$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer File: 1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer (raw, json) Hash identifier: 87wHbfWMllGLS2iy9hQ2i6IyyxGhexHGKmCHX91Yaak= Subject key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F053511F2595A19F36BC3F4CFFA4C665D745D9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft caRepository: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 16:16:40 +0000 Certificate not after: Fri 20 Feb 2026 16:21:40 +0000 Subordinate resources: AS: 264075 IP: 45.166.164.0/22 IP: 143.0.24.0/22 IP: 143.208.20.0/22 IP: 168.227.52.0/22 IP: 186.235.120.0/21 IP: 2804:2a7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:05:35:11:f2:59:5a:19:f3:6b:c3:f4:cf:fa:4c:66:5d:74:5d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 16:16:40 2025 GMT Not After : Feb 20 16:21:40 2026 GMT Subject: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:41:0f:2a:1b:85:6e:c0:29:ef:30:77:16: e6:04:d2:f2:47:5f:10:7d:d7:0e:ec:9c:a2:33:84: a8:c9:31:7d:69:74:4a:17:c8:80:64:95:f8:e0:77: ed:6b:38:7e:8b:1b:fe:05:2a:b6:9f:1a:fd:a1:93: 55:b1:b7:00:17:73:40:07:38:22:1a:82:ad:b6:da: b1:d3:16:97:d4:68:cf:cb:6e:c7:1f:c7:f2:c9:26: 0d:ef:0a:13:21:9c:ef:04:33:8e:5d:d1:87:18:d4: ec:e4:d1:ee:15:bd:fd:ea:ed:bf:48:65:34:04:b0: 73:52:19:49:99:4a:8c:02:d0:5e:49:5b:96:74:22: 5c:b9:bd:ce:98:7c:31:b8:32:4f:5e:6d:6b:60:00: cd:58:af:b7:b0:c8:15:c5:1a:cc:3f:e9:a0:34:00: 77:24:cd:2d:95:ff:9a:ee:0d:56:5a:9e:2f:c8:4f: 59:33:54:d6:5e:3a:85:25:73:1d:42:c5:a4:32:5e: 11:89:ac:65:67:52:cc:55:b7:3e:f7:3b:20:dc:65: 3c:21:b3:5b:f7:14:c5:2b:7e:56:f8:bb:89:52:a0: a8:73:65:24:2a:89:80:c8:c7:2d:45:7c:0e:dc:d9: a6:2f:4a:f9:ff:2f:06:8e:e3:3b:3e:29:ff:f1:24: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.164.0/22 143.0.24.0/22 143.208.20.0/22 168.227.52.0/22 186.235.120.0/21 IPv6: 2804:2a7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264075 Signature Algorithm: sha256WithRSAEncryption 69:13:28:ec:cd:b1:c2:2a:cf:cb:eb:c7:07:d9:a1:63:af:e7: 63:8d:be:e5:35:58:ec:c4:97:be:38:3a:60:28:51:5a:df:72: 37:f5:22:fc:06:73:c9:5e:bd:fc:a8:08:fe:b4:0c:cc:ce:77: ac:ff:c1:25:83:d6:d7:73:bc:37:1b:23:d4:07:c7:65:2c:a7: de:e0:e2:32:27:d4:ec:a4:17:88:4f:74:ec:e3:8a:56:76:4e: df:dc:3c:3d:6b:85:8e:3b:54:0d:3b:1e:46:d9:f1:60:54:d1: b1:4b:2d:4e:ff:d1:34:2b:65:e1:82:2c:f2:37:fd:83:66:d4: d2:67:88:91:9d:37:7c:9b:ad:9b:cd:b1:42:b8:86:02:a4:b6: f9:81:d2:44:4c:dd:58:b2:b7:d5:7b:a0:da:14:1d:b1:ae:d3: 62:09:d2:6f:0f:01:96:23:19:b8:ba:ca:d8:5d:96:23:8c:c1: 37:18:67:83:23:26:f9:36:20:24:a7:b4:9e:b2:c4:4d:59:58: 04:8d:1d:b0:c6:e5:9d:77:7f:77:92:84:99:26:ae:e4:f4:8c: 6d:a5:02:1e:b7:22:c4:a3:84:0b:34:00:1c:a7:e2:6a:72:20: 86:5c:5d:dd:0b:7a:75:c6:8f:50:60:e4:1a:38:ae:55:5e:83: a4:61:60:59 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUPwU1EfJZWhnza8P0z/pMZl10XZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjExNjE2NDBaFw0yNjAyMjAxNjIxNDBaMDMxMTAvBgNV BAMTKDFGODhCRTJDQzRDQTYwQTM0NThFOUY4Q0YyRkJBQUZGMUZFRDdBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqEEPKhuFbsAp7zB3FuYE0vJH XxB91w7snKIzhKjJMX1pdEoXyIBklfjgd+1rOH6LG/4FKrafGv2hk1WxtwAXc0AH OCIagq222rHTFpfUaM/Lbscfx/LJJg3vChMhnO8EM45d0YcY1Ozk0e4Vvf3q7b9I ZTQEsHNSGUmZSowC0F5JW5Z0Ily5vc6YfDG4Mk9ebWtgAM1Yr7ewyBXFGsw/6aA0 AHckzS2V/5ruDVZani/IT1kzVNZeOoUlcx1CxaQyXhGJrGVnUsxVtz73OyDcZTwh s1v3FMUrflb4u4lSoKhzZSQqiYDIxy1FfA7c2aYvSvn/LwaO4zs+Kf/xJBXNAgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfiL4sxMpgo0WO n4zy+6r/H+16BzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm42 ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZu Nmcxa1B1RDU4QmVTVmtYN0d1NFNLaTVRV1h5MTlvVHB2cHZpM2Mza2p0LzAvMUY4 OEJFMkNDNENBNjBBMzQ1OEU5RjhDRjJGQkFBRkYxRkVEN0EwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCLaakAwQCjwAYAwQCj9AUAwQCqOM0AwQDuut4MA0E AgACMAcDBQAoBCp8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHizANBgkqhkiG 9w0BAQsFAAOCAQEAaRMo7M2xwirPy+vHB9mhY6/nY42+5TVY7MSXvjg6YChRWt9y N/Ui/AZzyV69/KgI/rQMzM53rP/BJYPW13O8Nxsj1AfHZSyn3uDiMifU7KQXiE90 7OOKVnZO39w8PWuFjjtUDTseRtnxYFTRsUstTv/RNCtl4YIs8jf9g2bU0meIkZ03 fJutm82xQriGAqS2+YHSREzdWLK31Xug2hQdsa7TYgnSbw8BliMZuLrK2F2WI4zB NxhngyMm+TYgJKe0nrLETVlYBI0dsMblnXd/d5KEmSau5PSMbaUCHrcixKOECzQA HKfianIghlxd3Qt6dcaPUGDkGjiuVV6DpGFgWQ== -----END CERTIFICATE-----Generated at Sat Apr 5 02:42:05 2025 by rpki-client