$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer File: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer (raw, json) Hash identifier: +EoxFgYF2PkpmJdKJobthLo6cwbeK/b0ZsKPaE8mhl4= Subject key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31CAD19FEEC218C6A53008710230334D20B27E24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft caRepository: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 01:54:40 +0000 Certificate not after: Tue 24 Mar 2026 01:59:40 +0000 Subordinate resources: AS: 52589 IP: 177.87.44.0/22 IP: 2804:1ad8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ca:d1:9f:ee:c2:18:c6:a5:30:08:71:02:30:33:4d:20:b2:7e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 01:54:40 2025 GMT Not After : Mar 24 01:59:40 2026 GMT Subject: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:37:e6:4e:ab:0b:05:8e:3e:31:1f:9c:61: 82:9c:ec:ec:51:3b:cd:ba:32:90:d1:8a:91:6b:5b: b7:0c:ce:54:3e:30:4b:73:0c:40:dd:05:3a:0f:19: e6:fa:63:f3:df:43:95:3a:53:8c:78:49:23:64:30: 82:72:ee:c5:33:04:4a:d5:4c:c4:02:63:86:e4:6d: cd:d5:4f:b9:05:45:3a:b0:d5:65:76:6f:84:6e:ee: e5:47:03:f8:76:7b:1e:d9:31:06:fd:95:ad:eb:53: 9c:7c:38:10:33:7a:5c:13:e9:9e:4e:b4:57:7d:87: fe:29:3c:d1:12:55:7f:09:69:fa:f6:bc:b3:60:7c: 00:a9:64:a4:28:1c:78:33:95:76:30:ca:0d:8a:1f: e6:09:0e:f2:cb:db:e2:df:56:57:9d:4b:3f:12:8d: b3:b4:16:d9:a2:d3:85:9f:b9:eb:76:83:91:ab:b8: bc:f9:50:00:a5:c9:07:db:44:c0:50:a2:48:6e:bd: 90:ba:49:d7:01:1e:f4:c8:34:b0:ed:e0:44:fd:7c: b0:64:8e:c4:c4:4a:2d:fd:ce:e1:12:c8:0b:4d:c8: 1d:08:73:f0:2f:b0:a7:71:f8:20:c7:d4:08:ee:03: 3b:20:f0:a4:f2:bb:b0:1f:ad:7b:4f:d6:5c:29:3e: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.44.0/22 IPv6: 2804:1ad8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52589 Signature Algorithm: sha256WithRSAEncryption 6c:df:7b:b1:63:06:cb:ae:6d:00:6c:a1:66:ce:ee:1e:db:b7: 5e:8e:2b:b8:1b:76:b0:7d:a2:b3:ce:b4:eb:6c:ab:4c:64:9e: e9:b9:ad:bc:6d:f8:bb:f0:9b:25:df:af:d7:15:3b:f9:56:f7: cc:27:cf:20:da:7f:c8:c6:f5:f7:83:0e:bf:c1:9c:17:a8:b6: 0c:43:ac:e6:d8:4d:36:dc:2d:28:47:99:f0:0e:c1:32:6d:d2: b1:c1:7b:89:7d:9e:fd:09:05:54:6e:b0:90:08:ee:79:1e:cb: 59:46:a0:9a:62:0c:e8:36:f2:45:e7:1a:0b:6b:ee:29:60:35: 01:8a:9a:76:e5:6a:7b:9b:4f:6e:af:3d:d5:d8:17:86:11:8f: 8e:5f:5b:30:5b:06:cf:7e:33:6e:3c:85:c4:d7:6b:73:cf:0c: ea:37:55:e0:8b:89:13:ed:fe:b5:24:c1:94:fc:09:d5:55:53: 8e:0f:7d:74:a8:ed:18:10:58:04:05:34:6e:7b:1e:19:e6:05: cd:c4:46:3e:17:41:fb:88:cc:15:bc:79:93:bc:e0:0b:6e:c9: 33:1d:96:c9:39:54:3e:d4:52:f8:0d:3c:49:ef:fb:60:04:55: f2:4d:a4:94:0a:60:6c:90:3e:5c:65:60:b2:84:17:96:f6:d5: f7:d9:3d:af -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMcrRn+7CGMalMAhxAjAzTSCyfiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUwMTU0NDBaFw0yNjAzMjQwMTU5NDBaMDMxMTAvBgNV BAMTKDJCNDcwRTVDMjM4OEZENEVFMjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSTfmTqsLBY4+MR+cYYKc7OxR O826MpDRipFrW7cMzlQ+MEtzDEDdBToPGeb6Y/PfQ5U6U4x4SSNkMIJy7sUzBErV TMQCY4bkbc3VT7kFRTqw1WV2b4Ru7uVHA/h2ex7ZMQb9la3rU5x8OBAzelwT6Z5O tFd9h/4pPNESVX8Jafr2vLNgfACpZKQoHHgzlXYwyg2KH+YJDvLL2+LfVledSz8S jbO0Ftmi04Wfuet2g5GruLz5UAClyQfbRMBQokhuvZC6SdcBHvTINLDt4ET9fLBk jsTESi39zuESyAtNyB0Ic/AvsKdx+CDH1AjuAzsg8KTyu7AfrXtP1lwpPr1HAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrRw5cI4j9TuJ/ 0JOhiNtR1XytOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Y5 WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N2 OVh4UEVreWV2OGZzbWQ3Z2d3TFhNaVB5TnZnVmtqQXJINVJ4R0VKZFgxLzEvMkI0 NzBFNUMyMzg4RkQ0RUUyN0ZEMDkzQTE4OERCNTFENTdDQUQzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsVcsMA0EAgACMAcDBQAoBBrYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDNbTANBgkqhkiG9w0BAQsFAAOCAQEAbN97sWMGy65tAGyh Zs7uHtu3Xo4ruBt2sH2is86062yrTGSe6bmtvG34u/CbJd+v1xU7+Vb3zCfPINp/ yMb194MOv8GcF6i2DEOs5thNNtwtKEeZ8A7BMm3SscF7iX2e/QkFVG6wkAjueR7L WUagmmIM6DbyRecaC2vuKWA1AYqaduVqe5tPbq891dgXhhGPjl9bMFsGz34zbjyF xNdrc88M6jdV4IuJE+3+tSTBlPwJ1VVTjg99dKjtGBBYBAU0bnseGeYFzcRGPhdB +4jMFbx5k7zgC27JMx2WyTlUPtRS+A08Se/7YARV8k2klApgbJA+XGVgsoQXlvbV 99k9rw== -----END CERTIFICATE-----Generated at Fri Apr 4 10:21:51 2025 by rpki-client