$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.cer File: DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.cer (raw, json) Hash identifier: 4cy7Tn3yVLYqvAbKHGLDwv1v+qZ3ujaRb5yOBrK/e/c= Subject key identifier: DA:3D:B6:37:AE:12:F8:19:57:62:BD:A1:E7:31:8F:8E:63:DF:8F:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7FEE27B8C1B6BC0AC70CF3DC09D2ED3E5E7A5B95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft caRepository: rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 19:20:28 +0000 Certificate not after: Thu 23 Apr 2026 19:25:28 +0000 Subordinate resources: AS: 262817 IP: 138.219.148.0/22 IP: 186.250.120.0/22 IP: 2804:27e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 10:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ee:27:b8:c1:b6:bc:0a:c7:0c:f3:dc:09:d2:ed:3e:5e:7a:5b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 19:20:28 2025 GMT Not After : Apr 23 19:25:28 2026 GMT Subject: CN=DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:f1:c7:f9:8b:bf:d8:01:2e:a1:07:b4:99: a7:70:ec:76:74:79:36:fb:89:41:e2:79:43:7f:ba: 75:e7:ec:bc:22:56:00:3f:7e:f6:55:d5:09:63:7b: f6:94:0e:19:6f:55:74:82:7b:75:4c:d2:1f:29:0f: 1f:56:a5:bf:cd:60:75:c0:c4:5d:99:94:f2:c4:6e: 56:75:c2:03:3e:7c:4a:c8:1c:aa:ca:6b:29:9b:a3: 78:d3:d6:ec:84:da:e1:8b:c7:d6:b7:82:d1:f5:48: 4e:38:99:6b:3a:35:2f:b8:0c:5e:cf:b9:be:59:6c: a9:44:63:ce:79:0b:a3:f0:3a:8e:96:35:e0:17:73: 55:58:7b:5c:f2:c0:b9:ba:e7:fd:88:26:a6:15:d2: 0f:84:80:6f:46:e4:69:f5:09:66:61:63:26:d0:f3: b2:c5:89:ab:ac:5d:7b:70:03:a9:e9:be:53:3d:eb: 68:93:c8:46:fb:dc:f8:c7:00:ae:78:d2:ed:7d:4b: 62:e1:0c:43:15:67:a0:43:32:73:b2:ee:e4:ee:87: b7:d6:00:ff:07:27:af:f9:1b:74:63:37:f6:75:bf: 19:7f:a0:4c:d0:18:aa:7f:9d:50:b2:60:6c:1d:57: f7:b0:fc:5b:c3:d6:e3:10:c9:8d:ad:c0:81:e2:75: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:3D:B6:37:AE:12:F8:19:57:62:BD:A1:E7:31:8F:8E:63:DF:8F:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.148.0/22 186.250.120.0/22 IPv6: 2804:27e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262817 Signature Algorithm: sha256WithRSAEncryption 36:ce:f4:97:09:05:9f:33:2f:ef:9e:49:7c:bf:3e:c1:32:bd: 88:44:d4:aa:d2:eb:7d:a6:e5:ac:51:11:14:23:79:c2:70:c9: c0:4a:e9:27:27:5a:18:b3:56:73:a9:90:91:0e:6e:b2:b0:37: f7:9a:d0:3b:d2:42:34:7c:55:f6:88:ff:39:71:ec:57:d7:6e: 85:fc:ec:4d:eb:29:6b:9d:e6:76:5d:b8:41:e2:4b:6f:fb:19: 72:f2:45:f5:40:2e:72:aa:92:3a:06:39:6a:52:31:51:42:39: 7f:b8:6b:9e:5f:05:51:75:22:3b:55:c2:a0:81:a0:ce:81:12: 53:96:45:a0:78:c9:34:be:57:6c:b7:70:7d:32:cf:00:87:d5: 22:83:42:99:8e:75:9d:61:5c:95:c0:7a:e2:87:ee:8f:b9:72: d3:42:70:70:f6:de:b4:c1:c5:41:da:2b:8a:ec:e4:f1:81:3c: 4e:41:45:1b:44:12:93:f3:1d:f0:d3:c4:d0:c5:8b:75:f5:c2: 71:cf:9d:b4:31:f2:74:6a:7e:55:17:df:a1:36:7d:de:cb:ce: 8e:00:8a:07:cc:e3:09:b8:ac:e4:8d:a1:87:86:c9:06:de:ee: 0e:37:2f:96:26:1d:00:4e:6a:a1:2d:d1:03:bf:93:f5:54:31: b8:ca:3f:8d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUf+4nuMG2vArHDPPcCdLtPl56W5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjQxOTIwMjhaFw0yNjA0MjMxOTI1MjhaMDMxMTAvBgNV BAMTKERBM0RCNjM3QUUxMkY4MTk1NzYyQkRBMUU3MzE4RjhFNjNERjhGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNvHH+Yu/2AEuoQe0madw7HZ0 eTb7iUHieUN/unXn7LwiVgA/fvZV1Qlje/aUDhlvVXSCe3VM0h8pDx9Wpb/NYHXA xF2ZlPLEblZ1wgM+fErIHKrKaymbo3jT1uyE2uGLx9a3gtH1SE44mWs6NS+4DF7P ub5ZbKlEY855C6PwOo6WNeAXc1VYe1zywLm65/2IJqYV0g+EgG9G5Gn1CWZhYybQ 87LFiausXXtwA6npvlM962iTyEb73PjHAK540u19S2LhDEMVZ6BDMnOy7uTuh7fW AP8HJ6/5G3RjN/Z1vxl/oEzQGKp/nVCyYGwdV/ew/FvD1uMQyY2twIHiddVHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaPbY3rhL4GVdi vaHnMY+OY9+PwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUxq dWlSbmtoTTVCMXRCU3JZY0Z5aG1XMkY5c1RNV29WdGRwQldZWVlzNHkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlM anVpUm5raE01QjF0QlNyWWNGeWhtVzJGOXNUTVdvVnRkcEJXWVlZczR5LzAvREEz REI2MzdBRTEyRjgxOTU3NjJCREExRTczMThGOEU2M0RGOEZDMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCituUAwQCuvp4MA0EAgACMAcDBQAoBCfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCoTANBgkqhkiG9w0BAQsFAAOCAQEANs70lwkF nzMv755JfL8+wTK9iETUqtLrfablrFERFCN5wnDJwErpJydaGLNWc6mQkQ5usrA3 95rQO9JCNHxV9oj/OXHsV9duhfzsTespa53mdl24QeJLb/sZcvJF9UAucqqSOgY5 alIxUUI5f7hrnl8FUXUiO1XCoIGgzoESU5ZFoHjJNL5XbLdwfTLPAIfVIoNCmY51 nWFclcB64ofuj7ly00JwcPbetMHFQdoriuzk8YE8TkFFG0QSk/Md8NPE0MWLdfXC cc+dtDHydGp+VRffoTZ93svOjgCKB8zjCbis5I2hh4bJBt7uDjcvliYdAE5qoS3R A7+T9VQxuMo/jQ== -----END CERTIFICATE-----Generated at Thu May 8 08:52:00 2025 by rpki-client