$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer File: 14FF5A751C4E19792B967D92C271B9738745BFED.cer (raw, json) Hash identifier: eURhkDIc7m0fB9QWWvfhi6i+QxJxXZNsGx7hySqujPE= Subject key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32A48395C877DE75E1559BA6D3C5986E4BE8A055 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft caRepository: rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 13:59:06 +0000 Certificate not after: Tue 24 Mar 2026 14:04:06 +0000 Subordinate resources: AS: 262608 IP: 177.85.128.0/21 IP: 2804:6d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a4:83:95:c8:77:de:75:e1:55:9b:a6:d3:c5:98:6e:4b:e8:a0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 13:59:06 2025 GMT Not After : Mar 24 14:04:06 2026 GMT Subject: CN=14FF5A751C4E19792B967D92C271B9738745BFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:c0:76:61:5d:4f:d4:25:bc:c2:ac:55:29: e6:d8:06:cc:22:f8:18:7b:6a:56:e2:37:0e:d7:94: d5:6b:e4:12:ae:5d:ac:fa:1f:9e:7a:6b:24:f6:64: 01:99:99:77:58:97:31:bc:af:b9:92:29:c3:a6:17: a7:af:4e:f4:48:1f:cc:e7:29:56:1d:54:32:b0:e3: d4:a2:1f:25:2d:8e:bb:22:42:0f:4e:f9:a2:ee:91: 93:77:7b:b2:d7:18:2a:0d:2a:72:ff:ee:db:a4:32: 13:7e:88:10:92:7e:13:70:48:8f:c8:bd:70:19:ee: 72:0e:86:93:c4:30:5f:2b:9c:4f:da:bb:0c:2a:ec: fe:90:f3:64:98:94:84:03:f5:c0:5e:4e:5d:39:82: 0e:85:d1:78:a5:ea:68:31:b7:37:bd:c5:53:16:4f: 5f:8c:34:43:3f:cc:ac:86:aa:68:58:9d:c5:fd:6e: f1:28:d7:94:3f:c0:c7:70:0f:4c:d2:53:22:3e:42: 2c:37:b6:f2:46:c0:f9:68:9f:0e:61:b6:03:2c:4c: 37:bc:26:c7:4f:ac:91:03:c4:b3:eb:33:68:88:05: 6b:a2:17:2f:e7:43:9a:20:0e:29:39:ba:88:51:30: 1b:8c:6b:30:21:54:da:55:ef:73:ea:d9:eb:32:67: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.85.128.0/21 IPv6: 2804:6d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262608 Signature Algorithm: sha256WithRSAEncryption 90:0d:1d:c6:5b:20:03:cb:ad:fe:22:4d:ac:5b:70:e8:35:d2: 44:6a:04:17:dc:10:fd:a9:82:64:47:b6:36:95:70:c0:8e:c3: 8c:a7:26:6f:9a:32:a5:47:4c:03:00:e6:47:29:29:72:f0:c1: 94:d6:2c:01:5b:a6:dc:03:62:3e:43:77:61:e9:52:1e:4c:b6: b5:96:90:d8:de:9d:c8:b3:82:3d:bb:20:87:b5:7c:00:af:14: e4:76:b9:9c:38:47:9e:3d:94:49:f0:89:11:59:a2:9d:88:2c: 76:03:64:18:9d:e6:49:3f:ff:ce:9b:b5:9e:e9:ec:89:6c:f7: 1f:cc:e2:75:a3:0b:b2:4f:29:9b:b1:b0:89:c4:37:f1:59:78: 41:df:4e:7b:56:53:f7:31:29:fd:57:af:45:f4:66:ae:6e:93: 44:0b:17:41:7c:2d:50:e4:6e:ba:4b:63:4b:aa:e5:4a:a0:1b: d0:56:7e:0e:c0:9e:e7:08:28:a3:c7:47:f0:47:a4:d2:d8:97: 73:a7:9a:4d:6e:fb:52:19:2d:b1:4c:94:7b:0a:14:68:e9:2d: 7d:f8:b7:22:1a:43:29:74:11:26:3d:8e:0d:66:e1:89:43:7f: 82:ba:9a:00:a3:9f:4a:60:23:aa:ad:e9:f3:8d:69:dc:e2:72: bb:70:e8:91 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUMqSDlch33nXhVZum08WYbkvooFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUxMzU5MDZaFw0yNjAzMjQxNDA0MDZaMDMxMTAvBgNV BAMTKDE0RkY1QTc1MUM0RTE5NzkyQjk2N0Q5MkMyNzFCOTczODc0NUJGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtb8B2YV1P1CW8wqxVKebYBswi +Bh7albiNw7XlNVr5BKuXaz6H556ayT2ZAGZmXdYlzG8r7mSKcOmF6evTvRIH8zn KVYdVDKw49SiHyUtjrsiQg9O+aLukZN3e7LXGCoNKnL/7tukMhN+iBCSfhNwSI/I vXAZ7nIOhpPEMF8rnE/auwwq7P6Q82SYlIQD9cBeTl05gg6F0Xil6mgxtze9xVMW T1+MNEM/zKyGqmhYncX9bvEo15Q/wMdwD0zSUyI+Qiw3tvJGwPlonw5htgMsTDe8 JsdPrJEDxLPrM2iIBWuiFy/nQ5ogDik5uohRMBuMazAhVNpV73Pq2esyZ5GfAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU/1p1HE4ZeSuW fZLCcblzh0W/7TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHFu QjhySjFVVWN5c01RNnRBblB5SzladGNSQVRiTkhSY2Zza3FIcHJvWTkvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHFu QjhySjFVVWN5c01RNnRBblB5SzladGNSQVRiTkhSY2Zza3FIcHJvWTkvMC8xNEZG NUE3NTFDNEUxOTc5MkI5NjdEOTJDMjcxQjk3Mzg3NDVCRkVELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAOxVYAwDQQCAAIwBwMFACgEBtAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAHQMA0GCSqGSIb3DQEBCwUAA4IBAQCQDR3GWyADy63+Ik2s W3DoNdJEagQX3BD9qYJkR7Y2lXDAjsOMpyZvmjKlR0wDAOZHKSly8MGU1iwBW6bc A2I+Q3dh6VIeTLa1lpDY3p3Is4I9uyCHtXwArxTkdrmcOEeePZRJ8IkRWaKdiCx2 A2QYneZJP//Om7We6eyJbPcfzOJ1owuyTymbsbCJxDfxWXhB3057VlP3MSn9V69F 9GaubpNECxdBfC1Q5G66S2NLquVKoBvQVn4OwJ7nCCijx0fwR6TS2Jdzp5pNbvtS GS2xTJR7ChRo6S19+LciGkMpdBEmPY4NZuGJQ3+CupoAo59KYCOqrenzjWnc4nK7 cOiR -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:49 2025 by rpki-client