$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer File: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer (raw, json) Hash identifier: fV/62u95bs5c3yj2OqRzVh20g+XPEtti8e7L9IDo/IA= Subject key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02E7E2665E8B1DC4EE005D670B2A44CF2EA33DD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft caRepository: rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 09:38:02 +0000 Certificate not after: Fri 06 Mar 2026 09:43:02 +0000 Subordinate resources: AS: 263043 IP: 138.121.184.0/22 IP: 177.129.192.0/22 IP: 179.125.56.0/22 IP: 2804:8fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e7:e2:66:5e:8b:1d:c4:ee:00:5d:67:0b:2a:44:cf:2e:a3:3d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 09:38:02 2025 GMT Not After : Mar 6 09:43:02 2026 GMT Subject: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:2d:bc:cb:fc:b2:18:79:2f:39:9e:45:c0: d3:37:f9:a2:39:70:d8:9d:49:33:62:2d:c7:a7:87: d6:3b:ec:31:83:e3:b0:fd:84:57:5f:29:7f:d9:15: 3c:b3:22:a3:22:32:0d:67:d7:43:e3:98:80:76:e1: c7:71:44:1c:6f:ca:ed:5b:55:ee:f7:7e:6d:5d:9b: 46:5b:64:17:60:c1:44:d2:00:50:28:64:e9:61:97: 94:de:a3:b4:b2:16:2a:ac:08:77:d3:2e:c2:cc:36: 04:09:71:c6:96:2d:fa:7e:35:6b:98:64:89:44:fd: 79:29:05:4d:e3:a9:a9:0f:82:31:9c:0f:e4:0d:a2: f7:2c:0a:3d:99:26:98:2b:2a:46:7d:f4:1a:a5:4d: f9:fe:48:c1:37:40:71:88:2b:a9:94:e7:f2:e8:71: 18:10:ae:11:dc:5c:62:b1:0f:3c:55:c1:6c:5d:13: a6:38:d8:df:75:16:fc:b4:35:98:9e:60:8f:23:fb: ae:de:d8:f5:62:6d:6a:a6:b8:37:3c:5f:a3:3f:9d: e5:fb:d3:7a:b3:51:d7:15:af:17:74:48:8f:1c:88: c5:81:18:e9:8c:7c:fc:82:ff:75:64:62:f2:61:6f: 8a:64:46:25:b0:44:64:54:3d:9b:b6:a5:ec:c8:a6: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.184.0/22 177.129.192.0/22 179.125.56.0/22 IPv6: 2804:8fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263043 Signature Algorithm: sha256WithRSAEncryption 60:be:e6:79:87:6a:0f:a2:7a:42:b8:b4:5d:41:f0:33:da:24: 88:ae:54:c2:47:39:06:08:1c:6d:0f:a1:e5:76:46:1e:08:6c: 3a:3c:95:51:ef:13:d8:25:4d:8a:ee:20:ff:5c:ce:20:48:10: a0:22:95:0b:3c:96:e9:f0:e1:da:e2:69:84:c4:18:e1:46:51: 80:b1:5d:41:de:b3:e9:60:64:25:9e:c7:b1:13:38:c2:08:be: a1:cc:86:6e:7f:3c:46:50:7a:c9:ee:b2:6a:a3:73:ca:4d:17: ed:ee:d1:a9:63:15:13:be:0e:8f:f7:90:c2:09:8d:ab:72:a2: 54:d3:3e:e8:f7:40:84:f3:68:27:13:f4:74:d6:64:4a:07:c0: 11:1a:3f:f2:a9:7a:d7:a0:08:41:b8:c5:17:bd:4b:27:a3:3f: 61:34:ab:eb:e0:fd:4f:5b:a2:d4:a6:b1:7f:3e:6e:31:8d:85: c3:7d:ab:c7:40:0a:24:4a:62:7e:73:a6:12:45:aa:bc:ef:49: 47:94:3b:90:71:a7:a4:5e:9e:64:eb:e6:b6:c5:b5:96:f2:6e: c4:78:4b:c9:8a:2f:b5:55:f5:7c:19:66:62:e0:f6:21:66:af: 98:0f:63:fe:6e:0f:05:d9:ff:1d:91:a5:3e:04:be:41:df:55: 34:6b:3b:25 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUAufiZl6LHcTuAF1nCypEzy6jPdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwOTM4MDJaFw0yNjAzMDYwOTQzMDJaMDMxMTAvBgNV BAMTKDI4NDdDQ0M2ODRDRTMwOEM4Q0RCQUYwNEU5MEM5RTE4REIzM0FDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqy28y/yyGHkvOZ5FwNM3+aI5 cNidSTNiLcenh9Y77DGD47D9hFdfKX/ZFTyzIqMiMg1n10PjmIB24cdxRBxvyu1b Ve73fm1dm0ZbZBdgwUTSAFAoZOlhl5Teo7SyFiqsCHfTLsLMNgQJccaWLfp+NWuY ZIlE/XkpBU3jqakPgjGcD+QNovcsCj2ZJpgrKkZ99BqlTfn+SME3QHGIK6mU5/Lo cRgQrhHcXGKxDzxVwWxdE6Y42N91Fvy0NZieYI8j+67e2PVibWqmuDc8X6M/neX7 03qzUdcVrxd0SI8ciMWBGOmMfPyC/3VkYvJhb4pkRiWwRGRUPZu2pezIpkYHAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQoR8zGhM4wjIzb rwTpDJ4Y2zOsFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5D M0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4YlkvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5D M0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4YlkvMi8yODQ3 Q0NDNjg0Q0UzMDhDOENEQkFGMDRFOTBDOUUxOERCMzNBQzE3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKKebgDBAKxgcADBAKzfTgwDQQCAAIwBwMFACgECPww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAODMA0GCSqGSIb3DQEBCwUAA4IBAQBg vuZ5h2oPonpCuLRdQfAz2iSIrlTCRzkGCBxtD6HldkYeCGw6PJVR7xPYJU2K7iD/ XM4gSBCgIpULPJbp8OHa4mmExBjhRlGAsV1B3rPpYGQlnsexEzjCCL6hzIZufzxG UHrJ7rJqo3PKTRft7tGpYxUTvg6P95DCCY2rcqJU0z7o90CE82gnE/R01mRKB8AR Gj/yqXrXoAhBuMUXvUsnoz9hNKvr4P1PW6LUprF/Pm4xjYXDfavHQAokSmJ+c6YS Raq870lHlDuQcaekXp5k6+a2xbWW8m7EeEvJii+1VfV8GWZi4PYhZq+YD2P+bg8F 2f8dkaU+BL5B31U0azsl -----END CERTIFICATE-----Generated at Fri Apr 4 16:28:08 2025 by rpki-client