$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer File: 17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer (raw, json) Hash identifier: fgHhOsLYzzKalYoHk1wH0nYcSG6DIpZJRNXWP8O2xHs= Subject key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5279E19A17384182F0643A74F4E98ED6FBB46093 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft caRepository: rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:21 +0000 Certificate not after: Fri 06 Mar 2026 14:42:21 +0000 Subordinate resources: AS: 267357 IP: 45.234.104.0/22 IP: 131.196.56.0/22 IP: 2804:4c38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:e1:9a:17:38:41:82:f0:64:3a:74:f4:e9:8e:d6:fb:b4:60:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:21 2025 GMT Not After : Mar 6 14:42:21 2026 GMT Subject: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:dd:e4:c0:45:e7:95:63:84:03:3a:48:c2: bd:37:7b:a7:a6:c2:8e:1a:74:cc:1f:a6:e3:e5:88: a3:a3:ff:9e:44:89:5e:24:a9:9e:94:f8:6e:dc:2e: 5d:d4:98:ed:9f:2d:89:ae:a7:13:4c:cd:13:99:98: 71:ce:89:54:5d:11:9d:ed:c6:61:e0:d0:25:0c:c2: 53:b6:fc:e2:7a:c9:7e:e5:96:33:f8:e2:90:9c:71: 95:76:71:33:28:e3:d7:2b:b7:6d:79:6b:9d:ae:f9: 9e:cf:d1:17:68:39:c0:18:b8:a8:c7:5a:dc:b7:81: 1f:4e:3c:36:b6:b9:c4:c1:82:e0:47:47:88:50:74: a2:94:8e:2a:75:eb:46:fe:69:8b:bd:58:6b:ba:2c: 24:b4:1e:59:ab:f8:0c:e7:19:36:65:00:74:60:e0: ce:d5:c8:e1:7b:d3:bf:09:b2:be:25:16:de:04:de: 88:02:99:1b:bb:ec:2b:f2:52:15:55:ae:73:9b:bb: 80:79:3e:bf:e4:15:75:c7:f2:93:9e:59:70:a1:cf: 85:90:df:c4:01:cc:5e:94:c4:5b:c0:ce:63:b3:c2: f0:7a:a7:f6:76:6c:8b:d4:4a:a4:a1:b9:fc:53:f5: cd:04:31:9d:51:22:da:a1:f1:33:90:88:21:ce:33: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.104.0/22 131.196.56.0/22 IPv6: 2804:4c38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267357 Signature Algorithm: sha256WithRSAEncryption 32:16:73:51:00:9e:96:b0:41:d0:44:c3:0c:67:a6:ba:bd:39: 4f:8b:32:bb:d8:b6:bb:96:57:89:96:88:c2:5c:2f:03:f8:51: 2c:ec:8f:30:60:49:a6:0e:02:05:9f:dc:29:18:36:2a:48:a1: 2f:8a:b6:bf:83:cf:b0:bd:ae:13:f7:44:dd:d9:26:6f:1e:83: bd:2a:5e:32:4c:c6:13:87:54:c2:90:a2:68:37:7f:a3:a2:59: 8a:83:c6:57:13:f3:c6:17:36:4f:d6:90:a2:a9:e5:8e:fb:9c: 6e:5f:ab:1d:89:e9:a1:3e:c3:4a:15:a2:7a:11:03:1c:09:3b: d7:d1:43:d3:9d:30:35:9a:a9:17:85:82:6e:51:0f:c9:58:b3: e5:27:48:69:f7:23:cd:30:68:44:af:e1:70:d6:e3:2e:35:5d: e5:7d:0a:27:ea:c0:66:ad:a4:d1:3d:bc:af:df:c5:28:6f:cf: 2b:90:37:bb:7f:0b:7d:0e:53:91:10:17:93:76:48:ad:24:84: dc:54:23:27:fc:95:a5:f4:42:05:ce:69:33:69:3b:38:54:23: 99:13:2d:b3:c5:6b:11:0a:2e:95:19:fd:02:c4:7b:02:f4:55: 05:b7:ab:f2:2c:8b:73:c5:4a:5f:22:86:36:4f:21:7a:10:3d: 10:88:30:82 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUnnhmhc4QYLwZDp09OmO1vu0YJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MjFaFw0yNjAzMDYxNDQyMjFaMDMxMTAvBgNV BAMTKDE3RUQ4MEUzOTVGOEVGREE4MzAxOEFCNTMxQ0YzNkUzMkIzMzc0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYd3kwEXnlWOEAzpIwr03e6em wo4adMwfpuPliKOj/55EiV4kqZ6U+G7cLl3UmO2fLYmupxNMzROZmHHOiVRdEZ3t xmHg0CUMwlO2/OJ6yX7lljP44pCccZV2cTMo49crt215a52u+Z7P0RdoOcAYuKjH Wty3gR9OPDa2ucTBguBHR4hQdKKUjip160b+aYu9WGu6LCS0Hlmr+AznGTZlAHRg 4M7VyOF7078Jsr4lFt4E3ogCmRu77CvyUhVVrnObu4B5Pr/kFXXH8pOeWXChz4WQ 38QBzF6UxFvAzmOzwvB6p/Z2bIvUSqShufxT9c0EMZ1RItqh8TOQiCHOMyLvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQX7YDjlfjv2oMB irUxzzbjKzN0tDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTZK UnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4OVUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2 SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzEvMTdF RDgwRTM5NUY4RUZEQTgzMDE4QUI1MzFDRjM2RTMyQjMzNzRCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLepoAwQCg8Q4MA0EAgACMAcDBQAoBEw4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQUXTANBgkqhkiG9w0BAQsFAAOCAQEAMhZzUQCe lrBB0ETDDGemur05T4syu9i2u5ZXiZaIwlwvA/hRLOyPMGBJpg4CBZ/cKRg2Kkih L4q2v4PPsL2uE/dE3dkmbx6DvSpeMkzGE4dUwpCiaDd/o6JZioPGVxPzxhc2T9aQ oqnljvucbl+rHYnpoT7DShWiehEDHAk719FD050wNZqpF4WCblEPyViz5SdIafcj zTBoRK/hcNbjLjVd5X0KJ+rAZq2k0T28r9/FKG/PK5A3u38LfQ5TkRAXk3ZIrSSE 3FQjJ/yVpfRCBc5pM2k7OFQjmRMts8VrEQoulRn9AsR7AvRVBber8iyLc8VKXyKG Nk8hehA9EIgwgg== -----END CERTIFICATE-----Generated at Wed Apr 9 05:14:04 2025 by rpki-client