$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer File: 1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer (raw, json) Hash identifier: 6jiLU8K/tiF/e/Qq9EVPswb675CoLHwEpecaVTRP8po= Subject key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02659E77FFD41002CBFCC3DFB0FB271EA0F0D3CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.mft caRepository: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 14 Jan 2025 15:41:13 +0000 Certificate not after: Tue 13 Jan 2026 15:46:13 +0000 Subordinate resources: AS: 265393 IP: 168.194.164.0/22 IP: 2804:3364::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:65:9e:77:ff:d4:10:02:cb:fc:c3:df:b0:fb:27:1e:a0:f0:d3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 14 15:41:13 2025 GMT Not After : Jan 13 15:46:13 2026 GMT Subject: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:44:39:ea:c5:d0:3e:60:d9:6d:07:f0:01: 11:b9:36:20:60:d9:24:d9:ac:20:d6:e3:d8:f1:39: ba:95:8b:ee:32:bf:53:de:fd:f5:8f:75:97:47:45: 79:7e:ca:51:9b:3b:b2:ec:47:68:e9:de:17:5b:16: 84:0d:fa:03:fc:37:73:e5:f0:13:12:3b:00:f6:06: ad:e8:de:98:5e:fa:87:b7:06:00:b8:c0:bf:78:3f: 81:68:b3:45:79:05:26:cf:72:46:c3:65:82:3e:55: 39:72:ac:8f:14:2e:ec:d0:47:53:d9:2b:09:b4:10: aa:31:2b:37:72:4c:4e:10:40:52:f5:66:da:0c:26: 1d:93:d5:a0:f2:54:b0:f7:7f:50:48:7a:ec:f0:78: 1d:d1:95:05:e6:ec:59:73:90:e6:d0:be:fe:32:fb: 9c:b2:9c:e0:d6:d4:cd:bb:7f:4d:fb:f5:e6:6b:e7: 1c:23:40:9d:f4:b6:53:fd:f5:43:36:24:9c:07:87: d1:f2:d8:90:16:30:ef:76:af:18:37:2e:24:68:9c: 46:87:f0:c0:34:9f:b6:d4:53:1f:be:7a:64:d2:be: 3b:12:ba:7d:cb:42:8f:e0:39:48:e4:cb:b7:be:7a: ca:8a:3a:33:ed:f5:7d:9b:9e:aa:e0:db:0c:c9:0a: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.164.0/22 IPv6: 2804:3364::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265393 Signature Algorithm: sha256WithRSAEncryption 67:f6:1c:94:7c:48:02:57:13:79:dd:9f:26:da:95:f4:7a:fe: 1d:eb:34:92:f1:4a:05:c6:05:a8:2e:02:f0:e7:7c:2d:b8:55: 49:87:a6:df:5d:db:d6:23:b8:b4:29:46:82:c7:0d:08:6e:6e: d2:7b:69:06:a6:5c:44:49:44:e9:b8:7b:70:16:2d:0f:a6:89: 9d:06:00:11:43:59:53:11:e7:b3:a6:b3:31:eb:e3:0c:14:1c: f1:a0:a1:3e:e6:d8:44:88:c5:3f:91:49:ea:9b:4a:fa:bc:6d: a7:ec:64:f4:13:ce:21:ea:ee:7d:02:3b:c0:9b:6e:1b:e9:5e: aa:b1:f2:d3:40:41:1c:f1:71:22:e8:78:25:cb:c3:31:8c:b7: 17:1a:22:2b:a1:76:fa:c5:a8:11:bf:7a:99:63:a4:a4:84:4f: b4:20:59:67:a8:89:84:f5:e9:f1:82:5b:61:f0:7f:ee:88:ec: df:17:31:40:83:c9:9d:eb:69:14:bf:ad:b9:52:d3:45:c9:43: 89:6a:1a:8c:1a:5f:c0:6a:bb:aa:02:bc:b8:b0:94:cb:a6:d1: 17:16:36:65:9e:bf:77:60:c5:22:c8:99:72:31:a5:fc:82:4c: 10:73:6e:77:bf:fd:0f:c0:f9:45:cf:0b:48:45:e8:a3:44:b1: fa:65:cb:af -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAmWed//UEALL/MPfsPsnHqDw08wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTQxNTQxMTNaFw0yNjAxMTMxNTQ2MTNaMDMxMTAvBgNV BAMTKDFBMTE5RkVGOTdBMTU4QzJCOEM4NjA3OUFEMEMzMjJBOEU4QUFGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4UQ56sXQPmDZbQfwARG5NiBg 2STZrCDW49jxObqVi+4yv1Pe/fWPdZdHRXl+ylGbO7LsR2jp3hdbFoQN+gP8N3Pl 8BMSOwD2Bq3o3phe+oe3BgC4wL94P4Fos0V5BSbPckbDZYI+VTlyrI8ULuzQR1PZ Kwm0EKoxKzdyTE4QQFL1ZtoMJh2T1aDyVLD3f1BIeuzweB3RlQXm7FlzkObQvv4y +5yynODW1M27f0379eZr5xwjQJ30tlP99UM2JJwHh9Hy2JAWMO92rxg3LiRonEaH 8MA0n7bUUx++emTSvjsSun3LQo/gOUjky7e+esqKOjPt9X2bnqrg2wzJCpvpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaEZ/vl6FYwrjI YHmtDDIqjoqvpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Zo djVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3ZxckwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdW aHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAvMUEx MTlGRUY5N0ExNThDMkI4Qzg2MDc5QUQwQzMyMkE4RThBQUZBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMKkMA0EAgACMAcDBQAoBDNkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMsTANBgkqhkiG9w0BAQsFAAOCAQEAZ/YclHxIAlcTed2f JtqV9Hr+Hes0kvFKBcYFqC4C8Od8LbhVSYem313b1iO4tClGgscNCG5u0ntpBqZc RElE6bh7cBYtD6aJnQYAEUNZUxHns6azMevjDBQc8aChPubYRIjFP5FJ6ptK+rxt p+xk9BPOIerufQI7wJtuG+leqrHy00BBHPFxIuh4JcvDMYy3FxoiK6F2+sWoEb96 mWOkpIRPtCBZZ6iJhPXp8YJbYfB/7ojs3xcxQIPJnetpFL+tuVLTRclDiWoajBpf wGq7qgK8uLCUy6bRFxY2ZZ6/d2DFIsiZcjGl/IJMEHNud7/9D8D5Rc8LSEXoo0Sx +mXLrw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:10 2025 by rpki-client