$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer File: D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer (raw, json) Hash identifier: M9bDo4RVjov56cq67pOC3x28xmdV9Fe2JEBPP5cBDTE= Subject key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59649D94A9EF388A6E910A1196D5AF3759A0DDAA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft caRepository: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 17:12:46 +0000 Certificate not after: Wed 29 Apr 2026 17:17:46 +0000 Subordinate resources: AS: 265080 IP: 170.233.120.0/22 IP: 2804:3278::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 16:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:64:9d:94:a9:ef:38:8a:6e:91:0a:11:96:d5:af:37:59:a0:dd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 17:12:46 2025 GMT Not After : Apr 29 17:17:46 2026 GMT Subject: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:b2:84:7a:04:f2:c8:c8:ba:fd:4f:45:cf: 6a:1e:a4:fc:74:79:c8:d5:ae:1e:f7:0f:f5:06:57: ab:c7:b1:f0:d1:d7:b9:c4:65:05:ba:8f:35:fa:13: 86:3b:6c:95:ae:39:b0:0c:b8:d7:69:65:a6:72:8a: bf:87:dc:8c:6a:25:ec:96:71:bf:f1:e6:25:a3:bc: 0d:34:a2:dd:6f:a8:79:9e:32:97:c6:81:a5:31:d9: 59:c1:64:ee:17:c8:27:f3:35:16:d2:09:c7:cd:1b: ed:18:ed:3a:67:1e:32:ab:0a:9a:71:cd:29:d4:8c: 3f:c3:3c:33:ae:fb:93:32:c6:ba:aa:79:4f:3e:cc: 33:6e:06:1a:ea:3b:fc:46:85:29:89:a8:a7:7b:2f: 55:40:71:61:e0:9f:4b:c1:47:dd:47:95:b7:01:0b: 0b:01:b8:11:66:96:b0:84:dd:3f:8f:c5:7b:b3:4d: ab:c9:04:80:ac:78:97:ec:a2:08:56:31:34:9e:04: 26:2c:3e:71:39:09:e9:80:ed:3e:f4:1e:a8:8e:c9: e9:8a:ae:ef:1d:f8:4a:67:5e:4e:1a:45:48:4b:31: a5:10:ba:78:86:74:af:cf:b9:2b:0d:6c:3d:09:56: 1d:2a:5b:73:91:98:2f:1e:d9:f5:a4:9c:6b:00:3c: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.120.0/22 IPv6: 2804:3278::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265080 Signature Algorithm: sha256WithRSAEncryption 0a:f9:e0:dc:91:c3:21:28:87:61:5f:e3:79:a9:0f:91:3c:23: 71:85:89:1f:fb:08:75:55:9e:57:a2:f3:1c:32:af:7b:4b:5f: c9:d8:29:5b:55:ba:db:17:09:af:e7:cd:2e:56:1b:ab:d9:e1: bd:83:ea:70:cb:39:06:ae:68:3a:20:8d:80:51:4d:ce:65:c3: 7c:e2:75:b8:62:39:fd:00:d0:25:20:7d:ff:d8:8b:a1:ca:82: 0e:4f:c9:62:0d:f6:95:18:98:cd:4a:33:c9:6f:30:89:55:36: 94:e8:38:d3:64:9b:f9:ed:b3:7b:90:7c:0f:f6:1d:ac:5f:11: 39:ae:8e:e1:ad:0b:d1:33:ec:9b:68:6d:69:c4:f8:cc:f1:d2: 7e:e1:9c:ff:29:21:7e:a0:56:76:d5:80:dc:e2:bf:e2:17:5e: 84:08:9e:86:48:34:a2:2e:a3:e4:b4:7a:72:64:4c:07:12:01: 9b:bd:5b:e1:46:a6:40:32:68:79:05:73:25:30:3f:19:86:a8: 75:e3:13:0d:67:29:6f:67:18:3f:87:98:ac:94:84:b0:e5:e1: 7c:a0:f2:27:6d:14:3c:4e:30:07:2d:04:f3:a9:93:1a:53:2e: 61:82:32:cd:82:24:2c:97:98:36:69:51:dd:37:3f:0a:86:89: ac:20:a6:39 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWWSdlKnvOIpukQoRltWvN1mg3aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxNzEyNDZaFw0yNjA0MjkxNzE3NDZaMDMxMTAvBgNV BAMTKEQ1NDFCOUUxQzBENkFDMTdCRjExNUJCMUI3QTg3QjI5QkVEREIwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmbKEegTyyMi6/U9Fz2oepPx0 ecjVrh73D/UGV6vHsfDR17nEZQW6jzX6E4Y7bJWuObAMuNdpZaZyir+H3IxqJeyW cb/x5iWjvA00ot1vqHmeMpfGgaUx2VnBZO4XyCfzNRbSCcfNG+0Y7TpnHjKrCppx zSnUjD/DPDOu+5MyxrqqeU8+zDNuBhrqO/xGhSmJqKd7L1VAcWHgn0vBR91HlbcB CwsBuBFmlrCE3T+PxXuzTavJBICseJfsoghWMTSeBCYsPnE5CemA7T70HqiOyemK ru8d+EpnXk4aRUhLMaUQuniGdK/PuSsNbD0JVh0qW3ORmC8e2fWknGsAPMFhAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVQbnhwNasF78R W7G3qHspvt2w3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkZY a0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUxdlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZG WGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAvRDU0 MUI5RTFDMEQ2QUMxN0JGMTE1QkIxQjdBODdCMjlCRUREQjBERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqul4MA0EAgACMAcDBQAoBDJ4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLeDANBgkqhkiG9w0BAQsFAAOCAQEACvng3JHDISiHYV/j eakPkTwjcYWJH/sIdVWeV6LzHDKve0tfydgpW1W62xcJr+fNLlYbq9nhvYPqcMs5 Bq5oOiCNgFFNzmXDfOJ1uGI5/QDQJSB9/9iLocqCDk/JYg32lRiYzUozyW8wiVU2 lOg402Sb+e2ze5B8D/YdrF8ROa6O4a0L0TPsm2htacT4zPHSfuGc/ykhfqBWdtWA 3OK/4hdehAiehkg0oi6j5LR6cmRMBxIBm71b4UamQDJoeQVzJTA/GYaodeMTDWcp b2cYP4eYrJSEsOXhfKDyJ20UPE4wBy0E86mTGlMuYYIyzYIkLJeYNmlR3Tc/CoaJ rCCmOQ== -----END CERTIFICATE-----Generated at Thu May 8 15:46:33 2025 by rpki-client