$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer File: 4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer (raw, json) Hash identifier: a2DgtMdrMfu+nc4tSBQ3F6uV1wIsdwuvppC024nGt0k= Subject key identifier: 4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6731BA8AE0CD402E7B4411D1D614DDA0B5510B59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.mft caRepository: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 05:57:47 +0000 Certificate not after: Tue 28 Apr 2026 06:02:47 +0000 Subordinate resources: AS: 266167 IP: 160.19.240.0/22 IP: 2804:3bb8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:31:ba:8a:e0:cd:40:2e:7b:44:11:d1:d6:14:dd:a0:b5:51:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 29 05:57:47 2025 GMT Not After : Apr 28 06:02:47 2026 GMT Subject: CN=4EF5C84266C27338ECEA6530E1F81A23B3609ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b5:b9:37:0b:dd:c3:d9:1e:84:be:69:40:59: bd:ea:14:71:34:77:a7:d3:a6:ee:54:f8:dd:c1:6c: 10:83:4e:07:c4:ce:61:40:de:30:16:cd:86:c8:5f: 67:4e:8c:59:6c:00:20:68:28:df:67:88:30:8a:38: 61:be:a8:10:c4:0c:e0:89:bd:1c:63:b0:e5:12:72: 0d:63:d3:b6:ae:59:d3:74:49:73:0a:9e:b9:ef:cc: a0:2c:7c:f3:50:50:58:38:ea:d2:ac:a2:67:43:1a: fc:91:b8:e2:f8:e2:5e:45:b3:6a:7c:84:0e:62:c8: 5f:29:5e:fd:72:b7:1b:24:53:a1:b2:cc:f1:c2:f5: 8d:12:3c:53:17:79:69:0e:9b:94:0d:1c:7e:02:2c: 7b:80:bf:94:db:01:31:79:0c:eb:05:76:4f:1e:c3: f2:7f:21:86:75:f9:d3:78:8c:3f:53:1e:b1:b4:04: 33:3d:ba:4d:7f:3b:41:50:84:98:65:09:81:1b:7c: 17:59:af:ab:83:be:0a:88:ec:09:36:f9:35:1d:d7: db:67:e2:bc:b8:39:af:fc:fb:ef:91:d4:8f:87:f9: b0:08:30:12:e2:2d:7c:7f:25:f1:06:4c:fc:b3:8e: 5b:b7:df:46:93:9e:8f:70:4e:a7:02:a8:b0:5b:8d: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.240.0/22 IPv6: 2804:3bb8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266167 Signature Algorithm: sha256WithRSAEncryption 6d:9c:ae:4e:d1:7a:4f:eb:e4:cf:95:7b:7a:4c:7d:25:2b:6f: 7c:3d:f1:e9:8d:44:f6:7c:85:93:7b:f2:d9:95:0a:4c:3e:12: 57:d5:13:11:b2:e5:fd:e7:01:94:1b:da:a0:88:d9:38:53:c6: 1e:d8:09:2f:80:ca:fd:96:3a:20:09:9a:29:31:f7:f8:c5:13: 2d:7d:63:71:c5:b2:0e:1e:f0:63:1c:e0:30:a5:4d:4d:74:d2: 90:39:c2:14:97:b8:98:82:3d:a6:e4:94:02:2a:72:6c:e8:d6: e4:ef:61:22:72:1c:fc:a6:23:b4:5e:56:21:9a:7a:4a:02:e3: 32:f9:1f:5a:6f:30:7a:0a:75:d3:05:53:5d:2d:cd:93:82:70: 2e:d4:51:19:a4:8f:95:8c:64:91:c1:44:31:84:d8:1e:84:d5: 7c:c4:ad:72:49:1d:f0:a3:c4:d6:28:64:67:76:c8:73:0d:f8: 63:20:c1:2e:62:6b:e9:d1:c0:c1:35:a5:77:a0:67:37:22:7d: 77:31:70:9b:9a:be:dd:00:86:85:a3:77:9e:34:c6:6a:1d:71: 33:c9:eb:f1:44:5d:c9:84:aa:e2:58:f3:55:7f:af:ee:c0:63: 34:b9:4f:ea:7b:14:cf:f5:40:f2:14:fd:b4:e9:c9:b1:2b:2c: de:e3:c5:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZzG6iuDNQC57RBHR1hTdoLVRC1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjkwNTU3NDdaFw0yNjA0MjgwNjAyNDdaMDMxMTAvBgNV BAMTKDRFRjVDODQyNjZDMjczMzhFQ0VBNjUzMEUxRjgxQTIzQjM2MDlFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqtbk3C93D2R6EvmlAWb3qFHE0 d6fTpu5U+N3BbBCDTgfEzmFA3jAWzYbIX2dOjFlsACBoKN9niDCKOGG+qBDEDOCJ vRxjsOUScg1j07auWdN0SXMKnrnvzKAsfPNQUFg46tKsomdDGvyRuOL44l5Fs2p8 hA5iyF8pXv1ytxskU6GyzPHC9Y0SPFMXeWkOm5QNHH4CLHuAv5TbATF5DOsFdk8e w/J/IYZ1+dN4jD9THrG0BDM9uk1/O0FQhJhlCYEbfBdZr6uDvgqI7Ak2+TUd19tn 4ry4Oa/8+++R1I+H+bAIMBLiLXx/JfEGTPyzjlu330aTno9wTqcCqLBbjXvXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO9chCZsJzOOzq ZTDh+Bojs2Ce0jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFN aFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qx TWhSd3BaNlFlb0Z0eDZacnNDc1VSM2hoaTRLOHZWaURMcnRWRm5lRXRKLzAvNEVG NUM4NDI2NkMyNzMzOEVDRUE2NTMwRTFGODFBMjNCMzYwOUVEMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoBPwMA0EAgACMAcDBQAoBDu4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPtzANBgkqhkiG9w0BAQsFAAOCAQEAbZyuTtF6T+vkz5V7 ekx9JStvfD3x6Y1E9nyFk3vy2ZUKTD4SV9UTEbLl/ecBlBvaoIjZOFPGHtgJL4DK /ZY6IAmaKTH3+MUTLX1jccWyDh7wYxzgMKVNTXTSkDnCFJe4mII9puSUAipybOjW 5O9hInIc/KYjtF5WIZp6SgLjMvkfWm8wegp10wVTXS3Nk4JwLtRRGaSPlYxkkcFE MYTYHoTVfMStckkd8KPE1ihkZ3bIcw34YyDBLmJr6dHAwTWld6BnNyJ9dzFwm5q+ 3QCGhaN3njTGah1xM8nr8URdyYSq4ljzVX+v7sBjNLlP6nsUz/VA8hT9tOnJsSss 3uPFBg== -----END CERTIFICATE-----Generated at Thu May 8 22:02:04 2025 by rpki-client