$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.cer File: 27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.cer (raw, json) Hash identifier: IUYL+78ChCLUQC5l0RhI2SZ2uCynf4NNcwmmvBEJHfM= Subject key identifier: 27:F4:AD:22:72:6A:F9:0E:71:DD:A4:9C:ED:F6:7B:DF:DD:04:0E:3A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C96E54733190DC6AF2AAF9F38A8E3E8F4D42D29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.mft caRepository: rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Feb 2025 19:06:40 +0000 Certificate not after: Fri 06 Feb 2026 19:11:40 +0000 Subordinate resources: AS: 265143 IP: 143.255.92.0/22 IP: 2804:2b40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:e5:47:33:19:0d:c6:af:2a:af:9f:38:a8:e3:e8:f4:d4:2d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 7 19:06:40 2025 GMT Not After : Feb 6 19:11:40 2026 GMT Subject: CN=27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:18:7c:08:3a:89:e9:99:c0:35:d1:0a:37: 45:64:57:d3:f8:70:c2:a3:09:05:58:6e:46:9b:ea: b8:7c:01:73:9b:40:9e:94:1f:f9:95:7a:24:a2:ff: 60:60:d5:47:6b:e4:1a:5e:6d:65:34:a5:67:5c:cb: b2:0a:14:4e:ee:48:5c:17:ca:cf:b2:bd:88:99:61: e9:ce:e4:13:9f:34:f2:78:24:9c:22:42:8e:d1:3b: 0c:38:9f:0e:3f:ce:08:6b:64:18:ca:a8:63:88:11: 6c:ef:7a:67:33:90:4e:42:3c:b8:e8:40:41:54:ad: a8:3b:b7:28:63:25:ee:30:58:cc:0e:32:26:d2:98: 40:26:3a:42:20:81:44:5a:42:11:c8:b8:1c:43:63: 39:05:36:2c:57:fe:a3:c7:9c:8c:f4:a2:02:7c:3d: b7:60:66:74:df:9f:2b:2e:86:5c:2d:38:8a:d2:0d: e0:a3:87:a1:db:95:72:0b:20:44:b3:72:79:a4:55: 68:bb:5f:d7:45:f8:bd:45:54:aa:c5:4f:f9:5e:01: f1:67:50:41:5d:80:52:75:d9:a9:e3:f7:9c:37:ac: 45:22:90:5e:75:7f:e9:72:27:10:20:04:90:d9:c1: dc:db:63:11:dd:cc:22:ca:cb:49:31:dc:c7:80:6d: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:F4:AD:22:72:6A:F9:0E:71:DD:A4:9C:ED:F6:7B:DF:DD:04:0E:3A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.92.0/22 IPv6: 2804:2b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265143 Signature Algorithm: sha256WithRSAEncryption 43:b3:a9:81:1b:4b:2a:78:a2:ce:51:24:8d:87:2f:9f:39:83: 75:0d:0b:06:3a:c7:25:58:44:09:be:a9:6a:6b:c7:57:bf:ad: 5b:c0:eb:31:45:9f:15:b2:b5:a4:f0:35:be:ba:f8:63:b7:60: 55:ad:3f:93:d6:7a:fb:fe:6c:57:fb:27:c1:9a:e3:2f:44:95: 11:c9:ce:23:68:b5:53:ca:5d:e2:ed:f7:94:98:4f:6f:d8:02: 90:88:c3:be:98:86:3a:d6:2a:cc:49:8e:41:19:e1:b7:2c:c5: d5:cc:b4:6a:3c:95:50:76:b6:6f:a8:4f:cd:53:8b:ce:50:e6: da:e5:ab:f5:c0:f0:c1:2f:d1:5e:1d:22:1e:0a:ef:de:48:f9: 39:08:29:c4:db:2a:86:62:6b:47:84:a4:16:3a:95:df:1a:30: bd:59:e2:86:f5:23:76:11:b1:88:a3:f2:21:70:f1:55:de:aa: 50:9a:d9:b8:c0:1b:e1:74:a4:69:ad:57:39:6b:47:01:c4:42: 8c:df:fc:cf:0b:79:24:f6:e0:c1:6c:8c:21:dc:e5:ea:7b:17: f4:05:ab:a1:33:f5:26:10:58:c5:4b:2e:64:de:f1:df:ed:16: c6:b4:bc:0e:22:02:6c:4c:7b:6c:f4:79:c4:1a:18:23:7c:51: 62:5a:d2:cc -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULJblRzMZDcavKq+fOKjj6PTULSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMDcxOTA2NDBaFw0yNjAyMDYxOTExNDBaMDMxMTAvBgNV BAMTKDI3RjRBRDIyNzI2QUY5MEU3MUREQTQ5Q0VERjY3QkRGREQwNDBFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7Rh8CDqJ6ZnANdEKN0VkV9P4 cMKjCQVYbkab6rh8AXObQJ6UH/mVeiSi/2Bg1Udr5BpebWU0pWdcy7IKFE7uSFwX ys+yvYiZYenO5BOfNPJ4JJwiQo7ROww4nw4/zghrZBjKqGOIEWzvemczkE5CPLjo QEFUrag7tyhjJe4wWMwOMibSmEAmOkIggURaQhHIuBxDYzkFNixX/qPHnIz0ogJ8 PbdgZnTfnysuhlwtOIrSDeCjh6HblXILIESzcnmkVWi7X9dF+L1FVKrFT/leAfFn UEFdgFJ12anj95w3rEUikF51f+lyJxAgBJDZwdzbYxHdzCLKy0kx3MeAbbT1AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQn9K0icmr5DnHd pJzt9nvf3QQOOjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVX N1pTakFUY3c5Ym1hbTJoQjVrTTViR3R2N2pXVnp3UGg1RmRuV0t4cHUvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVX N1pTakFUY3c5Ym1hbTJoQjVrTTViR3R2N2pXVnp3UGg1RmRuV0t4cHUvMC8yN0Y0 QUQyMjcyNkFGOTBFNzFEREE0OUNFREY2N0JERkREMDQwRTNBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKP/1wwDQQCAAIwBwMFACgEK0AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAu3MA0GCSqGSIb3DQEBCwUAA4IBAQBDs6mBG0sqeKLOUSSN hy+fOYN1DQsGOsclWEQJvqlqa8dXv61bwOsxRZ8VsrWk8DW+uvhjt2BVrT+T1nr7 /mxX+yfBmuMvRJURyc4jaLVTyl3i7feUmE9v2AKQiMO+mIY61irMSY5BGeG3LMXV zLRqPJVQdrZvqE/NU4vOUOba5av1wPDBL9FeHSIeCu/eSPk5CCnE2yqGYmtHhKQW OpXfGjC9WeKG9SN2EbGIo/IhcPFV3qpQmtm4wBvhdKRprVc5a0cBxEKM3/zPC3kk 9uDBbIwh3OXqexf0BauhM/UmEFjFSy5k3vHf7RbGtLwOIgJsTHts9HnEGhgjfFFi WtLM -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:07 2025 by rpki-client