$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer File: 13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer (raw, json) Hash identifier: be8rpxEbWw2dWHrR4avf24sVZfZUPArKx86byd9a6Hg= Subject key identifier: 13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 160444A0325B0D8896E775F562CAF062C69DDD0A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.mft caRepository: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Jan 2025 12:51:13 +0000 Certificate not after: Thu 08 Jan 2026 12:56:13 +0000 Subordinate resources: AS: 263913 IP: 138.204.240.0/22 IP: 170.231.216.0/22 IP: 2804:279c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:04:44:a0:32:5b:0d:88:96:e7:75:f5:62:ca:f0:62:c6:9d:dd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 9 12:51:13 2025 GMT Not After : Jan 8 12:56:13 2026 GMT Subject: CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ae:90:69:83:65:f3:de:2a:79:cf:3e:fd:a7: e1:c2:f6:3c:c9:d7:15:50:f3:82:9b:7e:a0:24:6f: 9f:a8:fe:74:20:63:a5:75:9b:cf:50:4f:db:c0:03: ca:df:aa:c9:9b:b4:75:98:99:de:37:90:48:c4:d5: e4:c3:cb:45:19:84:b5:42:83:96:9a:13:07:24:95: 8f:02:a6:59:b4:35:c3:3c:7a:44:5d:39:bd:cd:54: 2a:f4:88:5d:fc:64:e3:5c:c0:4c:c3:18:cb:96:59: 05:c6:a3:51:34:c8:56:91:84:b4:f0:8e:10:6c:b0: 73:f9:d4:1a:88:2b:2d:0b:b9:96:dd:66:57:f3:d1: 6c:34:9a:7f:3e:e8:57:ef:f4:c7:39:fe:04:c5:c2: b9:cb:09:09:3a:3b:21:93:c8:23:cf:f1:76:45:76: d7:42:9c:2b:6e:77:04:b4:32:d4:d2:45:15:c3:01: 92:57:46:f9:bd:b9:9a:0e:ed:e3:66:ae:45:58:b9: 7c:cf:6c:22:2b:a9:2c:1f:65:7c:df:ff:b8:8a:a1: fd:8a:84:79:0b:ba:e7:29:ac:50:c9:20:84:57:3e: 4d:42:93:c5:be:7f:8b:78:52:66:4e:b6:c2:4e:f1: dd:0f:51:44:25:a9:e2:3b:dd:7d:41:04:87:d4:5c: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.240.0/22 170.231.216.0/22 IPv6: 2804:279c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263913 Signature Algorithm: sha256WithRSAEncryption cc:46:42:d7:da:a2:ca:b9:50:f5:c5:f5:42:0b:dd:92:0e:18: d8:97:74:a0:d7:d9:71:38:90:c6:66:28:45:b0:77:46:37:11: 90:8c:47:dd:42:62:5a:cf:f6:30:3c:c6:bc:d9:34:a2:80:c3: 35:a6:12:39:ff:16:ce:27:b8:c8:a3:05:a0:b0:99:06:2e:3e: c2:77:55:ad:cc:a3:f5:61:cb:f1:fe:ce:fe:b5:93:f6:8e:6e: e1:b9:7a:35:36:cb:c1:97:ec:14:03:60:c1:36:67:6d:24:38: 9d:3e:66:96:9a:6f:99:f1:34:0e:4b:ed:80:0c:d2:4a:a3:f2: 93:95:25:82:20:f6:27:e4:4a:b8:40:59:f5:ea:a2:c7:ba:85: 0c:7d:0a:ff:af:50:b0:e8:09:9e:42:01:d0:f8:f8:9e:6e:4c: 90:50:29:04:d2:cc:b9:72:67:96:a0:f2:aa:83:de:ff:68:32: f0:a4:2f:68:a9:6f:5e:5a:c4:07:ed:35:c9:0a:b5:72:33:84: 40:5b:59:ab:b2:33:b9:b0:52:4a:ac:8b:9b:e9:f4:37:a8:0b: 22:33:3a:33:7c:bc:92:75:1f:15:a1:b3:05:9d:44:fb:22:0f: d4:85:14:10:fa:44:97:36:0f:93:e3:81:16:2b:ee:36:ab:b9: 80:2d:2e:78 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFgREoDJbDYiW53X1YsrwYsad3QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDkxMjUxMTNaFw0yNjAxMDgxMjU2MTNaMDMxMTAvBgNV BAMTKDEzQjQ4RDE0NENDQjFCNERFNDdGMzRGRjhGRjNBRUY4MkQ4NzE0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrpBpg2Xz3ip5zz79p+HC9jzJ 1xVQ84KbfqAkb5+o/nQgY6V1m89QT9vAA8rfqsmbtHWYmd43kEjE1eTDy0UZhLVC g5aaEwcklY8Cplm0NcM8ekRdOb3NVCr0iF38ZONcwEzDGMuWWQXGo1E0yFaRhLTw jhBssHP51BqIKy0LuZbdZlfz0Ww0mn8+6Ffv9Mc5/gTFwrnLCQk6OyGTyCPP8XZF dtdCnCtudwS0MtTSRRXDAZJXRvm9uZoO7eNmrkVYuXzPbCIrqSwfZXzf/7iKof2K hHkLuucprFDJIIRXPk1Ck8W+f4t4UmZOtsJO8d0PUUQlqeI73X1BBIfUXM9HAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTtI0UTMsbTeR/ NP+P8674LYcUSzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1dU OWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NX VDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAvMTNC NDhEMTQ0Q0NCMUI0REU0N0YzNEZGOEZGM0FFRjgyRDg3MTQ0Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiszwAwQCqufYMA0EAgACMAcDBQAoBCecMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG6TANBgkqhkiG9w0BAQsFAAOCAQEAzEZC19qi yrlQ9cX1Qgvdkg4Y2Jd0oNfZcTiQxmYoRbB3RjcRkIxH3UJiWs/2MDzGvNk0ooDD NaYSOf8Wzie4yKMFoLCZBi4+wndVrcyj9WHL8f7O/rWT9o5u4bl6NTbLwZfsFANg wTZnbSQ4nT5mlppvmfE0DkvtgAzSSqPyk5UlgiD2J+RKuEBZ9eqix7qFDH0K/69Q sOgJnkIB0Pj4nm5MkFApBNLMuXJnlqDyqoPe/2gy8KQvaKlvXlrEB+01yQq1cjOE QFtZq7IzubBSSqyLm+n0N6gLIjM6M3y8knUfFaGzBZ1E+yIP1IUUEPpElzYPk+OB FivuNqu5gC0ueA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:09 2025 by rpki-client