$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer File: 1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer (raw, json) Hash identifier: IQ5ShXn+UVHtWek4Xj8kgZJe6Fq80DqxTfidgjOlMro= Subject key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2066062F6524FEE1B309B021EC63D0E4DA51AD7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft caRepository: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 10:09:40 +0000 Certificate not after: Fri 27 Mar 2026 10:14:40 +0000 Subordinate resources: AS: 264186 IP: 138.94.192.0/22 IP: 143.0.188.0/22 IP: 2804:23d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 19:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:66:06:2f:65:24:fe:e1:b3:09:b0:21:ec:63:d0:e4:da:51:ad:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 28 10:09:40 2025 GMT Not After : Mar 27 10:14:40 2026 GMT Subject: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:45:a5:43:30:8e:dd:a0:68:f4:93:8c:45: 66:35:83:94:09:05:36:41:72:39:3d:fd:31:31:02: 8c:03:bf:ad:55:cf:e2:1d:8e:c0:93:62:bb:5c:13: a5:9c:66:6c:68:ff:43:c8:f7:64:11:37:ba:6a:aa: 54:ff:a7:24:4e:e0:d6:22:96:d9:ab:f3:67:69:ff: a1:8b:3d:e9:32:f5:5c:e1:b0:80:59:55:d2:8d:58: 21:de:30:5e:21:61:9d:0a:ed:05:9f:74:71:bb:09: 6d:ea:c1:b2:36:46:af:2d:06:c7:e7:1b:09:b8:49: f0:ef:57:d3:85:47:82:2f:d2:42:3f:aa:68:0e:7d: 90:fc:19:92:01:0d:17:2a:80:88:92:97:0e:f5:70: 34:1b:ef:92:52:73:a0:6b:4a:46:5a:e5:e7:e0:52: 5c:6d:61:ec:5f:63:3e:bf:5f:00:95:9d:21:40:67: a6:e9:fa:c8:d8:65:37:e7:10:58:e5:7e:9f:af:ef: 10:76:0d:69:83:98:e6:a9:20:e7:86:3a:e6:dd:15: 69:5b:c0:41:4e:09:1e:01:b2:b9:23:bb:76:45:24: cf:da:1a:47:be:30:e4:69:59:25:bf:df:76:7f:5e: 3c:b0:31:e7:03:2b:c6:c1:2b:92:ee:7c:17:7c:bf: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.192.0/22 143.0.188.0/22 IPv6: 2804:23d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264186 Signature Algorithm: sha256WithRSAEncryption 76:cc:c2:39:f6:f9:f9:a1:51:99:b8:5c:20:48:3c:72:9a:53: 57:0a:f7:68:06:d3:22:61:76:6e:5c:b7:f4:c6:1d:8f:aa:46: 90:8a:71:6a:a4:04:c2:4c:a2:38:d9:75:d1:1e:71:e0:ad:32: 75:49:b3:5e:35:bd:e6:98:df:4c:46:37:47:ef:28:01:90:2b: bb:f2:17:ca:ff:7d:49:89:86:06:c5:bc:bf:d6:35:d6:1b:8d: 07:9d:47:9f:bd:a5:5c:a4:aa:5e:8c:14:9a:c2:92:7f:87:ed: 44:15:ee:01:af:a3:2e:7b:ac:6b:80:94:99:d7:4e:9d:e7:30: 2d:1b:08:5f:d6:ac:45:8b:91:9d:b0:26:b6:16:f6:6b:8b:07: e1:ed:9a:50:c9:5b:46:db:5d:a6:94:2b:da:40:85:e2:a0:b0: 53:f6:af:d9:b1:2d:e6:e5:17:17:2a:90:36:fd:56:8f:21:9b: 3e:2e:87:be:33:16:64:14:b3:12:08:91:77:06:b5:eb:57:9d: 20:e9:51:f0:bc:5e:95:d9:fe:db:41:15:e8:17:21:8c:59:62: 5e:84:41:53:35:26:ef:a8:d3:2d:62:13:d9:6f:1f:37:87:24: 1c:e9:7d:ef:10:e6:e7:a7:87:69:fc:d2:9b:01:26:4c:a7:e9: 7f:cc:16:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIGYGL2Uk/uGzCbAh7GPQ5NpRrX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjgxMDA5NDBaFw0yNjAzMjcxMDE0NDBaMDMxMTAvBgNV BAMTKDFGQTAyNkQ3NUZFRkE1OEM5Q0Y4OUIyMEYxOUVGNjlEMjdEQTU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYUWlQzCO3aBo9JOMRWY1g5QJ BTZBcjk9/TExAowDv61Vz+IdjsCTYrtcE6WcZmxo/0PI92QRN7pqqlT/pyRO4NYi ltmr82dp/6GLPeky9VzhsIBZVdKNWCHeMF4hYZ0K7QWfdHG7CW3qwbI2Rq8tBsfn Gwm4SfDvV9OFR4Iv0kI/qmgOfZD8GZIBDRcqgIiSlw71cDQb75JSc6BrSkZa5efg UlxtYexfYz6/XwCVnSFAZ6bp+sjYZTfnEFjlfp+v7xB2DWmDmOapIOeGOubdFWlb wEFOCR4Bsrkju3ZFJM/aGke+MORpWSW/33Z/XjywMecDK8bBK5LufBd8vyFPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfoCbXX++ljJz4 myDxnvadJ9pYTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGZ5 c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpOdXUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhm eXNZM2l2alJ5NWdyV0JMSnlnSlNwTG93VEc0YlR2R3I0SlFVb3ZqTnV1LzAvMUZB MDI2RDc1RkVGQTU4QzlDRjg5QjIwRjE5RUY2OUQyN0RBNTg0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCil7AAwQCjwC8MA0EAgACMAcDBQAoBCPUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQH+jANBgkqhkiG9w0BAQsFAAOCAQEAdszCOfb5 +aFRmbhcIEg8cppTVwr3aAbTImF2bly39MYdj6pGkIpxaqQEwkyiONl10R5x4K0y dUmzXjW95pjfTEY3R+8oAZAru/IXyv99SYmGBsW8v9Y11huNB51Hn72lXKSqXowU msKSf4ftRBXuAa+jLnusa4CUmddOnecwLRsIX9asRYuRnbAmthb2a4sH4e2aUMlb RttdppQr2kCF4qCwU/av2bEt5uUXFyqQNv1WjyGbPi6HvjMWZBSzEgiRdwa161ed IOlR8Lxeldn+20EV6BchjFliXoRBUzUm76jTLWIT2W8fN4ckHOl97xDm56eHafzS mwEmTKfpf8wWVA== -----END CERTIFICATE-----Generated at Wed Apr 9 17:10:13 2025 by rpki-client