$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer File: 212063977863A474A988E1839F9F6296FA77E899.cer (raw, json) Hash identifier: dpVdFhd0IQmT02BxZAHyxQAvm5B3Mf/WW7L3596gy8I= Subject key identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C28319049623A98C2AEA0F09C819439DCB35EC5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft caRepository: rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:15:11 +0000 Certificate not after: Fri 06 Mar 2026 02:20:11 +0000 Subordinate resources: AS: 265274 IP: 168.0.180.0/22 IP: 170.80.220.0/22 IP: 2804:2d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:28:31:90:49:62:3a:98:c2:ae:a0:f0:9c:81:94:39:dc:b3:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:15:11 2025 GMT Not After : Mar 6 02:20:11 2026 GMT Subject: CN=212063977863A474A988E1839F9F6296FA77E899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:85:61:c9:0b:c5:63:1b:27:23:c3:7d:bd: e1:e8:2b:d5:1e:f3:29:8d:3b:7a:4d:d2:c2:c6:e9: 2c:64:b3:52:aa:83:fb:6a:33:82:f3:4a:2c:21:af: 26:7d:81:fa:69:23:71:9d:fa:3d:78:22:4e:d5:cf: b3:ba:c8:91:31:fe:ab:14:a1:37:ea:5b:bb:fc:ac: c9:b4:68:41:03:2b:ae:a2:c3:75:22:74:e6:52:18: 19:df:71:0c:14:2b:40:17:ca:37:d3:b5:42:6a:65: 04:d8:8a:e0:a3:b9:cb:e7:c7:95:a3:3a:03:c7:36: 61:3a:df:48:1d:b5:15:d0:3d:bc:5a:df:43:86:8d: cd:6f:89:5e:b4:c1:36:94:74:23:62:26:29:33:a6: 40:60:5c:ce:3f:fb:e4:c9:22:10:85:97:cd:82:77: 06:c1:e4:d0:16:93:bb:72:99:9c:1a:a4:82:3e:ad: 53:5c:2c:f4:a8:76:43:57:70:16:d6:0f:23:64:bd: dc:c0:e8:a7:cb:eb:ba:00:05:0c:7b:f8:bf:f3:b2: 9c:0f:cf:e7:da:b7:0f:ef:70:ff:05:88:60:d9:5a: 60:14:fb:cd:e8:d1:b3:35:21:aa:06:3d:49:11:4e: 75:06:81:5c:1f:d1:ab:f5:6d:b6:2d:f1:d4:4e:a7: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.180.0/22 170.80.220.0/22 IPv6: 2804:2d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265274 Signature Algorithm: sha256WithRSAEncryption 40:c2:bb:28:7b:0b:82:c8:71:4c:4b:3d:8b:44:c4:47:0c:6a: bf:1b:81:c2:e7:97:c1:ca:73:73:d9:57:97:46:0e:d7:92:8c: 56:52:1c:7d:18:1b:4b:ec:34:3b:dc:01:eb:16:ab:71:fa:bf: f3:9a:df:05:ae:20:bf:7b:db:ef:41:72:a7:2e:e6:13:a2:4e: de:04:e1:62:f9:10:a4:47:0f:99:cf:73:76:9c:d6:c3:f4:ac: 4f:ec:42:fc:4a:6d:88:19:70:d2:c9:8c:d7:5a:96:41:1d:5c: 2d:19:9b:04:6e:b7:14:0b:8f:13:f6:5a:9a:ed:80:ff:8c:5f: 48:ac:ab:08:3b:04:2a:51:aa:3f:2e:92:5a:5d:ab:6c:b1:b4: 92:cb:fb:f6:ec:07:ed:07:bd:5d:9f:0c:9b:42:0e:b6:b5:fc: 99:69:71:fe:f2:3b:25:00:2f:10:28:ee:21:e8:b3:5e:d4:b2: ea:c8:94:2c:b4:ed:9b:c9:3c:28:90:bc:70:7d:49:e3:38:e5: 6e:4d:48:c8:34:45:fe:04:19:5f:14:95:f6:f6:20:3a:77:7d: 61:ac:f1:ce:15:07:1a:12:ec:63:ec:00:43:96:11:d4:58:0e: ed:b5:98:dd:72:eb:c9:76:04:e4:9b:98:13:b4:2c:61:34:72: 2c:b7:b2:77 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUDCgxkEliOpjCrqDwnIGUOdyzXsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjE1MTFaFw0yNjAzMDYwMjIwMTFaMDMxMTAvBgNV BAMTKDIxMjA2Mzk3Nzg2M0E0NzRBOTg4RTE4MzlGOUY2Mjk2RkE3N0U4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBoVhyQvFYxsnI8N9veHoK9Ue 8ymNO3pN0sLG6Sxks1Kqg/tqM4LzSiwhryZ9gfppI3Gd+j14Ik7Vz7O6yJEx/qsU oTfqW7v8rMm0aEEDK66iw3UidOZSGBnfcQwUK0AXyjfTtUJqZQTYiuCjucvnx5Wj OgPHNmE630gdtRXQPbxa30OGjc1viV60wTaUdCNiJikzpkBgXM4/++TJIhCFl82C dwbB5NAWk7tymZwapII+rVNcLPSodkNXcBbWDyNkvdzA6KfL67oABQx7+L/zspwP z+fatw/vcP8FiGDZWmAU+83o0bM1IaoGPUkRTnUGgVwf0av1bbYt8dROp4fXAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhIGOXeGOkdKmI 4YOfn2KW+nfomTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2hx Vmk2QWR2UjNreWVCWFhUNjNHR2pTajR0SnpYY2gyN0ZwZUJGUGNucTQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2hx Vmk2QWR2UjNreWVCWFhUNjNHR2pTajR0SnpYY2gyN0ZwZUJGUGNucTQvMS8yMTIw NjM5Nzc4NjNBNDc0QTk4OEUxODM5RjlGNjI5NkZBNzdFODk5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKoALQDBAKqUNwwDQQCAAIwBwMFACgELVAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAw6MA0GCSqGSIb3DQEBCwUAA4IBAQBAwrsoewuC yHFMSz2LRMRHDGq/G4HC55fBynNz2VeXRg7XkoxWUhx9GBtL7DQ73AHrFqtx+r/z mt8FriC/e9vvQXKnLuYTok7eBOFi+RCkRw+Zz3N2nNbD9KxP7EL8Sm2IGXDSyYzX WpZBHVwtGZsEbrcUC48T9lqa7YD/jF9IrKsIOwQqUao/LpJaXatssbSSy/v27Aft B71dnwybQg62tfyZaXH+8jslAC8QKO4h6LNe1LLqyJQstO2byTwokLxwfUnjOOVu TUjINEX+BBlfFJX29iA6d31hrPHOFQcaEuxj7ABDlhHUWA7ttZjdcuvJdgTkm5gT tCxhNHIst7J3 -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:59 2025 by rpki-client