$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer File: 25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer (raw, json) Hash identifier: lqEDYYxl5xIphjyiPo3Jkb2hjodYltYUvECvekFT+pI= Subject key identifier: 25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 021516F2674B6AC72C4F3DCCB6F28B9332E8C990 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft caRepository: rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Dec 2024 19:36:14 +0000 Certificate not after: Mon 15 Dec 2025 19:41:14 +0000 Subordinate resources: AS: 266470 IP: 170.83.152.0/22 IP: 2804:3854::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:15:16:f2:67:4b:6a:c7:2c:4f:3d:cc:b6:f2:8b:93:32:e8:c9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 16 19:36:14 2024 GMT Not After : Dec 15 19:41:14 2025 GMT Subject: CN=25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:3d:69:29:ad:dd:8d:98:90:a2:90:14:78: 4b:79:eb:7f:d0:25:51:ae:eb:20:8e:5c:d5:84:d0: 91:80:a5:05:58:32:d2:da:92:4a:10:36:fe:76:c9: 00:4c:aa:94:01:cc:09:d9:a7:e1:f2:1b:70:50:d9: d9:0e:ab:20:1a:4e:ff:32:87:18:43:b2:f7:9a:2e: 1d:4b:76:e9:64:57:1f:6d:3b:56:ec:da:81:cf:d0: 6e:15:99:5d:ed:e8:8c:62:42:d8:ad:81:b1:19:c9: 3d:d9:ce:44:d4:8a:72:27:5e:b2:0f:ea:85:6a:b4: 5d:f7:93:33:39:b7:77:d0:60:19:82:9b:2c:9c:a5: 3a:94:9c:e2:c5:fe:09:fa:ff:3e:90:1e:85:c9:41: f3:b0:a4:d5:6c:29:c0:cf:5b:55:f1:ec:07:36:b2: d0:86:e1:f9:89:9f:d3:15:6c:35:9b:ae:60:9a:9b: 97:70:16:da:da:1f:d1:25:42:64:27:e1:ce:9d:c4: 63:76:67:6d:e4:51:87:53:02:14:d3:84:e4:e2:55: b4:a0:ff:26:4d:0a:69:db:a2:2d:46:c6:42:35:7b: 15:b9:1f:9f:77:5f:37:94:83:1e:93:cb:e4:ce:4a: 0f:82:95:ac:df:00:4d:d0:31:85:f0:a4:95:b3:7c: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.152.0/22 IPv6: 2804:3854::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266470 Signature Algorithm: sha256WithRSAEncryption 03:03:11:f9:5d:19:69:d9:78:28:5e:7c:b8:08:0e:e9:76:16: 84:81:d3:ee:db:f8:5b:11:b3:4e:be:39:85:e4:71:f4:a5:d2: 61:3d:8f:88:fc:e8:01:03:30:2a:74:1a:9f:f6:2b:53:6d:79: f6:ae:d9:64:4b:b9:62:f8:4f:11:86:79:2c:ac:65:8f:5f:bc: 9f:2a:2a:49:37:24:ee:84:c6:61:8a:a2:c7:ef:30:36:3a:d4: 2d:f1:48:80:f6:41:47:20:c1:c1:9f:f9:60:2c:f4:04:e8:d0: 83:9c:1e:b7:a2:b4:46:65:3d:9d:4e:ab:2e:76:c6:33:d2:a8: ee:38:9d:8f:dc:08:f4:8e:f8:d3:13:e6:94:ef:0e:e8:57:b4: c9:14:8e:41:ee:d8:01:92:dd:78:66:58:54:9f:72:46:4b:1e: b6:10:3f:8e:65:26:c2:72:d4:c0:34:3d:99:95:41:66:bb:65: 43:2c:9d:c9:44:c1:68:52:26:a5:97:53:64:a3:bc:8e:19:49: 9e:6e:2b:8d:a5:29:04:74:32:aa:2e:a3:35:f7:73:65:a2:8d: 4e:73:53:34:4e:ea:7d:c9:fe:2b:8a:93:1f:a7:63:68:6f:4b: f3:03:94:da:1d:46:c4:c5:ba:e7:e8:37:5c:ec:4c:3d:91:83: 4c:32:81:9a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAhUW8mdLascsTz3MtvKLkzLoyZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTYxOTM2MTRaFw0yNTEyMTUxOTQxMTRaMDMxMTAvBgNV BAMTKDI1RTlFMkRDNUYzRDdFRjdFRTVFNUM3MDNDNDAzMkE5Mjk2Rjk4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojj1pKa3djZiQopAUeEt563/Q JVGu6yCOXNWE0JGApQVYMtLakkoQNv52yQBMqpQBzAnZp+HyG3BQ2dkOqyAaTv8y hxhDsveaLh1LdulkVx9tO1bs2oHP0G4VmV3t6IxiQtitgbEZyT3ZzkTUinInXrIP 6oVqtF33kzM5t3fQYBmCmyycpTqUnOLF/gn6/z6QHoXJQfOwpNVsKcDPW1Xx7Ac2 stCG4fmJn9MVbDWbrmCam5dwFtraH9ElQmQn4c6dxGN2Z23kUYdTAhTThOTiVbSg /yZNCmnboi1GxkI1exW5H593XzeUgx6Ty+TOSg+ClazfAE3QMYXwpJWzfHHJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl6eLcXz1+9+5e XHA8QDKpKW+Y1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjFE Z0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4M2MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ox RGdBb1l2TTNER3JBNHhuMXdwalhnQTJMbjNiVXFLc0hzb1JoaUZQeDNjLzAvMjVF OUUyREM1RjNEN0VGN0VFNUU1QzcwM0M0MDMyQTkyOTZGOThENS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlOYMA0EAgACMAcDBQAoBDhUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQ5jANBgkqhkiG9w0BAQsFAAOCAQEAAwMR+V0Zadl4KF58 uAgO6XYWhIHT7tv4WxGzTr45heRx9KXSYT2PiPzoAQMwKnQan/YrU2159q7ZZEu5 YvhPEYZ5LKxlj1+8nyoqSTck7oTGYYqix+8wNjrULfFIgPZBRyDBwZ/5YCz0BOjQ g5wet6K0RmU9nU6rLnbGM9Ko7jidj9wI9I740xPmlO8O6Fe0yRSOQe7YAZLdeGZY VJ9yRksethA/jmUmwnLUwDQ9mZVBZrtlQyydyUTBaFImpZdTZKO8jhlJnm4rjaUp BHQyqi6jNfdzZaKNTnNTNE7qfcn+K4qTH6djaG9L8wOU2h1GxMW65+g3XOxMPZGD TDKBmg== -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:49 2025 by rpki-client