$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer File: 0E88601104C6C43AC785175C29585EFD06974620.cer (raw, json) Hash identifier: /3cJFlRSgdlWpZfb2rpb+hcbfnlrJrT6HaLBMl1qGZU= Subject key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1627079C5D1B02E8BACAC2658D9AF5033C37C913 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft caRepository: rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 07:03:50 +0000 Certificate not after: Fri 06 Mar 2026 07:08:50 +0000 Subordinate resources: AS: 264589 IP: 138.36.240.0/22 IP: 143.202.228.0/22 IP: 2804:2210::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:27:07:9c:5d:1b:02:e8:ba:ca:c2:65:8d:9a:f5:03:3c:37:c9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 07:03:50 2025 GMT Not After : Mar 6 07:08:50 2026 GMT Subject: CN=0E88601104C6C43AC785175C29585EFD06974620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:ff:62:55:c0:9e:b9:68:6f:a5:8b:b7:a8: d6:c0:4a:6a:f8:96:9b:54:7b:28:92:5a:e8:e0:e3: c6:21:a6:50:dd:33:6c:a6:41:94:2b:34:41:1c:3e: cd:4a:8b:3d:75:3d:d2:3f:02:4d:31:24:68:9f:0a: 4b:41:4e:93:20:07:57:b1:09:56:c5:6c:82:37:4a: 61:be:09:35:33:f5:4d:e9:72:52:42:6f:7a:c6:22: 08:6b:36:a1:d8:fc:47:58:20:32:e0:61:fe:7b:26: 5e:ff:f2:cd:02:fb:c3:54:91:00:84:26:ff:8c:2a: c5:6b:81:18:71:a8:24:80:33:0f:62:1a:c9:f5:b5: fd:be:27:c8:f5:09:3b:18:17:15:52:27:9f:67:41: c1:14:d3:9b:b7:37:b4:0f:3a:76:4c:9d:57:a3:13: b4:8a:56:e0:2a:15:de:8f:da:3c:6b:68:f0:bb:a1: 14:3c:a6:97:73:b7:2d:25:59:e8:78:d5:d8:27:7d: 46:65:95:e1:1f:24:d3:be:48:dd:06:60:80:3d:51: 79:36:66:32:da:fa:da:39:9c:b4:ff:c6:55:8d:6f: 62:43:cb:a0:a4:21:80:08:08:87:2e:b0:c6:fe:49: be:a9:68:17:44:40:cc:9c:83:44:f0:40:7d:a9:09: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.240.0/22 143.202.228.0/22 IPv6: 2804:2210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264589 Signature Algorithm: sha256WithRSAEncryption d0:7d:ed:91:93:23:7c:6f:c7:48:fe:8b:c6:b0:32:27:3f:52: 18:1a:82:56:cf:3e:bc:db:7e:a0:83:03:4d:3a:8c:09:d0:2b: f1:d4:0a:c5:54:98:62:f5:24:a8:92:69:69:9a:56:d8:99:77: 75:17:2a:08:0f:c5:89:d3:c4:f3:8c:a2:9d:49:fb:78:e5:eb: c7:87:91:df:19:6e:7f:80:1e:c9:ba:71:eb:7d:55:c0:e0:56: 0e:d9:ea:d4:ed:05:72:d7:c8:65:c9:7f:9a:f6:09:2e:e2:df: f0:a8:b2:c8:5a:97:dd:a7:cd:dd:e3:98:b7:af:a2:91:4b:03: 7b:02:d1:ae:a9:bc:81:4e:7b:8d:52:46:0b:2d:78:33:b5:2e: f1:7e:d0:f5:b3:16:08:4a:82:e1:2c:2b:b4:5f:fc:d5:fc:29: 6b:8b:a6:76:a3:7b:a8:08:b0:83:63:9e:ca:31:38:69:0e:d6: 8d:e7:41:7f:5c:b1:13:11:74:8f:82:a9:b2:15:97:a9:c0:d7: 51:06:cc:ba:a8:1b:03:28:65:05:73:77:9c:db:a7:5c:c9:14: 85:20:fb:a9:9c:ce:b8:38:48:68:ce:2c:1d:e3:4a:0a:a8:c7: dc:b8:84:65:b3:36:51:a0:56:9d:49:8b:64:b1:5b:8f:97:a1: 85:db:f7:d6 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUFicHnF0bAui6ysJljZr1Azw3yRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNzAzNTBaFw0yNjAzMDYwNzA4NTBaMDMxMTAvBgNV BAMTKDBFODg2MDExMDRDNkM0M0FDNzg1MTc1QzI5NTg1RUZEMDY5NzQ2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X/9iVcCeuWhvpYu3qNbASmr4 lptUeyiSWujg48YhplDdM2ymQZQrNEEcPs1Kiz11PdI/Ak0xJGifCktBTpMgB1ex CVbFbII3SmG+CTUz9U3pclJCb3rGIghrNqHY/EdYIDLgYf57Jl7/8s0C+8NUkQCE Jv+MKsVrgRhxqCSAMw9iGsn1tf2+J8j1CTsYFxVSJ59nQcEU05u3N7QPOnZMnVej E7SKVuAqFd6P2jxraPC7oRQ8ppdzty0lWeh41dgnfUZlleEfJNO+SN0GYIA9UXk2 ZjLa+to5nLT/xlWNb2JDy6CkIYAICIcusMb+Sb6paBdEQMycg0TwQH2pCVQRAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOiGARBMbEOseF F1wpWF79BpdGIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGo5 UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1aZHQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGo5 UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1aZHQvMS8wRTg4 NjAxMTA0QzZDNDNBQzc4NTE3NUMyOTU4NUVGRDA2OTc0NjIwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKJPADBAKPyuQwDQQCAAIwBwMFACgEIhAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAmNMA0GCSqGSIb3DQEBCwUAA4IBAQDQfe2RkyN8 b8dI/ovGsDInP1IYGoJWzz68236ggwNNOowJ0Cvx1ArFVJhi9SSokmlpmlbYmXd1 FyoID8WJ08TzjKKdSft45evHh5HfGW5/gB7JunHrfVXA4FYO2erU7QVy18hlyX+a 9gku4t/wqLLIWpfdp83d45i3r6KRSwN7AtGuqbyBTnuNUkYLLXgztS7xftD1sxYI SoLhLCu0X/zV/Clri6Z2o3uoCLCDY57KMThpDtaN50F/XLETEXSPgqmyFZepwNdR Bsy6qBsDKGUFc3ec26dcyRSFIPupnM64OEhoziwd40oKqMfcuIRlszZRoFadSYtk sVuPl6GF2/fW -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:58 2025 by rpki-client