$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer File: A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer (raw, json) Hash identifier: uOh+bR3Xyto5z3LLD9NJ60Gl6xqAVPTsVaizX/Xt0BM= Subject key identifier: A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D6DFB6C0AF2FA56FDF6FC58BC5224C4EF1FC55F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.mft caRepository: rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 12:57:04 +0000 Certificate not after: Wed 06 May 2026 13:02:04 +0000 Subordinate resources: AS: 262738 IP: 186.195.166.0/24 IP: 186.195.168.0/21 IP: 2804:1ba8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 18:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6d:fb:6c:0a:f2:fa:56:fd:f6:fc:58:bc:52:24:c4:ef:1f:c5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 12:57:04 2025 GMT Not After : May 6 13:02:04 2026 GMT Subject: CN=A50362E1730E440E6BA771E7529DAB6A4505D5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:c7:47:c2:c6:fd:ee:7b:f2:d7:f6:d9:88: 99:b4:c5:64:40:f7:cb:7b:6b:78:7e:9b:2e:9c:aa: 5d:9c:57:d0:20:b6:26:3c:37:04:3a:75:24:d8:8e: d9:cd:88:40:4c:39:9e:95:08:fc:d3:33:02:97:fa: 8d:74:ef:ff:91:3a:e1:f9:a9:16:69:99:3a:03:b0: a9:9e:87:64:40:c8:62:d2:4f:64:ae:b8:bb:4e:2f: e2:db:b4:11:41:de:2d:ee:1f:9a:23:17:5d:60:38: 2f:c8:1a:ef:bd:3e:5c:ef:49:f4:26:88:22:78:bd: f3:4e:c0:31:d7:f7:42:fc:cf:81:02:af:72:96:f1: 56:e4:7f:96:15:e8:89:5c:64:18:5a:11:51:d3:13: fe:17:3e:ee:9c:2c:fc:6e:b6:dd:95:96:76:73:5c: 17:a1:37:d1:f2:a6:ca:f6:d7:f5:82:fe:98:d1:33: 2e:e7:95:0f:f2:ea:54:76:28:fd:a1:4f:78:60:78: 3b:75:99:dc:94:2b:98:44:b8:23:24:96:35:d8:b3: 8c:5f:37:4b:6e:d2:7d:99:10:f6:cf:1b:0a:99:ac: 66:74:d0:55:c6:04:a5:a1:32:db:fd:22:6c:b7:ba: 5c:a1:05:7e:f7:d7:5e:8f:c2:27:9f:a1:3d:d8:78: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.166.0/24 186.195.168.0/21 IPv6: 2804:1ba8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262738 Signature Algorithm: sha256WithRSAEncryption 0f:a0:79:a2:f6:c3:3e:4a:b3:70:34:92:19:02:7b:54:0b:5f: d5:01:ad:32:ce:20:46:4a:4d:4b:7d:9e:ee:f6:a5:d4:3a:9c: 65:a7:6b:51:7a:98:db:b8:76:97:6b:9e:77:c5:94:7f:da:61: ed:ab:71:60:ee:93:60:91:9d:db:c8:76:3a:ab:17:96:67:33: f0:93:00:e7:c6:b2:70:ab:5a:ba:d0:b7:3a:fd:aa:71:c5:db: 57:76:13:48:70:09:b4:cd:eb:1e:e4:36:ac:0f:91:fd:c1:cb: fd:d7:4c:9f:20:5d:29:4c:bc:33:64:97:10:cd:45:eb:71:f9: 99:7b:1c:8b:d0:35:74:62:35:6b:35:be:2a:66:33:28:d0:b1: 22:ee:19:61:b3:df:e1:4a:86:40:2d:4b:22:83:02:1c:c2:07: f3:8e:bd:a1:f6:b5:93:68:37:50:ff:a5:f7:81:3d:ee:4f:33: 79:15:23:bc:b3:90:08:4a:2c:70:bc:3a:57:7b:e1:d6:e8:f6: 3f:ef:98:bd:2c:fc:39:d4:b1:4a:6d:ea:13:0c:f2:ad:59:e8: 21:68:60:d7:a0:64:af:40:71:1d:34:b0:1e:c4:41:e8:cd:f9: 23:0f:62:3c:10:e6:29:26:b9:85:97:53:09:91:c5:64:e0:ad: a3:d6:ad:28 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUfW37bAry+lb99vxYvFIkxO8fxV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcxMjU3MDRaFw0yNjA1MDYxMzAyMDRaMDMxMTAvBgNV BAMTKEE1MDM2MkUxNzMwRTQ0MEU2QkE3NzFFNzUyOURBQjZBNDUwNUQ1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjsdHwsb97nvy1/bZiJm0xWRA 98t7a3h+my6cql2cV9AgtiY8NwQ6dSTYjtnNiEBMOZ6VCPzTMwKX+o107/+ROuH5 qRZpmToDsKmeh2RAyGLST2SuuLtOL+LbtBFB3i3uH5ojF11gOC/IGu+9PlzvSfQm iCJ4vfNOwDHX90L8z4ECr3KW8Vbkf5YV6IlcZBhaEVHTE/4XPu6cLPxutt2VlnZz XBehN9Hypsr21/WC/pjRMy7nlQ/y6lR2KP2hT3hgeDt1mdyUK5hEuCMkljXYs4xf N0tu0n2ZEPbPGwqZrGZ00FXGBKWhMtv9Imy3ulyhBX73116PwiefoT3YeL57AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlA2Lhcw5EDmun cedSnatqRQXVsDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJS ekh3eVNUamVETHFtTjd4ZmoyNjFwNWRjc21nOXNUOU4yZFJpNEg0c3cvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJS ekh3eVNUamVETHFtTjd4ZmoyNjFwNWRjc21nOXNUOU4yZFJpNEg0c3cvMC9BNTAz NjJFMTczMEU0NDBFNkJBNzcxRTc1MjlEQUI2QTQ1MDVENUIwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAC6w6YDBAO6w6gwDQQCAAIwBwMFACgEG6gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAJSMA0GCSqGSIb3DQEBCwUAA4IBAQAPoHmi9sM+ SrNwNJIZAntUC1/VAa0yziBGSk1LfZ7u9qXUOpxlp2tRepjbuHaXa553xZR/2mHt q3Fg7pNgkZ3byHY6qxeWZzPwkwDnxrJwq1q60Lc6/apxxdtXdhNIcAm0zese5Das D5H9wcv910yfIF0pTLwzZJcQzUXrcfmZexyL0DV0YjVrNb4qZjMo0LEi7hlhs9/h SoZALUsigwIcwgfzjr2h9rWTaDdQ/6X3gT3uTzN5FSO8s5AISixwvDpXe+HW6PY/ 75i9LPw51LFKbeoTDPKtWeghaGDXoGSvQHEdNLAexEHozfkjD2I8EOYpJrmFl1MJ kcVk4K2j1q0o -----END CERTIFICATE-----Generated at Thu May 15 16:55:27 2025 by rpki-client