$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer File: 1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer (raw, json) Hash identifier: t2gxb/acOMibfWYAsCFK46X3VwjBKYoode47s7wWHF0= Subject key identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 79389F6FCE7AA4C53FBBBEF3ABDCFD67B091A8CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.mft caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 21 Jan 2025 20:16:13 +0000 Certificate not after: Tue 20 Jan 2026 20:21:13 +0000 Subordinate resources: AS: 11432 IP: 200.155.128.0/18 IP: 200.170.192.0/18 IP: 200.194.248.0/21 IP: 200.201.128.0/19 IP: 2804:138::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:38:9f:6f:ce:7a:a4:c5:3f:bb:be:f3:ab:dc:fd:67:b0:91:a8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 21 20:16:13 2025 GMT Not After : Jan 20 20:21:13 2026 GMT Subject: CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:13:ab:63:10:64:37:e5:4d:62:af:ab:f8: d9:24:49:51:6a:b4:9e:d8:7c:ac:43:31:7b:12:82: 70:c8:99:25:5b:f5:4f:64:af:bf:53:a0:af:b0:05: f2:dd:e7:1f:b1:5b:bb:d0:86:c0:6e:ad:ff:ea:30: 27:57:9b:19:53:aa:be:ad:8c:5a:b8:d6:f0:5b:74: 07:65:94:92:67:da:6e:6e:86:e8:9b:dc:c1:da:a0: 33:07:cf:0d:a3:f8:b0:9c:6e:15:6b:f4:7a:ef:8f: e0:53:e5:bb:81:d5:04:ed:cb:6d:11:70:a3:c3:ad: 92:68:0c:65:2a:cd:62:c0:a7:05:0f:d0:e0:11:ce: f3:25:15:7a:30:24:c8:f4:bf:3d:38:0e:fd:b0:92: 9a:56:c2:fd:a1:34:f3:e9:c9:80:b9:43:95:33:4e: 7b:2a:7d:78:c5:7f:4a:65:c6:bd:25:46:c6:73:af: ae:55:19:aa:5e:a9:7b:80:38:82:27:a3:38:ef:7a: 51:c5:5f:a8:dc:30:8f:30:cd:2e:d0:90:74:34:ce: ce:06:c5:28:68:3e:1c:44:db:f2:e0:3a:bf:db:dd: e8:65:c2:f7:85:f8:1a:02:1e:b8:03:78:e1:f3:32: 11:75:7b:77:4f:04:69:a2:7a:30:17:da:70:72:8e: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.155.128.0/18 200.170.192.0/18 200.194.248.0/21 200.201.128.0/19 IPv6: 2804:138::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11432 Signature Algorithm: sha256WithRSAEncryption a7:58:c2:cf:a9:48:10:37:ff:0f:86:18:46:94:71:7f:62:7e: 26:1f:ab:48:d8:1a:f3:34:1d:98:f8:ae:17:fa:a3:a3:f4:62: 1e:1e:66:03:e3:f4:75:3d:2d:e9:d3:e4:d3:8f:b8:8d:75:9f: 24:23:3a:94:f4:ef:03:af:e8:c8:6d:13:5b:57:54:e9:85:3a: a4:d7:37:cd:0c:60:58:be:66:d2:3a:48:51:5e:75:a2:5d:e8: 03:c1:cd:25:01:33:57:09:2c:03:c3:e7:f8:bb:b3:c9:8e:25: 47:e0:c7:38:9a:8d:bb:20:c3:5d:3d:97:3c:c5:29:98:60:5a: 43:b5:92:57:4a:2a:33:0d:30:7b:9a:89:14:9c:f2:d1:71:6d: 24:f6:39:d6:71:b8:3f:cc:99:48:b0:d2:52:6c:ef:e6:a8:fa: 15:48:9c:97:6a:11:7d:ae:72:3b:09:36:7c:ba:12:fa:23:c0: 53:36:01:26:23:99:79:6c:a3:81:d8:81:ec:e2:8f:17:42:95: da:39:3f:2b:87:d4:b3:10:45:25:c4:7e:9a:93:1a:73:32:db: c9:6d:59:0e:75:2f:84:14:55:6c:07:f7:ca:d4:84:67:4c:f6: 88:4b:c0:55:47:2b:72:63:54:d5:3a:dc:5e:19:8f:14:2e:fa: f4:f8:2f:7e -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUeTifb856pMU/u77zq9z9Z7CRqM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjEyMDE2MTNaFw0yNjAxMjAyMDIxMTNaMDMxMTAvBgNV BAMTKDFBQjU0QTRGMDU0RTNCRkQ3ODhCREM0NUZGMUI2Qzc3MzlCQjlENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgxOrYxBkN+VNYq+r+NkkSVFq tJ7YfKxDMXsSgnDImSVb9U9kr79ToK+wBfLd5x+xW7vQhsBurf/qMCdXmxlTqr6t jFq41vBbdAdllJJn2m5uhuib3MHaoDMHzw2j+LCcbhVr9Hrvj+BT5buB1QTty20R cKPDrZJoDGUqzWLApwUP0OARzvMlFXowJMj0vz04Dv2wkppWwv2hNPPpyYC5Q5Uz TnsqfXjFf0plxr0lRsZzr65VGapeqXuAOIInozjvelHFX6jcMI8wzS7QkHQ0zs4G xShoPhxE2/LgOr/b3ehlwveF+BoCHrgDeOHzMhF1e3dPBGmiejAX2nByju2HAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQatUpPBU47/XiL 3EX/G2x3ObuddjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhH aHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4 R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAvMUFC NTRBNEYwNTRFM0JGRDc4OEJEQzQ1RkYxQjZDNzczOUJCOUQ3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQGyJuAAwQGyKrAAwQDyML4AwQFyMmAMA0EAgACMAcD BQAoBAE4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiyoMA0GCSqGSIb3DQEBCwUA A4IBAQCnWMLPqUgQN/8PhhhGlHF/Yn4mH6tI2BrzNB2Y+K4X+qOj9GIeHmYD4/R1 PS3p0+TTj7iNdZ8kIzqU9O8Dr+jIbRNbV1TphTqk1zfNDGBYvmbSOkhRXnWiXegD wc0lATNXCSwDw+f4u7PJjiVH4Mc4mo27IMNdPZc8xSmYYFpDtZJXSiozDTB7mokU nPLRcW0k9jnWcbg/zJlIsNJSbO/mqPoVSJyXahF9rnI7CTZ8uhL6I8BTNgEmI5l5 bKOB2IHs4o8XQpXaOT8rh9SzEEUlxH6akxpzMtvJbVkOdS+EFFVsB/fK1IRnTPaI S8BVRytyY1TVOtxeGY8ULvr0+C9+ -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:54 2025 by rpki-client