$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer File: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer (raw, json) Hash identifier: AXZseibTm5rpQXjTxfXdtcJasiRWC2sHagfjnm/J41k= Subject key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 50FC6A3AB80E37CAF207D98D455C494179D3859B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft caRepository: rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 19:32:40 +0000 Certificate not after: Fri 06 Mar 2026 19:37:40 +0000 Subordinate resources: AS: 268243 IP: 45.236.200.0/22 IP: 2804:4e28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fc:6a:3a:b8:0e:37:ca:f2:07:d9:8d:45:5c:49:41:79:d3:85:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 19:32:40 2025 GMT Not After : Mar 6 19:37:40 2026 GMT Subject: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4e:35:d1:3e:69:78:43:97:90:b8:5f:bc:3a: aa:ad:96:15:a9:a0:30:49:f2:74:eb:1d:06:32:d4: fd:46:b9:fb:45:39:2f:35:d3:ca:4f:f3:fd:bf:0c: a2:40:1e:cf:8a:f9:23:62:c3:d8:5c:04:63:a4:3a: b4:39:18:a4:91:e5:0c:ca:5f:9b:7e:c3:bc:51:de: f3:09:13:56:09:ac:32:b9:4d:56:79:e5:3d:5d:ee: be:5c:c9:a3:14:eb:f5:da:80:98:ee:93:e8:d7:0b: c7:e3:44:04:79:89:00:ee:3e:b5:c0:2c:00:4b:80: a7:92:ab:5b:30:ab:d5:61:b1:fc:ec:cd:1f:45:64: fd:4a:88:84:fc:d2:86:f8:ca:19:2a:fa:63:38:03: 81:15:b5:8d:70:b9:bb:e4:f1:26:29:6e:54:07:53: fd:31:d5:e8:98:00:5d:85:a2:c1:81:da:dc:e8:61: 26:fe:cf:ff:f3:69:f0:2a:91:20:29:a4:0a:79:8d: c5:bf:d9:9f:ea:37:2d:57:ef:ab:22:4b:76:37:f1: 08:c9:38:e4:24:01:29:80:5a:ff:b4:93:70:1f:2c: e9:64:8f:35:85:1d:29:f7:19:30:8e:9d:cd:03:97: 6a:43:4c:5b:13:a6:92:9a:e4:3e:ab:f6:e4:05:59: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.200.0/22 IPv6: 2804:4e28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268243 Signature Algorithm: sha256WithRSAEncryption 99:1e:13:44:c0:b9:b1:fd:4c:72:62:90:6e:06:17:b9:ab:1e: a5:7f:09:e2:16:2a:17:d0:6d:bb:cd:8d:1d:f8:d4:dd:5f:99: ee:ef:4b:ef:75:f8:7e:a6:42:68:0c:01:2c:b8:ad:cf:b5:cc: 74:06:1a:40:58:2f:6d:3f:50:63:ab:e6:c5:72:ca:5f:d8:7e: 14:fd:e4:56:17:fe:ab:f5:7a:37:3d:d3:77:2a:1e:fc:72:af: 3d:d6:80:8b:af:ed:3e:47:3b:de:55:7b:00:6a:23:31:0a:6e: cd:3f:dd:f5:f9:10:b5:08:68:84:44:3d:fc:6b:82:7d:63:37: 0a:e3:95:b9:21:56:74:4a:38:dd:82:69:05:0b:07:26:53:f0: 17:6b:30:1d:0c:7d:a3:d9:f4:c5:d2:0e:78:a9:c3:5a:ed:36: ea:ac:f7:99:47:e1:c7:49:76:ae:2e:24:02:a4:cd:de:81:f4: bb:7a:29:9c:c2:38:2f:6c:34:6c:de:02:0c:30:46:67:89:65: 8d:3b:65:ea:d3:41:1e:b1:b5:fb:7f:92:ea:e0:69:ba:0d:22: 95:de:8a:84:c9:95:a7:0c:14:a6:30:13:99:44:69:d0:fe:52: c5:04:4d:bb:15:45:16:83:d5:14:e9:a5:30:d5:b8:f1:2b:39: fc:88:19:cb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUPxqOrgON8ryB9mNRVxJQXnThZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxOTMyNDBaFw0yNjAzMDYxOTM3NDBaMDMxMTAvBgNV BAMTKDJFMEQ4Q0E5RkI5QjkzNUFCREU2NzI2QkUxRUEyQTg1NzBGNEVGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTjXRPml4Q5eQuF+8OqqtlhWp oDBJ8nTrHQYy1P1GuftFOS8108pP8/2/DKJAHs+K+SNiw9hcBGOkOrQ5GKSR5QzK X5t+w7xR3vMJE1YJrDK5TVZ55T1d7r5cyaMU6/XagJjuk+jXC8fjRAR5iQDuPrXA LABLgKeSq1swq9VhsfzszR9FZP1KiIT80ob4yhkq+mM4A4EVtY1wubvk8SYpblQH U/0x1eiYAF2FosGB2tzoYSb+z//zafAqkSAppAp5jcW/2Z/qNy1X76siS3Y38QjJ OOQkASmAWv+0k3AfLOlkjzWFHSn3GTCOnc0Dl2pDTFsTppKa5D6r9uQFWezvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuDYyp+5uTWr3m cmvh6iqFcPTv7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVBD Qms1cUxHNWdVZlhaWHc3WFI2UjRQVXN3dXpQQkZwNkdHMjhWRWJqN1MvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FQ Q0JrNXFMRzVnVWZYWlh3N1hSNlI0UFVzd3V6UEJGcDZHRzI4VkViajdTLzEvMkUw RDhDQTlGQjlCOTM1QUJERTY3MjZCRTFFQTJBODU3MEY0RUZFRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLezIMA0EAgACMAcDBQAoBE4oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX0zANBgkqhkiG9w0BAQsFAAOCAQEAmR4TRMC5sf1McmKQ bgYXuasepX8J4hYqF9Btu82NHfjU3V+Z7u9L73X4fqZCaAwBLLitz7XMdAYaQFgv bT9QY6vmxXLKX9h+FP3kVhf+q/V6Nz3Tdyoe/HKvPdaAi6/tPkc73lV7AGojMQpu zT/d9fkQtQhohEQ9/GuCfWM3CuOVuSFWdEo43YJpBQsHJlPwF2swHQx9o9n0xdIO eKnDWu026qz3mUfhx0l2ri4kAqTN3oH0u3opnMI4L2w0bN4CDDBGZ4lljTtl6tNB HrG1+3+S6uBpug0ild6KhMmVpwwUpjATmURp0P5SxQRNuxVFFoPVFOmlMNW48Ss5 /IgZyw== -----END CERTIFICATE-----Generated at Fri Apr 4 10:57:49 2025 by rpki-client