$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.cer File: 08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.cer (raw, json) Hash identifier: 1eqXnmFFimf8/KAFSGJe2DOlSc+sGRJhcQbgpo/j7D0= Subject key identifier: 08:23:3B:AD:A4:DD:9C:E0:DD:B9:3B:D0:A4:02:AD:99:04:A2:AE:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70A8DB37596926B876CB4BA21C06F1C4184936CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft caRepository: rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 17:31:02 +0000 Certificate not after: Fri 13 Feb 2026 17:36:02 +0000 Subordinate resources: AS: 265118 IP: 143.208.184.0/22 IP: 2804:2ac8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a8:db:37:59:69:26:b8:76:cb:4b:a2:1c:06:f1:c4:18:49:36:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 14 17:31:02 2025 GMT Not After : Feb 13 17:36:02 2026 GMT Subject: CN=08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:ed:75:db:c1:e7:42:ae:fc:24:59:b2:da: 95:4c:31:c4:52:c5:55:41:84:d9:15:19:c5:0c:be: 87:30:c6:d9:fe:db:65:3f:e0:c3:6c:83:46:c8:d3: 2d:87:9d:38:c2:5c:0e:46:44:49:2c:56:06:18:a7: 2d:eb:09:b0:7e:48:36:03:b0:9e:01:cb:3a:5e:81: 2e:94:f3:e6:92:7e:ae:b5:3c:02:80:17:3b:ef:23: a3:34:fc:80:d9:0f:25:03:79:2f:dc:98:41:a0:35: 05:d6:1a:9d:05:e0:1b:a3:99:37:38:ff:03:4b:d1: 9e:ed:19:97:5e:0c:34:ba:cb:b7:4a:e6:82:cf:18: 77:96:45:91:3e:57:a5:59:99:8f:88:aa:53:5e:34: 95:c1:c8:f0:bd:b4:01:99:74:bf:36:11:03:88:f7: d7:6c:a6:85:e3:88:01:d9:c1:27:b8:11:81:ee:c7: c9:1f:78:61:dd:29:ed:d7:7e:fc:f4:32:84:d7:16: 8a:7e:9e:4f:ce:37:42:9b:ef:e5:e2:eb:27:94:df: ea:77:25:e1:2e:05:bc:ee:4d:76:26:14:e2:2a:23: ec:1e:a3:6c:b5:4d:1b:4c:08:06:14:bb:d7:dd:78: 9b:47:16:de:a9:86:b4:b2:ce:47:b0:93:96:20:15: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:23:3B:AD:A4:DD:9C:E0:DD:B9:3B:D0:A4:02:AD:99:04:A2:AE:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.184.0/22 IPv6: 2804:2ac8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265118 Signature Algorithm: sha256WithRSAEncryption 72:a9:02:0a:0b:55:75:d6:5a:19:6a:4a:24:47:b1:1e:14:ea: 22:5b:02:0f:ac:98:5d:49:ac:39:0a:8e:cf:5e:ec:24:09:8f: 76:79:61:64:6e:d4:d6:87:9e:28:23:a7:da:af:1b:4d:7c:1a: 57:7d:00:0c:1f:a8:90:3e:92:c4:a0:3b:01:8d:e4:8a:75:52: 0d:15:3a:47:a0:b3:fa:5c:a5:81:ba:61:2f:49:11:25:8b:4f: 11:1e:14:e4:25:5f:ca:97:65:39:70:4e:06:5d:67:55:84:0f: fe:52:cd:11:13:27:55:81:90:89:6b:7a:03:c4:74:70:71:29: cc:cb:25:90:a3:6c:19:25:60:9a:51:b0:bb:06:7c:bd:6c:47: 24:cb:3a:2e:b9:f8:a2:6f:d0:b4:d5:91:43:0b:84:5f:57:67: ca:55:3c:2f:1c:2b:30:17:4b:7c:99:20:59:2e:ab:40:ea:76: 88:c6:6a:bb:f0:86:16:0f:06:62:23:2b:b8:94:f6:31:a6:1c: b0:48:4b:ae:c8:66:67:7d:d4:f1:dc:e0:70:31:5b:c6:20:df: 75:0f:6f:e9:19:3f:16:86:cf:87:9b:e3:dd:99:e6:b6:50:bf: e7:1d:ee:00:c5:67:8d:0d:c2:76:7b:5b:58:d8:e2:85:73:80: 9c:2e:47:0f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcKjbN1lpJrh2y0uiHAbxxBhJNsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTQxNzMxMDJaFw0yNjAyMTMxNzM2MDJaMDMxMTAvBgNV BAMTKDA4MjMzQkFEQTRERDlDRTBEREI5M0JEMEE0MDJBRDk5MDRBMkFFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO4u1128HnQq78JFmy2pVMMcRS xVVBhNkVGcUMvocwxtn+22U/4MNsg0bI0y2HnTjCXA5GREksVgYYpy3rCbB+SDYD sJ4ByzpegS6U8+aSfq61PAKAFzvvI6M0/IDZDyUDeS/cmEGgNQXWGp0F4BujmTc4 /wNL0Z7tGZdeDDS6y7dK5oLPGHeWRZE+V6VZmY+IqlNeNJXByPC9tAGZdL82EQOI 99dspoXjiAHZwSe4EYHux8kfeGHdKe3Xfvz0MoTXFop+nk/ON0Kb7+Xi6yeU3+p3 JeEuBbzuTXYmFOIqI+weo2y1TRtMCAYUu9fdeJtHFt6phrSyzkewk5YgFVAvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIIzutpN2c4N25 O9CkAq2ZBKKuijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjZq dXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5SmMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I2 anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzAvMDgy MzNCQURBNEREOUNFMEREQjkzQkQwQTQwMkFEOTkwNEEyQUU4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj9C4MA0EAgACMAcDBQAoBCrIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLnjANBgkqhkiG9w0BAQsFAAOCAQEAcqkCCgtVddZaGWpK JEexHhTqIlsCD6yYXUmsOQqOz17sJAmPdnlhZG7U1oeeKCOn2q8bTXwaV30ADB+o kD6SxKA7AY3kinVSDRU6R6Cz+lylgbphL0kRJYtPER4U5CVfypdlOXBOBl1nVYQP /lLNERMnVYGQiWt6A8R0cHEpzMslkKNsGSVgmlGwuwZ8vWxHJMs6Lrn4om/QtNWR QwuEX1dnylU8LxwrMBdLfJkgWS6rQOp2iMZqu/CGFg8GYiMruJT2MaYcsEhLrshm Z33U8dzgcDFbxiDfdQ9v6Rk/FobPh5vj3ZnmtlC/5x3uAMVnjQ3CdntbWNjihXOA nC5HDw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:16:31 2025 by rpki-client