$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer File: 174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer (raw, json) Hash identifier: 5750Wbs5cB2x3KJzxD/Gt1BTyTBi9+TZokc55u1rz1A= Subject key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1178B7892DDB0AF2D01448AA17F47F391D8AD2FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft caRepository: rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:39 +0000 Certificate not after: Wed 04 Mar 2026 18:40:39 +0000 Subordinate resources: AS: 53236 IP: 170.83.204.0/22 IP: 170.150.176.0/22 IP: 177.10.120.0/22 IP: 2804:2f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:78:b7:89:2d:db:0a:f2:d0:14:48:aa:17:f4:7f:39:1d:8a:d2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:39 2025 GMT Not After : Mar 4 18:40:39 2026 GMT Subject: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f1:36:eb:3e:04:c3:16:97:4e:b7:3c:64:3c: ea:12:48:20:a6:6b:1c:2e:20:b1:41:11:e0:91:9a: 80:46:46:70:6f:27:44:ae:d0:a1:74:4e:d4:e8:7a: f1:5a:29:ce:58:2d:2b:e5:35:26:88:e3:12:07:8d: 13:58:f7:7e:73:ee:db:9c:1d:0d:32:87:20:fd:ba: 30:62:57:38:5f:93:10:71:a8:91:70:57:c7:61:69: 27:f9:08:30:7f:43:e6:d8:81:09:8e:30:ae:e8:e4: 23:83:99:d3:b5:e6:a7:7e:95:31:9b:9a:dc:11:98: a1:ec:e3:41:b4:23:97:8f:61:6c:e1:51:20:f1:c8: 91:38:d6:57:2c:1d:ba:b5:d5:8b:62:20:1f:b2:04: 40:63:18:aa:6f:7d:92:ba:2d:d4:73:8f:40:b8:f9: 54:82:14:65:53:43:24:f7:2a:e7:c5:85:64:c0:5f: 03:59:06:7c:0b:89:b6:2d:b7:5d:03:99:79:aa:e3: a2:49:b9:99:7c:66:68:df:5e:ff:55:24:d9:d5:f9: 4d:c6:da:4d:c5:1b:1d:1a:7f:50:68:50:2a:58:ee: cb:5d:0a:24:9e:bf:0a:9f:8c:4c:8e:d2:13:2d:eb: 09:ba:41:b6:c3:7f:68:51:a7:65:3b:8d:09:dd:fe: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.204.0/22 170.150.176.0/22 177.10.120.0/22 IPv6: 2804:2f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53236 Signature Algorithm: sha256WithRSAEncryption 00:89:f7:d3:bf:60:e0:29:e1:17:a2:1e:1a:77:de:4f:91:ae: f5:49:5c:1e:53:38:1b:cd:33:f5:8a:d0:dd:d3:3b:72:b6:3a: f4:a8:20:74:7e:2e:4c:22:f7:53:75:d8:2a:26:c8:21:d4:39: 1c:06:7a:de:6e:12:92:60:6c:a4:f3:09:88:33:bc:05:67:da: 0d:3f:72:19:8e:d0:fd:ad:62:22:e5:34:45:9e:f0:c5:ce:19: 6e:59:46:f4:9e:1f:7d:c6:9e:1c:c3:72:cc:92:de:25:df:48: 47:1f:8e:e2:0d:01:7d:df:d5:58:08:26:aa:11:4a:d9:ad:9a: 92:e0:9c:72:74:65:7b:bd:33:e3:7f:54:c7:d7:31:94:30:59: 32:87:15:4f:5f:28:9b:4d:14:29:ec:b8:6d:36:13:41:1b:03: c6:e7:0e:2a:23:c6:55:6d:af:34:e1:a3:6c:91:2b:a4:43:5a: e6:e3:d6:b8:38:73:25:b4:aa:35:bc:8f:47:3b:54:ff:f6:02: 7b:bf:e3:0a:07:fe:dd:5f:02:f9:07:86:06:db:43:6f:f2:64: 43:ef:cd:56:d0:7b:86:6c:ea:b8:5a:73:17:4b:aa:c2:06:4d: 1f:7b:1a:af:0c:93:4a:44:52:25:f0:86:e8:2a:a4:b8:e0:e9: eb:02:c6:3d -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUEXi3iS3bCvLQFEiqF/R/OR2K0v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzlaFw0yNjAzMDQxODQwMzlaMDMxMTAvBgNV BAMTKDE3NEM0MEJEMkQxREVGMkVEOEJGQzFERTFCRUFCQkY1MjcxODRBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8TbrPgTDFpdOtzxkPOoSSCCm axwuILFBEeCRmoBGRnBvJ0Su0KF0TtToevFaKc5YLSvlNSaI4xIHjRNY935z7tuc HQ0yhyD9ujBiVzhfkxBxqJFwV8dhaSf5CDB/Q+bYgQmOMK7o5CODmdO15qd+lTGb mtwRmKHs40G0I5ePYWzhUSDxyJE41lcsHbq11YtiIB+yBEBjGKpvfZK6LdRzj0C4 +VSCFGVTQyT3KufFhWTAXwNZBnwLibYtt10DmXmq46JJuZl8ZmjfXv9VJNnV+U3G 2k3FGx0af1BoUCpY7stdCiSevwqfjEyO0hMt6wm6QbbDf2hRp2U7jQnd/sDLAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXTEC9LR3vLti/ wd4b6rv1JxhKDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlRX ZUNFTXFWbzdpdFd0emk1azg4bnZRQUxrSmdwUHZFTnREd2dpMW94b2QvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlRX ZUNFTXFWbzdpdFd0emk1azg4bnZRQUxrSmdwUHZFTnREd2dpMW94b2QvMS8xNzRD NDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0QTBGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKqU8wDBAKqlrADBAKxCngwDQQCAAIwBwMFACgEAvAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM/0MA0GCSqGSIb3DQEBCwUAA4IBAQAA iffTv2DgKeEXoh4ad95Pka71SVweUzgbzTP1itDd0ztytjr0qCB0fi5MIvdTddgq Jsgh1DkcBnrebhKSYGyk8wmIM7wFZ9oNP3IZjtD9rWIi5TRFnvDFzhluWUb0nh99 xp4cw3LMkt4l30hHH47iDQF939VYCCaqEUrZrZqS4JxydGV7vTPjf1TH1zGUMFky hxVPXyibTRQp7LhtNhNBGwPG5w4qI8ZVba804aNskSukQ1rm49a4OHMltKo1vI9H O1T/9gJ7v+MKB/7dXwL5B4YG20Nv8mRD781W0HuGbOq4WnMXS6rCBk0fexqvDJNK RFIl8IboKqS44OnrAsY9 -----END CERTIFICATE-----Generated at Fri Apr 4 20:04:31 2025 by rpki-client