$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer (raw, json) Hash identifier: CWfKjmzdOQV0AXfNxsKjW4hIub23QtvJ9Co+kKQ6N1k= Subject key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 571FDC50B1B8156D8E3FC7511268B8BC0602875B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft caRepository: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 20 Mar 2025 12:43:29 +0000 Certificate not after: Thu 19 Mar 2026 12:48:29 +0000 Subordinate resources: AS: 264971 IP: 200.219.149.0/24 IP: 2801:80:1920::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1f:dc:50:b1:b8:15:6d:8e:3f:c7:51:12:68:b8:bc:06:02:87:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 12:43:29 2025 GMT Not After : Mar 19 12:48:29 2026 GMT Subject: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:c7:48:11:8f:cf:fd:06:32:c5:8f:eb:7b: 10:11:7b:00:ee:43:6a:fc:7b:b5:dc:f2:a5:4a:88: dc:64:18:67:11:c6:4f:31:d3:76:0c:93:7c:3c:6a: ed:1e:0e:7d:7f:7f:7a:50:a8:02:28:79:cc:12:d6: 93:d4:30:e0:7b:aa:55:a5:e9:f9:f3:47:7c:f0:e9: 3e:7b:d2:fb:91:02:a6:c3:ac:7c:e8:af:60:fc:d3: 54:78:09:65:f5:63:8d:65:0b:ce:bc:da:65:8f:78: 02:0c:f0:46:b5:da:cf:c6:cd:1d:b7:7a:78:30:1b: b1:c4:27:d7:2b:3f:c0:f6:17:65:8d:f1:f4:8f:35: 07:c8:b4:f6:df:82:67:2e:10:49:2f:16:e1:2e:16: 7c:ce:7d:ac:c8:9e:44:d1:f2:77:82:c6:e4:d5:70: 98:d0:23:71:84:2b:09:6e:6c:fd:a5:54:ec:5d:e0: 51:28:1b:34:58:8a:8b:cb:0e:89:19:69:a3:f7:5d: e7:f5:16:27:c8:e5:e3:82:d3:53:11:5a:5a:5a:46: 6d:16:b2:a7:a9:05:2c:67:a8:78:f4:5a:1c:0b:dc: 82:8f:6c:4c:7e:b0:c8:98:39:51:35:18:96:02:32: 63:4e:10:8d:af:64:88:55:bd:84:4b:f5:cf:4f:e4: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.149.0/24 IPv6: 2801:80:1920::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264971 Signature Algorithm: sha256WithRSAEncryption c6:6e:ef:68:e5:b6:fe:95:af:51:c8:36:6b:3f:a4:46:33:a0: 64:e0:f9:a4:fa:fc:02:a7:ce:04:4a:61:02:e4:4d:04:64:7e: 0a:bd:cb:dc:73:14:3c:a0:5f:a5:9c:78:ab:62:26:49:41:65: 5a:77:1a:d2:4c:74:a2:3e:28:3b:0d:a4:94:50:b7:36:0e:2d: 0a:fb:0c:b2:2f:1c:4f:ee:65:82:1b:5f:19:ef:92:ea:4b:f2: d3:1a:ab:03:e4:1d:b6:16:a0:a4:f1:89:7c:1e:f0:b9:00:a9: 7e:6a:cc:dd:f3:b1:d9:b4:d7:5b:17:1a:d8:1d:49:70:9a:b0: 4b:c4:ac:49:26:5d:a0:46:ea:ec:8d:45:61:d9:1f:f3:bd:41: 25:89:2b:66:18:79:45:21:25:ce:51:66:17:bd:99:4c:99:16: c5:15:e2:d4:ba:83:37:06:90:22:38:d9:6e:d8:30:91:ea:f5: 57:d2:29:79:70:60:49:76:03:43:fb:d8:6b:26:6e:4e:b7:65: c6:d2:e0:be:7a:a8:76:8e:37:9d:f5:b5:4e:a7:f7:82:0b:91: 77:ce:ec:bf:3c:27:e9:11:a6:b5:d6:a7:02:d3:25:20:5d:da: e2:91:2d:b5:44:d9:f3:3e:e7:2d:69:3b:fb:5a:7a:10:f1:32: f7:2d:a5:49 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUVx/cULG4FW2OP8dREmi4vAYCh1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjAxMjQzMjlaFw0yNjAzMTkxMjQ4MjlaMDMxMTAvBgNV BAMTKDFGRDUzQkVDOTc2NkMwQjRGODExNTUxRTczODVDRTJFNEQ0MEZFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq8dIEY/P/QYyxY/rexARewDu Q2r8e7Xc8qVKiNxkGGcRxk8x03YMk3w8au0eDn1/f3pQqAIoecwS1pPUMOB7qlWl 6fnzR3zw6T570vuRAqbDrHzor2D801R4CWX1Y41lC8682mWPeAIM8Ea12s/GzR23 engwG7HEJ9crP8D2F2WN8fSPNQfItPbfgmcuEEkvFuEuFnzOfazInkTR8neCxuTV cJjQI3GEKwlubP2lVOxd4FEoGzRYiovLDokZaaP3Xef1FifI5eOC01MRWlpaRm0W sqepBSxnqHj0WhwL3IKPbEx+sMiYOVE1GJYCMmNOEI2vZIhVvYRL9c9P5LA1AgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQf1Tvsl2bAtPgR VR5zhc4uTUD+kjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGFp QmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhh aUJhTFBjUGpyejlOSFZobUV0eVVhOE1tem5GNDFXRlJ4ZFd1NFNZTVlDLzAvMUZE NTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0RDQwRkU5Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAyNuVMA8EAgACMAkDBwAoAQCAGSAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBAsLMA0GCSqGSIb3DQEBCwUAA4IBAQDGbu9o5bb+la9R yDZrP6RGM6Bk4Pmk+vwCp84ESmEC5E0EZH4KvcvccxQ8oF+lnHirYiZJQWVadxrS THSiPig7DaSUULc2Di0K+wyyLxxP7mWCG18Z75LqS/LTGqsD5B22FqCk8Yl8HvC5 AKl+aszd87HZtNdbFxrYHUlwmrBLxKxJJl2gRursjUVh2R/zvUEliStmGHlFISXO UWYXvZlMmRbFFeLUuoM3BpAiONlu2DCR6vVX0il5cGBJdgND+9hrJm5Ot2XG0uC+ eqh2jjed9bVOp/eCC5F3zuy/PCfpEaa11qcC0yUgXdrikS21RNnzPuctaTv7WnoQ 8TL3LaVJ -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:47 2025 by rpki-client