$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer File: 02E066E542EE01043797860D397E283E252CA08A.cer (raw, json) Hash identifier: mEFmQ+t9AxD0pd2ngJIwRSYjwD7Vtq/XEXHIB3VfzWg= Subject key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 750CA48FD1145C71CA51BE39DF8992B7385FECEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.mft caRepository: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Jan 2025 18:19:00 +0000 Certificate not after: Mon 19 Jan 2026 18:24:00 +0000 Subordinate resources: AS: 270348 IP: 190.83.28.0/22 IP: 2801:80:38b0::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0c:a4:8f:d1:14:5c:71:ca:51:be:39:df:89:92:b7:38:5f:ec:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 20 18:19:00 2025 GMT Not After : Jan 19 18:24:00 2026 GMT Subject: CN=02E066E542EE01043797860D397E283E252CA08A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:bc:dd:a8:5c:17:08:2a:a2:be:21:0a:ef: a5:0f:a6:2e:73:ad:df:c3:07:fc:02:0c:6c:50:73: 50:c2:0b:b3:05:c2:8d:0d:88:3b:82:08:1a:4d:60: fe:21:14:14:ec:52:ea:2f:20:d9:df:8f:16:9d:e2: 39:2f:b8:5f:65:da:81:5d:84:d0:f5:02:fe:a6:cb: 79:ea:6e:f9:da:50:b2:36:5a:45:c1:7d:69:5f:79: b8:ca:6b:96:01:13:b2:58:3d:34:60:7e:1e:fb:1d: f4:5a:7f:9c:11:1f:f9:d6:4b:12:3b:c3:2c:0b:02: b7:95:41:91:9d:e7:ba:fd:cb:d8:a1:27:ec:6e:c7: cc:78:c7:8f:43:3b:44:cd:7e:36:ac:3e:4e:eb:e3: 0f:dc:70:5b:84:a7:3c:fc:d4:f1:2f:ec:44:db:8a: 3c:4b:b8:75:41:8e:ce:1d:1f:dd:1a:ed:66:62:13: 5c:fc:41:01:28:c6:43:21:61:74:c3:3b:e2:99:5d: ce:39:cc:42:23:fa:65:53:d9:e5:f4:67:0f:e0:d1: de:35:47:cf:e1:31:cd:1f:e4:22:e4:47:5f:0f:00: 3d:16:bf:97:0d:b1:8e:f8:30:85:24:af:0c:d4:71: 92:00:b0:d4:fa:47:6e:c3:97:28:0f:4b:8a:7c:1b: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.28.0/22 IPv6: 2801:80:38b0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270348 Signature Algorithm: sha256WithRSAEncryption 51:4c:07:58:61:0a:ed:99:40:0b:60:1b:d9:30:22:94:f4:3e: 6e:72:94:ae:29:09:91:b2:c6:28:1f:3f:05:fa:3f:03:32:e1: 17:f6:28:31:3e:bd:6b:c5:21:bf:8c:b5:c3:be:0b:43:4c:f5: 53:0a:32:29:da:bb:e9:94:b0:89:b5:99:2a:0e:ad:c8:aa:3e: 03:ec:9a:e5:8a:c0:ee:77:a0:5f:8a:c6:24:33:71:af:5c:3f: e9:24:79:a3:79:b1:83:34:1a:71:c9:d6:9d:5b:97:9f:ae:95: ed:39:3f:22:af:1d:52:58:43:5c:6f:f4:97:50:f5:66:91:8e: 71:07:bb:aa:73:ac:e8:da:83:89:9f:06:a1:90:e4:b8:41:e5: c3:f0:2c:b6:3a:72:df:b2:a7:e1:6c:f2:d3:a4:0e:37:f9:7d: 49:3a:89:7d:b5:f5:57:03:84:bc:7c:3d:ff:0a:f3:f8:22:d4: eb:73:b1:03:c1:e5:0a:43:b8:17:b8:5d:cf:be:0b:73:60:6b: ae:94:6e:57:d1:87:f2:49:5c:e1:8a:c2:ca:70:02:5d:fd:78: 52:15:e3:6f:62:b5:4f:e0:5e:d9:79:72:42:69:bb:c6:27:39: 99:c3:68:9a:90:98:8c:1e:85:52:21:bd:b1:46:1a:d2:54:97: 97:12:c2:d5 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUdQykj9EUXHHKUb4534mStzhf7OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjAxODE5MDBaFw0yNjAxMTkxODI0MDBaMDMxMTAvBgNV BAMTKDAyRTA2NkU1NDJFRTAxMDQzNzk3ODYwRDM5N0UyODNFMjUyQ0EwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKbzdqFwXCCqiviEK76UPpi5z rd/DB/wCDGxQc1DCC7MFwo0NiDuCCBpNYP4hFBTsUuovINnfjxad4jkvuF9l2oFd hND1Av6my3nqbvnaULI2WkXBfWlfebjKa5YBE7JYPTRgfh77HfRaf5wRH/nWSxI7 wywLAreVQZGd57r9y9ihJ+xux8x4x49DO0TNfjasPk7r4w/ccFuEpzz81PEv7ETb ijxLuHVBjs4dH90a7WZiE1z8QQEoxkMhYXTDO+KZXc45zEIj+mVT2eX0Zw/g0d41 R8/hMc0f5CLkR18PAD0Wv5cNsY74MIUkrwzUcZIAsNT6R27DlygPS4p8GxJlAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQC4GblQu4BBDeX hg05fig+JSygijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Rq OEFmZldueGhhcWpzUFRpem00cTRldURIZENGNDJKY25uSkFvamJRbk0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dk ajhBZmZXbnhoYXFqc1BUaXptNHE0ZXVESGRDRjQySmNubkpBb2piUW5NLzAvMDJF MDY2RTU0MkVFMDEwNDM3OTc4NjBEMzk3RTI4M0UyNTJDQTA4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQCvlMcMA8EAgACMAkDBwAoAQCAOLAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCAMMA0GCSqGSIb3DQEBCwUAA4IBAQBRTAdYYQrtmUAL YBvZMCKU9D5ucpSuKQmRssYoHz8F+j8DMuEX9igxPr1rxSG/jLXDvgtDTPVTCjIp 2rvplLCJtZkqDq3Iqj4D7JrlisDud6BfisYkM3GvXD/pJHmjebGDNBpxydadW5ef rpXtOT8irx1SWENcb/SXUPVmkY5xB7uqc6zo2oOJnwahkOS4QeXD8Cy2OnLfsqfh bPLTpA43+X1JOol9tfVXA4S8fD3/CvP4ItTrc7EDweUKQ7gXuF3PvgtzYGuulG5X 0YfySVzhisLKcAJd/XhSFeNvYrVP4F7ZeXJCabvGJzmZw2iakJiMHoVSIb2xRhrS VJeXEsLV -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:02 2025 by rpki-client