$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/119D181C1F7F7AED7CDB9250C39C8255DB46EB2F.cer File: 119D181C1F7F7AED7CDB9250C39C8255DB46EB2F.cer (raw, json) Hash identifier: TnnyhRfix3nG9/JSs1HMx+UuW8CpFC+nPVt2R9j7Il4= Subject key identifier: 11:9D:18:1C:1F:7F:7A:ED:7C:DB:92:50:C3:9C:82:55:DB:46:EB:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3889A9749ECEF38AE17B0F3A738C9F5601AB35B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/119D181C1F7F7AED7CDB9250C39C8255DB46EB2F.mft caRepository: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 15:06:18 +0000 Certificate not after: Thu 26 Mar 2026 15:11:18 +0000 Subordinate resources: AS: 273729 IP: 168.121.20.0/22 IP: 2804:8b64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:89:a9:74:9e:ce:f3:8a:e1:7b:0f:3a:73:8c:9f:56:01:ab:35:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 15:06:18 2025 GMT Not After : Mar 26 15:11:18 2026 GMT Subject: CN=119D181C1F7F7AED7CDB9250C39C8255DB46EB2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:6f:10:36:f5:15:4e:b7:00:1f:e0:2c:dc: 0a:68:7a:fc:e3:f7:eb:a5:bc:90:42:44:0a:3d:27: 1c:94:53:27:e1:e6:30:ab:d8:f2:ef:44:3c:59:68: e7:9e:26:6e:7e:df:57:da:41:40:8f:97:9b:df:65: 20:db:5c:12:94:36:54:7e:34:56:6d:2a:48:8b:d1: e0:07:da:f7:44:68:c3:15:f2:b3:61:bc:97:88:6b: de:67:f2:e3:44:a2:77:2c:ad:92:65:46:ee:06:e5: f4:b4:59:2c:1b:04:6c:f8:e6:ff:bf:38:29:9a:19: a0:27:5f:22:00:b6:ce:4e:7d:f9:a3:0e:ad:dd:33: ec:ad:fd:db:54:c3:fb:a4:83:d7:7d:c0:7d:3d:90: cf:e1:1c:09:26:21:d2:28:2a:da:2e:47:93:07:bf: 74:84:f2:6f:f7:03:9c:69:09:e3:c7:57:de:a0:9a: 7d:02:b4:25:ab:b4:e0:51:2a:10:9b:62:5c:fc:71: 78:5a:48:65:3b:67:54:35:ad:35:4b:73:d9:42:8d: c7:ff:e2:29:48:80:7b:17:35:b3:09:a3:93:df:c3: 2e:8a:0a:45:9d:99:c7:77:b2:41:c0:67:98:af:55: f4:86:4b:94:01:71:80:2e:09:9a:dd:81:5b:93:0c: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:9D:18:1C:1F:7F:7A:ED:7C:DB:92:50:C3:9C:82:55:DB:46:EB:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/119D181C1F7F7AED7CDB9250C39C8255DB46EB2F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.20.0/22 IPv6: 2804:8b64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273729 Signature Algorithm: sha256WithRSAEncryption cc:c1:84:86:87:5d:9c:c2:99:bf:2f:13:27:a0:cc:73:a3:66: 32:d1:8d:ac:c8:7d:78:23:e3:14:84:6e:71:4e:39:b8:d8:00: 06:97:22:e1:bf:25:b3:35:8a:08:8f:5d:5a:39:27:f1:f5:4b: 03:44:94:10:86:35:b3:f1:16:aa:d1:a7:04:79:1c:62:71:38: 25:3b:b0:55:0a:e2:38:06:56:67:b2:5c:22:c2:54:2e:35:b2: 14:97:64:a3:8f:a2:e9:a7:7f:4b:65:b5:f4:ab:e2:2d:2f:56: 13:93:8b:ba:9d:ed:ad:15:91:3e:20:bf:3b:fd:77:a8:1b:73: f5:8a:8e:b0:f7:a1:74:c3:20:6b:01:d5:79:4b:20:65:e9:ad: 7b:07:9a:41:66:45:71:3a:47:9b:87:e9:90:00:b7:74:87:69: cc:bd:96:5c:c8:d4:9b:be:41:27:41:48:d2:3c:c8:42:fe:be: 17:16:e1:d2:77:0c:09:6c:a8:35:ff:26:4b:74:0b:cb:58:c6: e8:6e:0c:8c:ef:76:30:4d:cd:8c:96:71:ad:c1:eb:95:b7:cb: 6b:f5:44:92:2c:12:a6:c3:89:64:0e:2d:5f:fd:a1:7d:2a:0a: e6:37:0e:b8:61:94:03:eb:4a:e4:a8:c0:b2:fa:e2:fe:58:88: 33:be:63:28 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOImpdJ7O84rhew86c4yfVgGrNbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcxNTA2MThaFw0yNjAzMjYxNTExMThaMDMxMTAvBgNV BAMTKDExOUQxODFDMUY3RjdBRUQ3Q0RCOTI1MEMzOUM4MjU1REI0NkVCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsG8QNvUVTrcAH+As3Apoevzj 9+ulvJBCRAo9JxyUUyfh5jCr2PLvRDxZaOeeJm5+31faQUCPl5vfZSDbXBKUNlR+ NFZtKkiL0eAH2vdEaMMV8rNhvJeIa95n8uNEoncsrZJlRu4G5fS0WSwbBGz45v+/ OCmaGaAnXyIAts5OffmjDq3dM+yt/dtUw/ukg9d9wH09kM/hHAkmIdIoKtouR5MH v3SE8m/3A5xpCePHV96gmn0CtCWrtOBRKhCbYlz8cXhaSGU7Z1Q1rTVLc9lCjcf/ 4ilIgHsXNbMJo5Pfwy6KCkWdmcd3skHAZ5ivVfSGS5QBcYAuCZrdgVuTDCvNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRnRgcH3967Xzb klDDnIJV20brLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjZi R1pIR1dBZlFhZGJZVmVUQXRGOTMxUEU5UGk0N2JtU3F0Qm9hWFVtdHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2 YkdaSEdXQWZRYWRiWVZlVEF0RjkzMVBFOVBpNDdibVNxdEJvYVhVbXRwLzAvMTE5 RDE4MUMxRjdGN0FFRDdDREI5MjUwQzM5QzgyNTVEQjQ2RUIyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqHkUMA0EAgACMAcDBQAoBItkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQtQTANBgkqhkiG9w0BAQsFAAOCAQEAzMGEhoddnMKZvy8T J6DMc6NmMtGNrMh9eCPjFIRucU45uNgABpci4b8lszWKCI9dWjkn8fVLA0SUEIY1 s/EWqtGnBHkcYnE4JTuwVQriOAZWZ7JcIsJULjWyFJdko4+i6ad/S2W19KviLS9W E5OLup3trRWRPiC/O/13qBtz9YqOsPehdMMgawHVeUsgZemteweaQWZFcTpHm4fp kAC3dIdpzL2WXMjUm75BJ0FI0jzIQv6+Fxbh0ncMCWyoNf8mS3QLy1jG6G4MjO92 ME3NjJZxrcHrlbfLa/VEkiwSpsOJZA4tX/2hfSoK5jcOuGGUA+tK5KjAsvri/liI M75jKA== -----END CERTIFICATE-----Generated at Fri Apr 4 10:22:53 2025 by rpki-client