$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer File: 27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer (raw, json) Hash identifier: 7fdA1aqlAAGoDop+QVH4IxOWzk/9EWZYbDCcHaErnVA= Subject key identifier: 27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 680FE1DF348FFE07A09E71AFCF7537D9AD385850 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft caRepository: rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:07:08 +0000 Certificate not after: Wed 04 Feb 2026 13:12:08 +0000 Subordinate resources: AS: 271473 IP: 181.174.208.0/22 IP: 2804:7c10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0f:e1:df:34:8f:fe:07:a0:9e:71:af:cf:75:37:d9:ad:38:58:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 5 13:07:08 2025 GMT Not After : Feb 4 13:12:08 2026 GMT Subject: CN=27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:38:ec:f6:8d:95:f5:6d:7c:8e:17:15:7a: 5c:90:c1:92:32:a3:9a:8f:06:f3:4b:99:34:3c:07: 3b:58:00:08:c2:47:1e:b8:21:20:b7:b6:41:98:89: 45:2d:e3:3d:6e:e6:78:4d:7c:2a:ac:11:f3:59:a3: 81:88:34:11:7f:ed:6e:80:ce:3e:3f:88:6d:a4:49: 57:3e:b7:2f:db:5b:78:1b:af:9a:4a:1a:3c:9a:20: d9:07:02:97:63:e3:3f:2a:21:5e:38:6c:63:1b:72: 9f:84:4e:aa:ff:79:bf:28:dc:0c:6c:16:8b:d4:2a: 33:02:b5:56:f8:a8:8e:7f:57:29:8b:c7:be:d1:99: 62:68:1d:48:44:9d:27:57:5a:bc:ce:22:e3:7e:3a: 9e:12:cf:05:ac:af:98:6b:11:a3:f2:4a:1d:9e:56: fc:0f:23:0e:47:36:cb:e7:76:ed:64:5d:65:cb:7d: 39:c4:15:e4:9a:39:aa:ca:05:0b:6f:2e:26:1b:f4: 1d:63:2e:e2:7a:1c:04:4e:9e:d7:7b:9e:54:0a:d8: f9:71:49:3e:b6:6a:08:10:dc:71:4f:c8:65:50:6e: 04:cb:3d:6d:82:c0:c1:27:2c:25:cc:66:35:cc:fd: 63:8e:9d:79:13:b8:fa:09:fe:c5:d9:cf:96:be:80: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.174.208.0/22 IPv6: 2804:7c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271473 Signature Algorithm: sha256WithRSAEncryption 49:8f:37:bd:7e:c8:0c:93:47:ed:82:96:68:48:f4:8c:0d:87: ea:a9:0e:fb:97:de:48:2d:4d:e5:eb:46:62:8d:66:8b:ed:35: d7:9e:ba:7c:e3:c9:e9:a2:fb:5e:dc:c2:84:45:63:c7:f0:60: 50:42:0a:2d:f3:93:9b:40:c9:97:fc:47:c6:6b:6a:a6:d4:59: c9:50:d5:75:4e:8e:7e:eb:9a:ea:25:24:5a:1d:49:ac:88:b8: 65:d9:5f:84:e1:27:73:75:68:c0:01:94:de:b3:aa:15:49:24: c0:1f:03:a9:b0:c0:20:35:6a:fb:27:1e:50:e9:e6:b6:61:59: 6f:79:c0:47:ef:0f:b5:4a:1e:8b:9c:16:3c:9e:67:98:f8:e5: 7c:3d:22:6b:81:bd:d8:64:3f:10:7d:c5:d6:00:fc:b4:d5:16: de:c8:00:46:d2:1f:50:32:eb:05:0a:19:82:20:6b:8c:5a:81: 76:02:86:4c:13:c2:a3:d7:cd:37:50:9f:8a:fa:82:3b:35:6e: 0f:8e:93:77:cb:49:d4:a4:63:63:b1:c2:3a:b5:cd:9b:06:18: be:aa:cc:b1:2c:b7:f9:47:b4:02:25:8b:67:bc:fe:5e:40:68: d4:f0:e9:55:a3:e1:ec:d7:1d:d3:60:c1:5f:af:d9:84:3d:60: 63:86:63:9d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUaA/h3zSP/gegnnGvz3U32a04WFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMDUxMzA3MDhaFw0yNjAyMDQxMzEyMDhaMDMxMTAvBgNV BAMTKDI3QzRBNjU1MkIyQTIwRjZERjdDNEE1NDk4Q0M2RkY5NTNCQUI0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dzjs9o2V9W18jhcVelyQwZIy o5qPBvNLmTQ8BztYAAjCRx64ISC3tkGYiUUt4z1u5nhNfCqsEfNZo4GINBF/7W6A zj4/iG2kSVc+ty/bW3gbr5pKGjyaINkHApdj4z8qIV44bGMbcp+ETqr/eb8o3Axs FovUKjMCtVb4qI5/VymLx77RmWJoHUhEnSdXWrzOIuN+Op4SzwWsr5hrEaPySh2e VvwPIw5HNsvndu1kXWXLfTnEFeSaOarKBQtvLiYb9B1jLuJ6HAROntd7nlQK2Plx ST62aggQ3HFPyGVQbgTLPW2CwMEnLCXMZjXM/WOOnXkTuPoJ/sXZz5a+gJCBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnxKZVKyog9t98 SlSYzG/5U7q0kjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGVt MXJkSHVZQnBoNk5xTEx1YmcxVFFyR3h6SnVpODl3MzNCZE4yTFNWVTQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRl bTFyZEh1WUJwaDZOcUxMdWJnMVRRckd4ekp1aTg5dzMzQmROMkxTVlU0LzAvMjdD NEE2NTUyQjJBMjBGNkRGN0M0QTU0OThDQzZGRjk1M0JBQjQ5Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCta7QMA0EAgACMAcDBQAoBHwQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkcTANBgkqhkiG9w0BAQsFAAOCAQEASY83vX7IDJNH7YKW aEj0jA2H6qkO+5feSC1N5etGYo1mi+011566fOPJ6aL7XtzChEVjx/BgUEIKLfOT m0DJl/xHxmtqptRZyVDVdU6Ofuua6iUkWh1JrIi4ZdlfhOEnc3VowAGU3rOqFUkk wB8DqbDAIDVq+yceUOnmtmFZb3nAR+8PtUoei5wWPJ5nmPjlfD0ia4G92GQ/EH3F 1gD8tNUW3sgARtIfUDLrBQoZgiBrjFqBdgKGTBPCo9fNN1CfivqCOzVuD46Td8tJ 1KRjY7HCOrXNmwYYvqrMsSy3+Ue0AiWLZ7z+XkBo1PDpVaPh7Ncd02DBX6/ZhD1g Y4ZjnQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:05 2025 by rpki-client