$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer File: 1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer (raw, json) Hash identifier: MnKc0Cr0zSG6sLkcHaiZoc8lHccZvt6jYXe4+hEoy2E= Subject key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3427A080E1E884F5D523E8956437A12764D550A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.mft caRepository: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Feb 2025 14:50:27 +0000 Certificate not after: Fri 27 Feb 2026 14:55:27 +0000 Subordinate resources: AS: 265919 IP: 131.196.196.0/22 IP: 2804:3fd8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:27:a0:80:e1:e8:84:f5:d5:23:e8:95:64:37:a1:27:64:d5:50:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 14:50:27 2025 GMT Not After : Feb 27 14:55:27 2026 GMT Subject: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:63:d0:9a:56:eb:d4:1d:66:1f:1c:8e:79: 68:93:cc:2e:fb:60:ba:b2:ad:fe:94:aa:b6:6c:eb: 80:17:85:c7:4b:5d:d4:bb:be:68:57:75:b5:a8:1d: 14:50:81:9b:79:8e:0c:6e:a1:23:9c:c2:49:c5:5c: 5c:a4:8e:38:59:6d:d1:bf:28:15:25:9f:cf:f1:dd: 17:f9:d0:9e:89:4b:dc:71:3d:1b:ef:dc:3a:2d:d7: fb:99:85:37:37:64:b8:17:23:b0:03:e6:69:63:b5: 35:7d:48:9c:cb:ab:19:a3:61:56:43:a6:0d:48:90: 11:bc:55:22:6d:df:0f:ef:39:fa:8b:8a:4a:6b:9b: 88:6d:3a:65:af:82:3c:0b:09:a7:15:9e:63:5c:5b: 81:7a:63:65:bf:be:2b:e6:7e:53:e0:dc:cf:c9:37: 2a:41:fe:8e:41:dd:1e:40:fa:f6:b7:88:af:f0:fc: 66:8d:5b:12:9f:4e:0e:a9:31:4c:ad:d2:aa:aa:99: 43:c1:c2:31:13:6c:97:17:06:fe:2c:01:a3:19:30: 47:eb:db:c1:cc:ae:b0:4b:50:77:a3:de:ec:18:46: c3:da:68:e2:23:c9:a1:0a:14:d7:0e:d7:a6:02:c1: ef:ec:a0:e3:65:2a:da:8c:28:40:ac:91:39:2b:c9: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.196.0/22 IPv6: 2804:3fd8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265919 Signature Algorithm: sha256WithRSAEncryption 57:c7:3f:9a:47:5a:4d:7f:6a:22:91:1a:6c:44:93:64:98:33: 8e:f9:a4:6d:b9:cf:29:ed:ed:d3:0c:6b:7f:70:eb:e3:87:5e: cf:8d:c1:b2:b1:77:ad:bc:b6:3e:2d:97:af:3f:61:77:48:ba: 0e:13:d3:e6:29:94:f7:a2:7e:85:e6:4e:be:c4:45:af:40:70: ba:99:b2:48:5c:68:e1:f9:a7:e6:7f:c5:d6:ce:97:b1:0c:34: 5c:37:54:2a:0a:f5:d9:c5:3e:45:1a:e1:83:9e:96:31:3c:65: 06:8a:39:11:02:e2:90:8c:41:1a:35:41:6a:cd:3d:b9:22:69: a4:ce:9d:57:dc:fa:35:7b:be:75:d8:78:23:fa:81:06:d0:50: 2b:41:da:9e:24:83:02:eb:d9:2c:15:1a:d7:c6:7b:3b:a3:c7: 46:2a:d6:56:93:cb:10:4e:49:3c:01:3e:f3:53:b0:c9:18:7e: f2:dd:02:53:e3:13:a9:66:a7:33:2b:11:fd:d3:6a:b7:91:e2: 0a:ca:ba:d9:3a:b1:9d:0b:cc:4b:52:8e:3f:69:5d:55:6a:04: 54:c5:78:92:c3:e9:6a:48:85:af:ab:cc:f7:93:df:6b:49:f7: f5:9a:2f:c8:1c:a9:99:69:9c:0f:fc:02:d5:4b:30:9d:d3:2d: 67:fa:11:91 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNCeggOHohPXVI+iVZDehJ2TVUKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjgxNDUwMjdaFw0yNjAyMjcxNDU1MjdaMDMxMTAvBgNV BAMTKDFENDczOTg4NkExNDU1MjREMkY4NEU3RjY3MDRCMEQ2QUZGQzJBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+mPQmlbr1B1mHxyOeWiTzC77 YLqyrf6UqrZs64AXhcdLXdS7vmhXdbWoHRRQgZt5jgxuoSOcwknFXFykjjhZbdG/ KBUln8/x3Rf50J6JS9xxPRvv3Dot1/uZhTc3ZLgXI7AD5mljtTV9SJzLqxmjYVZD pg1IkBG8VSJt3w/vOfqLikprm4htOmWvgjwLCacVnmNcW4F6Y2W/vivmflPg3M/J NypB/o5B3R5A+va3iK/w/GaNWxKfTg6pMUyt0qqqmUPBwjETbJcXBv4sAaMZMEfr 28HMrrBLUHej3uwYRsPaaOIjyaEKFNcO16YCwe/soONlKtqMKECskTkrySnXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdRzmIahRVJNL4 Tn9nBLDWr/wq6TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREZB cFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFhbzQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RG QXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAvMUQ0 NzM5ODg2QTE0NTUyNEQyRjg0RTdGNjcwNEIwRDZBRkZDMkFFOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8TEMA0EAgACMAcDBQAoBD/YMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOvzANBgkqhkiG9w0BAQsFAAOCAQEAV8c/mkdaTX9qIpEa bESTZJgzjvmkbbnPKe3t0wxrf3Dr44dez43BsrF3rby2Pi2Xrz9hd0i6DhPT5imU 96J+heZOvsRFr0BwupmySFxo4fmn5n/F1s6XsQw0XDdUKgr12cU+RRrhg56WMTxl Boo5EQLikIxBGjVBas09uSJppM6dV9z6NXu+ddh4I/qBBtBQK0HaniSDAuvZLBUa 18Z7O6PHRirWVpPLEE5JPAE+81OwyRh+8t0CU+MTqWanMysR/dNqt5HiCsq62Tqx nQvMS1KOP2ldVWoEVMV4ksPpakiFr6vM95Pfa0n39ZovyBypmWmcD/wC1UswndMt Z/oRkQ== -----END CERTIFICATE-----Generated at Fri Apr 4 10:32:36 2025 by rpki-client