$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer File: 1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer (raw, json) Hash identifier: IBkYQNgqINYS6bk4ejvKkX9KvueLCVppAHza1AKR9l4= Subject key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3BCD4846420055886B43BC705014FE5E4262BF6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft caRepository: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Jan 2025 16:32:00 +0000 Certificate not after: Thu 08 Jan 2026 16:37:00 +0000 Subordinate resources: AS: 266514 IP: 45.186.40.0/22 IP: 170.244.232.0/22 IP: 2804:38f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cd:48:46:42:00:55:88:6b:43:bc:70:50:14:fe:5e:42:62:bf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 9 16:32:00 2025 GMT Not After : Jan 8 16:37:00 2026 GMT Subject: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:8d:ef:c9:d9:84:fd:bb:c6:fe:60:f7:54: 6b:7d:e4:58:6d:7d:03:f8:f0:cc:9c:12:1a:f3:40: e0:a0:d2:99:40:e9:2a:8e:1b:f5:6e:4d:22:5f:d6: da:58:9b:52:f6:86:18:56:02:d5:70:96:f2:80:7d: 65:7a:df:5a:38:f8:7a:06:f2:c1:8d:ee:e8:45:4a: a7:85:7b:e2:f8:8a:13:4c:50:32:3a:d0:07:89:b7: fb:f8:0c:7d:84:cb:a4:77:fd:a5:85:97:eb:cc:48: 28:30:83:62:6f:05:5d:a2:63:42:aa:47:13:95:67: f3:81:e4:37:d9:81:4d:55:c9:ed:ce:43:17:cf:ae: 13:33:24:db:e9:da:86:f8:42:04:8b:0f:56:c8:0a: 1b:58:c3:25:c8:1d:e0:e6:a8:55:c2:9d:8f:7c:d6: 59:61:06:b0:d3:80:7e:48:cb:04:52:9b:c4:dd:cd: 5f:b3:8e:7a:2a:2c:cc:3c:82:ad:b4:6c:ec:2f:ff: 2e:2e:c8:69:27:79:e5:67:86:1c:dd:22:8c:fb:00: 01:70:20:02:fd:2b:41:97:84:6c:1b:64:ba:b8:a0: 05:da:51:07:ff:8a:d0:85:61:6b:e2:08:33:f1:49: 7a:85:75:45:9c:5d:fe:aa:c8:ab:9c:2d:f3:82:38: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.40.0/22 170.244.232.0/22 IPv6: 2804:38f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266514 Signature Algorithm: sha256WithRSAEncryption cf:74:be:02:f6:19:3d:12:d4:8c:71:e8:49:53:1c:6a:78:34: 9c:3e:b7:b6:4b:a4:aa:83:aa:e9:e6:22:df:5a:89:15:69:87: a2:4a:d9:fb:c7:0d:93:8e:b3:0a:ee:15:d7:08:50:92:5d:4d: 40:fa:01:d5:2e:36:72:48:35:c4:2f:06:66:2e:89:22:95:61: da:ca:89:3f:dd:b1:c9:80:23:a3:46:e5:d0:4a:4b:43:1d:5d: cb:10:a4:72:1d:3b:2b:7b:5b:2e:ea:b3:0a:bd:b3:df:9f:b8: 00:a2:d8:c6:72:2f:eb:37:e3:df:84:85:1a:84:da:24:4c:4f: d7:8c:d6:34:18:df:fb:3a:26:7e:2c:e9:19:52:5e:cf:98:b2: 7c:d2:2f:f2:8a:65:fe:91:93:58:d7:7f:9f:8d:e5:28:b7:1d: 9e:84:b6:94:15:a1:99:5d:46:0e:02:d7:d6:20:41:65:57:47: 4c:dc:66:55:61:ff:4a:72:d4:e6:1f:01:c7:64:37:99:4d:bb: bd:55:dd:7a:f6:3b:38:82:ad:43:1a:0b:53:6c:c0:61:92:8c: b8:13:0c:8a:ee:5d:dd:db:8c:6a:ea:df:92:c3:c2:cc:c1:5a: d0:0b:82:dc:ad:51:34:1b:69:5b:de:db:0e:ad:e4:dc:ef:09: 95:03:ea:55 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUO81IRkIAVYhrQ7xwUBT+XkJiv24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDkxNjMyMDBaFw0yNjAxMDgxNjM3MDBaMDMxMTAvBgNV BAMTKDFEMEM4ODVGRTM3OEZGOTBEMzlFQTI4NzVFOUY2RTUxM0ZEQ0VBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+o3vydmE/bvG/mD3VGt95Fht fQP48MycEhrzQOCg0plA6SqOG/VuTSJf1tpYm1L2hhhWAtVwlvKAfWV631o4+HoG 8sGN7uhFSqeFe+L4ihNMUDI60AeJt/v4DH2Ey6R3/aWFl+vMSCgwg2JvBV2iY0Kq RxOVZ/OB5DfZgU1Vye3OQxfPrhMzJNvp2ob4QgSLD1bIChtYwyXIHeDmqFXCnY98 1llhBrDTgH5IywRSm8TdzV+zjnoqLMw8gq20bOwv/y4uyGkneeVnhhzdIoz7AAFw IAL9K0GXhGwbZLq4oAXaUQf/itCFYWviCDPxSXqFdUWcXf6qyKucLfOCOLSRAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdDIhf43j/kNOe ooden25RP9zqyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnlO bVk2cW5pM0ZtTTVyU2htWDl3UWhSVlozTENXQjNNZHQ1ejJSQ05tOEIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnlO bVk2cW5pM0ZtTTVyU2htWDl3UWhSVlozTENXQjNNZHQ1ejJSQ05tOEIvMS8xRDBD ODg1RkUzNzhGRjkwRDM5RUEyODc1RTlGNkU1MTNGRENFQUNBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItuigDBAKq9OgwDQQCAAIwBwMFACgEOPQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBESMA0GCSqGSIb3DQEBCwUAA4IBAQDPdL4C9hk9 EtSMcehJUxxqeDScPre2S6Sqg6rp5iLfWokVaYeiStn7xw2TjrMK7hXXCFCSXU1A +gHVLjZySDXELwZmLokilWHayok/3bHJgCOjRuXQSktDHV3LEKRyHTsre1su6rMK vbPfn7gAotjGci/rN+PfhIUahNokTE/XjNY0GN/7OiZ+LOkZUl7PmLJ80i/yimX+ kZNY13+fjeUotx2ehLaUFaGZXUYOAtfWIEFlV0dM3GZVYf9KctTmHwHHZDeZTbu9 Vd169js4gq1DGgtTbMBhkoy4EwyK7l3d24xq6t+Sw8LMwVrQC4LcrVE0G2lb3tsO reTc7wmVA+pV -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:57 2025 by rpki-client