$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.cer (raw, json) Hash identifier: dFBBi06ZMPmUzj3ffgA1r0779GI7ns1TzGMH1lIkH1o= Subject key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 213260F9421F444D3366060654ED72A3F0A1145D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft caRepository: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Feb 2025 18:32:45 +0000 Certificate not after: Mon 16 Feb 2026 18:37:45 +0000 Subordinate resources: AS: 268788 IP: 45.173.24.0/22 IP: 2804:5aac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:32:60:f9:42:1f:44:4d:33:66:06:06:54:ed:72:a3:f0:a1:14:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 17 18:32:45 2025 GMT Not After : Feb 16 18:37:45 2026 GMT Subject: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:49:cd:1f:b6:4b:35:4c:7b:38:af:35:c6: 66:e7:57:0e:da:04:44:5e:eb:e0:c0:6e:37:6d:a1: 54:09:41:09:c9:01:b3:85:da:76:b1:f9:88:df:17: b4:4d:41:34:e2:27:a8:2b:bb:b2:fd:35:07:e7:36: 29:15:74:3a:b3:b1:64:62:1f:57:38:89:b4:fc:d7: a4:58:fd:48:10:14:a6:58:7c:ce:3f:e7:76:f9:9f: 32:7a:cc:c7:bc:ff:67:80:36:39:5b:58:d8:18:e8: 24:28:de:dc:94:c9:ba:26:75:f6:42:f5:88:b3:c3: 62:ad:e1:2e:24:3c:60:d5:90:35:5a:31:f2:b3:b5: de:54:8a:4c:0e:7b:0e:23:18:70:1d:5e:df:e9:96: 86:7d:8d:14:e0:42:57:4f:6d:65:a2:dc:a7:6b:28: 1f:bb:76:c9:4b:6a:65:e8:8a:f7:98:a8:f7:6a:87: c1:d6:d9:1e:23:af:08:de:25:d0:25:a9:fa:19:a7: c3:04:3f:ac:ba:cc:f4:b8:5e:64:30:da:ed:09:6f: fe:fd:90:c8:20:a4:6b:38:0d:86:e7:15:6f:4a:c2: 5e:49:3a:89:24:44:15:cb:f2:8b:f7:9c:aa:a6:1b: b3:10:65:03:d0:3c:19:dc:c7:db:ad:d2:60:16:08: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.24.0/22 IPv6: 2804:5aac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268788 Signature Algorithm: sha256WithRSAEncryption d7:9b:f6:4b:5b:a3:3a:1a:46:2c:3c:1d:fb:a6:7a:f1:e7:d5: ab:1a:ac:d3:05:e9:cc:e7:a4:37:5d:0d:57:d9:5c:12:c4:88: c0:9a:d0:ad:bd:dd:cf:ee:a5:aa:01:e9:d2:9d:3a:31:17:4e: c6:2a:89:1e:79:ec:4a:a6:4f:36:af:4c:9e:e9:d7:0e:7f:6a: 9f:c6:68:e2:f0:53:2e:ef:9a:be:0a:83:e2:d6:c1:0f:6a:87: a9:c6:f4:f1:20:02:c8:31:5b:20:1a:3f:1d:8f:3c:44:6b:24: 0a:54:d0:53:1c:30:99:a8:88:5b:e3:04:fd:6a:01:32:55:5c: ce:b2:33:17:b8:1e:48:67:25:90:77:8e:4c:03:b1:6a:53:3f: 61:a7:1f:aa:2a:1e:6c:62:f5:8f:7d:a4:fb:27:5a:03:46:62: c0:f1:90:6f:76:a2:01:59:09:fc:69:68:d9:18:52:b1:7e:65: 00:03:cc:1b:ac:cb:00:1d:0f:ff:af:74:67:18:52:2c:1a:e6: c5:b3:d6:ae:61:5b:22:5a:a0:68:ba:6d:bf:93:35:fe:92:a5: 4b:05:9e:f8:0d:b5:b7:c1:1d:34:bb:5f:0c:98:f5:c0:3a:cf: 18:b4:cb:b2:66:83:cc:7d:f8:d8:1c:d7:4a:e5:54:97:d1:2f: a4:92:c2:49 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUITJg+UIfRE0zZgYGVO1yo/ChFF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTcxODMyNDVaFw0yNjAyMTYxODM3NDVaMDMxMTAvBgNV BAMTKDI0QjM0MjM0NDVDRTVEMzYyODBEOEY3MjE1MTM0MERDQkUzNEI3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIUnNH7ZLNUx7OK81xmbnVw7a BERe6+DAbjdtoVQJQQnJAbOF2nax+YjfF7RNQTTiJ6gru7L9NQfnNikVdDqzsWRi H1c4ibT816RY/UgQFKZYfM4/53b5nzJ6zMe8/2eANjlbWNgY6CQo3tyUybomdfZC 9Yizw2Kt4S4kPGDVkDVaMfKztd5UikwOew4jGHAdXt/ploZ9jRTgQldPbWWi3Kdr KB+7dslLamXoiveYqPdqh8HW2R4jrwjeJdAlqfoZp8MEP6y6zPS4XmQw2u0Jb/79 kMggpGs4DYbnFW9Kwl5JOokkRBXL8ov3nKqmG7MQZQPQPBncx9ut0mAWCEGjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQks0I0Rc5dNigN j3IVE0DcvjS3uzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSENX Wmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hD V1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAvMjRC MzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENCRTM0QjdCQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa0YMA0EAgACMAcDBQAoBFqsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZ9DANBgkqhkiG9w0BAQsFAAOCAQEA15v2S1ujOhpGLDwd +6Z68efVqxqs0wXpzOekN10NV9lcEsSIwJrQrb3dz+6lqgHp0p06MRdOxiqJHnns SqZPNq9MnunXDn9qn8Zo4vBTLu+avgqD4tbBD2qHqcb08SACyDFbIBo/HY88RGsk ClTQUxwwmaiIW+ME/WoBMlVczrIzF7geSGclkHeOTAOxalM/YacfqioebGL1j32k +ydaA0ZiwPGQb3aiAVkJ/Glo2RhSsX5lAAPMG6zLAB0P/690ZxhSLBrmxbPWrmFb IlqgaLptv5M1/pKlSwWe+A21t8EdNLtfDJj1wDrPGLTLsmaDzH342BzXSuVUl9Ev pJLCSQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:20 2025 by rpki-client