$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer File: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer (raw, json) Hash identifier: HN/eQLcT7QUi9YLwvNnr4js+7yhCHusta2uxDZsALOs= Subject key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67480B9289935FFB6535AA13898A3FA244BDCFA6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft caRepository: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 22 Jun 2025 21:41:35 +0000 Certificate not after: Sun 21 Jun 2026 21:46:35 +0000 Subordinate resources: AS: 61610 IP: 187.87.28.0/22 IP: 200.225.48.0/21 IP: 2804:8ae0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:48:0b:92:89:93:5f:fb:65:35:aa:13:89:8a:3f:a2:44:bd:cf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 22 21:41:35 2025 GMT Not After : Jun 21 21:46:35 2026 GMT Subject: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:62:00:ee:7a:bc:b2:3a:5e:3c:62:52:43: b1:77:46:e4:99:fd:ae:26:72:89:cb:44:39:9f:e3: b4:9a:23:3c:f4:28:7d:1b:a7:bd:79:e2:58:b3:ed: f0:48:7e:2f:83:f9:5b:1b:90:c8:04:d4:58:38:f9: 76:a1:f7:d1:20:d0:fc:9e:ea:39:b6:61:18:67:51: 55:9f:a0:7b:96:30:92:b4:f0:26:e7:93:89:4e:5c: a3:35:6d:ba:8e:9b:15:a0:13:e0:2a:b6:f1:ec:ea: fb:fb:ed:89:c0:36:31:72:7e:cf:8e:8d:23:07:a5: 08:6f:96:0e:b0:65:64:d2:fa:aa:38:e6:9a:d3:e1: 9f:38:f7:35:02:8a:86:67:bb:13:dd:8f:d7:97:53: db:34:3f:04:c2:0b:dd:44:1a:42:ad:67:ae:58:d7: e1:a2:f2:6e:a1:3c:e2:c4:b8:57:67:83:89:8a:d6: 95:53:6e:e0:43:b0:bd:3a:ee:1d:2a:3d:26:6a:cd: 55:be:b9:cd:05:6c:b0:d9:75:4c:6b:c4:79:97:c8: 20:36:17:df:26:f5:ad:73:85:6b:42:5e:f7:5a:3d: 79:4f:31:7e:98:95:1a:d5:b2:5b:9d:35:29:a8:72: f4:55:aa:8a:ed:58:2f:dc:4e:ba:75:e8:ed:af:b2: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.87.28.0/22 200.225.48.0/21 IPv6: 2804:8ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61610 Signature Algorithm: sha256WithRSAEncryption 77:82:fb:d0:36:18:25:4d:60:af:79:92:81:b6:eb:61:ba:56: ed:62:62:d7:ee:a4:92:f3:72:39:28:a1:05:24:d4:5d:d6:9b: a8:5a:ad:24:94:2a:db:bc:4a:15:2d:da:39:7f:ae:ae:7a:af: e4:13:dd:00:30:08:53:dd:ea:c5:48:7d:fd:52:7b:b7:b1:cd: 95:2f:a4:f4:11:76:74:d8:db:1f:ed:bc:5f:13:0d:81:f5:46: 1c:a4:bc:6f:45:c6:dc:57:48:58:89:29:6c:8d:7a:f7:21:c3: 30:86:c9:a3:b3:a6:17:d0:58:35:3c:7a:53:f3:38:57:5e:2c: 01:8c:a9:76:b0:e1:64:34:70:94:4e:c9:fd:68:06:b2:dc:c8: c6:66:20:57:13:ba:a4:5c:77:68:d1:b4:f0:81:ca:8e:47:31: ab:b5:d0:d1:2b:c7:6d:a5:68:ef:d8:32:33:f2:a2:44:1f:37: 30:5c:ea:7c:e5:32:5b:49:a4:2d:c1:c1:86:ec:da:96:30:65: 43:3e:d6:7b:33:0d:77:2a:e6:26:fb:cf:f6:7a:ec:89:e1:5d: 78:b8:1f:1e:43:90:fb:41:cd:0e:c3:70:47:7d:0f:a0:fe:ca: 10:e5:85:87:7f:d1:bc:93:ea:22:10:99:a3:73:2c:35:22:ff: 1d:f1:a3:ca -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZ0gLkomTX/tlNaoTiYo/okS9z6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjIyMTQxMzVaFw0yNjA2MjEyMTQ2MzVaMDMxMTAvBgNV BAMTKDRCM0ZCQzFGMzcyMUI2RDExRTExQjFEODc5RkM2QUM4OTk0RDdEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeP2IA7nq8sjpePGJSQ7F3RuSZ /a4mconLRDmf47SaIzz0KH0bp7154liz7fBIfi+D+VsbkMgE1Fg4+Xah99Eg0Pye 6jm2YRhnUVWfoHuWMJK08Cbnk4lOXKM1bbqOmxWgE+AqtvHs6vv77YnANjFyfs+O jSMHpQhvlg6wZWTS+qo45prT4Z849zUCioZnuxPdj9eXU9s0PwTCC91EGkKtZ65Y 1+Gi8m6hPOLEuFdng4mK1pVTbuBDsL067h0qPSZqzVW+uc0FbLDZdUxrxHmXyCA2 F98m9a1zhWtCXvdaPXlPMX6YlRrVsludNSmocvRVqortWC/cTrp16O2vsmzDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLP7wfNyG20R4R sdh5/GrImU193TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODV0 QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1 dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAvNEIz RkJDMUYzNzIxQjZEMTFFMTFCMUQ4NzlGQzZBQzg5OTREN0RERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCu1ccAwQDyOEwMA0EAgACMAcDBQAoBIrgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDwqjANBgkqhkiG9w0BAQsFAAOCAQEAd4L70DYY JU1gr3mSgbbrYbpW7WJi1+6kkvNyOSihBSTUXdabqFqtJJQq27xKFS3aOX+urnqv 5BPdADAIU93qxUh9/VJ7t7HNlS+k9BF2dNjbH+28XxMNgfVGHKS8b0XG3FdIWIkp bI169yHDMIbJo7OmF9BYNTx6U/M4V14sAYypdrDhZDRwlE7J/WgGstzIxmYgVxO6 pFx3aNG08IHKjkcxq7XQ0SvHbaVo79gyM/KiRB83MFzqfOUyW0mkLcHBhuzaljBl Qz7WezMNdyrmJvvP9nrsieFdeLgfHkOQ+0HNDsNwR30PoP7KEOWFh3/RvJPqIhCZ o3MsNSL/HfGjyg== -----END CERTIFICATE-----Generated at Sun Jun 29 23:27:46 2025 by rpki-client