$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer File: 2ACA27717E82C4618B8C9B8809209FD48E26847B.cer (raw, json) Hash identifier: L5rWI/r67aT6S6fT51zwc7sgL3rJrXkwKkLi69OkjV8= Subject key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A6B48F7B953117DD68775E276CC33F2CEEBC256 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft caRepository: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Mar 2025 17:31:00 +0000 Certificate not after: Tue 10 Mar 2026 17:36:00 +0000 Subordinate resources: AS: 262828 IP: 177.155.192.0/21 IP: 186.251.96.0/21 IP: 2804:2a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6b:48:f7:b9:53:11:7d:d6:87:75:e2:76:cc:33:f2:ce:eb:c2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 11 17:31:00 2025 GMT Not After : Mar 10 17:36:00 2026 GMT Subject: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:33:f6:fe:0e:7a:14:5b:ed:c5:95:b7:34: 2b:26:b4:5f:5c:12:23:b3:bb:25:d1:a0:cf:d5:3a: 8e:58:da:c3:17:c0:31:cd:18:72:da:a5:92:c5:0a: f8:99:56:58:01:e9:d3:6e:26:79:71:76:4c:81:05: f4:9a:c3:0b:18:a0:e5:83:54:69:b9:4b:b4:f0:57: 3a:b2:5a:73:72:fa:ce:ac:65:0b:8f:ae:29:e0:c8: c5:55:2f:23:86:6b:05:c7:09:2b:5b:84:dc:24:38: 71:9a:3c:08:13:3d:c3:93:77:d0:3b:6f:24:94:85: 9f:71:0c:ec:62:d5:97:72:06:d7:cd:a2:b5:02:81: 63:98:a4:1c:bc:d0:b6:da:9b:f8:44:eb:1b:75:5b: 99:c2:0f:ae:fe:c7:69:57:19:a3:50:49:75:5b:e8: d6:a1:62:32:c2:ff:59:8d:a5:4b:69:c1:6f:8d:c5: d3:d9:85:72:46:26:1e:67:5c:a8:0e:1b:f7:c8:7e: 3c:3c:e2:f1:9a:d0:e2:db:38:ba:6e:48:40:41:c9: d9:cf:59:0f:81:d1:4b:96:e1:4f:b8:30:d4:03:7e: ae:75:bd:bc:e6:87:83:ad:67:11:37:f6:6a:95:90: 14:0a:ea:51:68:4f:39:7d:0f:1c:6b:ec:4a:c6:0b: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.155.192.0/21 186.251.96.0/21 IPv6: 2804:2a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262828 Signature Algorithm: sha256WithRSAEncryption 56:8d:cc:45:6a:e1:4e:a2:d2:64:57:86:6d:b6:fa:ce:c3:3e: 1d:d9:97:97:35:c8:a9:67:d3:88:8f:00:e3:f6:72:92:c9:a4: 68:cf:fa:31:1f:b6:e3:e1:ef:d1:7b:55:e7:6f:9d:01:10:78: 62:fb:e8:ea:ad:0e:dc:f5:9d:a5:59:0a:ec:91:16:e9:1d:91: 78:3d:69:d8:a2:a3:03:fa:e9:5d:3f:22:e5:85:c0:5a:e5:3f: d1:2f:42:ad:37:b0:24:e0:bc:51:22:22:42:0b:0f:f3:9c:c3: 0b:1d:be:53:36:fa:8c:c3:ae:d3:99:0f:2c:e4:90:6e:e9:ad: ce:f6:78:8b:24:8d:90:19:a3:9c:d2:35:ef:3e:fa:9e:c3:70: 0e:09:3b:b2:79:85:90:a8:aa:15:54:4e:e1:cd:76:71:f9:4a: 28:3a:50:a1:3c:cc:ac:a8:9c:83:50:cc:de:4f:8b:39:81:80: ea:e1:9c:34:4a:dd:a0:02:f8:bb:61:88:bf:04:a6:e7:31:84: cd:61:c2:71:36:f6:49:ae:5a:51:fd:ab:71:b2:59:d2:2a:d6: 64:42:ba:9b:b1:54:a9:05:08:d8:94:41:7c:01:16:6f:69:17: 66:b0:8a:bd:a0:ad:ff:5e:9d:d5:69:84:53:29:ba:a6:ef:76: 77:b5:cf:72 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUamtI97lTEX3Wh3Xidswz8s7rwlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTExNzMxMDBaFw0yNjAzMTAxNzM2MDBaMDMxMTAvBgNV BAMTKDJBQ0EyNzcxN0U4MkM0NjE4QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66jP2/g56FFvtxZW3NCsmtF9c EiOzuyXRoM/VOo5Y2sMXwDHNGHLapZLFCviZVlgB6dNuJnlxdkyBBfSawwsYoOWD VGm5S7TwVzqyWnNy+s6sZQuPringyMVVLyOGawXHCStbhNwkOHGaPAgTPcOTd9A7 bySUhZ9xDOxi1ZdyBtfNorUCgWOYpBy80Lbam/hE6xt1W5nCD67+x2lXGaNQSXVb 6NahYjLC/1mNpUtpwW+NxdPZhXJGJh5nXKgOG/fIfjw84vGa0OLbOLpuSEBBydnP WQ+B0UuW4U+4MNQDfq51vbzmh4OtZxE39mqVkBQK6lFoTzl9Dxxr7ErGCxW3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqyidxfoLEYYuM m4gJIJ/UjiaEezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUZG WDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlExOGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VG Rlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAvMkFD QTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4RTI2ODQ3Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsZvAAwQDuvtgMA0EAgACMAcDBQAoBAKkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCrDANBgkqhkiG9w0BAQsFAAOCAQEAVo3MRWrh TqLSZFeGbbb6zsM+HdmXlzXIqWfTiI8A4/ZyksmkaM/6MR+24+Hv0XtV52+dARB4 Yvvo6q0O3PWdpVkK7JEW6R2ReD1p2KKjA/rpXT8i5YXAWuU/0S9CrTewJOC8USIi QgsP85zDCx2+Uzb6jMOu05kPLOSQbumtzvZ4iySNkBmjnNI17z76nsNwDgk7snmF kKiqFVRO4c12cflKKDpQoTzMrKicg1DM3k+LOYGA6uGcNErdoAL4u2GIvwSm5zGE zWHCcTb2Sa5aUf2rcbJZ0irWZEK6m7FUqQUI2JRBfAEWb2kXZrCKvaCt/16d1WmE Uym6pu92d7XPcg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:42:29 2025 by rpki-client