$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer File: 2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer (raw, json) Hash identifier: R/c4U8TbKD6y+PshIZfawDvJfHFrm4t5CT/I3ehBar8= Subject key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 15EA085D9392E28096372C270A195EC159186E60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft caRepository: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 19:59:48 +0000 Certificate not after: Thu 05 Mar 2026 20:04:48 +0000 Subordinate resources: AS: 28186 IP: 138.117.176.0/22 IP: 177.8.224.0/20 IP: 177.21.0.0/19 IP: 177.23.80.0/21 IP: 177.136.112.0/20 IP: 187.44.128.0/17 IP: 189.89.128.0/18 IP: 201.55.192.0/22 IP: 2804:204::/32 IP: 2804:24dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 05:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:08:5d:93:92:e2:80:96:37:2c:27:0a:19:5e:c1:59:18:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 19:59:48 2025 GMT Not After : Mar 5 20:04:48 2026 GMT Subject: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:40:47:26:6d:7f:2c:85:40:23:1b:1d:45: f1:a1:80:6f:fb:80:fe:c1:a0:d7:a8:96:46:42:f4: 9c:27:6a:a0:8e:3d:57:1b:80:ef:67:76:67:bf:e2: c7:74:fe:d5:5c:3d:e1:3c:ab:7a:ac:36:59:b0:db: 55:3e:7e:b5:81:02:0d:36:86:be:28:9b:81:81:48: c0:6f:5d:36:5d:63:9f:b3:47:54:34:36:8e:2a:11: a5:7c:39:3c:e5:eb:5e:ae:6b:b6:d6:33:2f:65:ab: ab:8e:32:49:d8:dc:66:b7:73:76:9d:e7:d0:a1:de: 8d:0c:07:3e:47:42:f6:48:b1:d9:e3:2e:9a:1a:bb: 1e:9b:50:c0:5c:11:b8:0c:cc:b2:02:64:49:d0:71: 47:e9:ae:96:8a:7f:42:ef:02:81:25:8e:03:a6:e6: 4e:4b:2a:d9:ef:67:ff:21:c1:de:3f:60:64:8b:b0: 14:89:2b:1b:dc:f5:b7:95:53:97:2c:df:d6:98:af: 90:0c:77:b3:1f:5f:3e:f8:48:b7:90:32:81:25:8f: 7e:a0:2d:16:3c:2a:10:8c:09:6a:f5:81:72:8c:ec: 9b:97:66:4a:c8:71:10:bc:b0:18:35:2f:35:f6:c6: 4a:9d:d6:dc:d6:a3:5a:32:12:85:22:ef:61:67:1d: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.176.0/22 177.8.224.0/20 177.21.0.0/19 177.23.80.0/21 177.136.112.0/20 187.44.128.0/17 189.89.128.0/18 201.55.192.0/22 IPv6: 2804:204::/32 2804:24dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28186 Signature Algorithm: sha256WithRSAEncryption ca:35:4c:50:3b:ba:e9:f1:de:68:a2:f8:ec:2c:b9:c0:b7:99: 25:55:87:07:79:17:b9:d2:22:ad:51:26:d5:d6:da:28:d7:93: 42:29:11:d1:5f:d6:ba:7e:d7:6f:ca:51:7b:77:bd:a7:9f:84: 33:72:db:a0:30:35:9b:d2:f7:8f:08:9b:4a:7f:4b:bb:fd:4e: 67:e0:c1:10:53:91:8f:fc:96:05:34:0d:db:0d:25:65:e2:84: 81:f4:cc:f3:6c:a2:74:d8:ea:ed:94:a1:87:53:21:7a:05:df: c5:ce:22:e5:aa:75:0b:16:ab:80:86:4f:28:fa:60:d8:20:58: 6d:cb:3a:74:10:c7:55:82:2d:19:4a:0a:11:43:16:7d:8b:b8: 85:81:58:78:f4:f3:00:19:fa:ee:83:79:2e:87:14:ef:aa:24: b8:5c:e5:a2:91:91:a3:62:98:7c:5e:c0:3f:1c:03:95:00:92: 90:67:7c:78:e2:07:ee:e8:1e:28:93:3e:bb:f7:82:5f:b1:5a: 49:2b:48:73:38:ff:be:77:1e:01:91:f5:13:58:b4:e5:3f:10: 8c:7b:e0:c9:c9:92:c2:91:11:f1:b0:69:94:db:de:3e:b0:15: 7f:c5:4e:26:3a:11:34:bc:35:be:67:b6:6d:b0:68:6a:4b:21: c3:f3:19:ea -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUFeoIXZOS4oCWNywnChlewVkYbmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxOTU5NDhaFw0yNjAzMDUyMDA0NDhaMDMxMTAvBgNV BAMTKDJFODFGMjk1NkU1QzE5NThDMUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6EBHJm1/LIVAIxsdRfGhgG/7 gP7BoNeolkZC9JwnaqCOPVcbgO9ndme/4sd0/tVcPeE8q3qsNlmw21U+frWBAg02 hr4om4GBSMBvXTZdY5+zR1Q0No4qEaV8OTzl616ua7bWMy9lq6uOMknY3Ga3c3ad 59Ch3o0MBz5HQvZIsdnjLpoaux6bUMBcEbgMzLICZEnQcUfprpaKf0LvAoEljgOm 5k5LKtnvZ/8hwd4/YGSLsBSJKxvc9beVU5cs39aYr5AMd7MfXz74SLeQMoElj36g LRY8KhCMCWr1gXKM7JuXZkrIcRC8sBg1LzX2xkqd1tzWo1oyEoUi72FnHR37AgMB AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQugfKVblwZWMH1 OKGqqZlNy4PaITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE5U ZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlFdnkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhO VGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEvMkU4 MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERDQjgzREEyMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEH AQH/BFAwTjA2BAIAATAwAwQCinWwAwQEsQjgAwQFsRUAAwQDsRdQAwQEsYhwAwQH uyyAAwQGvVmAAwQCyTfAMBQEAgACMA4DBQAoBAIEAwUAKAQk3DAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJuGjANBgkqhkiG9w0BAQsFAAOCAQEAyjVMUDu66fHeaKL4 7Cy5wLeZJVWHB3kXudIirVEm1dbaKNeTQikR0V/Wun7Xb8pRe3e9p5+EM3LboDA1 m9L3jwibSn9Lu/1OZ+DBEFORj/yWBTQN2w0lZeKEgfTM82yidNjq7ZShh1MhegXf xc4i5ap1CxargIZPKPpg2CBYbcs6dBDHVYItGUoKEUMWfYu4hYFYePTzABn67oN5 LocU76okuFzlopGRo2KYfF7APxwDlQCSkGd8eOIH7ugeKJM+u/eCX7FaSStIczj/ vnceAZH1E1i05T8QjHvgycmSwpER8bBplNvePrAVf8VOJjoRNLw1vme2bbBoaksh w/MZ6g== -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:05 2025 by rpki-client