$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer File: 025F1CD695A03927B6C43B9CCE128361E24CC47C.cer (raw, json) Hash identifier: 6QPFcX/FcQlF2PC9zchau+mQKo1tMyrV2wIQqlaVZ6A= Subject key identifier: 02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09AFB6B8DAA3A5849502AB880087F34A92E2A04C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft caRepository: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Nov 2024 12:17:34 +0000 Certificate not after: Thu 06 Nov 2025 12:22:34 +0000 Subordinate resources: AS: 266394 IP: 170.81.76.0/22 IP: 2804:372c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:b6:b8:da:a3:a5:84:95:02:ab:88:00:87:f3:4a:92:e2:a0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 7 12:17:34 2024 GMT Not After : Nov 6 12:22:34 2025 GMT Subject: CN=025F1CD695A03927B6C43B9CCE128361E24CC47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:a0:e5:46:e0:42:c7:e6:c8:91:23:90:f9: 86:92:8b:48:9b:67:b6:dc:a0:45:6f:66:a6:eb:28: ec:72:50:4a:f5:ea:de:8d:f7:9c:47:08:26:20:ab: fb:2b:31:6e:4d:74:ac:42:57:9a:98:62:ae:52:ce: f4:c7:c6:20:d3:f2:38:76:8d:1a:bf:e8:25:0a:0d: 88:03:d6:94:e0:7c:a9:e7:bc:a3:4c:dc:ff:bc:19: 7c:f1:23:8f:a4:14:fe:fa:35:33:c1:8b:b1:7c:38: 5d:58:ce:38:71:95:51:85:ba:41:da:3b:2e:c3:0d: 23:64:36:0b:b8:50:74:a1:d4:4e:d9:1b:5e:95:21: 77:da:e3:c9:51:63:d3:99:5c:e0:37:3b:84:b9:6c: 5b:df:1b:61:01:78:93:fc:f5:76:70:bd:97:20:3b: ff:01:c3:26:b0:f1:0e:23:3c:cd:41:3b:23:5b:ca: 45:b2:98:14:2a:3c:2f:d9:4e:ae:ba:cc:56:da:76: ad:d6:5a:d3:a7:c4:c9:5a:66:be:cf:5e:f1:f6:c3: 5c:89:d4:61:59:7a:7e:8a:86:cc:55:33:28:d4:ea: 92:63:d4:9c:90:13:fb:e1:92:b6:ed:c7:27:33:04: 50:c3:21:22:5f:dd:a5:58:96:ff:61:6a:05:ae:eb: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.76.0/22 IPv6: 2804:372c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266394 Signature Algorithm: sha256WithRSAEncryption 5b:4b:06:b8:03:d6:a3:74:ef:f6:84:01:25:b9:65:eb:09:0e: da:90:5b:de:1d:e5:ca:c9:08:f0:56:cc:2f:be:fb:9c:0b:25: b6:79:e7:e3:fe:09:4d:46:7e:10:72:74:9a:f1:89:81:e3:5f: 6f:df:ad:b3:ce:e5:61:6b:2b:6a:ff:d4:68:44:b3:a9:a5:71: f9:00:e6:40:b8:b4:04:38:0f:2b:6c:4d:fb:f9:ab:81:79:ec: b2:38:0d:37:34:8d:21:ac:23:4b:18:b0:80:d9:b0:72:3c:89: ef:33:a0:4e:f8:66:00:f2:8b:62:df:6a:19:88:5c:33:6a:9a: e2:20:23:4f:5b:76:af:91:8b:c1:98:80:b9:0a:02:d7:26:51: ef:ae:54:cc:52:9f:7f:80:a3:98:f7:1f:1a:20:25:c7:98:b8: db:f1:3c:40:ab:82:9e:83:73:28:c9:6b:dd:f4:70:3c:f5:b7: f2:15:26:8c:61:50:56:00:f8:20:35:97:24:20:ac:79:8d:6c: 6e:5d:29:b2:1a:b5:d8:b8:24:9d:40:17:ae:8b:c2:c0:6c:6e: ab:f3:a0:0a:f0:5e:b4:1c:f0:95:84:84:a6:1d:0e:74:2f:46: 28:37:f4:71:94:fe:81:60:45:eb:a7:3b:40:09:8e:b0:b6:23: cb:d4:c3:70 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCa+2uNqjpYSVAquIAIfzSpLioEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDcxMjE3MzRaFw0yNTExMDYxMjIyMzRaMDMxMTAvBgNV BAMTKDAyNUYxQ0Q2OTVBMDM5MjdCNkM0M0I5Q0NFMTI4MzYxRTI0Q0M0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIaDlRuBCx+bIkSOQ+YaSi0ib Z7bcoEVvZqbrKOxyUEr16t6N95xHCCYgq/srMW5NdKxCV5qYYq5SzvTHxiDT8jh2 jRq/6CUKDYgD1pTgfKnnvKNM3P+8GXzxI4+kFP76NTPBi7F8OF1YzjhxlVGFukHa Oy7DDSNkNgu4UHSh1E7ZG16VIXfa48lRY9OZXOA3O4S5bFvfG2EBeJP89XZwvZcg O/8Bwyaw8Q4jPM1BOyNbykWymBQqPC/ZTq66zFbadq3WWtOnxMlaZr7PXvH2w1yJ 1GFZen6KhsxVMyjU6pJj1JyQE/vhkrbtxyczBFDDISJf3aVYlv9hagWu66HHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCXxzWlaA5J7bE O5zOEoNh4kzEfDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkRm dTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNMQWYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJE ZnU0a2ExNjVOWW1TVTE3WGl4M1RhVkZXcW4zOFlidXRjeERBUFpDTEFmLzAvMDI1 RjFDRDY5NUEwMzkyN0I2QzQzQjlDQ0UxMjgzNjFFMjRDQzQ3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlFMMA0EAgACMAcDBQAoBDcsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQmjANBgkqhkiG9w0BAQsFAAOCAQEAW0sGuAPWo3Tv9oQB Jbll6wkO2pBb3h3lyskI8FbML777nAsltnnn4/4JTUZ+EHJ0mvGJgeNfb9+ts87l YWsrav/UaESzqaVx+QDmQLi0BDgPK2xN+/mrgXnssjgNNzSNIawjSxiwgNmwcjyJ 7zOgTvhmAPKLYt9qGYhcM2qa4iAjT1t2r5GLwZiAuQoC1yZR765UzFKff4CjmPcf GiAlx5i42/E8QKuCnoNzKMlr3fRwPPW38hUmjGFQVgD4IDWXJCCseY1sbl0pshq1 2LgknUAXrovCwGxuq/OgCvBetBzwlYSEph0OdC9GKDf0cZT+gWBF66c7QAmOsLYj y9TDcA== -----END CERTIFICATE-----Generated at Mon Feb 17 08:25:02 2025 by rpki-client