$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer File: 088FDBB1B4836269897C88564BFDA8CC6E837086.cer (raw, json) Hash identifier: p5Fss3uNUmty3vZ6NvlxCOIzIDiI3O5aBhqBT8S2Rlo= Subject key identifier: 08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0FE9753FBC2A01B8C9471497FE24FC216BADEB4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft caRepository: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 12:58:56 +0000 Certificate not after: Thu 09 Apr 2026 13:03:56 +0000 Subordinate resources: AS: 264316 IP: 138.122.40.0/22 IP: 168.121.216.0/22 IP: 2804:25fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 16:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e9:75:3f:bc:2a:01:b8:c9:47:14:97:fe:24:fc:21:6b:ad:eb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 12:58:56 2025 GMT Not After : Apr 9 13:03:56 2026 GMT Subject: CN=088FDBB1B4836269897C88564BFDA8CC6E837086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f1:6f:f3:be:79:a5:c4:d2:4c:64:52:e4:c1: 9f:13:44:11:d2:94:1f:41:5e:fd:14:1c:24:52:bc: 29:d7:d2:87:75:a1:49:1f:a9:f6:9f:58:14:d8:27: c1:6a:8f:2d:f2:d0:1d:23:37:87:d7:e8:fa:be:18: b1:68:8a:93:a5:f4:b7:26:81:7a:85:90:75:d2:b9: c1:ce:58:49:af:2a:6b:3c:bc:a2:c2:2c:52:e5:29: d1:2b:b4:ac:70:00:7c:1a:55:f3:e7:53:c7:d4:11: f2:76:3a:12:87:3d:79:d0:42:79:13:e9:05:5d:1c: 47:a2:2f:a2:af:07:09:24:28:c6:93:ca:9a:fc:20: 8c:6e:83:2a:a0:92:fa:25:c8:40:a3:b0:60:59:7f: 93:59:c1:9e:25:b7:6e:59:71:8b:d3:2b:14:78:eb: fd:ba:df:8c:00:c2:c6:05:b0:84:b1:de:66:b7:11: 07:af:31:1a:c8:ec:2a:ec:e8:7c:09:61:08:e6:73: 96:e1:5e:20:1c:7a:42:79:e3:88:e0:fe:e3:3d:2b: b7:c1:33:d7:2c:33:68:48:5c:6b:f7:03:04:14:21: 3e:af:09:e6:57:43:38:27:26:4a:fa:7e:f3:a8:45: ca:76:29:06:77:4a:bc:33:16:86:ef:7e:57:37:b1: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.40.0/22 168.121.216.0/22 IPv6: 2804:25fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264316 Signature Algorithm: sha256WithRSAEncryption 91:04:fb:ed:c2:6a:a8:f7:ce:02:d3:ba:ea:c3:4e:b8:3c:83: dc:01:5e:5a:07:40:ff:1e:93:31:1f:b7:e4:bf:cd:64:af:86: e0:4a:5b:d9:fc:50:f1:b7:dd:26:6d:18:a2:af:d7:72:35:8c: 6e:c8:23:02:0d:40:75:f8:87:77:08:36:5b:9c:00:56:37:d0: b6:eb:c0:2b:11:ee:44:53:3e:ba:dd:a3:74:ea:0c:ac:14:6c: 11:af:f9:00:b4:36:13:67:d3:c2:f8:e9:16:eb:3d:ec:79:4c: cc:bf:3c:0e:e0:c2:66:66:01:06:c4:c1:06:6c:15:d3:ac:91: 4c:37:67:37:33:fc:32:1b:dd:46:27:02:31:68:b8:34:36:17: fc:4b:bc:12:f2:24:75:fa:ff:b0:c6:7f:e9:43:f8:2f:41:81: b6:0c:b7:84:3c:69:5c:59:d5:6c:e7:52:d8:19:8a:32:72:68: 58:e4:cd:dc:05:97:de:86:4b:79:3f:98:e0:57:16:64:ba:35: 07:71:46:66:99:f3:9f:c1:eb:18:9f:27:53:cf:e9:14:8d:5e: 82:5b:29:e3:d0:76:39:67:ec:0c:45:e5:07:7a:8a:b1:d5:d4: 70:ac:34:b6:d8:51:b4:60:36:78:9e:e8:79:b6:19:c5:91:ed: 39:82:c4:c0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUD+l1P7wqAbjJRxSX/iT8IWut600wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTAxMjU4NTZaFw0yNjA0MDkxMzAzNTZaMDMxMTAvBgNV BAMTKDA4OEZEQkIxQjQ4MzYyNjk4OTdDODg1NjRCRkRBOENDNkU4MzcwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs8W/zvnmlxNJMZFLkwZ8TRBHS lB9BXv0UHCRSvCnX0od1oUkfqfafWBTYJ8Fqjy3y0B0jN4fX6Pq+GLFoipOl9Lcm gXqFkHXSucHOWEmvKms8vKLCLFLlKdErtKxwAHwaVfPnU8fUEfJ2OhKHPXnQQnkT 6QVdHEeiL6KvBwkkKMaTypr8IIxugyqgkvolyECjsGBZf5NZwZ4lt25ZcYvTKxR4 6/2634wAwsYFsISx3ma3EQevMRrI7Crs6HwJYQjmc5bhXiAcekJ544jg/uM9K7fB M9csM2hIXGv3AwQUIT6vCeZXQzgnJkr6fvOoRcp2KQZ3SrwzFobvflc3sbAvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIj9uxtINiaYl8 iFZL/ajMboNwhjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTJC S2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1cm0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Uy QktiNmV0VVFUd0hFWEpCUDgyREtTYjhNU3pQSlA0SlN3d1pzbks2NXJtLzAvMDg4 RkRCQjFCNDgzNjI2OTg5N0M4ODU2NEJGREE4Q0M2RTgzNzA4Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinooAwQCqHnYMA0EAgACMAcDBQAoBCX8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIfDANBgkqhkiG9w0BAQsFAAOCAQEAkQT77cJq qPfOAtO66sNOuDyD3AFeWgdA/x6TMR+35L/NZK+G4Epb2fxQ8bfdJm0Yoq/XcjWM bsgjAg1AdfiHdwg2W5wAVjfQtuvAKxHuRFM+ut2jdOoMrBRsEa/5ALQ2E2fTwvjp Fus97HlMzL88DuDCZmYBBsTBBmwV06yRTDdnNzP8MhvdRicCMWi4NDYX/Eu8EvIk dfr/sMZ/6UP4L0GBtgy3hDxpXFnVbOdS2BmKMnJoWOTN3AWX3oZLeT+Y4FcWZLo1 B3FGZpnzn8HrGJ8nU8/pFI1eglsp49B2OWfsDEXlB3qKsdXUcKw0tthRtGA2eJ7o ebYZxZHtOYLEwA== -----END CERTIFICATE-----Generated at Sat Apr 12 20:52:59 2025 by rpki-client