00:b4:12:d0:9a:81:38:e4:47:37:d4:47:43:35:db:49:c6:56: de:45:78:19:85:3f:8c:a6:6b:94:eb:55:f7:79:28:d7:ac:9d: 16:ac:b9:ff:0a:a4:06:fd:a6:8c:9a:b2:83:17:40:4d:22:b9: c6:75:83:df:75:35:c7:b0:4c:ca:af:af:f8:a3:3d:2d:7b:43: fc:bd:e0:1c:d0:8a:d0:05:cd:d1:de:4a:ea:48:11:61:1c:ad: d3:89:cd:32:5b:51:0f:6d:a1:88:31:b2:02:68:4b:c0:1b:91: 52:9d:d1:29:24:35:3a:ea:e9:21:0a:37:0b:f7:b4:07:33:d0: 34:c8:1f:8c:37:9c:fa:81:d3:34:ac:7f:77:34:a2:67:15:82: 3a:56:14:34:08:05:78:50:9a:f8:fb:72:af:00:76:f5:1c:2a: 2c:a4:c5:76:d1:67:11:23:92:57:e5:a2:37:52:a4:44:1a:9e: a9:cc:66:60:86:79:2d:ee:eb:51:b5:2c:86:a3:cd:bd:c0:c9: 75:3f:25:a9:d8:23:d6:70:28:c7:45:8d:b9:28:20:1c:f2:27: ef:76:0a:6c -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUU3srEyxtmt9XqZTgF5vQvuJDuXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDUyMDQzNDVaFw0yNjA1MDQyMDQ4NDVaMDMxMTAvBgNV BAMTKDQ5MDM1MDk0QjM0Q0JBMUIzMDgzODFENTdGNjhEMDgyMENFQTNBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMdZomhEgibhD2bQcvpZ1gOKt eh4Q4uVS1gtt+pUciIEPSWs3C6EebDHc5sOnGMYp2JygHfLnxD8cIpDYL7opcfA4 UI9/gZ7ezG7wN0i5CClZ+DIVw0jdQdb260StZtuSzpbaLajqAiVpSQIL1aC/3UTF KDHs7vircwpHvrpKlnpPEY1EHuXJlP92/aW2BrpB9sNkTiOYkJqZIyrgrRA9L40o 2yRtso8Ce9pBPh/TikCygyMEJiGjk/W8+IKasfWWXCCWZhKbd2ndugQEKNAKH/P0 rNdrRtP3J3BO5Tn9xpdplJWDEjfEM+EpEQrdkcHETUCgVCi+HS1L8tKvOm8HAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJA1CUs0y6GzCD gdV/aNCCDOo6TzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzQ5MDM1 MDk0QjM0Q0JBMUIzMDgzODFENTdGNjhEMDgyMENFQTNBNEYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq5/DANBAIAAjAHAwUAKAQoGDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBwQwDQYJKoZIhvcNAQELBQADggEBAMwGZUSY5wtPUbHbOgjS aGitLRIPpXtjuX5fXie3MxT2JxDa7AC0EtCagTjkRzfUR0M120nGVt5FeBmFP4ym a5TrVfd5KNesnRasuf8KpAb9poyasoMXQE0iucZ1g991NcewTMqvr/ijPS17Q/y9 4BzQitAFzdHeSupIEWEcrdOJzTJbUQ9toYgxsgJoS8AbkVKd0SkkNTrq6SEKNwv3 tAcz0DTIH4w3nPqB0zSsf3c0omcVgjpWFDQIBXhQmvj7cq8AdvUcKiykxXbRZxEj klflojdSpEQanqnMZmCGeS3u61G1LIajzb3AyXU/JanYI9ZwKMdFjbkoIBzyJ+92 Cmw= -----END CERTIFICATE-----Generated at Fri May 9 18:50:38 2025 by rpki-client