$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer File: 117560A27F42885C52E66148007C2989B0339DAD.cer (raw, json) Hash identifier: HI/6TimBKyHAim8rkW3FZSKDV/0i/J43qsdwsuEsOdI= Subject key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 14BB2A902BB3E2383ABD0C94F8B133C60FB91272 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft caRepository: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 25 Jan 2025 16:09:52 +0000 Certificate not after: Sat 24 Jan 2026 16:14:52 +0000 Subordinate resources: AS: 61675 IP: 131.108.160.0/22 IP: 2804:1cc8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bb:2a:90:2b:b3:e2:38:3a:bd:0c:94:f8:b1:33:c6:0f:b9:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 25 16:09:52 2025 GMT Not After : Jan 24 16:14:52 2026 GMT Subject: CN=117560A27F42885C52E66148007C2989B0339DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:2a:af:4e:fd:4a:07:31:ec:1d:8b:c2:b2: ca:85:00:0c:73:3d:8a:ed:44:fc:98:b8:f2:31:4c: 62:42:6b:89:bb:94:84:b0:4b:91:e4:f7:cc:d2:9a: a9:51:65:8d:f0:66:d0:41:c3:ac:ea:78:e5:e4:5d: a7:4d:68:e6:e2:7a:f6:36:04:86:72:13:79:f4:da: b4:65:cd:a3:e7:a5:47:9f:bf:d5:b6:91:61:cb:4a: 41:b7:97:f7:1b:f4:f8:8e:65:92:26:bf:7b:61:e3: 22:fa:ec:e9:54:bd:5d:4c:2b:56:25:bc:86:02:f1: 28:c0:ae:59:d5:d4:dd:b3:c2:1b:c5:12:74:ed:a1: 4b:49:6d:71:dc:29:ec:c0:0a:0d:0b:b5:74:61:0b: 79:95:63:a2:59:b3:38:09:83:e7:34:55:6e:8f:c6: 2a:a5:3b:35:eb:c8:d7:7b:d5:e5:14:31:60:9d:b0: cb:a6:4b:42:9b:f8:55:fd:03:d4:62:da:d5:d6:86: f4:63:21:3b:a8:18:ce:f9:bb:1f:67:14:4f:60:a2: 14:c5:bc:9b:e1:13:b8:76:8f:a6:19:e7:e2:6d:0a: 07:4b:de:5e:34:71:f5:05:3e:67:75:c5:24:3f:5f: 38:96:2f:30:9f:2b:5a:ba:1c:61:42:51:f3:aa:91: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.160.0/22 IPv6: 2804:1cc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61675 Signature Algorithm: sha256WithRSAEncryption 0f:7d:e3:cb:d1:aa:04:7c:1a:94:62:6b:c8:63:30:5a:fd:cc: 7f:e1:f0:74:b2:96:5b:78:09:9c:19:13:61:f2:7c:db:99:8b: 0c:d8:4e:5e:24:5b:63:c8:a7:22:c8:0b:09:73:96:c6:9d:29: d6:9d:7b:1f:58:ed:ef:14:49:6f:fc:91:f1:f4:66:43:48:3e: 00:0f:8c:2e:f3:55:34:4b:70:50:98:3c:84:a0:95:68:73:e5: 43:64:97:cf:ef:cf:32:57:76:13:96:64:2f:25:50:76:1c:35: 84:75:60:9b:39:4e:36:fc:4d:c3:70:2f:83:e6:af:8a:d6:84: 98:c6:74:cc:c2:02:14:13:77:14:c9:be:c8:31:27:2a:bd:f1: 1e:8d:06:07:67:c6:f3:9b:b9:5a:11:0d:e2:09:df:f9:73:80: 4a:1b:14:e4:68:4e:9a:be:de:fd:58:9b:d6:52:dd:18:bc:ae: 94:ff:73:3c:99:c5:12:e7:f1:d6:77:d8:58:27:d2:38:f5:76: e2:36:31:f6:fc:78:cf:d9:b8:ed:2e:82:f1:80:ee:eb:0e:98: 89:00:64:ce:e3:62:49:53:55:ca:00:4f:4b:63:5f:a9:b4:f5: b4:18:81:8b:6e:f5:99:a6:c1:48:da:fb:0a:37:24:ce:0b:f2: 45:1e:d7:22 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFLsqkCuz4jg6vQyU+LEzxg+5EnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjUxNjA5NTJaFw0yNjAxMjQxNjE0NTJaMDMxMTAvBgNV BAMTKDExNzU2MEEyN0Y0Mjg4NUM1MkU2NjE0ODAwN0MyOTg5QjAzMzlEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLpSqvTv1KBzHsHYvCssqFAAxz PYrtRPyYuPIxTGJCa4m7lISwS5Hk98zSmqlRZY3wZtBBw6zqeOXkXadNaObievY2 BIZyE3n02rRlzaPnpUefv9W2kWHLSkG3l/cb9PiOZZImv3th4yL67OlUvV1MK1Yl vIYC8SjArlnV1N2zwhvFEnTtoUtJbXHcKezACg0LtXRhC3mVY6JZszgJg+c0VW6P xiqlOzXryNd71eUUMWCdsMumS0Kb+FX9A9Ri2tXWhvRjITuoGM75ux9nFE9gohTF vJvhE7h2j6YZ5+JtCgdL3l40cfUFPmd1xSQ/XziWLzCfK1q6HGFCUfOqkdvzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRdWCif0KIXFLm YUgAfCmJsDOdrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFhU UmhjTEdqbmNXOUp0NThucXRrcFpjZm92b2R1VWFXYmFaR056R0JUNVcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhY VFJoY0xHam5jVzlKdDU4bnF0a3BaY2Zvdm9kdVVhV2JhWkdOekdCVDVXLzAvMTE3 NTYwQTI3RjQyODg1QzUyRTY2MTQ4MDA3QzI5ODlCMDMzOURBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2ygMA0EAgACMAcDBQAoBBzIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDw6zANBgkqhkiG9w0BAQsFAAOCAQEAD33jy9GqBHwalGJr yGMwWv3Mf+HwdLKWW3gJnBkTYfJ825mLDNhOXiRbY8inIsgLCXOWxp0p1p17H1jt 7xRJb/yR8fRmQ0g+AA+MLvNVNEtwUJg8hKCVaHPlQ2SXz+/PMld2E5ZkLyVQdhw1 hHVgmzlONvxNw3Avg+avitaEmMZ0zMICFBN3FMm+yDEnKr3xHo0GB2fG85u5WhEN 4gnf+XOAShsU5GhOmr7e/Vib1lLdGLyulP9zPJnFEufx1nfYWCfSOPV24jYx9vx4 z9m47S6C8YDu6w6YiQBkzuNiSVNVygBPS2NfqbT1tBiBi271mabBSNr7Cjckzgvy RR7XIg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:42 2025 by rpki-client