$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer File: 098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer (raw, json) Hash identifier: 4wkYVMqG7gJOT9Jsw2u63VEgFQ9EsYOUxQwP1lzFmWM= Subject key identifier: 09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2800154FA54AC80F169AA8E25D2671DF21E6EEF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft caRepository: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 03:55:50 +0000 Certificate not after: Fri 06 Mar 2026 04:00:50 +0000 Subordinate resources: AS: 270358 IP: 190.89.72.0/22 IP: 2804:6ac8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 01:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:00:15:4f:a5:4a:c8:0f:16:9a:a8:e2:5d:26:71:df:21:e6:ee:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 03:55:50 2025 GMT Not After : Mar 6 04:00:50 2026 GMT Subject: CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:23:a4:50:20:9b:57:cb:99:96:23:8f:de: 9d:6e:6f:b9:55:19:85:d0:aa:d8:fe:3f:88:ff:c0: 26:c0:fb:82:11:39:89:3d:c5:77:a8:b8:03:24:f3: 49:f1:bf:ac:61:e7:b0:5e:46:3f:46:b5:94:27:c1: d3:24:d2:bd:c5:e3:e6:31:ae:44:3d:32:1b:3d:cb: 22:1d:07:d2:ed:8e:83:39:99:f9:da:54:bf:34:5d: 5d:69:8e:25:0f:c8:a0:b8:42:b9:db:44:33:7b:0d: 88:cb:17:2a:09:c6:00:0e:51:e6:f4:a9:ef:75:02: aa:69:bd:a0:b2:82:c2:5f:aa:f8:91:be:f9:ee:a5: 3b:c4:9c:6c:2d:7e:69:dc:9f:17:1f:62:51:68:85: 6d:f7:a2:32:4c:e0:bb:7c:fe:fc:f8:cc:59:3e:7b: 1b:d0:18:53:db:14:83:8c:5e:e5:de:e0:27:f3:e3: 6f:db:31:d5:a3:77:18:be:34:48:ac:22:28:d5:ab: ea:33:35:b6:c9:c9:5f:56:2d:00:2a:62:21:38:b5: 67:31:a2:28:5f:b4:b8:ba:60:cd:b3:bb:d5:5b:e3: 25:76:a9:68:75:06:78:c3:ed:17:48:b9:df:f8:c4: f1:32:ba:36:8a:7e:c6:93:1d:19:4d:98:6d:bd:5f: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.72.0/22 IPv6: 2804:6ac8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270358 Signature Algorithm: sha256WithRSAEncryption 39:0e:7f:9f:4c:5e:b3:a0:d6:92:a1:37:1c:c0:16:9e:7c:66: 73:d6:8d:02:c9:f3:3e:dc:8f:d0:06:03:99:1e:8d:16:ed:41: 08:f1:85:43:46:8b:e3:4e:97:b6:4c:41:b0:ab:1e:8a:6a:33: 41:56:ae:4a:28:b2:2f:74:11:b2:3e:06:ad:7d:52:cd:ad:11: fc:41:e9:b9:0a:44:ab:16:4c:75:8d:13:df:41:3a:6d:f5:9b: 11:e9:19:b1:2f:c5:13:4d:cb:2d:a5:d7:30:48:13:ca:40:39: 46:ff:d6:96:51:2d:42:80:67:fb:3c:ae:0b:86:4f:45:56:3c: 0a:65:68:9d:9b:cb:d2:a3:91:a4:ed:f1:f9:76:af:5e:e2:76: 36:a8:58:34:c7:58:eb:d7:60:0e:7f:67:24:2c:17:0c:7d:f4: 87:12:2b:0d:db:8e:1d:d2:5c:46:cf:56:44:ed:df:b4:3c:8e: 8a:93:e0:c4:5d:94:a2:ab:d5:dd:64:74:9d:3a:7a:f2:6c:12: 60:fc:06:42:49:00:88:65:e4:ae:c3:a4:60:ef:ee:04:cf:8f: 69:d4:ed:15:47:f6:aa:08:06:cf:6e:99:34:5b:32:66:b6:6b: 88:10:02:64:96:30:c4:64:41:63:a8:c7:24:4f:55:22:ba:ea: 55:94:b8:1f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKAAVT6VKyA8WmqjiXSZx3yHm7vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMzU1NTBaFw0yNjAzMDYwNDAwNTBaMDMxMTAvBgNV BAMTKDA5OEJFRkVCNUIxREE0NURDN0Y3NjE5Q0QwMUE4MDNFQUYzOTFEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkCOkUCCbV8uZliOP3p1ub7lV GYXQqtj+P4j/wCbA+4IROYk9xXeouAMk80nxv6xh57BeRj9GtZQnwdMk0r3F4+Yx rkQ9Mhs9yyIdB9LtjoM5mfnaVL80XV1pjiUPyKC4QrnbRDN7DYjLFyoJxgAOUeb0 qe91AqppvaCygsJfqviRvvnupTvEnGwtfmncnxcfYlFohW33ojJM4Lt8/vz4zFk+ exvQGFPbFIOMXuXe4Cfz42/bMdWjdxi+NEisIijVq+ozNbbJyV9WLQAqYiE4tWcx oihftLi6YM2zu9Vb4yV2qWh1BnjD7RdIud/4xPEyujaKfsaTHRlNmG29XyAHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJi+/rWx2kXcf3 YZzQGoA+rzkdfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNENj VjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJnQUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRD Y1Y4WUpHOTQxYU02VnNXcnBUVFVEMW93cW1Bd2lYQzJmTFc5YWIyZ0FILzEvMDk4 QkVGRUI1QjFEQTQ1REM3Rjc2MTlDRDAxQTgwM0VBRjM5MUQ3RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvllIMA0EAgACMAcDBQAoBGrIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgFjANBgkqhkiG9w0BAQsFAAOCAQEAOQ5/n0xes6DWkqE3 HMAWnnxmc9aNAsnzPtyP0AYDmR6NFu1BCPGFQ0aL406XtkxBsKseimozQVauSiiy L3QRsj4GrX1Sza0R/EHpuQpEqxZMdY0T30E6bfWbEekZsS/FE03LLaXXMEgTykA5 Rv/WllEtQoBn+zyuC4ZPRVY8CmVonZvL0qORpO3x+XavXuJ2NqhYNMdY69dgDn9n JCwXDH30hxIrDduOHdJcRs9WRO3ftDyOipPgxF2UoqvV3WR0nTp68mwSYPwGQkkA iGXkrsOkYO/uBM+PadTtFUf2qggGz26ZNFsyZrZriBACZJYwxGRBY6jHJE9VIrrq VZS4Hw== -----END CERTIFICATE-----Generated at Wed Apr 9 03:53:21 2025 by rpki-client