$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer File: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer (raw, json) Hash identifier: c9eZC86srIY/gsiNEAxWVVILcOJVnG+DfQhx7QY51SY= Subject key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F03A4BAE23B40D0C24284D91EAC0B2299296E6B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft caRepository: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Jan 2025 13:26:58 +0000 Certificate not after: Fri 23 Jan 2026 13:31:58 +0000 Subordinate resources: AS: 263252 IP: 168.197.228.0/22 IP: 189.201.232.0/21 IP: 2804:17cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:03:a4:ba:e2:3b:40:d0:c2:42:84:d9:1e:ac:0b:22:99:29:6e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 24 13:26:58 2025 GMT Not After : Jan 23 13:31:58 2026 GMT Subject: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:16:a6:68:b9:a8:71:8f:ed:2c:4f:64:2b: ba:4f:f2:bf:74:f5:ad:e1:50:29:62:be:4a:68:80: 41:3e:97:61:71:04:03:0e:6a:e9:49:56:98:82:5d: b6:fd:5f:dd:bd:ab:b0:73:a8:01:37:ad:81:1b:18: e1:cf:c7:19:2f:b0:90:1b:ff:f2:13:9a:09:e7:84: 33:c8:05:85:68:d9:47:7d:4b:f3:86:b6:6f:7b:ec: 84:6e:1e:d0:01:8e:e1:ec:33:cf:7e:d9:52:41:13: 99:98:64:6b:86:f7:49:c2:65:5f:b8:8e:93:59:3c: 54:15:92:40:15:8d:a8:14:8f:05:6d:13:01:55:92: 3d:98:c5:ee:13:6e:25:a9:53:2d:d2:59:03:8e:65: 7c:2a:0d:48:b2:41:24:18:29:01:02:e8:69:37:0b: 68:9d:de:e8:e2:5e:f9:dc:7c:98:bd:bf:25:f0:c8: 68:09:a1:ec:c5:c5:8b:88:f3:4e:8d:e4:b1:7b:c4: 5b:76:13:5c:2f:d5:a0:f0:00:8a:b0:3e:bc:8d:dd: 9c:3b:15:d0:46:9a:33:3a:0b:99:4e:e1:31:37:76: 61:50:fd:c5:2d:06:be:68:37:ac:0d:5e:53:07:d0: 26:d5:ac:db:3a:7b:47:ae:d6:b6:9a:a1:00:fa:e7: 4d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.228.0/22 189.201.232.0/21 IPv6: 2804:17cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263252 Signature Algorithm: sha256WithRSAEncryption 63:4e:36:93:a2:37:17:cc:59:23:77:7b:3e:02:1e:94:8e:93: bd:cb:c5:12:37:af:bd:04:1e:fb:13:d9:b0:ee:85:ce:27:c7: 0d:43:1e:08:be:f8:8a:11:1e:e3:ce:21:91:26:6d:35:84:af: 45:76:71:5a:1e:19:e0:bc:f4:f5:1e:52:bd:60:c5:68:71:0c: de:25:59:41:66:4f:c7:14:39:d9:41:18:f1:53:73:0e:03:d6: 9d:bf:c4:96:66:1d:40:b4:55:54:32:40:5c:43:e1:c7:06:cf: 4c:66:69:de:0a:ff:14:d1:f9:23:35:ff:16:56:cc:a6:c6:34: f4:fd:94:32:3c:cf:23:ce:f3:fe:57:b7:7a:f0:35:d4:e1:a8: 8e:0e:27:eb:78:c5:be:97:17:09:c3:47:aa:e0:f7:df:28:2c: 76:fb:24:b6:ae:60:a8:8d:6e:ed:5c:f4:5e:14:49:12:34:6e: a9:16:1f:06:c0:df:09:31:8e:f6:44:52:3d:9a:24:6d:de:e7: 52:96:c2:ce:3f:46:28:3b:0d:15:0a:3c:eb:27:8e:3e:00:86: 3b:84:fc:42:ef:67:f6:1e:c4:14:da:77:27:27:2d:ce:a7:65: 72:d0:72:77:e9:74:84:f9:5f:ef:15:22:04:fe:81:51:44:8e: 46:1c:66:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDwOkuuI7QNDCQoTZHqwLIpkpbmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjQxMzI2NThaFw0yNjAxMjMxMzMxNThaMDMxMTAvBgNV BAMTKDIzQzJENTdDNDlDN0M0MEEzRDI1NzNCQzNBNDFEMDg4QTFFODZDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZhamaLmocY/tLE9kK7pP8r90 9a3hUClivkpogEE+l2FxBAMOaulJVpiCXbb9X929q7BzqAE3rYEbGOHPxxkvsJAb //ITmgnnhDPIBYVo2Ud9S/OGtm977IRuHtABjuHsM89+2VJBE5mYZGuG90nCZV+4 jpNZPFQVkkAVjagUjwVtEwFVkj2Yxe4TbiWpUy3SWQOOZXwqDUiyQSQYKQEC6Gk3 C2id3ujiXvncfJi9vyXwyGgJoezFxYuI806N5LF7xFt2E1wv1aDwAIqwPryN3Zw7 FdBGmjM6C5lO4TE3dmFQ/cUtBr5oN6wNXlMH0CbVrNs6e0eu1raaoQD6501HAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjwtV8ScfECj0l c7w6QdCIoehslzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnFv c0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWExV04vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJx b3NFRkhWUWJlUXZ5OGlrdGROenBXTkhLY0IxemVWNG1TZDZGMWVhMVdOLzAvMjND MkQ1N0M0OUM3QzQwQTNEMjU3M0JDM0E0MUQwODhBMUU4NkM5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMXkAwQDvcnoMA0EAgACMAcDBQAoBBfMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEVDANBgkqhkiG9w0BAQsFAAOCAQEAY042k6I3 F8xZI3d7PgIelI6TvcvFEjevvQQe+xPZsO6FzifHDUMeCL74ihEe484hkSZtNYSv RXZxWh4Z4Lz09R5SvWDFaHEM3iVZQWZPxxQ52UEY8VNzDgPWnb/ElmYdQLRVVDJA XEPhxwbPTGZp3gr/FNH5IzX/FlbMpsY09P2UMjzPI87z/le3evA11OGojg4n63jF vpcXCcNHquD33ygsdvsktq5gqI1u7Vz0XhRJEjRuqRYfBsDfCTGO9kRSPZokbd7n UpbCzj9GKDsNFQo86yeOPgCGO4T8Qu9n9h7EFNp3JyctzqdlctByd+l0hPlf7xUi BP6BUUSORhxmVA== -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:14 2025 by rpki-client