$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer File: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer (raw, json) Hash identifier: t+OHUh8TKxLyAM7gZ+3SLfChWdHVBYbveKOop0Hy0IM= Subject key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46347ACD95B5F8501734BD0A5C4CA71013FE29C2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft caRepository: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 11:02:33 +0000 Certificate not after: Fri 06 Mar 2026 11:07:33 +0000 Subordinate resources: AS: 266508 IP: 170.244.212.0/22 IP: 2804:38e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:34:7a:cd:95:b5:f8:50:17:34:bd:0a:5c:4c:a7:10:13:fe:29:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 11:02:33 2025 GMT Not After : Mar 6 11:07:33 2026 GMT Subject: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:22:c3:28:1b:9d:51:7f:78:ba:dd:44:f1: ae:26:bd:9f:71:75:e1:fd:97:37:5e:16:c1:d6:39: 80:7c:69:d6:d9:e3:a8:df:9c:78:29:b5:50:b0:9c: 79:a2:7c:20:62:ec:84:a3:22:a7:40:db:7e:c0:86: c4:54:ed:17:95:db:6d:6a:23:f8:a2:83:22:61:8b: 13:c9:a0:b6:66:84:6d:7b:29:b0:59:da:68:a4:ec: 8a:47:ca:a6:7a:ee:60:31:a2:04:88:57:ff:be:83: d4:46:bc:62:7e:a4:0c:f3:bb:b5:6a:26:2e:b6:7d: 37:a3:2d:55:a7:1f:e7:a7:94:c6:07:45:f6:53:ed: 0a:c2:18:4e:d9:0e:54:a1:0e:45:8b:59:2f:e6:be: 28:1b:56:7b:80:6d:9e:8a:d7:3c:55:a3:82:0b:6e: bb:46:a6:27:d2:04:7f:e5:98:13:e8:2a:0a:ce:63: 5a:39:f0:00:cb:0a:54:f8:9b:0f:5e:68:d6:2f:8e: b1:ff:b4:9a:8e:03:d9:d6:57:fa:43:31:2f:e1:cb: a5:e7:4e:e1:30:83:17:14:92:b8:25:19:72:90:69: 76:9a:d3:22:cf:ad:7f:72:8f:0a:0b:65:e0:8e:8d: ba:6e:02:fc:93:ae:af:e5:89:20:f8:c1:90:1b:2d: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.212.0/22 IPv6: 2804:38e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266508 Signature Algorithm: sha256WithRSAEncryption 35:e5:47:1e:1a:87:cc:8c:ea:bb:a5:6e:91:72:ed:6a:29:43: f3:bd:78:65:8c:3e:2a:e1:0c:0f:5c:a3:ed:24:6d:1f:fb:6a: 7a:25:6e:dd:39:75:17:2c:ab:c2:19:98:fb:7a:9f:ae:cd:71: c5:b0:5e:91:63:e7:3a:4f:5f:ad:15:33:76:27:3b:31:5f:ec: a1:e3:34:93:4f:d5:ec:27:7d:03:ca:62:e2:3b:26:1c:bd:be: bb:60:40:69:d9:c0:c1:2c:ce:90:e1:64:fe:e1:50:1a:a4:3e: f7:55:dd:36:d1:1c:b1:3c:05:97:1e:6f:41:aa:32:5a:42:8a: 1b:49:3e:2b:8b:dd:97:67:29:d0:e8:96:6a:ef:0f:b8:14:ad: c6:26:f2:fc:de:f3:f9:7b:b2:8d:31:f4:32:b9:7c:4b:a8:1a: bd:c9:67:d6:2f:55:c1:55:25:94:9f:f2:fd:e5:e7:a0:f2:5f: 3f:8f:09:1f:6b:25:ff:c8:9d:4e:63:4a:4d:a5:e8:ab:87:96: c7:23:c9:f6:c3:c8:94:41:98:28:71:60:80:90:db:09:ba:bd: 14:c4:ac:be:53:5b:8a:9b:5e:59:df:c9:5b:b0:7a:e9:e8:16: 7e:92:de:96:a8:6b:85:d4:3c:0f:03:26:ad:8f:b5:47:59:35: 94:72:9f:23 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURjR6zZW1+FAXNL0KXEynEBP+KcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMTAyMzNaFw0yNjAzMDYxMTA3MzNaMDMxMTAvBgNV BAMTKDEwQ0MzRUQzMEVEMkI5RTE5QTdFRDA4RUIwNkQ2ODgzRkU0QTIyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHiLDKBudUX94ut1E8a4mvZ9x deH9lzdeFsHWOYB8adbZ46jfnHgptVCwnHmifCBi7ISjIqdA237AhsRU7ReV221q I/iigyJhixPJoLZmhG17KbBZ2mik7IpHyqZ67mAxogSIV/++g9RGvGJ+pAzzu7Vq Ji62fTejLVWnH+enlMYHRfZT7QrCGE7ZDlShDkWLWS/mvigbVnuAbZ6K1zxVo4IL brtGpifSBH/lmBPoKgrOY1o58ADLClT4mw9eaNYvjrH/tJqOA9nWV/pDMS/hy6Xn TuEwgxcUkrglGXKQaXaa0yLPrX9yjwoLZeCOjbpuAvyTrq/liSD4wZAbLRk5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQzD7TDtK54Zp+ 0I6wbWiD/koiHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN05V VjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZFTGIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN05V VjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZFTGIvMS8xMEND M0VEMzBFRDJCOUUxOUE3RUQwOEVCMDZENjg4M0ZFNEEyMjFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq9NQwDQQCAAIwBwMFACgEOOQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBEMMA0GCSqGSIb3DQEBCwUAA4IBAQA15UceGofMjOq7pW6R cu1qKUPzvXhljD4q4QwPXKPtJG0f+2p6JW7dOXUXLKvCGZj7ep+uzXHFsF6RY+c6 T1+tFTN2JzsxX+yh4zSTT9XsJ30DymLiOyYcvb67YEBp2cDBLM6Q4WT+4VAapD73 Vd020RyxPAWXHm9BqjJaQoobST4ri92XZynQ6JZq7w+4FK3GJvL83vP5e7KNMfQy uXxLqBq9yWfWL1XBVSWUn/L95eeg8l8/jwkfayX/yJ1OY0pNpeirh5bHI8n2w8iU QZgocWCAkNsJur0UxKy+U1uKm15Z38lbsHrp6BZ+kt6WqGuF1DwPAyatj7VHWTWU cp8j -----END CERTIFICATE-----Generated at Sat Apr 5 00:13:52 2025 by rpki-client