$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer File: 252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer (raw, json) Hash identifier: Dx6Z4OJ0uKenN+nj5aKpUgRkSx7DYo9JLXV7MGjYQQc= Subject key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5713C0F8B21971CB184D54B2B3DFA848CD2CFB6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft caRepository: rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 13 Jan 2025 14:12:06 +0000 Certificate not after: Mon 12 Jan 2026 14:17:06 +0000 Subordinate resources: AS: 262988 IP: 168.90.80.0/22 IP: 179.125.64.0/19 IP: 186.251.8.0/22 IP: 2804:1058::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:13:c0:f8:b2:19:71:cb:18:4d:54:b2:b3:df:a8:48:cd:2c:fb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 13 14:12:06 2025 GMT Not After : Jan 12 14:17:06 2026 GMT Subject: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9e:be:c4:7f:ba:64:67:3a:10:53:22:02:9e: 1d:3e:2a:c1:15:de:65:96:6c:bb:86:14:48:a2:4d: f1:d0:98:b0:ed:6f:d9:9d:a0:dc:a3:ae:9c:2f:47: ba:dd:3e:cc:ab:5e:3c:9a:70:ef:ea:d3:d3:50:c2: 11:d4:1c:b9:a7:4f:f8:1e:84:47:05:dc:b5:f8:42: 83:e5:cc:a3:38:1c:1b:98:85:be:d3:6b:a0:e1:77: 34:03:c3:af:7b:8f:5d:d6:78:b3:77:8f:c5:6f:d9: e5:76:19:37:81:8e:1c:13:c1:42:55:66:a9:94:08: ae:73:4f:8b:0d:ba:85:f5:31:e3:a7:45:c3:71:24: 86:17:5e:6c:06:79:2c:db:16:1e:7f:d0:5c:ae:e5: 86:b1:61:f8:6d:ac:5c:e6:c1:c2:ea:83:09:7c:68: 8d:bf:b5:f1:c9:40:31:20:af:af:5c:c2:f0:7a:18: 1f:26:b9:2b:11:7b:22:21:19:54:74:a6:db:17:6e: 0d:27:f1:5e:f0:88:60:ae:2c:4c:91:c9:59:9d:94: 9e:17:e7:ca:17:3c:39:b3:a4:d7:f7:d0:91:0a:75: 67:c9:91:e7:bb:98:af:67:67:63:29:25:05:9c:07: 5d:c6:af:4f:4d:40:14:ca:4c:be:a0:d9:82:9a:c3: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.80.0/22 179.125.64.0/19 186.251.8.0/22 IPv6: 2804:1058::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262988 Signature Algorithm: sha256WithRSAEncryption 7b:c1:ae:c8:7c:d5:08:8a:f9:c9:67:1b:0c:b7:d0:83:a4:c3: 49:9f:93:c5:8f:9a:96:63:79:c0:61:45:07:65:e0:2a:d0:d9: af:6b:08:16:b1:65:e5:dd:25:85:37:bf:ed:23:c9:bd:96:3f: 15:bc:31:21:48:43:17:24:5a:5e:47:c2:eb:34:f0:36:ab:71: 02:08:4a:16:e3:ee:d0:75:cb:1d:71:63:39:cd:26:e8:f9:46: e4:7a:e6:b5:3c:e7:9c:48:d2:85:9d:87:ee:2d:40:ef:ff:07: 13:5c:79:91:4f:ad:5e:cd:da:ae:4b:89:84:2d:43:b7:28:d6: 6d:66:50:cb:08:ec:29:9d:63:64:6e:0d:a2:09:0a:19:59:7c: 1c:2b:f1:38:46:48:40:5c:f7:1e:3b:ec:45:d3:25:f3:bf:66: 86:8c:c8:ac:03:8a:6d:2a:d4:11:9e:5b:62:8b:f9:3a:a9:fc: 10:b9:d3:ce:1d:0a:2d:88:e4:38:40:9f:8d:f2:32:16:5d:98: 75:58:2b:7d:05:60:47:fd:87:e9:f7:dd:3c:56:e9:8a:a0:7f: b2:0e:02:83:01:1f:c8:9a:a7:40:4d:f9:68:f9:b4:24:89:45: 1d:de:ba:8c:e4:92:c9:41:4f:00:e2:a6:07:50:c1:a3:86:85: 40:6d:c0:ec -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUVxPA+LIZccsYTVSys9+oSM0s+20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTMxNDEyMDZaFw0yNjAxMTIxNDE3MDZaMDMxMTAvBgNV BAMTKDI1MkRCNzk5N0FCOUZDMUVCQjhGN0YzMEI3NTU4MzAyREIzNzZFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDknr7Ef7pkZzoQUyICnh0+KsEV 3mWWbLuGFEiiTfHQmLDtb9mdoNyjrpwvR7rdPsyrXjyacO/q09NQwhHUHLmnT/ge hEcF3LX4QoPlzKM4HBuYhb7Ta6DhdzQDw697j13WeLN3j8Vv2eV2GTeBjhwTwUJV ZqmUCK5zT4sNuoX1MeOnRcNxJIYXXmwGeSzbFh5/0Fyu5YaxYfhtrFzmwcLqgwl8 aI2/tfHJQDEgr69cwvB6GB8muSsReyIhGVR0ptsXbg0n8V7wiGCuLEyRyVmdlJ4X 58oXPDmzpNf30JEKdWfJkee7mK9nZ2MpJQWcB13Gr09NQBTKTL6g2YKaw7gnAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlLbeZern8HruP fzC3VYMC2zduAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTRX eFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJKQ3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU0 V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAvMjUy REI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJEQjM3NkUwMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqFpQAwQFs31AAwQCuvsIMA0EAgACMAcDBQAoBBBY MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDTDANBgkqhkiG9w0BAQsFAAOCAQEA e8GuyHzVCIr5yWcbDLfQg6TDSZ+TxY+almN5wGFFB2XgKtDZr2sIFrFl5d0lhTe/ 7SPJvZY/FbwxIUhDFyRaXkfC6zTwNqtxAghKFuPu0HXLHXFjOc0m6PlG5HrmtTzn nEjShZ2H7i1A7/8HE1x5kU+tXs3arkuJhC1DtyjWbWZQywjsKZ1jZG4NogkKGVl8 HCvxOEZIQFz3HjvsRdMl879mhozIrAOKbSrUEZ5bYov5Oqn8ELnTzh0KLYjkOECf jfIyFl2YdVgrfQVgR/2H6ffdPFbpiqB/sg4CgwEfyJqnQE35aPm0JIlFHd66jOSS yUFPAOKmB1DBo4aFQG3A7A== -----END CERTIFICATE-----Generated at Tue Apr 15 09:35:23 2025 by rpki-client