$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer File: 2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer (raw, json) Hash identifier: cYYiqDkoizzOVqPrhZfLoPpXjeMn6pHMnoubxgN2N9g= Subject key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4DBDF12C6CAAD0415F27CE4C385FB5232DF41ADC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft caRepository: rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 11 Dec 2024 20:28:11 +0000 Certificate not after: Wed 10 Dec 2025 20:33:11 +0000 Subordinate resources: AS: 263571 IP: 177.55.88.0/22 IP: 177.55.94.0/23 IP: 2804:f38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bd:f1:2c:6c:aa:d0:41:5f:27:ce:4c:38:5f:b5:23:2d:f4:1a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 11 20:28:11 2024 GMT Not After : Dec 10 20:33:11 2025 GMT Subject: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:40:9e:3f:45:cd:9e:40:73:1f:51:f8:fc:1d: 15:81:e2:a6:6d:72:48:70:c6:c5:c0:af:78:3e:9c: 76:3a:c9:68:a1:57:62:78:d0:63:3f:3c:e9:8a:e1: 10:48:99:54:03:b5:16:b3:dc:ef:81:81:4d:7c:7b: 3f:f1:f4:f6:61:ff:b0:91:dd:1d:e0:dc:a0:e8:9b: 3f:7c:d7:7f:f7:1d:de:72:b5:a8:bf:8c:a8:1e:a1: d6:41:88:24:0f:6b:7b:0a:d8:80:bb:88:99:32:fe: ec:f1:cb:4b:f4:c5:00:88:ff:e3:8f:4b:c5:e3:44: d7:ff:57:99:71:95:6c:5f:af:0f:c5:dd:f1:2e:8d: a4:cd:3c:50:e0:65:31:19:79:cd:fe:6e:25:0b:1e: bb:ec:46:c3:f7:61:e8:05:b7:6d:a3:29:08:13:73: 31:bd:3f:d7:6e:b7:a9:5d:cc:98:f2:36:c3:1d:ca: 21:ed:3e:63:6f:b8:ef:bc:cc:e8:34:d2:62:22:0b: 1d:ef:47:68:e7:ba:db:7b:1f:f9:a8:3f:64:11:b5: fd:88:5f:f2:cb:3e:92:c1:44:ba:10:42:eb:48:5b: 40:b2:e8:ba:2b:f2:97:f9:6d:17:39:5e:2b:b7:70: f6:f1:2e:2b:01:6c:a7:98:c7:ea:e8:de:34:a5:52: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.55.88.0/22 177.55.94.0/23 IPv6: 2804:f38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263571 Signature Algorithm: sha256WithRSAEncryption 6d:23:12:52:fa:b9:8d:7e:5e:d8:70:23:11:86:f2:b2:31:dc: a7:1d:81:6c:60:90:7f:1c:04:44:65:6b:90:c8:7c:5d:61:22: 44:6d:50:5f:5c:56:03:80:45:89:ea:5f:b0:d6:74:ad:ee:83: 96:cf:25:81:a7:31:51:27:1c:ba:4c:a6:2b:3f:f9:a7:f9:92: b1:e9:66:3a:60:87:b7:2c:18:49:a3:2f:17:33:3a:ae:14:26: b5:5d:94:d8:2c:81:00:b5:f1:09:13:54:3d:a9:53:ee:4d:b9: 79:6d:07:2b:4c:65:6a:25:e6:55:2f:78:12:00:a7:3a:72:a5: be:a6:a8:36:62:9c:78:fd:d3:24:c9:86:10:e6:23:9b:8e:95: ea:ee:b7:16:c0:67:52:e0:a7:be:5e:ff:56:ae:a4:84:32:34: 36:93:57:86:db:4c:01:35:09:81:8d:b5:d9:bf:7e:43:11:60: 46:9c:f9:30:2b:0f:0c:e6:1d:4b:c6:06:3a:b2:3b:90:2c:f5: d9:a9:a5:dd:57:a4:ae:5f:b1:83:60:7d:3e:ae:24:0c:22:98: 53:f9:11:08:1b:9d:fa:e8:68:49:0e:97:2b:82:1b:62:03:a2: 8a:89:da:a7:c2:70:b5:73:0e:24:f9:47:94:66:4f:2a:bd:ff: c8:13:c6:49 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTb3xLGyq0EFfJ85MOF+1Iy30GtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTEyMDI4MTFaFw0yNTEyMTAyMDMzMTFaMDMxMTAvBgNV BAMTKDJCRDdGQ0M0N0RDQTlGRjhBMkI5QzM1ODA3NkY4MENDN0I5QTUxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsQJ4/Rc2eQHMfUfj8HRWB4qZt ckhwxsXAr3g+nHY6yWihV2J40GM/POmK4RBImVQDtRaz3O+BgU18ez/x9PZh/7CR 3R3g3KDomz9813/3Hd5ytai/jKgeodZBiCQPa3sK2IC7iJky/uzxy0v0xQCI/+OP S8XjRNf/V5lxlWxfrw/F3fEujaTNPFDgZTEZec3+biULHrvsRsP3YegFt22jKQgT czG9P9dut6ldzJjyNsMdyiHtPmNvuO+8zOg00mIiCx3vR2jnutt7H/moP2QRtf2I X/LLPpLBRLoQQutIW0Cy6Lor8pf5bRc5Xiu3cPbxLisBbKeYx+ro3jSlUmabAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQr1/zEfcqf+KK5 w1gHb4DMe5pRkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXI2 UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5SEEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVy NlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAvMkJE N0ZDQzQ3RENBOUZGOEEyQjlDMzU4MDc2RjgwQ0M3QjlBNTE5MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsTdYAwQBsTdeMA0EAgACMAcDBQAoBA84MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFkzANBgkqhkiG9w0BAQsFAAOCAQEAbSMSUvq5 jX5e2HAjEYbysjHcpx2BbGCQfxwERGVrkMh8XWEiRG1QX1xWA4BFiepfsNZ0re6D ls8lgacxUSccukymKz/5p/mSselmOmCHtywYSaMvFzM6rhQmtV2U2CyBALXxCRNU PalT7k25eW0HK0xlaiXmVS94EgCnOnKlvqaoNmKceP3TJMmGEOYjm46V6u63FsBn UuCnvl7/Vq6khDI0NpNXhttMATUJgY212b9+QxFgRpz5MCsPDOYdS8YGOrI7kCz1 2aml3Vekrl+xg2B9Pq4kDCKYU/kRCBud+uhoSQ6XK4IbYgOiionap8JwtXMOJPlH lGZPKr3/yBPGSQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:30:14 2025 by rpki-client