$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer File: 93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer (raw, json) Hash identifier: 9DTqILq1ZDAHmof23UjWCUK3fIbNeBNsKmT532zWMcM= Subject key identifier: 93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 220C906F7175009153F56E76B31528C0058FAE48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft caRepository: rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 06:15:09 +0000 Certificate not after: Wed 06 May 2026 06:20:09 +0000 Subordinate resources: AS: 267962 IP: 45.166.136.0/22 IP: 2804:55e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0c:90:6f:71:75:00:91:53:f5:6e:76:b3:15:28:c0:05:8f:ae:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 06:15:09 2025 GMT Not After : May 6 06:20:09 2026 GMT Subject: CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:56:6b:02:42:c0:54:85:d9:20:5c:8e:5c: c4:49:aa:81:26:42:31:53:d0:1a:f5:42:97:1c:63: 07:d5:3f:b0:2d:0d:71:2e:29:5d:02:9c:96:a9:ea: 09:f4:72:e8:69:49:a3:e3:a5:47:cc:06:00:7d:ab: f0:89:db:74:cf:7a:99:71:aa:c6:a2:c3:2f:14:4e: b4:6f:26:ed:b0:8e:d6:06:1e:47:51:9a:10:28:44: be:8a:98:78:47:10:47:6c:69:dc:32:58:aa:73:07: 69:1e:b7:17:7a:af:37:68:a5:c8:b1:a1:e7:13:36: a8:17:8e:e0:d8:67:2e:ff:be:b0:8c:b5:0e:a1:4b: c0:cc:f3:01:fe:ea:77:ef:b7:28:9f:ba:45:4b:d2: 97:e3:50:62:1b:c2:82:50:f8:16:2f:8b:bf:5c:07: dc:43:6e:24:26:72:11:97:b4:e3:6f:89:76:73:84: 0e:2c:af:05:c1:b1:11:84:a2:dc:67:23:d5:b4:cd: 77:ea:df:08:96:af:ab:f6:b9:fb:b8:b3:97:07:80: ee:9f:d9:c8:03:2e:c0:21:fe:6d:c4:8a:a2:a9:3e: f1:c9:84:bd:ec:46:59:7e:53:23:4a:ea:c6:1b:9a: 7b:5a:05:9f:59:1f:f2:04:db:cd:05:5c:a4:f0:55: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.136.0/22 IPv6: 2804:55e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267962 Signature Algorithm: sha256WithRSAEncryption 1d:c7:d7:83:53:c5:7d:6a:a9:ae:37:b5:47:1a:e1:6a:2c:4a: 78:1b:89:df:83:ac:f9:bd:f7:b2:bd:84:51:52:fe:2c:78:00: 16:4b:85:5c:22:03:86:5d:6f:93:6e:e2:26:18:8f:66:b3:e1: f1:10:31:c0:fe:71:9e:41:48:69:bf:59:9f:d7:8f:0e:6d:0d: 22:1c:51:a4:98:9f:8d:0a:a3:41:4d:34:55:15:bd:4b:91:f1: 34:32:6d:ce:fb:a4:96:43:a7:ec:fb:f1:c0:b8:84:9f:a2:69: e6:6b:9a:48:6a:8c:91:e3:71:50:26:bf:b8:2e:39:8e:ac:de: b1:ea:4d:25:af:9d:ab:70:3f:33:b5:c2:ce:2f:98:6c:1d:a5: 57:7b:ff:c9:29:23:65:58:49:95:ec:da:4b:c2:70:0b:03:a0: 66:25:2f:b3:2d:6e:35:05:58:e8:2a:14:f1:3f:fc:ab:45:e8: e3:4d:07:85:a1:62:c9:9e:1c:13:13:f4:26:de:a2:cd:27:94: 3c:34:cb:29:5d:01:fe:69:24:b3:02:83:88:01:c5:99:51:40: 90:39:3d:a1:43:fe:23:04:2e:e3:c7:74:8d:f2:9b:23:9e:c0: be:94:77:43:75:77:7c:8c:86:6e:b7:eb:fe:30:8f:82:22:a9: 68:17:6a:9a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIgyQb3F1AJFT9W52sxUowAWPrkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcwNjE1MDlaFw0yNjA1MDYwNjIwMDlaMDMxMTAvBgNV BAMTKDkzNDA0MzI1RUZBMTFCREJBMDQwMUY1RDFGRjJEQTg0RDBBNTdGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN21ZrAkLAVIXZIFyOXMRJqoEm QjFT0Br1QpccYwfVP7AtDXEuKV0CnJap6gn0cuhpSaPjpUfMBgB9q/CJ23TPeplx qsaiwy8UTrRvJu2wjtYGHkdRmhAoRL6KmHhHEEdsadwyWKpzB2ketxd6rzdopcix oecTNqgXjuDYZy7/vrCMtQ6hS8DM8wH+6nfvtyifukVL0pfjUGIbwoJQ+BYvi79c B9xDbiQmchGXtONviXZzhA4srwXBsRGEotxnI9W0zXfq3wiWr6v2ufu4s5cHgO6f 2cgDLsAh/m3EiqKpPvHJhL3sRll+UyNK6sYbmntaBZ9ZH/IE280FXKTwVVb/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTQEMl76Eb26BA H10f8tqE0KV/izAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlpC enlpUGZrQzVaZnM1Sml5Mll1aXplcFNEZTZUV3BMVHFoNVJmc3Y1S0svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJa Qnp5aVBma0M1WmZzNUppeTJZdWl6ZXBTRGU2VFdwTFRxaDVSZnN2NUtLLzAvOTM0 MDQzMjVFRkExMUJEQkEwNDAxRjVEMUZGMkRBODREMEE1N0Y4Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaaIMA0EAgACMAcDBQAoBFXgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQWujANBgkqhkiG9w0BAQsFAAOCAQEAHcfXg1PFfWqprje1 RxrhaixKeBuJ34Os+b33sr2EUVL+LHgAFkuFXCIDhl1vk27iJhiPZrPh8RAxwP5x nkFIab9Zn9ePDm0NIhxRpJifjQqjQU00VRW9S5HxNDJtzvuklkOn7PvxwLiEn6Jp 5muaSGqMkeNxUCa/uC45jqzesepNJa+dq3A/M7XCzi+YbB2lV3v/ySkjZVhJleza S8JwCwOgZiUvsy1uNQVY6CoU8T/8q0Xo400HhaFiyZ4cExP0Jt6izSeUPDTLKV0B /mkkswKDiAHFmVFAkDk9oUP+IwQu48d0jfKbI57AvpR3Q3V3fIyGbrfr/jCPgiKp aBdqmg== -----END CERTIFICATE-----Generated at Sun May 11 15:23:39 2025 by rpki-client