$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer File: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer (raw, json) Hash identifier: J/MWCtEAEyktSnP1FoLI3dE8ISc4etavewy46vyYz0I= Subject key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 37B8596955FD06E4CC22EEBD0DB0091BCA7B2010 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft caRepository: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Jan 2025 07:56:56 +0000 Certificate not after: Fri 09 Jan 2026 08:01:56 +0000 Subordinate resources: AS: 264120 IP: 138.97.40.0/22 IP: 177.12.128.0/22 IP: 189.89.240.0/24 IP: 2804:22c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b8:59:69:55:fd:06:e4:cc:22:ee:bd:0d:b0:09:1b:ca:7b:20:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 10 07:56:56 2025 GMT Not After : Jan 9 08:01:56 2026 GMT Subject: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:22:92:37:8b:08:50:17:bb:f8:bd:32:06: d9:bb:05:9b:6f:53:bd:6f:5d:ad:40:8a:f2:9b:ab: 4b:46:c5:ff:34:8b:d9:01:df:b6:05:45:83:02:01: 8c:cb:bc:b6:79:4d:32:a4:9c:fa:e6:58:11:42:08: e6:57:2c:7d:69:1d:80:ab:25:1d:76:cf:26:9d:c2: 05:47:7a:05:cc:1c:b5:99:99:de:7b:73:50:f4:0c: 7a:b3:cf:d1:87:94:0b:b8:b2:3a:50:b1:32:b7:22: 93:1d:00:f1:fa:b8:d5:20:99:ae:2e:f5:14:32:9a: 41:e3:e1:c6:1f:89:fe:65:b2:57:0b:26:a4:d1:ff: 29:62:0e:0c:b2:f8:22:35:6b:b9:21:2d:69:3e:90: a8:8c:cb:9d:60:23:74:a9:74:6d:2d:da:79:84:9e: 9a:20:07:0b:24:a4:01:11:dd:3e:54:47:4c:c6:df: 38:a7:d5:83:c4:89:96:57:6a:9d:ee:7b:ab:98:ba: 15:fc:49:2d:5e:74:a9:2d:1e:14:d4:35:20:68:eb: 41:67:aa:c1:e5:d5:09:7c:e5:a4:1f:f3:f7:64:83: da:18:39:7c:9f:00:fa:09:f3:db:e3:37:b8:87:7a: 1a:c4:ea:b4:b1:c1:a9:8d:89:b2:11:f1:3d:f3:1e: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.40.0/22 177.12.128.0/22 189.89.240.0/24 IPv6: 2804:22c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264120 Signature Algorithm: sha256WithRSAEncryption 1e:1c:8f:e2:ec:e3:31:8d:17:69:de:d3:37:48:cc:f1:f9:b8: 61:75:61:d3:10:4e:0d:20:da:6f:01:5c:38:4b:48:43:8d:95: 10:f8:eb:6c:d2:05:37:dd:02:c6:a7:3b:d4:ad:a4:78:35:87: 38:09:d2:83:f5:78:91:dc:25:85:83:df:bd:cb:76:42:ec:ef: 38:20:2b:45:c2:fd:a3:31:d7:6d:82:aa:5c:26:13:9f:57:51: b1:ba:b4:28:c6:b2:11:61:3b:13:85:39:ec:8f:9c:22:6b:11: cb:f9:88:1c:83:5e:11:b3:0b:6b:32:57:ce:02:4e:fd:00:8e: 86:c1:37:bc:71:51:9a:6e:f0:2f:6b:11:08:61:05:cf:a3:6a: e5:df:b3:d1:27:cb:4f:8c:4c:b8:27:14:9c:cd:30:85:8a:3b: dd:22:af:cc:55:3b:14:94:5c:58:58:91:0a:66:bf:b5:70:9b: 3a:ca:c4:93:c4:0f:75:43:9a:d6:df:0f:00:1e:1c:04:19:97: 65:da:2c:07:28:48:23:f3:c6:f9:3b:19:55:15:28:62:5c:98: c1:1a:9d:37:97:d2:8c:85:24:2b:65:42:0c:81:60:e5:f1:3d: 7e:54:09:49:4a:ad:70:5b:69:60:0d:ef:f4:e5:de:6c:04:c6: aa:63:cb:b4 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUN7hZaVX9BuTMIu69DbAJG8p7IBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTAwNzU2NTZaFw0yNjAxMDkwODAxNTZaMDMxMTAvBgNV BAMTKDFBNzNGQUY4RDg2N0I2MzRFQUM1RTczODZERTU3MDgzMDMzQTFDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcSKSN4sIUBe7+L0yBtm7BZtv U71vXa1AivKbq0tGxf80i9kB37YFRYMCAYzLvLZ5TTKknPrmWBFCCOZXLH1pHYCr JR12zyadwgVHegXMHLWZmd57c1D0DHqzz9GHlAu4sjpQsTK3IpMdAPH6uNUgma4u 9RQymkHj4cYfif5lslcLJqTR/yliDgyy+CI1a7khLWk+kKiMy51gI3SpdG0t2nmE npogBwskpAER3T5UR0zG3zin1YPEiZZXap3ue6uYuhX8SS1edKktHhTUNSBo60Fn qsHl1Ql85aQf8/dkg9oYOXyfAPoJ89vjN7iHehrE6rSxwamNibIR8T3zHvSRAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQac/r42Ge2NOrF 5zht5XCDAzocljAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lW OUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtDcHUvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lW OUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtDcHUvMi8xQTcz RkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKKYSgDBAKxDIADBAC9WfAwDQQCAAIwBwMFACgEIsAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAe4MA0GCSqGSIb3DQEBCwUAA4IBAQAe HI/i7OMxjRdp3tM3SMzx+bhhdWHTEE4NINpvAVw4S0hDjZUQ+Ots0gU33QLGpzvU raR4NYc4CdKD9XiR3CWFg9+9y3ZC7O84ICtFwv2jMddtgqpcJhOfV1GxurQoxrIR YTsThTnsj5wiaxHL+Ygcg14RswtrMlfOAk79AI6GwTe8cVGabvAvaxEIYQXPo2rl 37PRJ8tPjEy4JxSczTCFijvdIq/MVTsUlFxYWJEKZr+1cJs6ysSTxA91Q5rW3w8A HhwEGZdl2iwHKEgj88b5OxlVFShiXJjBGp03l9KMhSQrZUIMgWDl8T1+VAlJSq1w W2lgDe/05d5sBMaqY8u0 -----END CERTIFICATE-----Generated at Mon Feb 17 08:21:54 2025 by rpki-client