$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer File: C4A0C992AC81775846EF3EACD736353F739F7D8D.cer (raw, json) Hash identifier: BFgs1tuK+iQI01iCfRzwBKKFetZxsAw8q4s1AMtaQ+o= Subject key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1FB4E61B91394CE5A2B01026928419CF75FBBEC7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft caRepository: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 May 2025 19:31:03 +0000 Certificate not after: Thu 30 Apr 2026 19:36:03 +0000 Subordinate resources: AS: 52545 IP: 131.72.48.0/22 IP: 168.121.168.0/22 IP: 170.82.168.0/22 IP: 179.107.80.0/22 IP: 2804:e1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b4:e6:1b:91:39:4c:e5:a2:b0:10:26:92:84:19:cf:75:fb:be:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 1 19:31:03 2025 GMT Not After : Apr 30 19:36:03 2026 GMT Subject: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:8d:47:20:f5:91:e1:38:96:fa:72:bc:95: bd:b7:0d:15:fb:df:5b:e4:85:57:37:75:5e:5f:2d: 7c:f2:d1:ec:9f:8c:51:81:b5:f7:f1:7d:39:57:cb: 08:35:53:58:38:1c:df:7f:d5:73:57:c5:4a:97:22: ec:0e:2b:3b:8f:3e:ec:28:34:08:6d:fe:5d:3b:69: f6:32:3c:1c:54:ca:5a:01:67:d4:39:9a:00:21:06: ce:99:52:ee:d7:c1:57:50:7d:54:0e:71:f4:7a:27: 37:84:ad:15:a2:32:ed:12:50:61:b1:d5:fd:7d:4b: dc:a2:d4:a2:0d:d2:21:13:51:58:be:33:2d:3d:72: e8:c3:3b:6b:4d:79:5c:49:cc:7a:0d:d8:1f:04:6f: 9d:e3:ac:5d:dd:10:f8:6f:6a:e0:90:d4:97:5b:06: 45:f8:9d:8b:68:0a:e7:fd:32:b9:4e:bd:f9:b3:b5: b3:14:54:c3:4c:b5:75:ec:8c:e0:b4:b2:a0:9b:f9: 9b:fa:63:e1:bb:29:c2:68:52:60:1c:c0:66:49:c1: 1a:19:85:b6:f9:66:0d:1d:17:8f:51:5f:5a:94:dd: 23:38:8e:52:7a:41:f0:6b:43:f1:4c:25:6f:e9:b7: 63:50:70:5c:65:54:30:2a:bc:de:f2:26:25:d5:e7: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.48.0/22 168.121.168.0/22 170.82.168.0/22 179.107.80.0/22 IPv6: 2804:e1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52545 Signature Algorithm: sha256WithRSAEncryption 07:12:68:1a:ff:a0:69:52:40:54:c4:e6:ef:94:50:78:36:c1: e8:13:b5:74:0a:40:13:73:60:79:ae:90:e4:1a:8a:50:3f:41: fd:fa:1c:a0:21:f3:2c:f8:cb:e6:bd:b9:0f:5b:bb:61:62:5a: de:d4:a2:e3:de:70:fd:34:f1:2a:33:2f:22:a6:c7:dc:75:e0: 68:7e:65:b4:48:08:4e:42:05:86:59:31:f6:88:e1:cf:25:4e: cd:0d:03:ea:11:76:8b:4d:16:ee:61:cb:a8:0e:1d:df:f5:31: af:27:82:1d:72:f4:b6:16:56:69:57:e1:21:9e:6f:22:71:10: 0d:2c:92:cc:45:d7:1c:f6:6d:90:d8:25:06:03:d8:e8:b6:85: 78:32:94:a7:86:09:a9:5d:1c:c3:e3:7e:a7:66:ad:c6:66:47: 92:48:b3:db:0c:dc:2c:42:c5:09:32:72:bf:88:6d:c1:5a:05: b0:5b:46:85:71:4e:29:ff:f7:70:9d:8b:f6:54:a7:ef:c5:8b: c7:07:36:14:75:20:84:ae:e2:9e:b3:eb:97:37:d1:d9:bc:cc: a0:70:01:5d:80:51:72:de:53:06:7b:77:21:e0:ef:fa:73:ec: fe:aa:ab:87:4b:99:87:e3:e2:3e:ed:5f:ee:43:c5:5b:82:78: d5:28:c3:13 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUH7TmG5E5TOWisBAmkoQZz3X7vscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDExOTMxMDNaFw0yNjA0MzAxOTM2MDNaMDMxMTAvBgNV BAMTKEM0QTBDOTkyQUM4MTc3NTg0NkVGM0VBQ0Q3MzYzNTNGNzM5RjdEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGo1HIPWR4TiW+nK8lb23DRX7 31vkhVc3dV5fLXzy0eyfjFGBtffxfTlXywg1U1g4HN9/1XNXxUqXIuwOKzuPPuwo NAht/l07afYyPBxUyloBZ9Q5mgAhBs6ZUu7XwVdQfVQOcfR6JzeErRWiMu0SUGGx 1f19S9yi1KIN0iETUVi+My09cujDO2tNeVxJzHoN2B8Eb53jrF3dEPhvauCQ1Jdb BkX4nYtoCuf9MrlOvfmztbMUVMNMtXXsjOC0sqCb+Zv6Y+G7KcJoUmAcwGZJwRoZ hbb5Zg0dF49RX1qU3SM4jlJ6QfBrQ/FMJW/pt2NQcFxlVDAqvN7yJiXV5+8lAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEoMmSrIF3WEbv PqzXNjU/c599jTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0FM UTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dB TFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAvQzRB MEM5OTJBQzgxNzc1ODQ2RUYzRUFDRDczNjM1M0Y3MzlGN0Q4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCg0gwAwQCqHmoAwQCqlKoAwQCs2tQMA0EAgACMAcD BQAoBA4cMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNQTANBgkqhkiG9w0BAQsF AAOCAQEABxJoGv+gaVJAVMTm75RQeDbB6BO1dApAE3Ngea6Q5BqKUD9B/focoCHz LPjL5r25D1u7YWJa3tSi495w/TTxKjMvIqbH3HXgaH5ltEgITkIFhlkx9ojhzyVO zQ0D6hF2i00W7mHLqA4d3/UxryeCHXL0thZWaVfhIZ5vInEQDSySzEXXHPZtkNgl BgPY6LaFeDKUp4YJqV0cw+N+p2atxmZHkkiz2wzcLELFCTJyv4htwVoFsFtGhXFO Kf/3cJ2L9lSn78WLxwc2FHUghK7inrPrlzfR2bzMoHABXYBRct5TBnt3IeDv+nPs /qqrh0uZh+PiPu1f7kPFW4J41SjDEw== -----END CERTIFICATE-----Generated at Thu May 8 17:50:13 2025 by rpki-client